Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: 4fSj3Ib1m3lW73h2YU8O/TIyZO4Z6E2KAFm/qd7GH3k=
Subject key identifier: 03:9B:25:7A:EE:ED:6C:B2:94:77:FA:92:D2:3A:77:74:CC:AC:4A:D7
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 01974E57E8D35099BE5D130C2C6A1BB5732B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 066E
Signing time: Sun 08 Jun 2025 07:01:13 +0000
Manifest this update: Sun 08 Jun 2025 07:01:13 +0000
Manifest next update: Mon 09 Jun 2025 07:01:13 +0000
Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: pvstNxZtIo9X54iauz56t89pqB2VQf6ZxEUWnv67gTU=)
2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:e8:d3:50:99:be:5d:13:0c:2c:6a:1b:b5:73:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Jun 8 07:01:13 2025 GMT
Not After : Jun 9 07:01:13 2025 GMT
Subject: CN=039b257aeeed6cb29477fa92d23a7774ccac4ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:62:ca:db:3e:fc:c9:e5:41:5c:06:ef:0b:
7c:fb:07:f1:29:9d:4a:e8:7c:d8:6e:15:2c:1e:42:
1c:dd:22:6b:31:0b:00:5e:c3:83:8f:eb:38:15:91:
83:b0:26:eb:8a:a5:96:a0:ae:9f:7b:89:14:84:03:
cf:10:61:c7:c2:e1:d6:9a:eb:37:21:ec:f2:65:75:
37:57:08:07:47:94:44:7f:08:55:6a:2f:4b:8a:a1:
00:96:43:8e:03:f5:2c:1e:5a:37:9a:0a:79:55:76:
08:4f:e2:85:dd:08:a6:06:31:69:76:49:9f:48:e1:
db:0b:16:49:7b:5c:18:cc:07:43:b3:1c:07:3e:94:
2a:04:fa:00:4e:9e:bb:a3:63:61:de:5d:eb:1d:fe:
75:b6:7b:46:03:63:7b:ff:5b:e8:15:5c:4f:8e:39:
3e:14:70:81:f7:e9:81:7a:25:22:42:dc:b6:e7:69:
9f:af:59:f3:af:8a:09:77:59:47:33:9f:b3:55:5e:
38:43:ed:9a:93:39:a6:f7:64:1d:67:10:4f:ca:f6:
6e:5f:ed:ed:1e:8e:e3:77:8c:a2:f2:f0:72:b1:e2:
05:a1:a7:37:49:ed:20:dc:28:ca:77:50:cd:4f:24:
47:71:97:4d:25:92:f0:a0:de:51:8f:4d:36:a8:e3:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:25:7A:EE:ED:6C:B2:94:77:FA:92:D2:3A:77:74:CC:AC:4A:D7
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1e:04:b3:36:38:c9:42:66:a2:12:cd:12:52:dc:e9:a5:ce:
3f:44:a6:18:ff:23:84:dc:4e:06:06:0e:6a:87:cc:27:0a:7a:
09:49:11:d0:bb:ae:de:47:be:eb:74:ca:82:71:6d:9c:f1:49:
bc:10:34:58:7c:e2:57:24:d3:73:64:e2:b7:74:09:0f:ab:9f:
4a:52:6c:f4:45:c3:69:86:78:b9:83:34:a9:7e:aa:22:46:c0:
62:61:b3:05:7d:27:54:fa:ca:24:2b:7c:07:95:d7:2a:c4:72:
2f:06:23:2c:f2:0c:ad:91:3a:4c:93:9d:0e:95:81:58:64:0c:
41:8f:0f:32:6c:d6:95:1b:b1:32:ee:66:03:45:f0:e3:d9:16:
66:46:15:5b:92:ab:43:5b:ee:53:a4:3e:1d:d2:42:76:a6:50:
e8:da:7f:26:07:fb:6a:9e:94:e0:f0:da:08:c4:f2:8b:dc:68:
b0:68:c0:f4:54:37:0f:9e:11:0f:ba:e6:95:a5:96:24:6a:c5:
f0:e1:ad:69:47:fc:87:36:7b:29:35:b7:c9:56:b1:44:4e:f1:
13:fb:7e:5e:80:51:ab:3c:36:b4:4d:c9:1d:f4:4c:9f:74:34:
d0:50:89:71:85:1e:99:2e:72:50:d5:aa:e5:72:fc:48:f4:48:
bc:da:99:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV+jTUJm+XRMMLGobtXMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz
Yzc1NTYwHhcNMjUwNjA4MDcwMTEzWhcNMjUwNjA5MDcwMTEzWjAzMTEwLwYDVQQD
EygwMzliMjU3YWVlZWQ2Y2IyOTQ3N2ZhOTJkMjNhNzc3NGNjYWM0YWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvspiyts+/MnlQVwG7wt8+wfxKZ1K
6HzYbhUsHkIc3SJrMQsAXsODj+s4FZGDsCbriqWWoK6fe4kUhAPPEGHHwuHWmus3
IezyZXU3VwgHR5REfwhVai9LiqEAlkOOA/UsHlo3mgp5VXYIT+KF3QimBjFpdkmf
SOHbCxZJe1wYzAdDsxwHPpQqBPoATp67o2Nh3l3rHf51tntGA2N7/1voFVxPjjk+
FHCB9+mBeiUiQty252mfr1nzr4oJd1lHM5+zVV44Q+2akzmm92QdZxBPyvZuX+3t
Ho7jd4yi8vByseIFoac3Se0g3CjKd1DNTyRHcZdNJZLwoN5Rj002qONohQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAObJXru7WyylHf6ktI6d3TMrErXMB8GA1UdIwQY
MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt
NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw
LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHx4EszY4
yUJmohLNElLc6aXOP0SmGP8jhNxOBgYOaofMJwp6CUkR0Luu3ke+63TKgnFtnPFJ
vBA0WHziVyTTc2Tit3QJD6ufSlJs9EXDaYZ4uYM0qX6qIkbAYmGzBX0nVPrKJCt8
B5XXKsRyLwYjLPIMrZE6TJOdDpWBWGQMQY8PMmzWlRuxMu5mA0Xw49kWZkYVW5Kr
Q1vuU6Q+HdJCdqZQ6Np/Jgf7ap6U4PDaCMTyi9xosGjA9FQ3D54RD7rmlaWWJGrF
8OGtaUf8hzZ7KTW3yVaxRE7xE/t+XoBRqzw2tE3JHfRMn3Q00FCJcYUemS5yUNWq
5XL8SPRIvNqZJA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:57:08 2025 by rpki-client