Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json)
Hash identifier: qbnTmMME/qazeae1N+T5XsJRPwe2DJWsk3VaEAA1fJc=
Subject key identifier: D7:CA:17:71:78:D2:C9:52:D7:EE:B5:25:F6:60:FD:76:50:95:68:A4
Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Certificate serial: 01975F141842B2DB533E14F8E02E66505E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
Manifest number: 1583
Signing time: Wed 11 Jun 2025 13:00:41 +0000
Manifest this update: Wed 11 Jun 2025 13:00:41 +0000
Manifest next update: Thu 12 Jun 2025 13:00:41 +0000
Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: v4EjXks+o5LQhpZhJThEdCJuudAqbEOfXqD66M0hAHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:18:42:b2:db:53:3e:14:f8:e0:2e:66:50:5e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95
Validity
Not Before: Jun 11 13:00:41 2025 GMT
Not After : Jun 12 13:00:41 2025 GMT
Subject: CN=d7ca177178d2c952d7eeb525f660fd76509568a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9b:e2:4e:c5:30:a5:a3:d3:be:6b:f1:6b:0f:
9f:b5:a6:3b:99:01:1f:af:69:b0:e0:2a:87:74:2d:
03:01:42:b3:26:70:16:7a:50:65:b2:aa:7b:80:85:
35:7b:4b:9e:a3:a8:74:e1:5e:19:14:23:aa:52:40:
4e:9a:d9:5b:3d:b1:c1:d5:03:0e:ee:b8:f2:79:d5:
15:74:25:5b:78:4a:94:b2:77:79:ef:05:f2:74:81:
fc:a0:89:47:ed:0f:1a:3e:2a:40:36:d9:c2:7c:c3:
fe:86:5e:23:8f:b1:ec:11:b7:39:d4:0c:a3:05:32:
0a:c4:84:9e:73:8d:17:bb:89:1a:02:67:8f:de:a6:
3b:7d:5f:65:3d:fa:ff:74:8c:e5:ac:11:52:3d:57:
28:c9:72:b1:3f:93:7f:7f:c3:48:45:bf:f3:96:4c:
75:81:af:88:2a:28:33:3f:a5:08:d2:d6:aa:b8:b0:
d3:ff:28:5f:79:8a:fe:37:74:43:28:75:55:31:67:
1d:7b:e2:98:ec:ff:f6:f1:64:09:14:aa:14:df:ea:
b3:89:9d:8b:26:8c:1f:57:ea:be:74:e7:7f:d3:c1:
af:3c:2a:b6:7c:8b:42:71:2a:85:ad:1b:b3:69:77:
22:21:7f:2e:74:41:50:86:5b:b3:bf:c6:2c:ad:93:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CA:17:71:78:D2:C9:52:D7:EE:B5:25:F6:60:FD:76:50:95:68:A4
X509v3 Authority Key Identifier:
keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:16:e4:10:5d:62:76:71:5b:45:65:a5:2c:df:e6:a1:a2:5b:
08:c7:c0:d0:db:25:f4:8a:8e:11:d6:32:df:5b:9c:67:14:a7:
f4:48:99:0b:37:cf:eb:f9:01:2c:21:1d:8a:59:5e:1c:7a:9e:
c1:02:45:0e:bd:d6:ba:72:c9:47:b1:98:87:61:e3:71:e4:f1:
f9:7d:7d:08:23:8e:32:01:57:c5:d1:86:7e:52:42:ae:e8:e2:
c1:98:f2:c5:75:aa:32:13:f1:8f:da:e2:fc:96:23:4a:0a:6e:
f6:a7:74:19:81:a0:85:f1:af:97:b7:f2:09:01:9d:1e:54:18:
28:93:5a:50:1d:09:6a:c7:a0:30:15:93:03:e6:e4:ed:ac:61:
ce:e2:2c:56:d7:94:7e:21:dd:1d:61:0a:b0:f1:3d:ec:89:6f:
a9:cf:c2:e3:70:53:6b:36:5d:65:6b:21:3a:6d:7d:90:07:d9:
55:c7:76:15:80:a1:70:7c:13:3a:80:46:89:2a:d6:d3:06:a7:
dd:d6:11:a6:cc:31:3b:6f:08:ad:d0:48:f3:7e:d2:f0:ae:9c:
db:ab:49:be:15:fd:83:6f:86:85:47:d8:8c:7a:9e:7d:0f:a3:
1e:29:fd:7a:18:ae:75:41:e6:1d:3e:be:b2:02:3f:b6:c3:bd:
b7:2e:ed:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfFBhCsttTPhT44C5mUF5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDdmN2UxNzQxNzlhMTMzZTMwYzY2MGVkZmE4NmU3NGE0
MGRkOTUwHhcNMjUwNjExMTMwMDQxWhcNMjUwNjEyMTMwMDQxWjAzMTEwLwYDVQQD
EyhkN2NhMTc3MTc4ZDJjOTUyZDdlZWI1MjVmNjYwZmQ3NjUwOTU2OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pviTsUwpaPTvmvxaw+ftaY7mQEf
r2mw4CqHdC0DAUKzJnAWelBlsqp7gIU1e0ueo6h04V4ZFCOqUkBOmtlbPbHB1QMO
7rjyedUVdCVbeEqUsnd57wXydIH8oIlH7Q8aPipANtnCfMP+hl4jj7HsEbc51Ayj
BTIKxISec40Xu4kaAmeP3qY7fV9lPfr/dIzlrBFSPVcoyXKxP5N/f8NIRb/zlkx1
ga+IKigzP6UI0taquLDT/yhfeYr+N3RDKHVVMWcde+KY7P/28WQJFKoU3+qziZ2L
JowfV+q+dOd/08GvPCq2fItCcSqFrRuzaXciIX8udEFQhluzv8YsrZPTNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfKF3F40slS1+61JfZg/XZQlWikMB8GA1UdIwQY
MBaAFGTX9+F0F5oTPjDGYO36hudKQN2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEt
NDE2MjQ2NWI5ODgwLzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEtNDE2MjQ2NWI5ODgw
LzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRbkEF1i
dnFbRWWlLN/moaJbCMfA0Nsl9IqOEdYy31ucZxSn9EiZCzfP6/kBLCEdilleHHqe
wQJFDr3WunLJR7GYh2HjceTx+X19CCOOMgFXxdGGflJCrujiwZjyxXWqMhPxj9ri
/JYjSgpu9qd0GYGghfGvl7fyCQGdHlQYKJNaUB0JasegMBWTA+bk7axhzuIsVteU
fiHdHWEKsPE97Ilvqc/C43BTazZdZWshOm19kAfZVcd2FYChcHwTOoBGiSrW0wan
3dYRpswxO28IrdBI837S8K6c26tJvhX9g2+GhUfYjHqefQ+jHin9ehiudUHmHT6+
sgI/tsO9ty7tOg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:36:56 2025 by rpki-client