Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: 8VSMno1GatYcymSNhs8BQFQUUFIdqZp+/lb9c9mFXK4=
Subject key identifier: BE:4D:C7:14:9A:BA:F4:80:97:ED:BB:8F:CB:0B:AD:80:04:BD:37:9C
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 0197470C09B5BA00EC26C08DD0ECF8256222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 21:01:00 +0000
Manifest this update: Fri 06 Jun 2025 21:01:00 +0000
Manifest next update: Sat 07 Jun 2025 21:01:00 +0000
Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: QwOsKKVEKJAnb/kkYwYnZjiqUadC7vTWh1WVKUssSDc=)
2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:09:b5:ba:00:ec:26:c0:8d:d0:ec:f8:25:62:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: Jun 6 21:01:00 2025 GMT
Not After : Jun 7 21:01:00 2025 GMT
Subject: CN=be4dc7149abaf48097edbb8fcb0bad8004bd379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d7:3c:0d:e7:3c:f9:66:d8:97:42:40:f1:e1:
3d:aa:7a:45:2a:63:e8:69:17:bb:54:20:7f:97:8e:
b0:f1:62:77:bf:6a:2b:dd:9b:bd:1e:14:c5:17:e6:
a1:ea:59:75:aa:a5:5d:95:c5:ed:19:4e:3f:ab:9a:
e1:d9:ca:ed:2a:c2:ce:06:59:5e:06:e7:0c:f9:8b:
e0:32:af:f4:04:d2:68:02:8b:83:9a:41:e4:ac:44:
9f:72:b7:94:15:72:cc:4a:af:ab:8e:9d:41:35:61:
1b:f9:38:c2:d5:49:b1:be:fd:ec:fc:e3:24:91:a7:
01:e8:e9:61:07:2f:35:71:35:29:31:bd:25:01:a6:
30:dd:ce:ea:6f:7e:8b:96:fe:fc:01:ad:e1:92:b1:
49:ac:7e:41:67:f5:cc:e7:e1:88:4a:a4:89:d1:7a:
13:d5:d6:03:06:09:01:e4:54:f1:74:b3:05:68:ae:
12:e5:03:a5:f0:32:18:fb:ff:06:7e:c1:ff:ed:33:
d8:8d:37:29:3b:07:72:ea:6f:af:eb:82:97:c1:bc:
4b:85:24:a0:9b:73:43:8d:c9:ac:31:e3:a3:2f:79:
5a:e5:50:4c:45:4e:31:15:23:26:85:9b:65:af:37:
82:06:2a:3f:39:4d:8e:63:4a:51:1c:f6:f1:f8:63:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4D:C7:14:9A:BA:F4:80:97:ED:BB:8F:CB:0B:AD:80:04:BD:37:9C
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:45:a8:77:4c:27:3f:75:9d:91:5d:d9:5d:3d:2f:ed:f6:66:
5c:cd:da:3b:bf:d7:20:df:91:68:05:1f:27:3c:ab:f8:de:46:
95:d3:e6:51:2c:19:72:76:08:ef:18:35:93:ca:f1:c4:0b:0a:
de:40:35:45:1e:74:67:83:d4:f7:48:f0:fc:8c:3f:9f:6b:17:
b0:69:8a:5a:b6:91:14:d6:1c:49:ac:80:3c:04:90:15:c1:10:
4b:c4:45:3f:9e:c6:0e:dd:ea:6e:71:99:da:4a:55:51:3d:9b:
84:ce:cf:01:17:36:d6:74:b5:62:14:89:0d:ef:55:55:6c:06:
3d:dc:fe:e7:bd:06:d1:89:98:28:ac:b3:8e:11:b6:ee:24:da:
14:7f:22:d9:95:73:71:61:c5:0e:b4:6d:b2:4b:ef:ab:7d:e5:
57:cf:e3:ba:f7:c8:ad:89:a2:06:47:c7:0e:39:cb:26:4f:fb:
42:5f:9e:c8:67:24:27:e3:7d:3e:84:2e:51:a6:03:a0:d1:7d:
9b:25:d9:75:86:5a:9c:02:7e:87:83:e1:01:2d:af:11:4f:f5:
4b:e3:96:61:3b:95:fb:3d:3f:47:d7:d0:9b:f9:a4:a7:fd:be:
c2:ea:99:94:81:44:5f:91:aa:a4:35:2f:bb:67:af:ed:33:09:
63:b2:63:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDAm1ugDsJsCN0Oz4JWIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZjAxMjBlZTNiNmYwZjhkYjUyZDBkYjgxYzAxZTQ0NDdk
OGU0YmEwHhcNMjUwNjA2MjEwMTAwWhcNMjUwNjA3MjEwMTAwWjAzMTEwLwYDVQQD
EyhiZTRkYzcxNDlhYmFmNDgwOTdlZGJiOGZjYjBiYWQ4MDA0YmQzNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19c8Dec8+WbYl0JA8eE9qnpFKmPo
aRe7VCB/l46w8WJ3v2or3Zu9HhTFF+ah6ll1qqVdlcXtGU4/q5rh2crtKsLOBlle
BucM+YvgMq/0BNJoAouDmkHkrESfcreUFXLMSq+rjp1BNWEb+TjC1Umxvv3s/OMk
kacB6OlhBy81cTUpMb0lAaYw3c7qb36Llv78Aa3hkrFJrH5BZ/XM5+GISqSJ0XoT
1dYDBgkB5FTxdLMFaK4S5QOl8DIY+/8GfsH/7TPYjTcpOwdy6m+v64KXwbxLhSSg
m3NDjcmsMeOjL3la5VBMRU4xFSMmhZtlrzeCBio/OU2OY0pRHPbx+GOsywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5NxxSauvSAl+27j8sLrYAEvTecMB8GA1UdIwQY
MBaAFGXwEg7jtvD421LQ24HAHkRH2OS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYt
NTc3YzAzOTEwNzAxLzEvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYtNTc3YzAzOTEwNzAx
LzEvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1UWod0wn
P3WdkV3ZXT0v7fZmXM3aO7/XIN+RaAUfJzyr+N5GldPmUSwZcnYI7xg1k8rxxAsK
3kA1RR50Z4PU90jw/Iw/n2sXsGmKWraRFNYcSayAPASQFcEQS8RFP57GDt3qbnGZ
2kpVUT2bhM7PARc21nS1YhSJDe9VVWwGPdz+570G0YmYKKyzjhG27iTaFH8i2ZVz
cWHFDrRtskvvq33lV8/juvfIrYmiBkfHDjnLJk/7Ql+eyGckJ+N9PoQuUaYDoNF9
myXZdYZanAJ+h4PhAS2vEU/1S+OWYTuV+z0/R9fQm/mkp/2+wuqZlIFEX5GqpDUv
u2ev7TMJY7Jjew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:36 2025 by rpki-client