Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: 9yJlMw+HO66q58xpGV8URN2rLv6oEb7rwBwp/rUCauw=
Subject key identifier: 0F:70:29:9F:FB:CA:2E:C8:A7:EB:CF:BF:DE:9F:9A:07:11:08:61:0C
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0197488C783F4B783BB47C085F92B65C813C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 09E1
Signing time: Sat 07 Jun 2025 04:00:54 +0000
Manifest this update: Sat 07 Jun 2025 04:00:54 +0000
Manifest next update: Sun 08 Jun 2025 04:00:54 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: qesMUB5hGp8W09qp+5M4Am0SJVmTHWGJ0mEYtJ2aqZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:78:3f:4b:78:3b:b4:7c:08:5f:92:b6:5c:81:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Jun 7 04:00:54 2025 GMT
Not After : Jun 8 04:00:54 2025 GMT
Subject: CN=0f70299ffbca2ec8a7ebcfbfde9f9a071108610c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:f2:17:66:ec:1f:f3:79:10:fc:1b:c6:b7:
01:e7:a8:73:ea:1a:e8:f5:9f:09:17:84:d7:52:c9:
d4:5c:34:00:51:70:fb:d7:69:0b:bb:32:32:08:01:
04:79:41:47:89:c3:2a:31:f9:ed:f6:ec:7a:95:1d:
cd:9a:13:f1:6c:09:c3:83:68:b6:bb:a8:fc:ce:57:
75:ad:cd:80:d6:fc:0b:67:27:fb:e1:bc:11:a6:d8:
c6:87:4c:f8:6c:8a:b5:21:db:34:79:d4:f6:5c:06:
d4:97:b0:79:4f:cb:19:9c:72:71:15:47:dd:6b:50:
b3:02:dd:7c:88:24:33:65:ba:c5:98:2a:6b:17:13:
bf:57:81:f1:2f:06:0d:fa:cf:ff:78:62:f2:cd:25:
ee:bc:74:30:de:2a:54:f3:df:f3:94:a6:18:af:92:
18:c6:e4:85:6f:7b:80:28:7b:c4:fb:0d:95:ac:4f:
f1:7f:d9:fd:a4:e3:08:2a:78:94:d6:7a:57:51:e8:
bb:8b:b6:f4:90:ac:75:b1:22:ea:5f:d3:bf:4c:f0:
b3:56:58:ef:ae:fe:df:c4:56:d9:78:47:32:f7:f8:
77:72:77:bb:7e:53:18:f7:68:4c:60:f2:39:02:33:
ee:75:df:f3:3b:2b:8a:b3:70:d2:78:7a:5f:d9:02:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:70:29:9F:FB:CA:2E:C8:A7:EB:CF:BF:DE:9F:9A:07:11:08:61:0C
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0a:a4:46:bd:0d:2b:bb:51:c0:13:0d:1e:cb:44:78:43:e0:
3b:61:b2:25:42:86:f7:79:64:a3:b2:51:c0:02:36:c4:bd:03:
11:f9:67:39:be:1b:0a:10:18:a8:96:dd:9f:b5:d9:f4:2f:da:
6f:6c:08:f2:a8:5b:9a:33:e0:be:7f:02:ec:ec:30:02:f7:89:
cf:9f:32:35:af:d1:66:5f:b5:90:f9:f9:1e:31:84:9b:31:40:
6c:e2:01:77:a3:8e:58:c3:81:db:98:5d:20:03:94:bd:6e:c6:
3f:d4:59:43:6f:08:38:f2:5a:55:b1:4e:94:63:d8:13:ff:cd:
46:a6:fc:c3:50:8b:3f:0c:e6:e0:c9:e6:b4:03:37:64:31:9c:
32:59:4b:aa:82:78:74:3a:b5:35:0f:f8:ca:57:de:69:2a:1e:
05:ed:ee:93:b2:cf:6c:05:8e:f3:d3:02:c9:16:dd:11:b7:6d:
66:3b:85:de:d9:22:3f:de:a0:fb:89:46:c6:d7:70:df:48:14:
4b:71:11:45:73:95:28:d6:6b:c4:f8:f4:68:46:09:96:eb:cb:
b0:ea:68:9d:42:44:73:4a:7f:46:cf:a7:09:2a:2f:67:35:f6:
0d:df:81:b6:5e:1d:c4:e4:0f:e2:1e:6f:2c:e0:7a:90:72:9b:
db:a9:aa:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjHg/S3g7tHwIX5K2XIE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk
ZjRmNjAwHhcNMjUwNjA3MDQwMDU0WhcNMjUwNjA4MDQwMDU0WjAzMTEwLwYDVQQD
EygwZjcwMjk5ZmZiY2EyZWM4YTdlYmNmYmZkZTlmOWEwNzExMDg2MTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDLyF2bsH/N5EPwbxrcB56hz6hro
9Z8JF4TXUsnUXDQAUXD712kLuzIyCAEEeUFHicMqMfnt9ux6lR3NmhPxbAnDg2i2
u6j8zld1rc2A1vwLZyf74bwRptjGh0z4bIq1Ids0edT2XAbUl7B5T8sZnHJxFUfd
a1CzAt18iCQzZbrFmCprFxO/V4HxLwYN+s//eGLyzSXuvHQw3ipU89/zlKYYr5IY
xuSFb3uAKHvE+w2VrE/xf9n9pOMIKniU1npXUei7i7b0kKx1sSLqX9O/TPCzVljv
rv7fxFbZeEcy9/h3cne7flMY92hMYPI5AjPudd/zOyuKs3DSeHpf2QJelQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9wKZ/7yi7Ip+vPv96fmgcRCGEMMB8GA1UdIwQY
MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt
Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm
LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwqkRr0N
K7tRwBMNHstEeEPgO2GyJUKG93lko7JRwAI2xL0DEflnOb4bChAYqJbdn7XZ9C/a
b2wI8qhbmjPgvn8C7OwwAveJz58yNa/RZl+1kPn5HjGEmzFAbOIBd6OOWMOB25hd
IAOUvW7GP9RZQ28IOPJaVbFOlGPYE//NRqb8w1CLPwzm4MnmtAM3ZDGcMllLqoJ4
dDq1NQ/4ylfeaSoeBe3uk7LPbAWO89MCyRbdEbdtZjuF3tkiP96g+4lGxtdw30gU
S3ERRXOVKNZrxPj0aEYJluvLsOponUJEc0p/Rs+nCSovZzX2Dd+Btl4dxOQP4h5v
LOB6kHKb26mqXw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:35:16 2025 by rpki-client