Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: ZhT2ewm3Q7xO3xsRRICXZ9qBhAe9wP4vjvYHW4mgZ2g=
Subject key identifier: C5:F6:93:56:DB:86:63:14:DF:15:B6:4F:CB:E3:0B:56:9C:B1:3D:5B
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 0197469DF4424A3F735A434973A448E8DDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 19:00:46 +0000
Manifest this update: Fri 06 Jun 2025 19:00:46 +0000
Manifest next update: Sat 07 Jun 2025 19:00:46 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: Q2f28KmKJ5B2XZjpQF1nZwyFqvMWGk4txpwjJmBtGcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:f4:42:4a:3f:73:5a:43:49:73:a4:48:e8:dd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Jun 6 19:00:46 2025 GMT
Not After : Jun 7 19:00:46 2025 GMT
Subject: CN=c5f69356db866314df15b64fcbe30b569cb13d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:5f:61:3d:d6:a1:c0:6b:56:ab:ba:89:e5:
2e:c1:15:6e:02:4c:8e:13:90:c5:82:47:76:af:58:
3e:1f:0b:93:ca:27:e9:8d:15:29:38:07:29:b5:65:
67:66:38:7b:bd:04:53:2e:bf:9f:8a:9d:21:e5:37:
57:46:8d:5a:c6:1f:a8:7c:1a:10:a7:30:89:19:82:
cb:51:59:b3:5f:91:b6:e0:11:45:60:83:6c:cd:1e:
f6:8f:34:20:9d:36:04:35:cb:7c:fd:b0:70:75:da:
76:6e:18:b5:34:ac:1a:56:9a:07:3c:2f:0a:d6:20:
31:62:01:f7:92:82:e7:73:96:45:bf:82:fd:58:05:
5b:e6:6f:fe:73:3a:2a:0e:09:3f:f8:10:e6:e4:ca:
e0:75:4f:29:87:13:7b:f0:22:0b:5c:6a:2d:1f:0a:
cf:f7:a7:a7:b5:5d:74:5b:c7:54:00:bc:ce:d8:fd:
32:87:1e:e7:9f:32:62:cb:e0:c6:75:0d:b6:34:e6:
20:b7:f2:41:63:32:23:53:27:2d:be:42:23:1f:bf:
e7:a7:25:37:3f:25:cc:48:1e:d6:d9:0a:5a:e0:3f:
fa:c8:0f:67:94:eb:ab:bb:53:f5:ce:51:5e:ec:70:
ba:03:51:d0:ab:38:5e:04:24:05:db:13:e5:64:d2:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F6:93:56:DB:86:63:14:DF:15:B6:4F:CB:E3:0B:56:9C:B1:3D:5B
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:fb:57:17:fc:41:29:72:e3:e9:e1:e5:74:f5:51:65:a1:4c:
2c:cd:06:10:44:ee:1e:3e:bb:0c:d8:3c:a2:4a:04:6f:89:29:
c9:7b:36:1d:d6:83:01:5c:34:95:19:1b:93:4f:8a:20:d4:cd:
10:ac:2a:bc:01:05:e4:43:b6:3b:0c:0b:b5:38:72:e3:9a:a2:
df:13:bf:dd:b1:24:c7:b4:91:36:c8:f9:ff:28:ba:92:56:d1:
d7:b8:13:f4:8c:64:10:5d:98:27:a2:0e:35:71:e7:f4:d6:9d:
3f:78:17:93:83:40:64:1d:26:a8:79:c2:83:73:f6:d7:9f:60:
5d:61:58:cb:a5:e8:6a:3b:e9:d9:c9:2f:60:8a:26:bb:b8:83:
15:12:7d:2b:27:f1:9b:84:d3:01:f0:ee:21:29:a8:60:b0:ae:
aa:8c:af:a9:77:8b:4a:7b:48:33:bf:2a:3a:b7:8f:6c:fc:bd:
00:a8:39:bd:fe:ed:db:45:37:f5:e2:1e:59:f2:68:30:51:58:
21:b7:7a:ee:ba:f6:f0:2c:1a:22:18:a2:55:ee:ec:34:4a:83:
a2:19:a9:0e:00:5a:50:f6:a2:6c:7d:12:65:c9:ff:66:41:43:
71:57:a3:22:08:eb:75:35:26:d4:f1:e8:04:21:ea:43:a6:2a:
71:08:51:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnfRCSj9zWkNJc6RI6N3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjNlMzY2MDZmYTUyYzNhNDcyMWM4Y2EwZmIzMzA5OTUz
NDE5NWEwHhcNMjUwNjA2MTkwMDQ2WhcNMjUwNjA3MTkwMDQ2WjAzMTEwLwYDVQQD
EyhjNWY2OTM1NmRiODY2MzE0ZGYxNWI2NGZjYmUzMGI1NjljYjEzZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwdfYT3WocBrVqu6ieUuwRVuAkyO
E5DFgkd2r1g+HwuTyifpjRUpOAcptWVnZjh7vQRTLr+fip0h5TdXRo1axh+ofBoQ
pzCJGYLLUVmzX5G24BFFYINszR72jzQgnTYENct8/bBwddp2bhi1NKwaVpoHPC8K
1iAxYgH3koLnc5ZFv4L9WAVb5m/+czoqDgk/+BDm5MrgdU8phxN78CILXGotHwrP
96entV10W8dUALzO2P0yhx7nnzJiy+DGdQ22NOYgt/JBYzIjUyctvkIjH7/npyU3
PyXMSB7W2Qpa4D/6yA9nlOuru1P1zlFe7HC6A1HQqzheBCQF2xPlZNKP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMX2k1bbhmMU3xW2T8vjC1acsT1bMB8GA1UdIwQY
MBaAFGSz42YG+lLDpHIcjKD7MwmVNBlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUt
MGUzODFiZDQxM2QzLzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUtMGUzODFiZDQxM2Qz
LzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHftXF/xB
KXLj6eHldPVRZaFMLM0GEETuHj67DNg8okoEb4kpyXs2HdaDAVw0lRkbk0+KINTN
EKwqvAEF5EO2OwwLtThy45qi3xO/3bEkx7SRNsj5/yi6klbR17gT9IxkEF2YJ6IO
NXHn9NadP3gXk4NAZB0mqHnCg3P2159gXWFYy6Xoajvp2ckvYIomu7iDFRJ9Kyfx
m4TTAfDuISmoYLCuqoyvqXeLSntIM78qOrePbPy9AKg5vf7t20U39eIeWfJoMFFY
Ibd67rr28CwaIhiiVe7sNEqDohmpDgBaUPaibH0SZcn/ZkFDcVejIgjrdTUm1PHo
BCHqQ6YqcQhRgg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:35 2025 by rpki-client