Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: N113hQg8IHj8vZWZCOtk0r1NO4JZm+oMBaQ5L3aJK30=
Subject key identifier: 61:F8:AD:2B:F9:93:F3:27:7E:01:F3:2E:64:3C:EC:EF:C1:9F:4B:43
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019749682173A69214E7C94DCA01EB5D2922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 1032
Signing time: Sat 07 Jun 2025 08:00:50 +0000
Manifest this update: Sat 07 Jun 2025 08:00:50 +0000
Manifest next update: Sun 08 Jun 2025 08:00:50 +0000
Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=)
2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: ZCk8ORzZ99UFCxIvmNEoV47D0fRKkndZk2sQhOAHTT0=)
3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:21:73:a6:92:14:e7:c9:4d:ca:01:eb:5d:29:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Jun 7 08:00:50 2025 GMT
Not After : Jun 8 08:00:50 2025 GMT
Subject: CN=61f8ad2bf993f3277e01f32e643cecefc19f4b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:40:f5:10:85:a3:c3:05:82:c5:f0:4f:56:
03:8e:e1:7e:52:41:6d:a0:25:df:fb:cc:07:34:b4:
85:16:67:3e:15:f9:75:50:f0:11:18:c1:4e:0d:05:
34:82:d8:e5:1b:ea:b2:66:41:b1:de:27:48:b1:3f:
e8:a0:50:30:04:34:37:6d:62:76:bd:81:31:77:c0:
61:49:c3:aa:b8:d3:16:11:ff:cd:16:b7:12:b4:28:
72:4b:df:dd:ae:2a:0a:0e:ac:ab:81:e6:57:f9:03:
56:3a:1b:d4:08:db:c6:e1:b2:c2:50:f7:aa:b3:ab:
6b:13:90:e4:47:7f:1a:9d:79:90:fc:36:c7:43:f0:
d0:a2:d5:44:1b:c6:70:bf:c0:14:5f:be:e2:b8:60:
d2:93:c2:77:0f:76:fb:78:32:9a:8b:be:01:93:cc:
17:13:e2:97:44:43:50:51:0c:dc:a9:0d:2d:de:16:
48:c7:6c:fb:bd:66:d7:16:20:d8:7f:fb:9e:ab:32:
30:c2:4a:85:e7:7f:f6:46:60:43:52:ab:a5:30:2a:
3e:62:97:f2:5d:20:bc:30:de:78:0f:68:1f:cb:f2:
85:11:23:66:ab:66:6c:cd:3e:bd:09:01:a7:65:10:
6c:c5:db:d4:99:dd:02:8a:cf:8e:9b:9e:f1:c7:11:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F8:AD:2B:F9:93:F3:27:7E:01:F3:2E:64:3C:EC:EF:C1:9F:4B:43
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2b:ed:7f:e4:40:1b:cb:6a:16:1a:9e:2b:5f:c9:e1:b4:5b:
30:76:73:ee:d7:7d:0b:b1:39:b3:0d:0c:c8:bb:ad:35:1b:26:
7d:1e:5c:ba:96:04:13:25:15:4a:7b:9e:a5:ee:c2:ac:0f:27:
4e:b2:9a:2e:c5:d3:a7:30:b3:89:36:95:a6:38:d6:da:52:b0:
e1:88:d1:a1:5a:34:82:81:02:95:08:ab:ef:6e:8f:da:61:af:
36:bf:df:be:ee:cf:1f:3f:94:78:54:48:95:e3:5d:98:64:5d:
43:01:27:75:fd:4a:fb:f5:ac:8d:59:f5:db:72:d0:32:b4:fa:
db:85:45:48:c5:16:0b:ed:36:d1:94:8f:0e:fd:4a:3f:f8:8c:
64:bc:e0:72:5b:80:96:aa:33:a0:3b:15:cc:44:71:42:2d:5a:
87:cd:83:15:f3:79:59:09:c5:5e:13:b7:9a:29:b0:07:76:a3:
12:23:ff:c1:62:30:3b:69:bc:ef:b9:5d:dd:a4:a8:74:15:8d:
37:22:1b:54:7d:f8:c6:01:c8:20:d2:40:82:58:52:f6:f6:05:
32:ef:aa:9d:82:6c:74:38:b3:28:4b:79:ef:f4:1b:93:98:91:
dd:6e:aa:82:c4:62:12:d3:89:4c:77:a9:3b:4d:84:ea:cd:ec:
87:04:76:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaCFzppIU58lNygHrXSkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWE1MzU5MzVhNGJjNzg2YzFkZDc1YjdmMTA4N2YxM2Yz
ZTA4NzQwHhcNMjUwNjA3MDgwMDUwWhcNMjUwNjA4MDgwMDUwWjAzMTEwLwYDVQQD
Eyg2MWY4YWQyYmY5OTNmMzI3N2UwMWYzMmU2NDNjZWNlZmMxOWY0YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0xA9RCFo8MFgsXwT1YDjuF+UkFt
oCXf+8wHNLSFFmc+Ffl1UPARGMFODQU0gtjlG+qyZkGx3idIsT/ooFAwBDQ3bWJ2
vYExd8BhScOquNMWEf/NFrcStChyS9/drioKDqyrgeZX+QNWOhvUCNvG4bLCUPeq
s6trE5DkR38anXmQ/DbHQ/DQotVEG8Zwv8AUX77iuGDSk8J3D3b7eDKai74Bk8wX
E+KXRENQUQzcqQ0t3hZIx2z7vWbXFiDYf/ueqzIwwkqF53/2RmBDUqulMCo+Ypfy
XSC8MN54D2gfy/KFESNmq2ZszT69CQGnZRBsxdvUmd0Cis+Om57xxxEJfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH4rSv5k/MnfgHzLmQ87O/Bn0tDMB8GA1UdIwQY
MBaAFM1aU1k1pLx4bB3XW38Qh/E/Pgh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUt
MDVjMTNmODkwYjljLzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUtMDVjMTNmODkwYjlj
LzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARivtf+RA
G8tqFhqeK1/J4bRbMHZz7td9C7E5sw0MyLutNRsmfR5cupYEEyUVSnuepe7CrA8n
TrKaLsXTpzCziTaVpjjW2lKw4YjRoVo0goEClQir726P2mGvNr/fvu7PHz+UeFRI
leNdmGRdQwEndf1K+/WsjVn123LQMrT624VFSMUWC+020ZSPDv1KP/iMZLzgcluA
lqozoDsVzERxQi1ah82DFfN5WQnFXhO3mimwB3ajEiP/wWIwO2m877ld3aSodBWN
NyIbVH34xgHIINJAglhS9vYFMu+qnYJsdDizKEt57/Qbk5iR3W6qgsRiEtOJTHep
O02E6s3shwR2eA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:22:34 2025 by rpki-client