Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: G70RbrYV3Rv1VJEcMTi3yPopnYsZpsvdxxTQ8V1V+x0=
Subject key identifier: F9:87:A9:46:CC:1C:16:A1:9F:D1:49:AC:F6:CD:39:B4:AD:6A:8C:BA
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 01974A7B46256F6E50CB7ADD6CE537BEE9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 13:01:22 +0000
Manifest this update: Sat 07 Jun 2025 13:01:22 +0000
Manifest next update: Sun 08 Jun 2025 13:01:22 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: 4NXGQ2b04qHwV5tISJKKj2HDbPBFKR/r41FfhU7odxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:46:25:6f:6e:50:cb:7a:dd:6c:e5:37:be:e9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Jun 7 13:01:22 2025 GMT
Not After : Jun 8 13:01:22 2025 GMT
Subject: CN=f987a946cc1c16a19fd149acf6cd39b4ad6a8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:4e:58:e1:cc:68:55:e7:ce:56:e5:d8:05:
e5:03:95:b5:77:f3:45:bc:96:2c:6c:8b:62:a3:68:
e1:ab:b0:ea:8f:a8:99:77:5d:0e:ed:73:2c:6c:c4:
3d:c5:34:38:44:50:1a:10:13:87:9a:24:eb:f4:4e:
e7:27:0b:e1:98:e0:9a:6f:47:d2:ca:3d:5c:11:3f:
d7:b0:93:8f:ee:88:11:b4:8c:54:3e:e4:a2:2f:84:
d6:81:88:72:2b:8e:4a:33:c0:8c:be:3a:39:a6:36:
08:71:83:0f:23:71:84:86:8c:dc:15:d8:04:ce:a1:
85:2a:4b:5d:a8:69:55:2e:29:71:88:b5:d5:81:71:
44:52:5f:b0:9c:5d:6e:b8:c5:2a:85:cd:51:95:1d:
5b:a4:ef:37:f0:83:4c:4c:36:af:60:ce:e4:a5:db:
cf:84:9f:b6:ee:3f:64:03:f5:27:83:da:14:fd:4e:
70:7b:65:4d:6f:c6:f8:2e:f2:31:93:c5:43:89:4e:
dc:d3:ca:25:d2:ec:b4:5d:50:7a:49:2a:bd:14:34:
26:83:a4:18:73:bc:b0:b0:e1:d9:07:73:d2:ef:fe:
9d:22:b3:a2:cc:bf:b0:04:30:95:56:8f:db:12:f9:
ff:32:49:8a:d2:a3:49:75:55:3c:06:69:46:44:0f:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:87:A9:46:CC:1C:16:A1:9F:D1:49:AC:F6:CD:39:B4:AD:6A:8C:BA
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bd:62:5f:46:e6:61:f4:00:a5:9a:6b:74:8d:89:5c:84:21:
66:2d:53:93:b5:33:4c:da:a6:54:17:1e:f0:ea:f7:d0:85:3b:
29:de:97:c6:a5:94:d0:b5:fe:04:1c:20:bb:ff:d0:04:82:4c:
16:a3:74:4e:a7:2a:e6:9c:c8:8c:7f:33:d5:3b:59:1b:06:33:
7d:f6:46:6e:d6:0e:21:79:d3:a8:ee:4f:44:a9:f4:22:d3:3a:
c5:c7:02:52:02:cf:22:2e:a2:60:12:70:1f:49:9e:ca:5b:de:
e0:42:f8:7a:3f:f1:f1:ba:d9:98:8a:08:13:44:d4:df:69:31:
70:f8:04:d5:5b:ed:f0:c5:46:3e:ae:fa:08:a3:96:af:17:45:
e7:07:f0:35:9c:2c:be:a1:b0:33:c2:60:6c:39:d4:85:a0:3d:
cb:d3:85:20:94:bc:b0:e0:3d:79:77:ed:55:75:c6:5e:4c:fc:
68:1e:b0:98:cd:f9:46:56:3e:e1:43:78:5b:fa:ca:14:3d:96:
62:07:b3:cd:dd:f1:68:82:21:0d:d5:04:f9:2c:fb:d1:79:53:
5f:db:57:56:bf:27:cb:27:8e:f2:32:17:70:d5:fd:16:c5:a0:
e4:6a:77:2b:1c:8e:07:b2:7a:cb:01:4b:06:25:e6:2f:89:7f:
94:da:44:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe0Ylb25Qy3rdbOU3vum9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmM2YzNkMjJjZjZiMTAxZDcxNDgwMDZkYTdhNzI4NGRj
YmIzMjAwHhcNMjUwNjA3MTMwMTIyWhcNMjUwNjA4MTMwMTIyWjAzMTEwLwYDVQQD
EyhmOTg3YTk0NmNjMWMxNmExOWZkMTQ5YWNmNmNkMzliNGFkNmE4Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x5OWOHMaFXnzlbl2AXlA5W1d/NF
vJYsbItio2jhq7Dqj6iZd10O7XMsbMQ9xTQ4RFAaEBOHmiTr9E7nJwvhmOCab0fS
yj1cET/XsJOP7ogRtIxUPuSiL4TWgYhyK45KM8CMvjo5pjYIcYMPI3GEhozcFdgE
zqGFKktdqGlVLilxiLXVgXFEUl+wnF1uuMUqhc1RlR1bpO838INMTDavYM7kpdvP
hJ+27j9kA/Ung9oU/U5we2VNb8b4LvIxk8VDiU7c08ol0uy0XVB6SSq9FDQmg6QY
c7ywsOHZB3PS7/6dIrOizL+wBDCVVo/bEvn/MkmK0qNJdVU8BmlGRA8snQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmHqUbMHBahn9FJrPbNObStaoy6MB8GA1UdIwQY
MBaAFGYsbD0iz2sQHXFIAG2npyhNy7MgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQt
ZjIxYjZhZTNiZTZjLzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQtZjIxYjZhZTNiZTZj
LzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtL1iX0bm
YfQApZprdI2JXIQhZi1Tk7UzTNqmVBce8Or30IU7Kd6XxqWU0LX+BBwgu//QBIJM
FqN0Tqcq5pzIjH8z1TtZGwYzffZGbtYOIXnTqO5PRKn0ItM6xccCUgLPIi6iYBJw
H0meylve4EL4ej/x8brZmIoIE0TU32kxcPgE1Vvt8MVGPq76CKOWrxdF5wfwNZws
vqGwM8JgbDnUhaA9y9OFIJS8sOA9eXftVXXGXkz8aB6wmM35RlY+4UN4W/rKFD2W
Ygezzd3xaIIhDdUE+Sz70XlTX9tXVr8nyyeO8jIXcNX9FsWg5Gp3KxyOB7J6ywFL
BiXmL4l/lNpE+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:10 2025 by rpki-client