Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: lv4ey9/r8RY0SFKeuQmtwpRhHWtfzlpsUd9ibleGtQY=
Subject key identifier: 1A:9B:81:9E:E1:52:37:50:AB:2A:0A:EA:00:5A:BE:74:B5:31:CB:04
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 019749317D993017A039433E6CCE39BB21E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 05E5
Signing time: Sat 07 Jun 2025 07:01:09 +0000
Manifest this update: Sat 07 Jun 2025 07:01:09 +0000
Manifest next update: Sun 08 Jun 2025 07:01:09 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: gl33QFklGmByQXzlcUBMu0SghvduKT90KSU0bkYDXYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:7d:99:30:17:a0:39:43:3e:6c:ce:39:bb:21:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Jun 7 07:01:09 2025 GMT
Not After : Jun 8 07:01:09 2025 GMT
Subject: CN=1a9b819ee1523750ab2a0aea005abe74b531cb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:39:19:86:a1:cc:c5:95:ee:4e:be:09:1e:
63:e8:b7:96:57:05:07:63:fb:b1:52:7e:7d:6c:39:
6c:08:26:e5:e5:1d:32:36:c3:86:18:02:1c:bf:37:
8c:11:c8:63:93:49:5c:6e:a0:dd:e2:08:8a:43:8c:
db:52:0c:7c:d0:cd:9d:0e:66:a9:aa:f2:3f:1f:0e:
f6:05:fb:49:30:a3:04:22:c6:a7:c9:b7:5c:8d:83:
e1:08:7f:d6:6b:03:4c:f4:ca:6f:42:c4:37:3a:5b:
18:12:81:e9:58:9f:a1:6e:a0:3c:50:5d:dc:9f:b7:
5c:47:57:8b:28:ed:16:42:19:88:6a:fa:7a:9f:71:
58:3c:c0:68:7d:8d:5b:f4:7e:03:b8:9e:20:19:74:
54:73:de:4e:13:af:63:23:23:32:c2:9b:57:c2:7b:
f4:c0:ad:c2:79:3a:49:2a:45:b1:7b:33:99:7c:03:
1a:37:09:2a:fc:4a:cf:2e:8e:f9:0e:9d:1c:13:1b:
2d:99:47:d0:86:e8:bb:5e:9e:83:2a:cb:d1:2c:06:
33:cd:37:ac:3f:d3:57:64:f0:e8:5b:4b:b3:55:81:
32:30:af:92:b9:8d:79:3c:53:df:4c:9e:79:38:6a:
b3:c6:38:d7:96:9d:e3:24:73:93:06:99:01:c6:70:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9B:81:9E:E1:52:37:50:AB:2A:0A:EA:00:5A:BE:74:B5:31:CB:04
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cb:ed:e2:e5:28:fa:23:1d:d6:b3:32:fd:39:61:0d:d1:87:
26:2b:6a:08:72:59:4e:4a:9b:18:80:30:30:27:f6:6e:7d:76:
50:5c:a2:b6:7c:d2:84:e5:6d:55:df:36:93:0d:46:9d:10:b5:
8b:09:6f:2f:75:0c:7a:3a:3a:59:e5:d8:82:8a:1b:45:75:cd:
4e:28:1d:4f:ef:24:47:28:1d:57:f7:11:01:93:d3:99:cc:09:
c5:77:3d:d8:8b:6b:70:ab:3f:1e:15:bb:b6:99:b5:a6:f6:21:
23:ed:ab:ad:b7:da:21:2b:e8:5f:d3:68:7e:60:37:ad:bf:39:
df:bf:e9:e1:f7:c6:b4:e3:0e:a5:f0:f5:13:b1:7e:62:82:fb:
45:6f:21:b9:9f:26:0c:cd:6b:fa:30:a9:c5:78:39:60:5a:ab:
9c:0e:35:7d:0e:7a:85:98:b7:3a:90:1a:e6:43:d8:56:77:5b:
0a:6c:a8:a0:b8:22:96:3a:32:4c:b6:38:30:9e:51:d9:6f:5b:
1b:40:43:11:49:ce:a9:90:70:27:84:0d:44:f0:bb:39:5d:79:
cf:12:c2:48:39:06:41:2f:19:21:11:62:05:da:0b:3c:f1:60:
f1:4f:0a:e3:cd:31:6b:c5:4b:19:9b:e6:ec:34:83:24:db:06:
58:42:cb:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMX2ZMBegOUM+bM45uyHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjUwNjA3MDcwMTA5WhcNMjUwNjA4MDcwMTA5WjAzMTEwLwYDVQQD
EygxYTliODE5ZWUxNTIzNzUwYWIyYTBhZWEwMDVhYmU3NGI1MzFjYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolk5GYahzMWV7k6+CR5j6LeWVwUH
Y/uxUn59bDlsCCbl5R0yNsOGGAIcvzeMEchjk0lcbqDd4giKQ4zbUgx80M2dDmap
qvI/Hw72BftJMKMEIsanybdcjYPhCH/WawNM9MpvQsQ3OlsYEoHpWJ+hbqA8UF3c
n7dcR1eLKO0WQhmIavp6n3FYPMBofY1b9H4DuJ4gGXRUc95OE69jIyMywptXwnv0
wK3CeTpJKkWxezOZfAMaNwkq/ErPLo75Dp0cExstmUfQhui7Xp6DKsvRLAYzzTes
P9NXZPDoW0uzVYEyMK+SuY15PFPfTJ55OGqzxjjXlp3jJHOTBpkBxnDG5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqbgZ7hUjdQqyoK6gBavnS1McsEMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvcvt4uUo
+iMd1rMy/TlhDdGHJitqCHJZTkqbGIAwMCf2bn12UFyitnzShOVtVd82kw1GnRC1
iwlvL3UMejo6WeXYgoobRXXNTigdT+8kRygdV/cRAZPTmcwJxXc92ItrcKs/HhW7
tpm1pvYhI+2rrbfaISvoX9NofmA3rb8537/p4ffGtOMOpfD1E7F+YoL7RW8huZ8m
DM1r+jCpxXg5YFqrnA41fQ56hZi3OpAa5kPYVndbCmyooLgiljoyTLY4MJ5R2W9b
G0BDEUnOqZBwJ4QNRPC7OV15zxLCSDkGQS8ZIRFiBdoLPPFg8U8K480xa8VLGZvm
7DSDJNsGWELLBA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:16 2025 by rpki-client