Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: OhUIQNlC+Wh9HJUT7jRS2JbErcHvD2PfxIP2yThLB1k=
Subject key identifier: 3D:12:05:CD:63:92:89:F3:C8:5E:FB:4D:2B:DC:BA:6B:24:25:18:BC
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 01975C812BF5E55AAF25571E57987F2FA5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 01:00:58 +0000
Manifest this update: Wed 11 Jun 2025 01:00:58 +0000
Manifest next update: Thu 12 Jun 2025 01:00:58 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: LAVEZqMz98qcwdq9tfv7qnFyVF/R7ObFAb3MYQ7Cg3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:81:2b:f5:e5:5a:af:25:57:1e:57:98:7f:2f:a5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Jun 11 01:00:58 2025 GMT
Not After : Jun 12 01:00:58 2025 GMT
Subject: CN=3d1205cd639289f3c85efb4d2bdcba6b242518bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:38:46:26:fc:25:04:fc:3b:06:fd:d6:39:
85:8c:1d:88:be:07:b2:df:7a:52:87:42:05:45:13:
30:2f:0b:c0:74:55:be:b5:c1:26:cc:b7:71:bd:67:
3e:80:ba:f4:e9:54:41:76:45:51:90:8c:0f:ea:33:
c2:8d:30:15:14:f5:fe:e2:39:84:f0:d8:84:6e:1d:
2e:18:c0:af:a5:fa:b1:bf:c8:60:b1:66:41:a6:a3:
c5:d9:5e:53:cb:ba:70:ff:01:84:73:c3:db:42:2a:
26:22:ed:41:e4:99:a9:7d:0a:34:cc:d8:4b:09:40:
98:0c:c8:19:77:14:2c:f2:16:40:28:72:44:1b:21:
16:b9:74:3b:27:ed:b2:e0:32:e7:89:19:0b:70:c3:
a6:80:34:ef:c4:00:5c:4d:95:40:78:eb:a9:f7:f0:
f3:3f:09:e2:0b:97:47:87:46:90:8d:ff:cc:03:c5:
e1:9c:55:8d:2f:d9:92:3f:ae:e4:21:75:49:8f:e5:
dc:4e:8b:18:a1:a2:f9:0c:73:65:e2:48:d9:bf:e0:
65:14:d7:1d:68:e2:0e:9c:73:9d:e0:f1:ff:f4:a1:
43:c1:88:33:f6:f9:9f:dd:be:f6:67:e8:cb:65:b8:
76:1c:a7:f3:63:c1:11:58:c1:51:42:6f:aa:aa:cb:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:05:CD:63:92:89:F3:C8:5E:FB:4D:2B:DC:BA:6B:24:25:18:BC
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:41:b6:6b:4e:a9:c9:a3:f5:36:33:2c:6a:a0:34:8d:3c:47:
eb:2d:41:07:1a:82:f7:42:e0:6e:99:6f:29:e3:31:8d:5f:a4:
5a:26:e6:26:85:86:31:1b:40:43:69:12:9b:e9:8e:c3:22:57:
43:23:ae:c2:1a:8e:e1:c7:4a:1d:f9:37:ed:1c:2a:60:f4:a6:
e0:88:07:c9:74:4c:82:f2:c9:6a:b2:51:70:24:e3:36:72:7c:
04:d5:b9:67:e6:47:ea:93:df:09:93:cb:19:7d:be:46:90:ea:
5c:e6:8a:86:19:1d:7b:52:78:34:f8:aa:e5:58:0a:d7:5a:48:
52:1d:92:ec:74:c6:37:7e:81:f5:cd:d4:11:93:e2:9c:82:4b:
bb:98:3f:fe:8e:9b:a1:2c:50:d4:37:7e:c7:84:01:3e:93:e6:
89:d2:65:52:d0:ca:40:14:56:6a:56:ae:b2:62:08:61:76:c0:
13:32:d4:7c:c5:cb:99:02:24:d9:e6:3a:47:00:aa:6c:d9:27:
00:72:a4:45:85:a9:2d:76:9a:52:70:50:a6:6d:c0:78:f3:54:
66:45:6a:82:33:ab:b8:31:42:96:96:4c:ab:25:dd:82:01:2f:
be:dd:cb:e9:87:13:83:3d:00:4e:53:0a:90:8a:d1:c8:09:96:
d2:c2:1f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcgSv15VqvJVceV5h/L6XYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1
NjJjNDQwHhcNMjUwNjExMDEwMDU4WhcNMjUwNjEyMDEwMDU4WjAzMTEwLwYDVQQD
EygzZDEyMDVjZDYzOTI4OWYzYzg1ZWZiNGQyYmRjYmE2YjI0MjUxOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ts4Rib8JQT8Owb91jmFjB2Ivgey
33pSh0IFRRMwLwvAdFW+tcEmzLdxvWc+gLr06VRBdkVRkIwP6jPCjTAVFPX+4jmE
8NiEbh0uGMCvpfqxv8hgsWZBpqPF2V5Ty7pw/wGEc8PbQiomIu1B5JmpfQo0zNhL
CUCYDMgZdxQs8hZAKHJEGyEWuXQ7J+2y4DLniRkLcMOmgDTvxABcTZVAeOup9/Dz
PwniC5dHh0aQjf/MA8XhnFWNL9mSP67kIXVJj+XcTosYoaL5DHNl4kjZv+BlFNcd
aOIOnHOd4PH/9KFDwYgz9vmf3b72Z+jLZbh2HKfzY8ERWMFRQm+qqst+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0SBc1jkonzyF77TSvcumskJRi8MB8GA1UdIwQY
MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt
Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4
LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0G2a06p
yaP1NjMsaqA0jTxH6y1BBxqC90LgbplvKeMxjV+kWibmJoWGMRtAQ2kSm+mOwyJX
QyOuwhqO4cdKHfk37RwqYPSm4IgHyXRMgvLJarJRcCTjNnJ8BNW5Z+ZH6pPfCZPL
GX2+RpDqXOaKhhkde1J4NPiq5VgK11pIUh2S7HTGN36B9c3UEZPinIJLu5g//o6b
oSxQ1Dd+x4QBPpPmidJlUtDKQBRWalausmIIYXbAEzLUfMXLmQIk2eY6RwCqbNkn
AHKkRYWpLXaaUnBQpm3AePNUZkVqgjOruDFClpZMqyXdggEvvt3L6YcTgz0ATlMK
kIrRyAmW0sIfJA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 08:44:51 2025 by rpki-client