Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
File: ZCurhFmUi3l0dkjhPpm50KWCUGo.mft (raw, json)
Hash identifier: u+8pLJrs+1KcbOI3LkBJNJhyBkV5u6ByireLHF8mHe8=
Subject key identifier: 7C:57:50:F8:A1:A6:F4:E4:40:21:D4:6C:8E:60:4B:C1:7A:D2:27:4C
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 01974AE8A473EFE2EEC636E6F68AA9585FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
Manifest number: 08E6
Signing time: Sat 07 Jun 2025 15:00:49 +0000
Manifest this update: Sat 07 Jun 2025 15:00:49 +0000
Manifest next update: Sun 08 Jun 2025 15:00:49 +0000
Files and hashes: 1: ZCurhFmUi3l0dkjhPpm50KWCUGo.crl (hash: zFomgXU7NyJZrHHq9iah16aKAdE+3BclxH1GWGJ6eD0=)
2: eL1SH2o6BFV4SrOkUUf29xtUS08.roa (hash: JmkdJoGyIMkBw++B3F+N+a79o3z14Hcd0LecLEcyOis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:a4:73:ef:e2:ee:c6:36:e6:f6:8a:a9:58:5f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Jun 7 15:00:49 2025 GMT
Not After : Jun 8 15:00:49 2025 GMT
Subject: CN=7c5750f8a1a6f4e44021d46c8e604bc17ad2274c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:d0:44:6f:b9:33:48:78:9d:8a:75:3f:df:
39:8e:2c:de:d9:20:4a:f4:ea:45:52:10:72:41:12:
e5:a1:23:b9:3f:c3:64:0b:74:74:7f:50:df:e5:0f:
e1:35:2f:bb:e3:05:49:67:0c:52:79:ca:37:41:da:
56:e3:c8:80:24:d2:5a:33:7c:87:01:7f:be:f6:be:
6d:69:49:5c:42:f3:b6:b1:e9:40:ea:56:73:0b:b7:
52:93:a8:57:45:d1:93:2c:c4:f0:8f:27:dd:49:27:
ec:49:55:d4:9a:91:a0:b5:d0:97:65:11:6f:ee:4f:
a1:d9:76:b7:ad:fe:45:03:3e:22:9b:00:68:8d:ef:
a3:4d:30:b9:1e:1a:30:e0:93:df:1b:0a:c1:c4:d2:
03:89:35:84:0e:0c:ae:f0:fc:e6:3f:38:9a:54:d1:
15:38:5b:27:bf:ae:bd:fb:c0:de:79:0e:f3:bd:e8:
76:09:c4:2b:1c:f4:e6:c8:d2:98:cf:02:b4:31:d8:
43:b5:1c:70:3c:1a:05:67:23:80:d7:55:ee:17:b1:
26:fc:d1:f4:d7:a0:35:6d:9e:eb:a8:d9:9e:63:ea:
89:1f:70:42:67:29:3a:63:89:7b:da:a0:e3:a5:8a:
ae:58:ce:2a:f1:4e:90:3c:33:00:dd:f3:25:ca:89:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:50:F8:A1:A6:F4:E4:40:21:D4:6C:8E:60:4B:C1:7A:D2:27:4C
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3e:b4:e4:50:99:cd:52:fa:68:d0:f3:45:c9:55:ac:73:22:
5a:f0:a6:f7:4f:14:32:3d:4e:74:68:15:27:d2:f9:ff:fc:d5:
bf:1b:dc:ac:89:33:78:d2:c9:79:d1:84:6d:99:cf:d2:a7:66:
45:b6:67:c6:53:22:c0:94:98:61:37:ed:ec:ee:aa:37:37:e0:
87:76:74:12:21:b4:97:cd:ce:a4:70:95:8f:8b:e2:32:2b:01:
cb:a1:a9:da:4b:0e:d2:34:34:10:58:93:e7:32:16:72:b4:41:
14:d6:9b:82:d9:58:ee:b1:2c:b0:fe:fb:7f:4d:98:d6:0e:fb:
89:f4:c8:af:c5:61:0b:ed:69:53:c5:05:c4:d2:d7:8d:9e:ed:
6b:6a:f2:98:1e:8f:d4:10:44:5c:20:30:32:4c:7d:4f:3a:43:
6b:c5:49:a7:3a:e1:25:8b:f1:0e:26:b1:8c:74:66:dd:0d:bf:
16:e6:b5:c8:bf:af:f6:12:a2:a0:29:51:64:ce:2c:60:34:83:
31:14:a5:65:12:ff:76:d6:b9:d4:9a:e3:d0:1f:22:82:e6:a9:
39:98:06:16:73:8b:5e:b0:c2:93:47:5a:e0:90:34:cc:dd:75:
70:ae:22:69:ed:fb:da:6a:44:92:ac:a0:89:87:bd:1f:d3:ae:
e3:40:25:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6KRz7+Luxjbm9oqpWF/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmJhYjg0NTk5NDhiNzk3NDc2NDhlMTNlOTliOWQwYTU4
MjUwNmEwHhcNMjUwNjA3MTUwMDQ5WhcNMjUwNjA4MTUwMDQ5WjAzMTEwLwYDVQQD
Eyg3YzU3NTBmOGExYTZmNGU0NDAyMWQ0NmM4ZTYwNGJjMTdhZDIyNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11zQRG+5M0h4nYp1P985jize2SBK
9OpFUhByQRLloSO5P8NkC3R0f1Df5Q/hNS+74wVJZwxSeco3QdpW48iAJNJaM3yH
AX++9r5taUlcQvO2selA6lZzC7dSk6hXRdGTLMTwjyfdSSfsSVXUmpGgtdCXZRFv
7k+h2Xa3rf5FAz4imwBoje+jTTC5Hhow4JPfGwrBxNIDiTWEDgyu8PzmPziaVNEV
OFsnv669+8DeeQ7zveh2CcQrHPTmyNKYzwK0MdhDtRxwPBoFZyOA11XuF7Em/NH0
16A1bZ7rqNmeY+qJH3BCZyk6Y4l72qDjpYquWM4q8U6QPDMA3fMlyolTfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxXUPihpvTkQCHUbI5gS8F60idMMB8GA1UdIwQY
MBaAFGQrq4RZlIt5dHZI4T6ZudClglBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMt
NWIxNTUyM2JmY2JiLzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81ZWMzMGMtMmFlZi00N2FiLWIwZWMtNWIxNTUyM2JmY2Ji
LzEvWkN1cmhGbVVpM2wwZGtqaFBwbTUwS1dDVUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIj605FCZ
zVL6aNDzRclVrHMiWvCm908UMj1OdGgVJ9L5//zVvxvcrIkzeNLJedGEbZnP0qdm
RbZnxlMiwJSYYTft7O6qNzfgh3Z0EiG0l83OpHCVj4viMisBy6Gp2ksO0jQ0EFiT
5zIWcrRBFNabgtlY7rEssP77f02Y1g77ifTIr8VhC+1pU8UFxNLXjZ7ta2rymB6P
1BBEXCAwMkx9TzpDa8VJpzrhJYvxDiaxjHRm3Q2/Fua1yL+v9hKioClRZM4sYDSD
MRSlZRL/dta51Jrj0B8iguapOZgGFnOLXrDCk0da4JA0zN11cK4iae372mpEkqyg
iYe9H9Ou40Al3g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:48 2025 by rpki-client