Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: m3nSG5qFEJdoqRaXWymY7SRzHs6rC7xvE0K8N4nzwWg=
Subject key identifier: 03:79:67:B6:8A:A6:28:72:0E:BC:76:A7:3D:3D:92:A0:AE:5E:27:0F
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 019749D5FF71E811867E784BCF39740ABD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: 2rsnQiV5LlrUWE/HAgZ4fgKbnZwiJj97/xfzCieNsKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ff:71:e8:11:86:7e:78:4b:cf:39:74:0a:bd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=037967b68aa628720ebc76a73d3d92a0ae5e270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ed:f8:c3:2b:66:aa:64:f2:17:22:06:b6:ca:
52:5e:6d:5e:05:ab:9e:2e:32:95:da:05:fd:63:fa:
fb:d9:2c:a5:7d:fc:8d:d6:db:e1:0e:ae:5f:83:b2:
bb:4a:68:be:d8:15:3b:5c:ce:92:3b:5a:38:37:13:
ea:a7:09:c9:f0:3b:86:5d:94:7c:5c:c3:03:3a:7a:
08:a2:eb:29:1e:49:74:cc:ea:88:4a:77:47:cb:f0:
bf:df:6d:e0:52:79:ea:0f:78:ff:6a:98:29:2e:cd:
e5:7d:bc:c1:39:45:81:af:5a:22:b2:ad:46:2e:9d:
5a:21:96:26:a7:d8:6c:86:04:9c:95:1b:d2:60:13:
bb:d2:6e:be:ba:56:5d:c9:45:2e:9e:8d:37:3e:c5:
90:66:04:a2:b3:6e:1d:9b:ae:b7:cb:4a:93:a5:04:
77:11:35:34:f9:99:19:22:96:26:17:9e:fe:7a:b1:
f8:7d:a5:26:32:36:a2:ca:20:8d:57:fd:5c:cb:9e:
6c:63:b1:6e:b4:75:85:b9:95:b9:bb:a8:c8:aa:92:
38:0b:05:b0:b0:20:6e:93:6c:6f:5c:5c:7d:54:34:
98:ca:50:4c:ef:ef:71:1a:ca:d9:23:ca:8a:9e:a6:
a5:7b:b3:4c:4d:88:aa:ab:10:08:e6:83:81:cb:7d:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:67:B6:8A:A6:28:72:0E:BC:76:A7:3D:3D:92:A0:AE:5E:27:0F
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:92:ae:a8:ce:05:7c:36:88:36:5c:44:62:93:a6:94:b8:15:
b4:89:95:8d:c6:0e:aa:b2:f6:d7:fb:fc:1f:6a:b8:a6:d2:f5:
24:33:05:49:b2:63:c9:16:de:00:a0:a4:b8:7b:8b:f6:25:2c:
b7:7e:67:27:e7:f5:4a:56:74:d2:35:58:6e:d2:f8:d3:76:ed:
c7:e8:68:02:31:25:e3:64:c4:22:5a:e7:00:24:ef:55:ea:ee:
dc:dc:a5:76:aa:7c:e3:d5:52:8c:e6:78:f0:12:5b:b3:1b:0a:
99:fc:62:bd:d8:97:2f:0d:28:b7:28:be:f3:dd:6e:0e:12:71:
7b:1c:f8:e1:b1:a6:74:3a:3b:75:b5:b2:c1:fc:4e:79:93:d3:
68:dd:31:28:5e:b9:17:b1:33:f1:24:79:a6:02:75:60:74:29:
e6:dc:fd:d7:be:1f:43:0c:9b:4b:85:65:7c:32:72:46:8a:7c:
8c:56:8c:44:0f:d0:61:c0:fa:96:80:2e:76:98:86:31:5f:7d:
da:6e:6b:2d:1a:e2:8f:e1:d7:9e:60:e5:bb:d2:11:ea:99:4d:
67:0f:ca:63:f4:7e:12:ba:68:db:ff:63:d2:42:cc:a2:73:f5:
44:6e:64:01:b0:97:7b:5c:68:64:43:bc:d9:5f:48:32:a8:cb:
85:90:35:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1f9x6BGGfnhLzzl0Cr0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMTI0MmU2YzdlYmQ4MmEyM2ZhMWEwOGYzOTZlYmU1YWIz
NGNmNmIwHhcNMjUwNjA3MTAwMDUwWhcNMjUwNjA4MTAwMDUwWjAzMTEwLwYDVQQD
EygwMzc5NjdiNjhhYTYyODcyMGViYzc2YTczZDNkOTJhMGFlNWUyNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/e34wytmqmTyFyIGtspSXm1eBaue
LjKV2gX9Y/r72SylffyN1tvhDq5fg7K7Smi+2BU7XM6SO1o4NxPqpwnJ8DuGXZR8
XMMDOnoIouspHkl0zOqISndHy/C/323gUnnqD3j/apgpLs3lfbzBOUWBr1oisq1G
Lp1aIZYmp9hshgSclRvSYBO70m6+ulZdyUUuno03PsWQZgSis24dm663y0qTpQR3
ETU0+ZkZIpYmF57+erH4faUmMjaiyiCNV/1cy55sY7FutHWFuZW5u6jIqpI4CwWw
sCBuk2xvXFx9VDSYylBM7+9xGsrZI8qKnqale7NMTYiqqxAI5oOBy32x0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN5Z7aKpihyDrx2pz09kqCuXicPMB8GA1UdIwQY
MBaAFM0SQubH69gqI/oaCPOW6+WrNM9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEt
ZjYwMzUzODQxMmM4LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80YTc1N2MtYWRkZS00ODVjLTkxNzEtZjYwMzUzODQxMmM4
LzEvelJKQzVzZnIyQ29qLWhvSTg1YnI1YXMwejJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJKuqM4F
fDaINlxEYpOmlLgVtImVjcYOqrL21/v8H2q4ptL1JDMFSbJjyRbeAKCkuHuL9iUs
t35nJ+f1SlZ00jVYbtL403btx+hoAjEl42TEIlrnACTvVeru3Nyldqp849VSjOZ4
8BJbsxsKmfxivdiXLw0otyi+891uDhJxexz44bGmdDo7dbWywfxOeZPTaN0xKF65
F7Ez8SR5pgJ1YHQp5tz9174fQwybS4VlfDJyRop8jFaMRA/QYcD6loAudpiGMV99
2m5rLRrij+HXnmDlu9IR6plNZw/KY/R+Erpo2/9j0kLMonP1RG5kAbCXe1xoZEO8
2V9IMqjLhZA1BQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:25 2025 by rpki-client