Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
File: ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft (raw, json)
Hash identifier: i+GfqleDqi8gnrOMWA6F4jWdKaqkqLcEpklfWpycztk=
Subject key identifier: 50:01:A3:67:49:CF:7E:75:02:4F:71:92:77:8F:2F:EE:90:B1:5B:F2
Authority key identifier: 64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
Certificate issuer: /CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Certificate serial: 019749317A42D1AD7664FE2FEE7D21016511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 07:01:08 +0000
Manifest this update: Sat 07 Jun 2025 07:01:08 +0000
Manifest next update: Sun 08 Jun 2025 07:01:08 +0000
Files and hashes: 1: 77Lxszm6b67-RSjepR0C23JG5dI.roa (hash: 9Xm4YAYAAgADPugT2wEGkyXGaEUt/FjBjGPJ5p3nqlw=)
2: ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl (hash: u0U4D+PsoljJ/QBk7jFrUgFVBwlas5xCC/yVl/IdGOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:7a:42:d1:ad:76:64:fe:2f:ee:7d:21:01:65:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ef98adbf42d5bacd24cadb0adf092c4576daf3
Validity
Not Before: Jun 7 07:01:08 2025 GMT
Not After : Jun 8 07:01:08 2025 GMT
Subject: CN=5001a36749cf7e75024f7192778f2fee90b15bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:1d:3e:71:73:13:fe:9d:dd:af:27:4d:b7:
06:b8:e9:ac:09:11:86:23:9d:2a:6d:60:80:7f:d3:
25:e4:3b:36:00:c7:f2:66:22:a3:41:f8:dc:1b:73:
56:97:5f:4d:b1:a2:49:f7:f4:cd:ff:0d:78:26:c8:
72:0a:85:cd:6d:80:e9:34:24:96:f3:f0:d4:01:84:
cc:df:7b:79:4e:ec:29:07:bb:03:92:e4:c9:6d:6b:
4d:b9:0b:35:3d:db:6d:2d:52:e8:53:a2:c5:73:ce:
d7:bc:81:c0:02:d7:c8:6f:9f:35:4d:4d:42:2b:b6:
34:7f:15:6e:09:c7:f0:e9:76:7b:87:b3:37:8f:b3:
b6:3d:9e:dd:b6:61:27:2f:c9:c8:1e:08:a4:9c:10:
0a:b5:b3:0b:12:d6:16:8b:6a:f5:91:e1:c4:09:f3:
3f:b4:0f:ce:a7:13:db:25:c6:65:d5:e2:9c:a3:79:
1b:21:58:dc:75:42:1e:b3:0d:b3:58:cf:56:b2:6d:
41:84:02:df:5b:cf:55:c4:56:2b:0c:25:23:06:f5:
27:4c:20:5c:6b:ce:a2:ba:91:df:db:7f:e7:b5:a9:
d3:18:ec:24:b3:f9:3b:0a:45:c8:ca:4a:ff:21:21:
bf:66:e8:40:55:d6:68:12:2a:fb:9e:48:4b:54:e7:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:A3:67:49:CF:7E:75:02:4F:71:92:77:8F:2F:EE:90:B1:5B:F2
X509v3 Authority Key Identifier:
keyid:64:EF:98:AD:BF:42:D5:BA:CD:24:CA:DB:0A:DF:09:2C:45:76:DA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZO-Yrb9C1brNJMrbCt8JLEV22vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e49bc5-68c5-4ce2-a9b9-03c6feaf1d9f/1/ZO-Yrb9C1brNJMrbCt8JLEV22vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ce:bd:47:02:c2:01:17:d0:66:cb:ee:06:59:2e:28:7d:2b:
70:de:5a:67:8a:1a:1f:c2:64:b0:fe:2b:3c:50:c2:c6:c0:ae:
97:9d:6c:99:5d:ae:8f:6f:c8:d6:d0:71:7f:49:98:4f:6b:8f:
e3:eb:47:c2:38:a6:e5:0f:91:b6:df:94:a1:99:8a:cf:5b:8a:
fc:39:b9:02:fc:29:49:d7:6e:10:5c:12:e9:bd:37:ea:74:3b:
cc:ef:5f:d1:5f:7b:0c:06:dd:d8:18:2a:d4:4b:18:74:54:d2:
df:cb:f1:4e:f9:04:b4:a9:90:24:e8:b0:22:36:c4:0c:68:06:
1c:fa:82:ed:f1:6d:18:a7:76:a3:e4:81:db:92:79:ba:af:f7:
f7:9f:7d:e1:72:c9:8b:ce:1f:a8:a1:95:39:0d:e1:a6:06:c4:
26:1a:24:b6:13:51:9a:ae:9f:ca:90:49:d2:95:75:85:ad:56:
91:af:53:8a:ed:05:ef:b7:81:ec:da:ba:5c:a6:cb:0e:f5:d1:
c6:83:50:cb:85:d4:84:9e:9d:0c:9e:36:c8:ce:55:4a:ac:7e:
eb:8b:fa:b7:03:25:55:c4:b2:4f:dd:47:b7:be:9b:d8:56:ad:
6f:92:dc:0e:68:5b:1e:73:96:4b:30:aa:09:52:b4:3c:51:39:
3f:47:9d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMXpC0a12ZP4v7n0hAWURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZWY5OGFkYmY0MmQ1YmFjZDI0Y2FkYjBhZGYwOTJjNDU3
NmRhZjMwHhcNMjUwNjA3MDcwMTA4WhcNMjUwNjA4MDcwMTA4WjAzMTEwLwYDVQQD
Eyg1MDAxYTM2NzQ5Y2Y3ZTc1MDI0ZjcxOTI3NzhmMmZlZTkwYjE1YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlsdPnFzE/6d3a8nTbcGuOmsCRGG
I50qbWCAf9Ml5Ds2AMfyZiKjQfjcG3NWl19NsaJJ9/TN/w14JshyCoXNbYDpNCSW
8/DUAYTM33t5TuwpB7sDkuTJbWtNuQs1PdttLVLoU6LFc87XvIHAAtfIb581TU1C
K7Y0fxVuCcfw6XZ7h7M3j7O2PZ7dtmEnL8nIHgiknBAKtbMLEtYWi2r1keHECfM/
tA/OpxPbJcZl1eKco3kbIVjcdUIesw2zWM9Wsm1BhALfW89VxFYrDCUjBvUnTCBc
a86iupHf23/ntanTGOwks/k7CkXIykr/ISG/ZuhAVdZoEir7nkhLVOfwIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFABo2dJz351Ak9xknePL+6QsVvyMB8GA1UdIwQY
MBaAFGTvmK2/QtW6zSTK2wrfCSxFdtrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk8tWXJiOUMxYnJOSk1yYkN0OEpMRVYyMnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNDliYzUtNjhjNS00Y2UyLWE5Yjkt
MDNjNmZlYWYxZDlmLzEvWk8tWXJiOUMxYnJOSk1yYkN0OEpMRVYyMnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNDliYzUtNjhjNS00Y2UyLWE5YjktMDNjNmZlYWYxZDlm
LzEvWk8tWXJiOUMxYnJOSk1yYkN0OEpMRVYyMnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATM69RwLC
ARfQZsvuBlkuKH0rcN5aZ4oaH8JksP4rPFDCxsCul51smV2uj2/I1tBxf0mYT2uP
4+tHwjim5Q+Rtt+UoZmKz1uK/Dm5AvwpSdduEFwS6b036nQ7zO9f0V97DAbd2Bgq
1EsYdFTS38vxTvkEtKmQJOiwIjbEDGgGHPqC7fFtGKd2o+SB25J5uq/395994XLJ
i84fqKGVOQ3hpgbEJhokthNRmq6fypBJ0pV1ha1Wka9Tiu0F77eB7Nq6XKbLDvXR
xoNQy4XUhJ6dDJ42yM5VSqx+64v6twMlVcSyT91Ht76b2Fatb5LcDmhbHnOWSzCq
CVK0PFE5P0ed5A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:30 2025 by rpki-client