Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File: zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier: wH6pnv+yplh1+jP7rgSyhEKchuya1SpPs1QrWlDyB1M=
Subject key identifier: A6:E4:9D:28:94:2E:1A:4C:83:AC:2F:C0:06:7B:EC:88:CD:D5:B5:91
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer: /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial: 01974DEA04CBCA1317E62947C298C180C5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number: BA
Signing time: Sun 08 Jun 2025 05:01:11 +0000
Manifest this update: Sun 08 Jun 2025 05:01:11 +0000
Manifest next update: Mon 09 Jun 2025 05:01:11 +0000
Files and hashes: 1: BE_olsmmnp-joM_N2rLYKLd8dek.roa (hash: ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=)
2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: o34lC1PjwWaLFVR/WfimYPP2LrGM4NzhkA2QdBveU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:ea:04:cb:ca:13:17:e6:29:47:c2:98:c1:80:c5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Validity
Not Before: Jun 8 05:01:11 2025 GMT
Not After : Jun 9 05:01:11 2025 GMT
Subject: CN=a6e49d28942e1a4c83ac2fc0067bec88cdd5b591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:79:57:45:0b:83:0b:17:79:06:1c:c3:1a:
7f:77:07:0f:79:2e:d5:12:46:51:b6:dc:a7:dd:0b:
5e:74:23:b8:d7:40:51:86:64:06:73:19:42:cb:b2:
4a:fe:a1:f5:81:f8:57:27:82:cb:55:9f:20:23:3e:
02:2a:0c:ea:db:b4:48:8d:40:61:cf:ee:b6:67:e2:
09:7d:48:80:d8:a2:7f:80:6b:e5:66:e0:d1:06:83:
5c:fe:a9:b6:7e:9e:bf:cf:3f:c0:76:76:db:41:19:
9d:3c:1c:93:9b:d4:40:9b:44:82:25:e5:bf:02:d5:
8d:bd:67:eb:8e:e5:eb:9f:40:b1:54:5f:ae:8a:28:
f5:8e:50:d6:27:60:dd:29:ad:a3:07:b6:59:f8:f4:
b2:e1:3b:ec:ca:c2:61:04:6f:9a:69:ac:d7:d6:1e:
b1:76:9c:7b:56:f0:b4:26:0a:20:0e:26:46:e3:0a:
cb:65:be:0b:03:81:d9:65:60:ea:a8:bd:f6:b2:22:
7a:2e:82:24:e8:f8:63:b5:83:8c:42:96:bc:82:ee:
e2:7e:a3:fa:61:74:64:47:00:bd:a5:da:3b:53:99:
8d:2d:28:9a:4c:78:00:ec:65:eb:e9:8e:65:a7:aa:
0a:2b:2f:35:78:90:d6:85:0a:ec:86:c2:96:e2:8d:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E4:9D:28:94:2E:1A:4C:83:AC:2F:C0:06:7B:EC:88:CD:D5:B5:91
X509v3 Authority Key Identifier:
keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:98:e1:d5:08:c1:06:42:28:fe:62:60:fe:fe:68:64:e5:a4:
89:23:00:40:2d:9d:7f:1c:4b:77:c8:63:27:c2:ca:b4:6c:34:
ea:a0:73:43:39:13:40:72:1f:1a:94:75:62:00:c6:f8:ef:ca:
5d:1f:60:45:51:cf:90:5f:57:6b:48:dc:08:4f:3c:38:66:ce:
3a:9e:32:f0:cd:2f:b8:c9:1c:22:46:90:82:4a:03:5b:fc:7a:
2c:74:d7:02:db:76:dd:62:f2:29:f6:71:8f:13:c2:76:4a:a9:
55:82:be:6a:eb:49:d5:e1:e8:b9:71:3e:74:b5:8e:7a:3a:2c:
de:4b:5d:5a:50:97:17:7f:64:f7:5a:b3:eb:7f:a2:7c:c2:b2:
45:ba:52:a5:b9:ac:f9:5d:88:9a:80:6e:33:f8:fc:c2:19:86:
08:98:71:70:f4:84:cc:8a:de:c2:96:24:7f:b7:b6:b5:8c:66:
c1:06:60:f3:3a:90:f7:ea:bb:88:d9:a5:c5:90:68:30:5f:9b:
27:f7:f1:09:4f:64:c2:a6:19:ed:d2:bd:87:42:75:9a:6a:ca:
b2:73:ee:f6:a7:c8:a2:6b:10:47:59:1b:d3:92:c1:01:d0:88:
64:86:d6:d8:80:9a:41:d8:8a:23:ea:e5:f6:3d:f5:6b:e6:b7:
98:58:56:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6gTLyhMX5ilHwpjBgMXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTRjNDY1ZDJkZjM0NThjMDI2MTBmODc4MjBjOWJjMmVi
MzMyNTMwHhcNMjUwNjA4MDUwMTExWhcNMjUwNjA5MDUwMTExWjAzMTEwLwYDVQQD
EyhhNmU0OWQyODk0MmUxYTRjODNhYzJmYzAwNjdiZWM4OGNkZDViNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypR5V0ULgwsXeQYcwxp/dwcPeS7V
EkZRttyn3QtedCO410BRhmQGcxlCy7JK/qH1gfhXJ4LLVZ8gIz4CKgzq27RIjUBh
z+62Z+IJfUiA2KJ/gGvlZuDRBoNc/qm2fp6/zz/AdnbbQRmdPByTm9RAm0SCJeW/
AtWNvWfrjuXrn0CxVF+uiij1jlDWJ2DdKa2jB7ZZ+PSy4TvsysJhBG+aaazX1h6x
dpx7VvC0JgogDiZG4wrLZb4LA4HZZWDqqL32siJ6LoIk6PhjtYOMQpa8gu7ifqP6
YXRkRwC9pdo7U5mNLSiaTHgA7GXr6Y5lp6oKKy81eJDWhQrshsKW4o3Q5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbknSiULhpMg6wvwAZ77IjN1bWRMB8GA1UdIwQY
MBaAFM3kxGXS3zRYwCYQ+HggybwuszJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMmI4MDItZWNjMS00MWFmLTg5ZWUt
ZmM5NTQ2OGNiNmFhLzEvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMmI4MDItZWNjMS00MWFmLTg5ZWUtZmM5NTQ2OGNiNmFh
LzEvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpjh1QjB
BkIo/mJg/v5oZOWkiSMAQC2dfxxLd8hjJ8LKtGw06qBzQzkTQHIfGpR1YgDG+O/K
XR9gRVHPkF9Xa0jcCE88OGbOOp4y8M0vuMkcIkaQgkoDW/x6LHTXAtt23WLyKfZx
jxPCdkqpVYK+autJ1eHouXE+dLWOejos3ktdWlCXF39k91qz63+ifMKyRbpSpbms
+V2ImoBuM/j8whmGCJhxcPSEzIrewpYkf7e2tYxmwQZg8zqQ9+q7iNmlxZBoMF+b
J/fxCU9kwqYZ7dK9h0J1mmrKsnPu9qfIomsQR1kb05LBAdCIZIbW2ICaQdiKI+rl
9j31a+a3mFhWSA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:37 2025 by rpki-client