Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: ZvBWG6USGyHZUgqaPfWfy37QfXOiyYQvqO9CHVac0U4=
Subject key identifier: FA:68:D7:0E:4F:FF:30:97:BA:66:EB:CB:A7:48:CD:07:0C:3E:D3:C7
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 019745C2A79CF36BB21196DD54A691DE2FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0395
Signing time: Fri 06 Jun 2025 15:01:14 +0000
Manifest this update: Fri 06 Jun 2025 15:01:14 +0000
Manifest next update: Sat 07 Jun 2025 15:01:14 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: 9ekDwLo4m+oUeLjApLwjAmRAMVIwtJAIzCORMxMn/cc=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:a7:9c:f3:6b:b2:11:96:dd:54:a6:91:de:2f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jun 6 15:01:14 2025 GMT
Not After : Jun 7 15:01:14 2025 GMT
Subject: CN=fa68d70e4fff3097ba66ebcba748cd070c3ed3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:76:7f:c4:d0:91:6b:1b:47:02:dc:9c:81:
7f:8d:e0:b4:ac:db:9c:32:5b:7f:42:01:0c:54:9c:
55:6b:ee:ac:78:12:f3:91:90:4c:49:a0:3a:67:83:
7a:2e:99:87:ae:f3:24:4a:99:e4:53:ec:62:f9:0e:
1f:a0:7b:f2:8d:71:1d:8b:fd:57:6f:a0:00:ce:9c:
cb:fd:ef:bc:8e:eb:41:63:44:0a:ca:84:07:6a:f1:
f5:29:1c:8b:8c:b7:64:50:bb:56:49:e2:a1:0a:e1:
aa:81:42:f9:ff:04:60:51:a8:c4:2e:ed:a6:62:0d:
d6:57:5d:8b:20:c1:9a:5b:9c:5a:51:82:b3:83:c5:
e3:de:06:c4:08:f7:4a:35:5b:50:2e:9b:29:2a:46:
6f:8a:70:9d:ca:b2:9d:6f:d7:63:a3:6b:92:ff:d7:
2d:95:63:21:1c:46:b4:1a:0b:76:79:ac:0d:31:c4:
7e:01:63:27:4c:c6:21:e6:f8:da:24:22:a5:9a:db:
72:c0:db:23:e3:df:47:b2:a4:9e:21:ef:cc:51:dc:
23:f8:db:53:b8:6a:35:9f:c1:32:46:7b:63:84:ca:
59:00:08:63:5b:35:1f:0e:b6:25:05:2b:54:6d:24:
84:b1:30:42:8f:b3:37:99:4a:02:cb:5e:b1:60:d5:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:D7:0E:4F:FF:30:97:BA:66:EB:CB:A7:48:CD:07:0C:3E:D3:C7
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e4:fa:b0:47:04:af:f3:0c:31:85:97:bd:56:a2:0b:88:f8:
3f:5d:f5:d9:23:1e:18:fa:01:09:8c:d1:9f:57:06:f5:dd:75:
d2:ae:06:34:a6:43:24:3f:ec:89:26:c3:59:7a:df:84:04:e7:
ea:d1:09:24:44:a2:47:6e:23:42:ed:86:29:15:f2:c2:67:c3:
7a:13:84:eb:ad:3e:69:a6:05:0e:54:7f:0a:3c:d3:17:e0:78:
5c:70:69:b7:f9:f8:a4:ad:25:70:eb:05:5f:25:d5:44:c0:43:
db:f5:3d:b4:c6:59:96:f8:57:ba:4d:0a:b6:19:c7:72:83:38:
0b:ba:ce:73:1e:97:49:6a:f3:c6:01:f1:0d:d3:31:87:d6:dc:
d0:96:5c:25:dc:07:f7:fb:90:f4:7a:e9:b9:59:49:b0:5f:ab:
7a:a8:c6:51:19:ca:6c:7b:c5:7c:53:9b:b8:a6:ce:ae:ae:df:
8e:a7:9e:9e:39:e7:27:4d:58:43:c4:a6:ea:c5:2e:8d:0d:f1:
26:54:bf:9f:f4:fa:72:d5:8b:79:10:f2:30:f0:e6:bf:89:99:
ae:4d:ee:89:ab:1a:37:41:c8:35:97:b0:6e:35:29:ef:b0:8c:
62:49:1e:b2:ff:9e:7b:6b:bd:b1:aa:f4:52:94:00:69:fe:30:
8a:af:c2:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFwqec82uyEZbdVKaR3i/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWRhMDZiODBmYTc0OTA2ODAyOGI1OTdiZTNlNTBlOGIx
MTg3ODYwHhcNMjUwNjA2MTUwMTE0WhcNMjUwNjA3MTUwMTE0WjAzMTEwLwYDVQQD
EyhmYTY4ZDcwZTRmZmYzMDk3YmE2NmViY2JhNzQ4Y2QwNzBjM2VkM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFd2f8TQkWsbRwLcnIF/jeC0rNuc
Mlt/QgEMVJxVa+6seBLzkZBMSaA6Z4N6LpmHrvMkSpnkU+xi+Q4foHvyjXEdi/1X
b6AAzpzL/e+8jutBY0QKyoQHavH1KRyLjLdkULtWSeKhCuGqgUL5/wRgUajELu2m
Yg3WV12LIMGaW5xaUYKzg8Xj3gbECPdKNVtQLpspKkZvinCdyrKdb9djo2uS/9ct
lWMhHEa0Ggt2eawNMcR+AWMnTMYh5vjaJCKlmttywNsj499HsqSeIe/MUdwj+NtT
uGo1n8EyRntjhMpZAAhjWzUfDrYlBStUbSSEsTBCj7M3mUoCy16xYNWSSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpo1w5P/zCXumbry6dIzQcMPtPHMB8GA1UdIwQY
MBaAFAmdoGuA+nSQaAKLWXvj5Q6LEYeGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUt
MzFmY2M0NTU1NzVlLzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNDA0YzctYmQzZC00NzUyLThhZGUtMzFmY2M0NTU1NzVl
LzEvQ1oyZ2E0RDZkSkJvQW90WmUtUGxEb3NSaDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOT6sEcE
r/MMMYWXvVaiC4j4P1312SMeGPoBCYzRn1cG9d110q4GNKZDJD/siSbDWXrfhATn
6tEJJESiR24jQu2GKRXywmfDehOE660+aaYFDlR/CjzTF+B4XHBpt/n4pK0lcOsF
XyXVRMBD2/U9tMZZlvhXuk0KthnHcoM4C7rOcx6XSWrzxgHxDdMxh9bc0JZcJdwH
9/uQ9HrpuVlJsF+reqjGURnKbHvFfFObuKbOrq7fjqeenjnnJ01YQ8Sm6sUujQ3x
JlS/n/T6ctWLeRDyMPDmv4mZrk3uiasaN0HINZewbjUp77CMYkkesv+ee2u9sar0
UpQAaf4wiq/CXA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:36 2025 by rpki-client