Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: 7fLLEweTxXZzsXHpi9B4GidFnUTT/JYUZMMyNk/GhnY=
Subject key identifier: EA:F9:4D:BF:07:A1:A2:1B:BE:04:F7:CF:6F:88:68:D1:FE:95:3B:D6
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 01974EC59BEFBB8EC24D00384D8CE9776B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 0CF5
Signing time: Sun 08 Jun 2025 09:01:02 +0000
Manifest this update: Sun 08 Jun 2025 09:01:02 +0000
Manifest next update: Mon 09 Jun 2025 09:01:02 +0000
Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=)
2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: HG9numPwxZuoZXzSMg2W16aZHsy+HigfVH3G1MYvsyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:9b:ef:bb:8e:c2:4d:00:38:4d:8c:e9:77:6b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Jun 8 09:01:02 2025 GMT
Not After : Jun 9 09:01:02 2025 GMT
Subject: CN=eaf94dbf07a1a21bbe04f7cf6f8868d1fe953bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4e:2c:35:6a:49:14:23:b7:bc:35:35:00:43:
2c:fb:9a:94:9d:c0:14:c8:23:42:69:2b:d2:d8:78:
d0:31:de:5c:38:76:51:34:9b:eb:85:d6:8e:25:84:
af:2d:d6:fe:84:03:22:c7:bc:5b:40:1e:62:f4:49:
df:a3:3c:38:da:0a:57:64:e8:39:d4:f3:3c:b1:d8:
ee:a6:30:3f:ed:80:ba:39:ec:73:5a:aa:54:3f:89:
18:4c:73:cd:62:44:1d:ba:80:f1:84:e3:11:d0:73:
76:07:17:cb:0f:8e:5c:a1:79:76:34:05:4e:f7:37:
41:da:c1:7f:c8:c6:34:6d:eb:b4:a3:97:e0:de:3d:
75:39:cb:9f:5f:ff:72:d7:d1:c5:6b:ef:b0:d9:4c:
93:60:fb:37:73:97:be:04:be:64:cd:fb:7c:e0:cc:
9f:85:56:a3:1f:74:ae:c3:5a:02:d2:af:11:48:48:
48:09:7d:0b:3e:31:12:ff:fe:d3:7b:b8:53:ae:dd:
22:4f:f5:4e:01:69:8b:a9:10:62:34:6a:fc:d2:55:
e1:c6:f9:93:1e:ce:ed:72:90:dd:04:f3:ef:6a:e9:
fa:d4:c5:31:0a:6d:94:28:cf:3f:ec:2e:09:5d:81:
c8:c6:45:7e:9e:21:1c:d8:3a:5c:69:3a:f1:a6:6c:
69:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:4D:BF:07:A1:A2:1B:BE:04:F7:CF:6F:88:68:D1:FE:95:3B:D6
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4b:6d:4d:a5:3e:5a:dd:60:5c:4d:f0:5f:7a:1d:9d:40:17:
8a:0c:45:d3:35:f4:b5:b8:a8:26:6b:c1:ee:91:f6:1a:30:48:
a1:9e:70:c3:01:10:f0:f9:d5:d1:d0:eb:81:2e:09:ef:54:f7:
fe:4b:26:d9:74:f6:4a:84:3a:52:3c:49:ee:62:55:76:b9:f3:
e3:8c:c2:6b:2c:ef:27:b5:cd:76:c5:3d:37:e0:9d:1e:e2:4f:
4b:a6:ca:bf:7e:6c:50:76:5b:09:9f:8f:df:79:df:d2:0d:ba:
4e:b0:ab:68:fe:87:e6:6e:3b:25:31:d6:fd:38:2f:ad:86:1b:
e8:03:ce:2b:81:55:c9:75:26:fc:5c:3a:67:ee:2d:a2:8f:16:
41:c4:ec:b4:f6:c4:ab:3a:af:37:8a:52:2d:5a:c4:e5:0f:40:
57:82:58:3c:af:cc:95:36:fe:15:20:52:43:35:f4:83:eb:fd:
da:c8:00:3a:b7:98:be:0b:d6:41:ab:b8:1d:c7:7d:b4:a8:2d:
cb:8b:de:c3:74:9b:d8:ed:1d:37:ee:cf:4f:c6:68:70:88:6a:
b7:a0:57:6b:9a:a8:d1:d7:78:39:1d:79:bd:d5:74:c6:f9:60:
76:f6:23:e7:cf:b2:ef:04:6b:33:7f:15:e5:11:35:87:b8:ca:
8f:9b:da:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxZvvu47CTQA4TYzpd2s4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh
ZGVhZWMwHhcNMjUwNjA4MDkwMTAyWhcNMjUwNjA5MDkwMTAyWjAzMTEwLwYDVQQD
EyhlYWY5NGRiZjA3YTFhMjFiYmUwNGY3Y2Y2Zjg4NjhkMWZlOTUzYmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE4sNWpJFCO3vDU1AEMs+5qUncAU
yCNCaSvS2HjQMd5cOHZRNJvrhdaOJYSvLdb+hAMix7xbQB5i9Enfozw42gpXZOg5
1PM8sdjupjA/7YC6OexzWqpUP4kYTHPNYkQduoDxhOMR0HN2BxfLD45coXl2NAVO
9zdB2sF/yMY0beu0o5fg3j11OcufX/9y19HFa++w2UyTYPs3c5e+BL5kzft84Myf
hVajH3Suw1oC0q8RSEhICX0LPjES//7Te7hTrt0iT/VOAWmLqRBiNGr80lXhxvmT
Hs7tcpDdBPPvaun61MUxCm2UKM8/7C4JXYHIxkV+niEc2DpcaTrxpmxpUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr5Tb8HoaIbvgT3z2+IaNH+lTvWMB8GA1UdIwQY
MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt
ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj
LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUttTaU+
Wt1gXE3wX3odnUAXigxF0zX0tbioJmvB7pH2GjBIoZ5wwwEQ8PnV0dDrgS4J71T3
/ksm2XT2SoQ6UjxJ7mJVdrnz44zCayzvJ7XNdsU9N+CdHuJPS6bKv35sUHZbCZ+P
33nf0g26TrCraP6H5m47JTHW/TgvrYYb6APOK4FVyXUm/Fw6Z+4too8WQcTstPbE
qzqvN4pSLVrE5Q9AV4JYPK/MlTb+FSBSQzX0g+v92sgAOreYvgvWQau4Hcd9tKgt
y4vew3Sb2O0dN+7PT8ZocIhqt6BXa5qo0dd4OR15vdV0xvlgdvYj58+y7wRrM38V
5RE1h7jKj5va0w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:51 2025 by rpki-client