Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
File: Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft (raw, json)
Hash identifier: YmUJrs+IiyObn+uHVMEGggkVZ7R5tDLhregiQ9qievQ=
Subject key identifier: 4A:92:30:8D:43:C7:9B:B8:D4:C6:6D:35:78:DE:F1:F7:83:10:97:59
Authority key identifier: 67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
Certificate issuer: /CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Certificate serial: 0197597FC3C0958C4393CABC707623887642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 11:00:34 +0000
Manifest this update: Tue 10 Jun 2025 11:00:34 +0000
Manifest next update: Wed 11 Jun 2025 11:00:34 +0000
Files and hashes: 1: Rn5W7oiVYRufZC2Cc9HQB686zNI.roa (hash: r6LX/rQ2IMQ0lnqajopwaJaJ6RgScSLx/FlgSbqRLTc=)
2: XHUUpmsTIvK_KTF6Ns7MAyI399w.roa (hash: Hd7LpYgtsmwvaWEwTnrD15eJzW3l7MahPrkz65fNT1U=)
3: Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl (hash: pTtyNM6QfN8Qo8D/459Y8lhFEbtuJVp0E5ECCNI8hxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:c3:c0:95:8c:43:93:ca:bc:70:76:23:88:76:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67edadc765fa8f2fa19eb20963cf5bd235d01b43
Validity
Not Before: Jun 10 11:00:34 2025 GMT
Not After : Jun 11 11:00:34 2025 GMT
Subject: CN=4a92308d43c79bb8d4c66d3578def1f783109759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:ac:5f:58:2b:dd:f7:96:b5:b7:a3:95:e6:
4c:ae:e6:f6:8a:98:9c:de:60:50:b6:6b:33:94:a4:
d6:e2:c6:ce:41:12:8d:20:2f:c3:c7:8c:55:d0:1a:
36:de:fe:bc:02:08:e9:08:f6:5e:0d:ba:ad:0d:c1:
02:72:48:f8:ec:0f:fc:5e:47:2f:c7:d8:fc:48:bb:
68:fb:d9:70:f1:47:21:d4:93:21:32:59:23:95:18:
f5:d0:bc:3c:3f:7b:49:cc:73:a4:f6:84:dd:11:c8:
8b:a6:49:ac:61:9c:99:73:b8:d7:68:96:15:33:1d:
4f:7f:7b:00:26:be:11:40:0d:7b:c1:97:47:53:c1:
1c:3a:f0:5b:c3:8e:40:00:02:32:c1:17:43:97:78:
fb:87:7a:ea:f0:7e:e5:c4:e0:05:b0:24:cc:82:cf:
48:6e:7c:7c:7f:ab:b7:3f:f6:07:8f:aa:ec:1c:b9:
c2:f9:1e:4f:70:95:bd:5c:d3:4e:60:f8:32:0c:fa:
ce:2b:9b:2b:d7:64:7f:62:f8:18:cd:83:18:81:69:
eb:f7:79:2c:ec:ba:94:c8:11:14:06:48:91:46:da:
60:9f:7c:7a:96:f1:5c:f6:3b:5d:6a:f4:5b:22:70:
e1:84:a9:30:3d:fd:9c:00:62:77:da:dd:21:fa:ee:
91:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:30:8D:43:C7:9B:B8:D4:C6:6D:35:78:DE:F1:F7:83:10:97:59
X509v3 Authority Key Identifier:
keyid:67:ED:AD:C7:65:FA:8F:2F:A1:9E:B2:09:63:CF:5B:D2:35:D0:1B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-2tx2X6jy-hnrIJY89b0jXQG0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/663c6c-13bf-4400-8482-21e0a66d5444/1/Z-2tx2X6jy-hnrIJY89b0jXQG0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:cd:da:68:22:81:80:a7:f9:34:dd:b1:b6:8b:c3:5e:97:7b:
58:1e:71:76:74:5d:be:f4:4e:db:bd:cc:fe:f7:49:05:b4:f5:
a3:d3:b9:6e:ff:bf:ab:e3:6e:cb:1b:dc:4a:ad:ac:3a:fa:fc:
27:fa:5c:ed:73:dd:78:0f:7f:f5:9f:1b:ae:54:2b:a1:e5:11:
b6:fc:ab:a3:e3:05:8c:8a:de:5d:99:79:93:52:9e:d5:d9:b3:
5a:b1:36:2e:95:34:b6:99:57:f3:c2:5b:36:b8:0f:a6:7e:37:
7d:e7:27:c9:d7:65:f6:ea:02:af:83:4c:02:28:91:4c:95:39:
ac:a8:5f:ef:27:e4:4e:3f:bb:fd:65:7e:ff:9f:2d:f8:d9:c3:
75:7d:d5:7b:1f:7b:83:7c:c3:3f:10:6c:4e:b0:78:e2:eb:0c:
ff:f3:04:26:0d:63:d3:5a:62:b3:5e:e8:e4:8b:02:87:dd:66:
61:d5:49:d8:08:19:19:56:27:2b:dd:3b:97:70:2c:ef:06:39:
0d:3d:3d:66:20:32:79:3f:26:ad:4b:59:79:d4:c2:dc:53:2e:
6b:79:73:52:32:08:49:6b:71:72:b8:e5:50:72:db:ad:b2:89:
65:14:7f:62:2a:18:60:3a:d5:c0:bd:22:d4:ea:2d:5c:7e:29:
c8:0a:9a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZf8PAlYxDk8q8cHYjiHZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWRhZGM3NjVmYThmMmZhMTllYjIwOTYzY2Y1YmQyMzVk
MDFiNDMwHhcNMjUwNjEwMTEwMDM0WhcNMjUwNjExMTEwMDM0WjAzMTEwLwYDVQQD
Eyg0YTkyMzA4ZDQzYzc5YmI4ZDRjNjZkMzU3OGRlZjFmNzgzMTA5NzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R6sX1gr3feWtbejleZMrub2ipic
3mBQtmszlKTW4sbOQRKNIC/Dx4xV0Bo23v68AgjpCPZeDbqtDcECckj47A/8Xkcv
x9j8SLto+9lw8Uch1JMhMlkjlRj10Lw8P3tJzHOk9oTdEciLpkmsYZyZc7jXaJYV
Mx1Pf3sAJr4RQA17wZdHU8EcOvBbw45AAAIywRdDl3j7h3rq8H7lxOAFsCTMgs9I
bnx8f6u3P/YHj6rsHLnC+R5PcJW9XNNOYPgyDPrOK5sr12R/YvgYzYMYgWnr93ks
7LqUyBEUBkiRRtpgn3x6lvFc9jtdavRbInDhhKkwPf2cAGJ32t0h+u6RQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqSMI1Dx5u41MZtNXje8feDEJdZMB8GA1UdIwQY
MBaAFGftrcdl+o8voZ6yCWPPW9I10BtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODIt
MjFlMGE2NmQ1NDQ0LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82NjNjNmMtMTNiZi00NDAwLTg0ODItMjFlMGE2NmQ1NDQ0
LzEvWi0ydHgyWDZqeS1obnJJSlk4OWIwalhRRzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsM3aaCKB
gKf5NN2xtovDXpd7WB5xdnRdvvRO273M/vdJBbT1o9O5bv+/q+NuyxvcSq2sOvr8
J/pc7XPdeA9/9Z8brlQroeURtvyro+MFjIreXZl5k1Ke1dmzWrE2LpU0tplX88Jb
NrgPpn43fecnyddl9uoCr4NMAiiRTJU5rKhf7yfkTj+7/WV+/58t+NnDdX3Vex97
g3zDPxBsTrB44usM//MEJg1j01pis17o5IsCh91mYdVJ2AgZGVYnK907l3As7wY5
DT09ZiAyeT8mrUtZedTC3FMua3lzUjIISWtxcrjlUHLbrbKJZRR/YioYYDrVwL0i
1OotXH4pyAqaiQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:06:01 2025 by rpki-client