Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
File: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft (raw, json)
Hash identifier: 4epafvvVBiC5SKQmfJEiacr66X2RcX7ZLjfSVTFHv64=
Subject key identifier: 7D:49:65:A2:71:FD:21:CD:91:A0:56:CC:55:3B:BE:B9:9E:51:6B:9E
Authority key identifier: 65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
Certificate issuer: /CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Certificate serial: 01974A43D1BEE3D4CE03760A526FBDCE1BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 12:00:47 +0000
Manifest this update: Sat 07 Jun 2025 12:00:47 +0000
Manifest next update: Sun 08 Jun 2025 12:00:47 +0000
Files and hashes: 1: Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl (hash: cXICwRXqLs/sOKSf4I8Gd+FzgxBKhbcXCgJ9bMZIIOA=)
2: auDMGKuBUFekwr1pbKCTw36W0Cg.roa (hash: Ih8H6tUaVW1XZmrRDrxRFmcbfxbignoEn1fpBpsApWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d1:be:e3:d4:ce:03:76:0a:52:6f:bd:ce:1b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cf99962f989f7b733da7aa70eaf9e41052ae19
Validity
Not Before: Jun 7 12:00:47 2025 GMT
Not After : Jun 8 12:00:47 2025 GMT
Subject: CN=7d4965a271fd21cd91a056cc553bbeb99e516b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:0c:72:be:6d:2d:a9:6d:f3:91:1e:96:9f:
7f:fe:26:7c:e7:07:1c:c6:8f:b1:57:9b:e9:f2:4f:
5f:c7:4f:86:b4:33:da:d9:77:9e:b9:cc:7d:a0:08:
69:6a:cb:7b:5b:bd:69:1f:72:d7:5c:06:da:f5:80:
94:d8:ba:9e:c9:e7:9f:3c:90:bf:76:42:49:fe:51:
86:3f:c5:58:da:4d:86:3e:71:68:fc:cf:6b:f6:44:
63:7d:e0:13:98:6f:99:1d:f5:64:eb:88:1b:9a:16:
73:e4:b1:ea:71:ac:95:6d:14:e2:75:05:8d:2b:3e:
55:fc:1b:cd:37:07:5d:3d:9d:1c:3c:b5:36:f8:41:
6f:39:c4:41:96:f8:65:1f:85:7e:77:54:96:12:66:
2c:9a:e7:0f:fe:60:ff:72:f7:e2:b3:e5:4e:84:7c:
77:d2:60:e7:e7:74:ac:19:3a:52:fd:48:df:a5:5d:
eb:46:b3:86:df:e0:15:24:22:9e:e7:28:73:53:4b:
b0:bd:6b:e2:bd:e7:42:67:8a:9f:8c:fc:9b:93:2c:
c7:59:c4:a1:d8:24:e3:4c:26:d8:bb:57:3e:f9:66:
fa:f5:71:ac:1c:ba:da:33:e8:d5:33:33:89:e4:c3:
45:ab:2e:93:22:59:3b:47:9b:73:6e:60:60:24:1d:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:65:A2:71:FD:21:CD:91:A0:56:CC:55:3B:BE:B9:9E:51:6B:9E
X509v3 Authority Key Identifier:
keyid:65:CF:99:96:2F:98:9F:7B:73:3D:A7:AA:70:EA:F9:E4:10:52:AE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a52b04-efb0-415b-9b1a-409ea1208926/1/Zc-Zli-Yn3tzPaeqcOr55BBSrhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:07:b6:46:79:3e:c7:87:b6:18:ee:8b:bf:9d:d1:8f:b4:c8:
7f:ea:bd:c5:eb:d5:6e:c9:80:70:a2:c0:bd:47:ce:58:85:15:
b3:df:91:2f:03:e0:11:cb:61:4c:bf:30:ba:d7:d9:15:39:e4:
51:f4:d5:7e:7e:16:b0:24:92:82:29:fc:79:2a:03:94:b5:61:
aa:ba:b9:41:fb:5c:be:e5:74:db:8b:3e:ce:a5:35:9a:59:20:
73:f5:17:30:b0:bf:40:22:a1:1f:90:51:d6:38:b9:70:c2:d2:
53:9c:39:3a:5d:54:1e:0d:00:ae:85:32:12:2e:ae:98:cc:52:
de:6e:d6:f5:4f:83:1e:d5:8d:61:81:c4:9c:8f:0f:00:95:b7:
76:63:25:7b:39:43:a8:1d:e8:f4:2c:08:82:70:2a:c2:b4:a1:
32:14:71:f6:75:f9:99:41:2e:f7:e8:d2:2f:40:5b:a0:ea:a1:
25:9a:4d:d9:71:90:42:91:3d:0f:ae:14:7e:b4:7b:f7:0d:99:
27:28:a1:5b:28:33:a1:e8:8c:6a:86:cb:4e:b6:fd:d7:e4:ee:
7d:a2:f1:ca:9d:e8:ce:25:ad:10:55:1b:2d:52:cd:cf:ee:27:
b7:4b:eb:86:cb:b5:bb:0c:8a:06:1f:c6:31:06:d9:8d:f4:86:
c6:65:8d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ9G+49TOA3YKUm+9zhvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2Y5OTk2MmY5ODlmN2I3MzNkYTdhYTcwZWFmOWU0MTA1
MmFlMTkwHhcNMjUwNjA3MTIwMDQ3WhcNMjUwNjA4MTIwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZDQ5NjVhMjcxZmQyMWNkOTFhMDU2Y2M1NTNiYmViOTllNTE2YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygUMcr5tLalt85Eelp9//iZ85wcc
xo+xV5vp8k9fx0+GtDPa2Xeeucx9oAhpast7W71pH3LXXAba9YCU2LqeyeefPJC/
dkJJ/lGGP8VY2k2GPnFo/M9r9kRjfeATmG+ZHfVk64gbmhZz5LHqcayVbRTidQWN
Kz5V/BvNNwddPZ0cPLU2+EFvOcRBlvhlH4V+d1SWEmYsmucP/mD/cvfis+VOhHx3
0mDn53SsGTpS/UjfpV3rRrOG3+AVJCKe5yhzU0uwvWvivedCZ4qfjPybkyzHWcSh
2CTjTCbYu1c++Wb69XGsHLraM+jVMzOJ5MNFqy6TIlk7R5tzbmBgJB1EPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1JZaJx/SHNkaBWzFU7vrmeUWueMB8GA1UdIwQY
MBaAFGXPmZYvmJ97cz2nqnDq+eQQUq4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEt
NDA5ZWExMjA4OTI2LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hNTJiMDQtZWZiMC00MTViLTliMWEtNDA5ZWExMjA4OTI2
LzEvWmMtWmxpLVluM3R6UGFlcWNPcjU1QkJTcmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwe2Rnk+
x4e2GO6Lv53Rj7TIf+q9xevVbsmAcKLAvUfOWIUVs9+RLwPgEcthTL8wutfZFTnk
UfTVfn4WsCSSgin8eSoDlLVhqrq5QftcvuV024s+zqU1mlkgc/UXMLC/QCKhH5BR
1ji5cMLSU5w5Ol1UHg0AroUyEi6umMxS3m7W9U+DHtWNYYHEnI8PAJW3dmMlezlD
qB3o9CwIgnAqwrShMhRx9nX5mUEu9+jSL0BboOqhJZpN2XGQQpE9D64UfrR79w2Z
JyihWygzoeiMaobLTrb91+TufaLxyp3oziWtEFUbLVLNz+4nt0vrhsu1uwyKBh/G
MQbZjfSGxmWN5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:48 2025 by rpki-client