Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: NELBfxaLXzb+BzYS/fJVJGvU7r+0+vU9cf/rNgmeRoM=
Subject key identifier: 33:7D:5E:33:ED:AA:93:05:69:D7:39:59:10:4C:5E:8F:A6:52:24:2C
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 0197499F24BF5B685273317A5B6192EFB836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0AC7
Signing time: Sat 07 Jun 2025 09:00:55 +0000
Manifest this update: Sat 07 Jun 2025 09:00:55 +0000
Manifest next update: Sun 08 Jun 2025 09:00:55 +0000
Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: MzaMM/eEnNNQLba/sspZH59P9c0QdiPLqYhKbcagjeY=)
5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:24:bf:5b:68:52:73:31:7a:5b:61:92:ef:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Jun 7 09:00:55 2025 GMT
Not After : Jun 8 09:00:55 2025 GMT
Subject: CN=337d5e33edaa930569d73959104c5e8fa652242c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4d:d6:84:84:a7:b1:92:c5:2c:21:5a:dc:91:
2e:f1:b1:ac:02:06:76:19:44:c5:56:e2:94:36:26:
26:79:ee:33:bf:0d:8d:a7:78:a0:f4:57:d2:8b:37:
e4:e8:ac:c7:f4:5c:2a:65:97:8c:a9:c1:7e:04:05:
3f:33:05:cf:39:93:a0:12:10:31:c4:44:0b:08:ef:
e6:25:58:67:de:45:ae:87:dd:49:f7:21:b2:24:7b:
48:90:b3:0f:3f:c4:47:0c:be:cc:36:0e:e2:8c:85:
d6:11:9a:74:84:fd:62:80:3e:96:87:5c:07:45:98:
33:de:63:3d:21:04:14:d9:f3:a5:f9:5a:1c:62:c8:
20:32:67:82:9e:35:5d:85:3d:9d:2e:fb:9c:e8:32:
a4:bd:dd:13:04:31:64:36:0c:fa:ed:24:5c:a8:74:
74:0b:1c:c2:ac:b4:d5:80:81:1f:df:b1:a5:fb:0c:
09:c3:5b:bd:bf:e2:96:74:dd:5a:05:18:fc:b9:f9:
e0:65:a8:ae:c9:0d:46:da:de:c2:ec:7c:7b:93:43:
f7:bc:7d:df:13:fd:41:b3:c9:2f:e9:eb:a7:5a:ba:
bc:24:19:f4:46:d7:38:65:47:cf:01:bb:83:bf:5a:
c4:b0:26:4a:84:8e:a9:79:bd:58:6a:d4:28:d9:11:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:5E:33:ED:AA:93:05:69:D7:39:59:10:4C:5E:8F:A6:52:24:2C
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:d1:cc:2a:38:ba:dd:af:b9:54:c4:fe:b3:25:29:86:84:
ee:30:67:bb:c6:78:d1:01:fd:ee:8f:75:b9:62:86:8b:41:eb:
2a:f6:61:7a:2d:1b:1a:de:27:85:31:19:07:d1:78:79:df:b3:
da:c7:ba:96:28:70:65:5e:26:83:6a:bb:8a:c0:9b:c7:24:ce:
16:6d:ca:4b:dd:ec:6e:1c:2a:e6:d9:59:1d:7c:5b:15:1c:ff:
b2:ba:f7:0a:6c:b6:67:16:e2:97:ed:e5:c5:a7:e8:50:e7:20:
12:9a:ba:99:f2:06:1b:07:e7:79:9b:80:ef:82:e6:d9:9f:bd:
0f:38:90:0e:ce:f4:7e:d7:14:51:0f:c4:23:94:54:cd:a4:d2:
05:27:7f:d5:38:0a:94:31:c2:24:06:ac:d3:55:d5:26:77:b9:
59:3a:d3:99:3a:f0:68:af:81:08:3d:1d:01:59:8c:e2:2a:a5:
33:ef:70:c7:c6:01:6f:54:b3:7c:f7:fc:b4:0c:d0:3e:ca:dd:
b7:25:8f:13:a3:d8:f4:db:2d:28:de:fa:90:71:36:1a:7b:18:
bf:9f:9b:19:8b:50:8c:47:a8:1b:80:49:55:ee:52:3c:85:91:
0a:8c:fc:46:29:ee:24:78:4b:e5:40:f9:8b:79:d8:12:8e:9b:
7f:62:09:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnyS/W2hSczF6W2GS77g2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGYwMzNmNzgyZWFmMzJhYjA5MDg4Nzc1ZDY0YWM0Yjk0
YjViMTEwHhcNMjUwNjA3MDkwMDU1WhcNMjUwNjA4MDkwMDU1WjAzMTEwLwYDVQQD
EygzMzdkNWUzM2VkYWE5MzA1NjlkNzM5NTkxMDRjNWU4ZmE2NTIyNDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA603WhISnsZLFLCFa3JEu8bGsAgZ2
GUTFVuKUNiYmee4zvw2Np3ig9FfSizfk6KzH9FwqZZeMqcF+BAU/MwXPOZOgEhAx
xEQLCO/mJVhn3kWuh91J9yGyJHtIkLMPP8RHDL7MNg7ijIXWEZp0hP1igD6Wh1wH
RZgz3mM9IQQU2fOl+VocYsggMmeCnjVdhT2dLvuc6DKkvd0TBDFkNgz67SRcqHR0
CxzCrLTVgIEf37Gl+wwJw1u9v+KWdN1aBRj8ufngZaiuyQ1G2t7C7Hx7k0P3vH3f
E/1Bs8kv6eunWrq8JBn0Rtc4ZUfPAbuDv1rEsCZKhI6peb1YatQo2REjUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN9XjPtqpMFadc5WRBMXo+mUiQsMB8GA1UdIwQY
MBaAFGRPAz94Lq8yqwkIh3XWSsS5S1sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMt
NDkxNWZlN2Y5MmNlLzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84N2NhOTEtNmZiOC00MDM4LTg5MGMtNDkxNWZlN2Y5MmNl
LzEvWkU4RFAzZ3VyektyQ1FpSGRkWkt4TGxMV3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOerRzCo4
ut2vuVTE/rMlKYaE7jBnu8Z40QH97o91uWKGi0HrKvZhei0bGt4nhTEZB9F4ed+z
2se6lihwZV4mg2q7isCbxyTOFm3KS93sbhwq5tlZHXxbFRz/srr3Cmy2Zxbil+3l
xafoUOcgEpq6mfIGGwfneZuA74Lm2Z+9DziQDs70ftcUUQ/EI5RUzaTSBSd/1TgK
lDHCJAas01XVJne5WTrTmTrwaK+BCD0dAVmM4iqlM+9wx8YBb1SzfPf8tAzQPsrd
tyWPE6PY9NstKN76kHE2GnsYv5+bGYtQjEeoG4BJVe5SPIWRCoz8RinuJHhL5UD5
i3nYEo6bf2IJiA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:27 2025 by rpki-client