Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: H6/yzVr1smA7pUgg8Gn4obQOAKLBcx2SN9fqcKNDvNI=
Subject key identifier: 03:9B:D5:E9:48:53:DC:E5:E8:FC:1E:6F:00:2E:E0:A3:CA:4D:32:33
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 01974C6944EAAF1179347B29F2585691935B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 22:00:56 +0000
Manifest this update: Sat 07 Jun 2025 22:00:56 +0000
Manifest next update: Sun 08 Jun 2025 22:00:56 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: mnFgU22EjAM2lPLSLf+EfaH/53GzVv15MGdJIAfxfKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:44:ea:af:11:79:34:7b:29:f2:58:56:91:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Jun 7 22:00:56 2025 GMT
Not After : Jun 8 22:00:56 2025 GMT
Subject: CN=039bd5e94853dce5e8fc1e6f002ee0a3ca4d3233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:24:1a:f3:e6:f4:0b:df:6a:77:ed:73:f8:
09:93:c8:d6:5e:93:e6:c0:49:8d:da:bd:92:e9:45:
b7:8b:6f:d0:06:0c:eb:64:9f:84:f7:65:94:ab:45:
e7:0d:45:49:c1:5a:83:ea:8b:19:ac:72:4b:95:83:
0b:ac:a4:1b:0d:d6:60:9e:d4:7e:72:44:40:e9:28:
58:de:a4:2e:db:31:52:51:8f:f3:06:85:45:10:85:
cc:ba:c9:e8:ac:8d:bb:03:59:d6:fc:71:6c:5b:29:
a9:36:da:6a:70:93:8f:ad:c3:d6:d1:d3:2c:97:4c:
f7:58:94:3b:a4:f8:79:44:dd:b1:da:42:30:e3:3c:
c0:ce:53:ac:20:39:82:d3:89:f9:4c:cc:bb:e7:c0:
e6:ff:27:4a:3b:8f:61:af:67:c1:99:c6:8c:92:ab:
26:25:d4:48:52:ab:39:ba:ee:b6:b1:bb:a5:6d:f0:
4c:2f:89:94:18:4a:a2:30:49:de:2c:4e:67:b2:9e:
d6:76:5d:7b:a2:c6:1e:c2:8f:c4:43:5f:65:bf:ee:
1a:09:dd:56:10:9e:97:a0:3e:fe:23:1a:0d:ca:80:
94:fd:17:fa:e3:df:3a:5e:f7:01:6e:34:7d:5a:e0:
d2:ca:70:1a:b2:bd:1a:52:6e:ab:78:86:c6:08:e0:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:D5:E9:48:53:DC:E5:E8:FC:1E:6F:00:2E:E0:A3:CA:4D:32:33
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:17:52:99:c0:0e:39:e7:e3:a2:25:f6:5f:3a:ef:db:b2:4f:
ab:5c:df:01:a4:95:fb:a4:55:0b:d2:38:32:9c:be:4c:e2:b4:
10:43:91:7f:b0:56:f6:32:1e:26:13:4c:4f:42:3d:ce:0f:ca:
68:86:fc:80:38:ff:b2:e1:17:44:82:ed:dc:72:66:98:1c:c1:
2d:64:89:ba:8f:b3:63:b8:30:53:05:03:a4:26:59:94:c2:63:
a7:9b:30:98:c7:d7:45:7b:58:15:4e:f0:9c:96:ac:25:fa:a2:
ef:63:b1:4f:fe:36:ab:27:9f:99:e3:23:18:66:22:01:09:cb:
fc:5c:82:f1:43:ab:4d:b2:79:13:fb:5d:97:67:9c:bf:72:27:
01:41:cf:ff:4f:02:2d:47:ca:4b:3b:de:8f:53:30:ba:d2:3d:
24:19:53:9c:15:38:ba:8b:51:07:3c:27:4f:0d:31:89:57:e9:
57:34:88:3b:e8:f3:e1:22:ea:2c:bd:2a:b1:d7:4d:60:47:1b:
84:07:68:68:cc:b3:48:ed:4b:9d:ee:7e:ff:f5:65:87:f6:35:
40:b8:62:cf:09:11:83:2d:97:6b:04:f8:38:b4:12:20:49:2c:
bb:73:2e:fc:b4:12:4a:50:f3:f9:c7:e4:5e:79:c5:e0:9d:36:
ee:14:80:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaUTqrxF5NHsp8lhWkZNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDk3NThiOGM4YzM3MzU4M2MwNTc1MTY2ZDYyMzQzNjAw
YzdmMDEwHhcNMjUwNjA3MjIwMDU2WhcNMjUwNjA4MjIwMDU2WjAzMTEwLwYDVQQD
EygwMzliZDVlOTQ4NTNkY2U1ZThmYzFlNmYwMDJlZTBhM2NhNGQzMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+EkGvPm9Avfanftc/gJk8jWXpPm
wEmN2r2S6UW3i2/QBgzrZJ+E92WUq0XnDUVJwVqD6osZrHJLlYMLrKQbDdZgntR+
ckRA6ShY3qQu2zFSUY/zBoVFEIXMusnorI27A1nW/HFsWympNtpqcJOPrcPW0dMs
l0z3WJQ7pPh5RN2x2kIw4zzAzlOsIDmC04n5TMy758Dm/ydKO49hr2fBmcaMkqsm
JdRIUqs5uu62sbulbfBML4mUGEqiMEneLE5nsp7Wdl17osYewo/EQ19lv+4aCd1W
EJ6XoD7+IxoNyoCU/Rf64986XvcBbjR9WuDSynAasr0aUm6reIbGCOCd2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOb1elIU9zl6PwebwAu4KPKTTIzMB8GA1UdIwQY
MBaAFGbZdYuMjDc1g8BXUWbWI0NgDH8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWIt
ZWU4ODMxOTI0YjMyLzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWItZWU4ODMxOTI0YjMy
LzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxdSmcAO
OefjoiX2Xzrv27JPq1zfAaSV+6RVC9I4Mpy+TOK0EEORf7BW9jIeJhNMT0I9zg/K
aIb8gDj/suEXRILt3HJmmBzBLWSJuo+zY7gwUwUDpCZZlMJjp5swmMfXRXtYFU7w
nJasJfqi72OxT/42qyefmeMjGGYiAQnL/FyC8UOrTbJ5E/tdl2ecv3InAUHP/08C
LUfKSzvej1MwutI9JBlTnBU4uotRBzwnTw0xiVfpVzSIO+jz4SLqLL0qsddNYEcb
hAdoaMyzSO1Lne5+//Vlh/Y1QLhizwkRgy2XawT4OLQSIEksu3Mu/LQSSlDz+cfk
XnnF4J027hSAdQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:10 2025 by rpki-client