Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: uasjdmR2PC5Ua+aqANLzaGD5Te01S5m/D8rVk70cG0o=
Subject key identifier: 3F:73:6D:7A:86:86:3F:09:64:13:AD:B0:63:55:5D:5D:0A:A3:43:D5
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 01974A7B8B8B52FC498CCF9DFF4FE3904867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 063E
Signing time: Sat 07 Jun 2025 13:01:39 +0000
Manifest this update: Sat 07 Jun 2025 13:01:39 +0000
Manifest next update: Sun 08 Jun 2025 13:01:39 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: 7LiQZtmByOM8CPt5Q6T4qgm4pl2lv79w4O+xJkmc/vU=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:8b:8b:52:fc:49:8c:cf:9d:ff:4f:e3:90:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Jun 7 13:01:39 2025 GMT
Not After : Jun 8 13:01:39 2025 GMT
Subject: CN=3f736d7a86863f096413adb063555d5d0aa343d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3e:ba:e2:3a:3d:58:88:e8:8b:b8:31:93:55:
32:f7:f7:d0:06:40:4e:41:1b:23:46:6d:dd:01:c2:
df:0a:95:1c:1b:3c:4d:6f:ca:83:ee:58:45:a8:b2:
c1:be:60:4a:10:3c:83:90:4b:f7:9b:00:1f:43:3f:
a4:a5:de:96:4c:5e:83:c0:3e:fb:61:4e:c0:e4:7f:
0e:23:70:3a:77:1a:52:77:21:d8:b3:21:82:06:9f:
3c:7c:63:34:89:2d:9f:31:71:44:dd:81:34:c5:9a:
50:85:33:69:cf:da:59:5f:5f:c5:d2:f5:11:6f:13:
1a:bf:1f:74:a3:1f:b5:b0:cb:26:28:42:0b:a3:11:
49:91:02:20:d8:30:4e:3f:ea:4e:20:72:7a:79:82:
c5:ce:e9:f9:3a:f8:cc:2a:0d:b7:ea:2c:f2:11:67:
a2:98:43:c5:17:e8:83:8b:c9:2f:48:c1:3d:d3:10:
02:c6:09:57:fc:6e:a0:0f:0b:34:af:da:dd:e4:21:
f1:30:5e:53:89:2a:6d:d4:25:14:44:ab:bd:47:e7:
ed:80:03:0a:d5:ef:27:09:e9:49:c3:6a:59:ac:a8:
35:21:97:81:4f:31:e7:4f:68:64:4f:0a:15:b9:8a:
a0:16:29:28:55:f0:55:38:78:65:a2:d6:2c:ea:dc:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:6D:7A:86:86:3F:09:64:13:AD:B0:63:55:5D:5D:0A:A3:43:D5
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f0:12:5a:0f:92:85:ea:cf:be:15:b3:27:39:cb:c0:43:f7:
5e:07:b1:52:39:51:bf:44:6f:71:3e:75:06:72:f6:33:ac:39:
98:02:c9:13:a2:16:f8:c2:59:fd:d4:2a:ec:5a:4c:0c:f2:04:
87:43:58:f4:7a:38:11:bb:f0:91:7b:ef:9c:34:40:72:18:35:
1f:03:a1:65:d2:1c:a1:f7:6c:46:30:af:6a:9b:2f:ac:e5:bf:
50:ee:eb:44:df:59:83:51:72:3f:c7:0f:91:34:89:a1:fe:b9:
78:57:97:41:fd:96:aa:4e:56:f8:7e:d6:48:85:a8:4f:3d:f9:
aa:38:b3:4f:84:ce:42:0e:34:dc:5e:73:3f:b6:83:67:68:2f:
47:6f:be:1f:b4:a1:96:c0:b6:09:ba:41:d0:cf:ac:ac:58:79:
b4:27:15:32:39:33:61:93:9a:9b:29:2b:e7:cb:95:af:fb:0f:
24:f3:7d:5f:38:7f:a4:26:12:45:7c:73:78:57:e0:14:8f:60:
cb:22:1f:d7:cb:37:52:ef:65:8f:f6:ab:71:28:99:f2:08:ae:
39:41:2f:68:85:27:be:e2:70:90:6d:d3:61:4c:00:ed:9b:92:
a2:26:72:d0:90:eb:86:3b:5a:1e:19:cc:0e:5b:7a:e0:d2:3a:
38:44:5c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe4uLUvxJjM+d/0/jkEhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWQyN2NlMDcyY2EzMzZkM2FmYWFiODg3OWY5NGVjNjM0
NTU2NjkwHhcNMjUwNjA3MTMwMTM5WhcNMjUwNjA4MTMwMTM5WjAzMTEwLwYDVQQD
EygzZjczNmQ3YTg2ODYzZjA5NjQxM2FkYjA2MzU1NWQ1ZDBhYTM0M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3j664jo9WIjoi7gxk1Uy9/fQBkBO
QRsjRm3dAcLfCpUcGzxNb8qD7lhFqLLBvmBKEDyDkEv3mwAfQz+kpd6WTF6DwD77
YU7A5H8OI3A6dxpSdyHYsyGCBp88fGM0iS2fMXFE3YE0xZpQhTNpz9pZX1/F0vUR
bxMavx90ox+1sMsmKEILoxFJkQIg2DBOP+pOIHJ6eYLFzun5OvjMKg236izyEWei
mEPFF+iDi8kvSME90xACxglX/G6gDws0r9rd5CHxMF5TiSpt1CUURKu9R+ftgAMK
1e8nCelJw2pZrKg1IZeBTzHnT2hkTwoVuYqgFikoVfBVOHhlotYs6tyTuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9zbXqGhj8JZBOtsGNVXV0Ko0PVMB8GA1UdIwQY
MBaAFHWdJ84HLKM206+quIeflOxjRVZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUt
NzAxMjNmNDk1MTEwLzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUtNzAxMjNmNDk1MTEw
LzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEvASWg+S
herPvhWzJznLwEP3XgexUjlRv0RvcT51BnL2M6w5mALJE6IW+MJZ/dQq7FpMDPIE
h0NY9Ho4EbvwkXvvnDRAchg1HwOhZdIcofdsRjCvapsvrOW/UO7rRN9Zg1FyP8cP
kTSJof65eFeXQf2Wqk5W+H7WSIWoTz35qjizT4TOQg403F5zP7aDZ2gvR2++H7Sh
lsC2CbpB0M+srFh5tCcVMjkzYZOamykr58uVr/sPJPN9Xzh/pCYSRXxzeFfgFI9g
yyIf18s3Uu9lj/arcSiZ8giuOUEvaIUnvuJwkG3TYUwA7ZuSoiZy0JDrhjtaHhnM
Dlt64NI6OERcow==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:47 2025 by rpki-client