Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: sNKayd1UyNxGJt4TqIyJyY0XjQmTnj5SecEtSXL/E7c=
Subject key identifier: A6:60:52:C0:63:F1:CF:54:2A:4A:F4:A2:93:59:E2:BC:A5:09:E3:0E
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 01974AB16C2E00BA9602CEFB5C050B19997E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 0604
Signing time: Sat 07 Jun 2025 14:00:30 +0000
Manifest this update: Sat 07 Jun 2025 14:00:30 +0000
Manifest next update: Sun 08 Jun 2025 14:00:30 +0000
Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: yu0hHmhbAJMNq2c4KSz6VUnAQ5stuk1kSOVKVTzC4Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:6c:2e:00:ba:96:02:ce:fb:5c:05:0b:19:99:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Jun 7 14:00:30 2025 GMT
Not After : Jun 8 14:00:30 2025 GMT
Subject: CN=a66052c063f1cf542a4af4a29359e2bca509e30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:fc:2f:75:ab:2e:83:09:76:a8:9a:44:bc:
5c:7d:56:e6:c4:a1:6c:44:ce:ab:8b:ad:2e:d8:6b:
07:9c:83:fc:68:45:6d:29:48:13:36:6b:37:70:b4:
de:27:dc:ed:fc:41:1d:28:be:a6:12:c5:78:31:45:
d2:60:96:88:50:b6:ae:30:c0:9c:f5:9c:07:67:8c:
31:9e:ec:46:b0:b1:5c:d2:33:15:1e:8a:2f:54:93:
8c:f2:f0:49:96:bb:3a:63:d6:62:64:e2:77:fa:9f:
dc:49:c0:58:97:15:a6:28:c3:39:db:78:ed:cb:89:
71:e2:93:63:43:97:2b:39:9d:63:95:22:e7:b2:0f:
84:d1:ca:6e:0e:ed:dc:ca:29:57:94:b7:d7:b7:0a:
8d:db:f0:ad:ac:3e:73:72:36:4b:b3:10:55:dc:9f:
45:91:08:b5:bd:e6:d3:63:3e:19:db:35:e4:7f:8e:
29:05:14:3b:bb:7f:33:66:d8:28:96:d3:a1:f3:2c:
d9:f3:8b:33:77:f3:b7:52:6a:b1:1a:2b:7d:a1:0e:
38:b0:75:88:d9:e9:bb:ef:69:1d:36:db:06:1e:d1:
4f:fa:5c:d7:78:da:ce:92:75:1f:95:9c:f8:73:32:
e3:2c:7b:d5:56:f7:bf:2f:43:66:ca:1b:fe:40:cb:
45:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:52:C0:63:F1:CF:54:2A:4A:F4:A2:93:59:E2:BC:A5:09:E3:0E
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:92:ba:03:b2:84:f8:3d:48:85:8b:95:12:af:2e:eb:73:
1d:73:d3:0b:3d:06:02:e5:ba:f7:59:ac:68:d1:13:70:34:d1:
e8:22:e7:98:26:3c:34:45:7c:bc:37:4c:fd:e1:0f:97:83:20:
5e:d6:d4:40:ee:f5:8a:f8:c3:5d:53:79:eb:32:80:0c:37:0d:
48:eb:84:6e:98:e5:02:b2:5c:b4:6f:04:5e:80:65:f5:a5:9c:
79:39:c9:6c:68:ed:bf:f9:51:85:20:3b:e9:70:23:fa:f4:18:
51:b0:21:d4:27:5b:f9:e2:a9:0a:a5:9b:f6:40:68:5a:b4:e4:
61:cb:72:66:8d:5d:7c:d3:1a:7a:7c:e6:72:3d:f3:b1:14:9d:
36:a7:79:ee:f4:c6:b7:5e:b7:0a:58:dc:f9:5e:59:cd:95:de:
50:86:e2:37:f9:ff:06:25:7e:bd:73:6b:ac:ad:c8:1d:ce:c1:
a2:ca:b5:a4:d7:b1:d1:93:63:b0:de:ea:d9:c4:bd:8f:d5:a7:
07:c2:aa:1e:5d:65:80:f7:a5:90:cd:93:a0:ae:9b:ff:5d:58:
05:03:91:25:6f:18:78:e6:9e:3f:36:bf:3f:75:ab:b7:ad:a5:
a8:02:70:f2:d9:f2:2b:9f:8b:e7:4f:fd:bf:9e:49:51:7c:c2:
2e:12:9f:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsWwuALqWAs77XAULGZl+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw
NTMyYjAwHhcNMjUwNjA3MTQwMDMwWhcNMjUwNjA4MTQwMDMwWjAzMTEwLwYDVQQD
EyhhNjYwNTJjMDYzZjFjZjU0MmE0YWY0YTI5MzU5ZTJiY2E1MDllMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVz8L3WrLoMJdqiaRLxcfVbmxKFs
RM6ri60u2GsHnIP8aEVtKUgTNms3cLTeJ9zt/EEdKL6mEsV4MUXSYJaIULauMMCc
9ZwHZ4wxnuxGsLFc0jMVHoovVJOM8vBJlrs6Y9ZiZOJ3+p/cScBYlxWmKMM523jt
y4lx4pNjQ5crOZ1jlSLnsg+E0cpuDu3cyilXlLfXtwqN2/CtrD5zcjZLsxBV3J9F
kQi1vebTYz4Z2zXkf44pBRQ7u38zZtgoltOh8yzZ84szd/O3UmqxGit9oQ44sHWI
2em772kdNtsGHtFP+lzXeNrOknUflZz4czLjLHvVVve/L0Nmyhv+QMtF6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZgUsBj8c9UKkr0opNZ4rylCeMOMB8GA1UdIwQY
MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt
ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy
LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGiSugOy
hPg9SIWLlRKvLutzHXPTCz0GAuW691msaNETcDTR6CLnmCY8NEV8vDdM/eEPl4Mg
XtbUQO71ivjDXVN56zKADDcNSOuEbpjlArJctG8EXoBl9aWceTnJbGjtv/lRhSA7
6XAj+vQYUbAh1Cdb+eKpCqWb9kBoWrTkYctyZo1dfNMaenzmcj3zsRSdNqd57vTG
t163Cljc+V5ZzZXeUIbiN/n/BiV+vXNrrK3IHc7Bosq1pNex0ZNjsN7q2cS9j9Wn
B8KqHl1lgPelkM2ToK6b/11YBQORJW8YeOaePza/P3Wrt62lqAJw8tnyK5+L50/9
v55JUXzCLhKfLA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:33:30 2025 by rpki-client