Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: 2ORTLHzWvxYTAQK/7S6VWsHeT/uMAwWQskjWWaEaH+4=
Subject key identifier: 61:9D:C9:89:01:E1:39:2C:D8:5A:02:24:3B:69:A1:78:7C:05:DD:11
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 01974BFB9065BB7AAFBF96245AAF4D3A46FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 0E2F
Signing time: Sat 07 Jun 2025 20:01:07 +0000
Manifest this update: Sat 07 Jun 2025 20:01:07 +0000
Manifest next update: Sun 08 Jun 2025 20:01:07 +0000
Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: p0kRvNscJfGxnTiDluM510fmrFNZ2W0g9pzZYZDmpvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:90:65:bb:7a:af:bf:96:24:5a:af:4d:3a:46:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Jun 7 20:01:07 2025 GMT
Not After : Jun 8 20:01:07 2025 GMT
Subject: CN=619dc98901e1392cd85a02243b69a1787c05dd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:36:88:06:23:7f:73:ad:6b:e5:d8:cf:fe:
64:27:2d:70:d3:4b:eb:63:4b:50:54:28:c3:0c:b1:
85:1d:4c:6d:c9:50:6b:57:42:6c:bf:5c:9e:7c:23:
03:47:3a:5f:76:85:a9:40:3f:b9:68:6c:b0:e5:cc:
bc:44:70:b4:f3:d7:17:02:52:1e:39:4b:f6:6d:ea:
aa:9a:c5:c3:8f:f9:ad:43:61:0f:8c:cf:a2:f9:05:
bd:ec:ea:00:78:50:92:a2:ee:70:7c:12:d9:b0:88:
4e:2e:4f:e6:e6:e7:f7:77:e0:1f:a8:ea:b1:c8:14:
76:b6:21:07:15:02:f0:c5:36:34:a8:6f:eb:88:bb:
34:69:f9:47:d1:1e:01:7f:32:9d:f4:88:40:e5:46:
8f:07:13:19:a1:0e:c3:83:22:fb:ed:e0:b3:ba:ff:
92:19:98:bc:33:08:52:44:4b:40:82:ef:cf:a6:88:
f8:89:4a:9b:a3:91:6c:c8:ad:1e:11:71:63:e6:9f:
19:38:3b:e7:f9:23:c9:b1:6f:ed:b0:13:f7:ac:4b:
c0:84:82:06:65:51:e7:e2:a2:9a:fd:6c:34:e0:19:
c4:b7:6b:ae:61:fc:69:38:b5:7a:2f:88:21:7c:cb:
e6:a7:e3:17:35:9f:0f:b5:35:5c:15:3f:6c:13:b9:
e1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9D:C9:89:01:E1:39:2C:D8:5A:02:24:3B:69:A1:78:7C:05:DD:11
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:da:81:10:9a:88:b1:59:55:ec:6f:72:8f:c4:3c:0a:a8:
ee:3e:b9:38:48:ad:b7:6e:68:ca:9b:f3:c0:9c:59:80:0c:a6:
8c:fa:7e:6e:8b:8d:9b:96:7b:a8:9d:56:36:d8:2a:1c:f9:56:
db:5c:4e:57:60:64:fc:69:3f:7a:c9:60:ef:bb:ff:7b:1a:1f:
bf:25:d0:63:8b:ab:2b:78:da:ec:e5:14:b6:dd:bb:22:29:76:
96:42:68:c5:be:e5:1b:cb:bf:c2:b7:3a:37:de:1d:4c:9d:f0:
87:b0:8c:54:27:f9:d0:42:c9:de:54:8a:68:7f:6e:4f:32:cc:
11:1e:d6:c1:3e:97:58:f3:c4:64:1a:97:30:23:31:81:22:92:
5d:36:9b:b0:e3:54:7d:59:95:4c:b3:ba:57:54:87:4d:db:cd:
12:a2:e3:ee:c8:cb:3f:1c:7a:f6:3c:f4:17:2c:b3:9a:2d:ad:
f7:1d:fd:69:ad:51:1a:22:f8:02:8c:41:2c:e0:b4:74:90:95:
df:da:ce:d0:82:06:5f:88:a7:0a:3a:9a:d3:67:b3:0a:2a:61:
e1:01:c2:91:32:cd:fd:64:59:45:35:ba:ee:27:61:10:b1:1a:
ed:3a:4d:e6:ee:d7:dd:4c:11:b8:0e:d9:27:c1:0e:f5:2f:37:
64:c0:08:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+5Blu3qvv5YkWq9NOkb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi
YjQ1YTQwHhcNMjUwNjA3MjAwMTA3WhcNMjUwNjA4MjAwMTA3WjAzMTEwLwYDVQQD
Eyg2MTlkYzk4OTAxZTEzOTJjZDg1YTAyMjQzYjY5YTE3ODdjMDVkZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG02iAYjf3Ota+XYz/5kJy1w00vr
Y0tQVCjDDLGFHUxtyVBrV0Jsv1yefCMDRzpfdoWpQD+5aGyw5cy8RHC089cXAlIe
OUv2beqqmsXDj/mtQ2EPjM+i+QW97OoAeFCSou5wfBLZsIhOLk/m5uf3d+AfqOqx
yBR2tiEHFQLwxTY0qG/riLs0aflH0R4BfzKd9IhA5UaPBxMZoQ7DgyL77eCzuv+S
GZi8MwhSREtAgu/Ppoj4iUqbo5FsyK0eEXFj5p8ZODvn+SPJsW/tsBP3rEvAhIIG
ZVHn4qKa/Ww04BnEt2uuYfxpOLV6L4ghfMvmp+MXNZ8PtTVcFT9sE7nhsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGdyYkB4Tks2FoCJDtpoXh8Bd0RMB8GA1UdIwQY
MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt
N2UxODRiMDcwYmJkLzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk
LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkfagRCa
iLFZVexvco/EPAqo7j65OEitt25oypvzwJxZgAymjPp+bouNm5Z7qJ1WNtgqHPlW
21xOV2Bk/Gk/eslg77v/exofvyXQY4urK3ja7OUUtt27Iil2lkJoxb7lG8u/wrc6
N94dTJ3wh7CMVCf50ELJ3lSKaH9uTzLMER7WwT6XWPPEZBqXMCMxgSKSXTabsONU
fVmVTLO6V1SHTdvNEqLj7sjLPxx69jz0Fyyzmi2t9x39aa1RGiL4AoxBLOC0dJCV
39rO0IIGX4inCjqa02ezCiph4QHCkTLN/WRZRTW67idhELEa7TpN5u7X3UwRuA7Z
J8EO9S83ZMAIbg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:58 2025 by rpki-client