Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: mAwycSp+vWclkg5bGc+4uFlt3wYPbJqEym+XHbIlNHU=
Subject key identifier: 6B:D1:FE:31:64:A6:08:1C:97:BA:0C:D2:3B:AA:31:D2:96:9B:B0:63
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 01974B1F86B5916815261153E7CACEF0AE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 16:00:46 +0000
Manifest this update: Sat 07 Jun 2025 16:00:46 +0000
Manifest next update: Sun 08 Jun 2025 16:00:46 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: wDUCfXMCxYH23Uw8BpJBB2RZYu42EewIbTXsKz1b/P0=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:86:b5:91:68:15:26:11:53:e7:ca:ce:f0:ae:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: Jun 7 16:00:46 2025 GMT
Not After : Jun 8 16:00:46 2025 GMT
Subject: CN=6bd1fe3164a6081c97ba0cd23baa31d2969bb063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:2a:4a:89:cc:3a:5d:9a:0e:9b:a9:b0:17:
4a:a9:84:1f:a9:dd:24:86:2a:9c:78:ba:04:8a:74:
f2:8e:36:d6:f7:5e:66:40:34:a5:5a:ce:c3:56:49:
bf:cf:70:f1:79:5a:14:13:ad:79:e6:6c:65:fb:8a:
d8:b9:d4:22:01:8b:b8:96:fc:db:1c:8f:11:a0:c5:
c5:1a:f5:d8:42:ca:d4:67:18:d7:61:c0:da:c5:79:
08:a1:04:a2:21:88:a3:80:f4:c9:0d:a6:ae:c0:8d:
d3:f4:9b:d2:9c:7b:51:d9:bf:b3:6e:e3:16:92:c3:
67:68:8e:17:56:4b:6b:50:05:1e:8f:75:7f:52:bb:
a6:98:de:37:c0:8f:a0:fe:4d:88:f5:42:b5:99:40:
a9:33:c6:c8:2c:a4:2a:c2:d4:e2:a9:b5:c1:a6:34:
9f:38:f3:ee:f0:b8:7c:4b:10:ee:a5:76:08:a4:b5:
94:fa:11:ec:66:b0:8a:e4:14:1c:34:7b:42:ff:1c:
c0:20:1a:92:93:c9:f1:c6:a5:96:9f:24:80:f1:c7:
ce:e9:16:c4:bc:e2:70:4e:9b:85:f7:34:94:ca:2c:
8f:6b:10:bb:10:2f:d7:32:d7:b5:f1:8e:78:c1:a2:
bc:86:d0:3a:f2:4b:97:69:d3:c1:30:65:bd:48:7d:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:FE:31:64:A6:08:1C:97:BA:0C:D2:3B:AA:31:D2:96:9B:B0:63
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6b:4b:c5:cc:fd:a6:12:75:14:f5:46:56:53:34:c6:a4:9a:
6e:5b:8b:55:1f:e0:73:f2:cc:98:10:9c:eb:fb:2b:b8:ed:71:
17:4b:a8:59:b8:6b:8c:c4:24:d1:b2:06:89:d0:78:c6:94:4b:
10:e6:36:2e:5f:32:7c:06:ac:f3:8f:c7:55:68:5d:fa:2d:a4:
19:7e:3d:eb:88:ee:b7:36:61:c4:f9:5b:c8:74:36:2c:c5:85:
3d:ba:84:95:e2:53:39:fd:a4:26:22:73:e6:40:78:3a:dc:75:
b2:2a:0b:1e:af:4a:92:80:05:f4:89:80:6b:57:72:65:6e:14:
22:41:1c:14:5a:b2:09:74:cc:a5:6a:60:a1:ad:76:b8:95:0e:
4a:a1:c6:ae:83:bd:d8:00:00:c9:3f:86:74:f5:fd:c7:91:30:
e0:82:57:d4:03:2d:a6:09:ed:0e:78:97:7d:5f:5c:5e:04:c9:
42:b8:c8:36:2b:31:d8:bd:bc:ff:9c:3a:42:4b:8d:7b:b6:0d:
9d:ed:d0:10:8b:f1:d1:f7:09:73:b1:24:9e:ec:a6:07:78:26:
db:dc:6b:00:4b:7e:21:99:a9:dc:df:8a:7c:f3:74:5a:44:88:
c7:1c:40:b7:28:3f:74:94:9f:40:4c:05:02:8f:b2:e8:1e:6c:
75:92:c2:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH4a1kWgVJhFT58rO8K5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTIwNDIwZjcyMmY3ZDdmM2M0YjI1YTgwZTE3ZDcyOTAx
NzExODAwHhcNMjUwNjA3MTYwMDQ2WhcNMjUwNjA4MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg2YmQxZmUzMTY0YTYwODFjOTdiYTBjZDIzYmFhMzFkMjk2OWJiMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDEqSonMOl2aDpupsBdKqYQfqd0k
hiqceLoEinTyjjbW915mQDSlWs7DVkm/z3DxeVoUE6155mxl+4rYudQiAYu4lvzb
HI8RoMXFGvXYQsrUZxjXYcDaxXkIoQSiIYijgPTJDaauwI3T9JvSnHtR2b+zbuMW
ksNnaI4XVktrUAUej3V/UrummN43wI+g/k2I9UK1mUCpM8bILKQqwtTiqbXBpjSf
OPPu8Lh8SxDupXYIpLWU+hHsZrCK5BQcNHtC/xzAIBqSk8nxxqWWnySA8cfO6RbE
vOJwTpuF9zSUyiyPaxC7EC/XMte18Y54waK8htA68kuXadPBMGW9SH0zaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvR/jFkpggcl7oM0juqMdKWm7BjMB8GA1UdIwQY
MBaAFGeSBCD3IvfX88SyWoDhfXKQFxGAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUt
NWVkMDg5YzFhZmVkLzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8yN2NhMTYtZjQ2Yi00ZjhlLWI5MmUtNWVkMDg5YzFhZmVk
LzEvWjVJRUlQY2k5OWZ6eExKYWdPRjljcEFYRVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGtLxcz9
phJ1FPVGVlM0xqSabluLVR/gc/LMmBCc6/sruO1xF0uoWbhrjMQk0bIGidB4xpRL
EOY2Ll8yfAas84/HVWhd+i2kGX4964jutzZhxPlbyHQ2LMWFPbqEleJTOf2kJiJz
5kB4Otx1sioLHq9KkoAF9ImAa1dyZW4UIkEcFFqyCXTMpWpgoa12uJUOSqHGroO9
2AAAyT+GdPX9x5Ew4IJX1AMtpgntDniXfV9cXgTJQrjINisx2L28/5w6QkuNe7YN
ne3QEIvx0fcJc7EknuymB3gm29xrAEt+IZmp3N+KfPN0WkSIxxxAtyg/dJSfQEwF
Ao+y6B5sdZLCFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:39 2025 by rpki-client