Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: eC8z8/UuEyhxdaeoE+KSPWO5Ujo+zzDNiRM8X7lxNvA=
Subject key identifier: 43:26:63:EB:8F:C5:9F:77:03:4D:22:66:AD:0D:89:9C:4E:74:BF:2C
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 0197458B7B2CA79DD1C0855730CA40DA3EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1184
Signing time: Fri 06 Jun 2025 14:00:58 +0000
Manifest this update: Fri 06 Jun 2025 14:00:58 +0000
Manifest next update: Sat 07 Jun 2025 14:00:58 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: LZO5v7NK3pX48MKb19N8n1oCTgcReEYWWhoFIXj2JEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:7b:2c:a7:9d:d1:c0:85:57:30:ca:40:da:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Jun 6 14:00:58 2025 GMT
Not After : Jun 7 14:00:58 2025 GMT
Subject: CN=432663eb8fc59f77034d2266ad0d899c4e74bf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:e4:42:4a:ed:49:90:b2:60:4b:2d:e8:45:
ac:12:81:31:c0:f1:81:83:2f:16:02:3e:fd:e7:6a:
56:bd:bb:d5:91:90:a2:7c:79:dc:05:cd:ab:7d:e7:
94:77:8c:ac:37:24:d1:69:79:32:85:1c:8e:0c:5e:
3a:fd:51:4d:e0:95:b4:6a:44:a2:d9:ea:40:7b:2b:
ae:2a:fb:7b:b1:8a:88:3f:86:1d:28:ce:73:fe:a2:
99:23:fb:84:85:06:f7:11:ec:c4:4d:8f:c2:f7:07:
de:5a:b7:33:e0:24:82:ac:d1:a1:4a:1d:68:20:86:
7d:22:83:a3:cd:b9:26:d6:3c:be:e5:9b:3f:c6:78:
ed:e6:bd:a6:33:30:b3:31:c4:47:e1:46:6f:54:69:
5b:46:6c:11:f8:13:08:7b:33:37:67:d7:b2:f2:b4:
2a:fb:a4:df:33:19:b9:cb:b0:be:70:fd:55:eb:4c:
42:2d:79:44:f5:b4:4c:58:ef:38:38:27:a9:d8:4c:
56:c5:3f:dc:5a:c9:be:eb:c0:27:32:92:22:f4:6e:
cf:0f:d9:3b:34:40:46:d9:fc:d5:c1:92:89:12:81:
bb:f4:81:8e:db:8c:1a:4e:5d:ab:2b:ba:ec:03:ea:
1d:66:88:50:ef:8b:da:f4:e7:43:30:47:a1:56:d3:
b8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:63:EB:8F:C5:9F:77:03:4D:22:66:AD:0D:89:9C:4E:74:BF:2C
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1d:b9:f5:71:74:75:4f:00:d9:b1:0a:14:5d:5d:47:47:11:
d2:87:d3:11:21:01:e1:b1:50:68:c8:d1:33:2c:39:72:12:c6:
16:0b:a9:9c:41:ef:75:88:f1:20:85:06:4a:4b:bf:f4:c8:e5:
58:a2:14:c3:ca:d9:86:5e:08:b2:6c:27:28:43:b0:95:35:4e:
0b:9d:1b:4a:97:4a:04:75:ae:3c:8b:02:17:79:ee:fe:9e:f4:
a5:06:3c:c5:2b:82:6e:3d:73:a0:96:c7:29:33:d3:3b:69:f2:
6c:73:e6:6b:b9:43:67:f2:7c:0c:99:17:fb:30:cb:4e:6d:db:
71:9a:3a:11:26:fb:ba:8e:c6:37:32:6a:83:a0:44:62:49:c5:
f3:13:85:0c:93:b6:f8:65:7d:a6:46:61:39:5f:58:91:c0:fc:
ea:a1:50:62:1f:de:5a:30:84:ff:9b:66:93:76:c2:3c:df:cb:
04:f8:04:8d:41:c9:e9:9d:75:60:7c:90:f6:e9:21:59:6c:a4:
83:d4:04:71:8d:f9:f2:8a:f5:a5:7b:12:8c:ab:ef:33:e6:9f:
18:e9:27:10:53:07:89:68:6f:57:bf:7f:3a:a3:6d:b4:98:4c:
c1:07:69:e4:f8:43:01:a4:70:3f:73:a9:77:2d:b0:38:41:e8:
d5:74:75:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFi3ssp53RwIVXMMpA2j6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTk4NTZkYjFhYjNiMjRmMDllOWNiOTI3NDM3Njg2Njgz
MDE0MTEwHhcNMjUwNjA2MTQwMDU4WhcNMjUwNjA3MTQwMDU4WjAzMTEwLwYDVQQD
Eyg0MzI2NjNlYjhmYzU5Zjc3MDM0ZDIyNjZhZDBkODk5YzRlNzRiZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwXkQkrtSZCyYEst6EWsEoExwPGB
gy8WAj7952pWvbvVkZCifHncBc2rfeeUd4ysNyTRaXkyhRyODF46/VFN4JW0akSi
2epAeyuuKvt7sYqIP4YdKM5z/qKZI/uEhQb3EezETY/C9wfeWrcz4CSCrNGhSh1o
IIZ9IoOjzbkm1jy+5Zs/xnjt5r2mMzCzMcRH4UZvVGlbRmwR+BMIezM3Z9ey8rQq
+6TfMxm5y7C+cP1V60xCLXlE9bRMWO84OCep2ExWxT/cWsm+68AnMpIi9G7PD9k7
NEBG2fzVwZKJEoG79IGO24waTl2rK7rsA+odZohQ74va9OdDMEehVtO4wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMmY+uPxZ93A00iZq0NiZxOdL8sMB8GA1UdIwQY
MBaAFGSphW2xqzsk8J6cuSdDdoZoMBQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATB259XF0
dU8A2bEKFF1dR0cR0ofTESEB4bFQaMjRMyw5chLGFgupnEHvdYjxIIUGSku/9Mjl
WKIUw8rZhl4IsmwnKEOwlTVOC50bSpdKBHWuPIsCF3nu/p70pQY8xSuCbj1zoJbH
KTPTO2nybHPma7lDZ/J8DJkX+zDLTm3bcZo6ESb7uo7GNzJqg6BEYknF8xOFDJO2
+GV9pkZhOV9YkcD86qFQYh/eWjCE/5tmk3bCPN/LBPgEjUHJ6Z11YHyQ9ukhWWyk
g9QEcY358or1pXsSjKvvM+afGOknEFMHiWhvV79/OqNttJhMwQdp5PhDAaRwP3Op
dy2wOEHo1XR1AQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:06 2025 by rpki-client