Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: fyQW3PVr0xXspP7hZPZAHTALWtkDiC0PCR59UlHYOZA=
Subject key identifier: 42:71:DB:58:78:E2:B7:D7:1A:9E:E2:AB:79:6B:24:F0:F3:A4:28:1A
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 019749D61978DF28EFD8B166C5ACBA6AD3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0C53
Signing time: Sat 07 Jun 2025 10:00:57 +0000
Manifest this update: Sat 07 Jun 2025 10:00:57 +0000
Manifest next update: Sun 08 Jun 2025 10:00:57 +0000
Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: wrcSgkBxOGivRllyGFKfZvieEZ88dtsckBoVU8An0Ek=)
2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:19:78:df:28:ef:d8:b1:66:c5:ac:ba:6a:d3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Jun 7 10:00:57 2025 GMT
Not After : Jun 8 10:00:57 2025 GMT
Subject: CN=4271db5878e2b7d71a9ee2ab796b24f0f3a4281a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:93:06:2e:8b:3a:ec:ee:b6:27:b6:38:47:
66:2c:92:7f:df:9b:5e:32:e0:cf:4d:b3:8c:c2:9d:
e1:53:45:c9:ac:50:bc:7c:60:5f:1f:5c:85:00:ff:
72:9b:c6:43:bd:e3:83:4b:9f:c2:99:33:3f:a7:f7:
3c:a4:e0:a2:bd:2b:e1:49:56:b1:29:55:4f:96:2e:
94:93:60:0a:cf:ea:33:4e:41:2c:a1:fb:e0:6f:04:
03:84:18:6c:47:d0:ef:5e:8f:35:f7:54:14:50:c4:
8b:0e:c2:0b:74:0d:e8:b9:d0:c7:84:ea:a6:92:69:
96:75:57:20:a2:85:a3:6d:d1:57:bb:d4:19:9c:2f:
8d:85:1f:ac:80:f5:93:c3:f4:61:3b:b9:6d:87:11:
d7:93:17:b4:60:36:96:f7:48:5c:68:cd:1c:d0:17:
16:c3:97:d3:e3:f3:4f:4d:a5:c8:cb:c3:7e:26:51:
a9:54:ff:3c:c2:0c:4f:f7:cd:59:c9:5b:ba:6d:2f:
ca:c8:c7:cc:3b:0e:ce:48:a5:e9:8e:c7:8f:d5:01:
58:d9:05:9b:b5:ea:ff:d0:5b:90:55:df:84:61:3e:
f2:2d:9e:ec:74:55:2d:bd:01:fa:c8:c7:ce:ae:6f:
38:d9:14:9b:9f:0d:ce:6b:72:6e:bc:c7:31:c3:cf:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:DB:58:78:E2:B7:D7:1A:9E:E2:AB:79:6B:24:F0:F3:A4:28:1A
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ab:f4:4a:5c:a3:9c:ce:7a:77:b3:a3:ee:78:cf:fd:a8:4f:
3d:b8:83:fd:68:8f:bb:4d:77:2c:44:de:e0:47:f6:91:88:9c:
4b:fe:c3:d6:77:4b:85:93:21:85:9b:f1:12:f2:be:72:ca:f4:
7b:60:40:4e:80:84:e6:20:6b:f5:7e:0a:94:3e:9d:b1:6e:e9:
0e:6c:a0:5d:69:cf:31:9e:1f:b0:8a:ca:82:3e:7f:f0:2e:ab:
21:5a:09:78:b7:99:dc:7a:a4:5f:6b:04:49:e1:bd:66:01:c6:
44:2e:60:76:46:43:65:c9:e2:75:52:c2:43:98:19:03:c6:2c:
c2:bc:36:9f:37:22:69:cf:8d:6e:1a:4c:e6:30:d1:2f:d6:45:
77:96:23:0e:dc:a5:9a:b1:4a:75:08:64:6a:8a:9e:71:51:02:
03:b5:c8:1a:c6:b2:90:ab:13:6b:56:d1:2b:b0:50:c1:f8:99:
61:c7:df:cc:cd:d5:8a:ac:af:9e:35:42:f9:80:fa:e0:63:13:
cf:d7:a9:c6:81:78:d0:d1:29:6f:5a:4d:6f:f8:bf:20:bd:f8:
bf:b5:d7:40:81:7c:45:37:99:22:76:31:17:d9:34:f0:40:a4:
bb:6e:39:33:bf:71:b0:97:f4:52:6c:8e:38:22:e9:77:15:36:
5f:9b:db:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1hl43yjv2LFmxay6atPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTY2ZmEzN2M3NjRjZGM2MmEwMGJjYTJiMmIyYzg3OWZm
Njk5ZDkwHhcNMjUwNjA3MTAwMDU3WhcNMjUwNjA4MTAwMDU3WjAzMTEwLwYDVQQD
Eyg0MjcxZGI1ODc4ZTJiN2Q3MWE5ZWUyYWI3OTZiMjRmMGYzYTQyODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGmTBi6LOuzutie2OEdmLJJ/35te
MuDPTbOMwp3hU0XJrFC8fGBfH1yFAP9ym8ZDveODS5/CmTM/p/c8pOCivSvhSVax
KVVPli6Uk2AKz+ozTkEsofvgbwQDhBhsR9DvXo8191QUUMSLDsILdA3oudDHhOqm
kmmWdVcgooWjbdFXu9QZnC+NhR+sgPWTw/RhO7lthxHXkxe0YDaW90hcaM0c0BcW
w5fT4/NPTaXIy8N+JlGpVP88wgxP981ZyVu6bS/KyMfMOw7OSKXpjseP1QFY2QWb
ter/0FuQVd+EYT7yLZ7sdFUtvQH6yMfOrm842RSbnw3Oa3JuvMcxw88i1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJx21h44rfXGp7iq3lrJPDzpCgaMB8GA1UdIwQY
MBaAFEUWb6N8dkzcYqALyisrLIef9pnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wOGUyY2QtZjkxYS00MDI1LTkyZWYt
ZTA2NjBkMDIzMTA0LzEvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wOGUyY2QtZjkxYS00MDI1LTkyZWYtZTA2NjBkMDIzMTA0
LzEvUlJadm8zeDJUTnhpb0F2S0t5c3NoNV8ybWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATav0Slyj
nM56d7Oj7njP/ahPPbiD/WiPu013LETe4Ef2kYicS/7D1ndLhZMhhZvxEvK+csr0
e2BAToCE5iBr9X4KlD6dsW7pDmygXWnPMZ4fsIrKgj5/8C6rIVoJeLeZ3HqkX2sE
SeG9ZgHGRC5gdkZDZcnidVLCQ5gZA8Yswrw2nzciac+NbhpM5jDRL9ZFd5YjDtyl
mrFKdQhkaoqecVECA7XIGsaykKsTa1bRK7BQwfiZYcffzM3ViqyvnjVC+YD64GMT
z9epxoF40NEpb1pNb/i/IL34v7XXQIF8RTeZInYxF9k08ECku245M79xsJf0UmyO
OCLpdxU2X5vbsQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:46:28 2025 by rpki-client