Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: iD1EEcXgN7OwU5/IOOKQla+LoLNcJk5O+sdIAnkVvJk=
Subject key identifier: 0C:F5:59:DA:C6:43:57:35:E2:F1:AE:1E:D4:41:92:24:1E:B6:6D:BC
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 0197493155C6D443BB98873053055AF3B488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 02C0
Signing time: Sat 07 Jun 2025 07:00:59 +0000
Manifest this update: Sat 07 Jun 2025 07:00:59 +0000
Manifest next update: Sun 08 Jun 2025 07:00:59 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: dRHRfhax5AqgBkEaIia6Hpub8x38tH0Qj1Ge300oIHM=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:55:c6:d4:43:bb:98:87:30:53:05:5a:f3:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Jun 7 07:00:59 2025 GMT
Not After : Jun 8 07:00:59 2025 GMT
Subject: CN=0cf559dac6435735e2f1ae1ed44192241eb66dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:01:79:1f:d9:81:26:bc:f9:ad:e8:23:40:
a0:38:c8:5f:f4:b9:41:4f:f3:5d:f5:2b:4e:2d:78:
2c:89:58:0c:72:39:bf:4b:b4:fe:2e:69:ec:08:9d:
ae:6f:2a:7c:d0:9f:8b:65:a8:e6:92:f7:ed:66:59:
42:a2:49:64:a4:52:bf:53:5e:64:dc:94:ba:bd:30:
b8:b3:13:3b:0f:c5:aa:55:71:a5:bb:98:aa:d9:19:
22:64:89:2c:91:cf:ec:dd:6f:d9:fe:44:5c:ca:16:
c1:06:2e:1d:19:46:fb:43:4b:c8:21:1c:e2:87:46:
cb:ec:6e:d7:6d:ac:9c:f8:9c:ca:e1:85:36:b7:19:
27:cd:23:32:89:f9:fa:e0:54:52:d4:ce:14:a7:53:
78:46:a1:bd:df:a9:03:7f:a2:d0:36:44:22:37:f6:
70:a9:ba:1f:46:5d:be:4a:6a:96:e5:7b:b5:c9:83:
38:a8:b0:3f:26:35:4d:a0:c1:29:eb:91:1a:4e:31:
41:4a:07:88:11:11:46:1c:91:56:7e:40:0b:be:eb:
5c:89:93:20:da:14:5f:28:73:11:01:d8:91:d3:cd:
e4:10:36:48:03:0e:77:95:95:d4:2d:d4:3a:c5:ad:
17:de:19:94:19:36:37:17:99:3b:94:5f:5c:76:b3:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F5:59:DA:C6:43:57:35:E2:F1:AE:1E:D4:41:92:24:1E:B6:6D:BC
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:da:c2:ca:57:03:ed:16:12:b9:d7:c0:de:d7:9f:47:9c:
1f:17:0c:a5:b8:ec:6a:20:07:ae:94:a7:06:13:51:b6:99:f3:
64:a6:8e:e8:b1:a9:3b:83:58:b0:e3:ea:80:f5:cf:81:f7:d6:
9e:78:33:a6:b5:83:4c:76:82:57:57:35:be:57:bf:73:fc:ae:
59:a4:85:b1:a7:02:f3:6b:d0:4c:46:8c:87:57:bc:e2:eb:9c:
58:9e:be:20:cb:37:40:dd:93:54:2f:39:07:70:44:25:b5:8b:
9f:a9:0c:39:a9:4c:fa:f2:2e:3d:db:9c:71:13:02:67:0a:cd:
06:05:87:f0:dd:fe:7f:c6:69:28:4d:4d:c8:89:55:7c:1b:d4:
db:71:e6:ee:70:9b:8f:59:95:4b:33:0a:0d:15:82:79:f5:4c:
b1:33:22:60:83:4c:9d:92:6a:d0:5e:36:06:b1:1b:40:07:55:
a2:9e:e9:e0:da:f2:34:98:89:b2:3b:c7:e3:56:eb:ab:f0:bb:
63:29:c5:d4:1b:67:37:a6:65:4d:07:b8:7b:b3:57:e0:df:d5:
79:0a:3a:81:96:9d:d7:03:bf:fc:9a:bc:c4:f7:5c:d6:c1:ac:
d9:21:5e:bb:2a:e5:86:ea:04:30:05:17:7c:fc:ca:b6:05:57:
ac:79:68:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMVXG1EO7mIcwUwVa87SIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTkwNjZkNWI2YWMzMDE5YzIwMzdmNTc5ZDExYmFlMWE1
ZWVhNzMwHhcNMjUwNjA3MDcwMDU5WhcNMjUwNjA4MDcwMDU5WjAzMTEwLwYDVQQD
EygwY2Y1NTlkYWM2NDM1NzM1ZTJmMWFlMWVkNDQxOTIyNDFlYjY2ZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY0BeR/ZgSa8+a3oI0CgOMhf9LlB
T/Nd9StOLXgsiVgMcjm/S7T+LmnsCJ2ubyp80J+LZajmkvftZllCoklkpFK/U15k
3JS6vTC4sxM7D8WqVXGlu5iq2RkiZIkskc/s3W/Z/kRcyhbBBi4dGUb7Q0vIIRzi
h0bL7G7Xbayc+JzK4YU2txknzSMyifn64FRS1M4Up1N4RqG936kDf6LQNkQiN/Zw
qbofRl2+SmqW5Xu1yYM4qLA/JjVNoMEp65EaTjFBSgeIERFGHJFWfkALvutciZMg
2hRfKHMRAdiR083kEDZIAw53lZXULdQ6xa0X3hmUGTY3F5k7lF9cdrOk2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz1WdrGQ1c14vGuHtRBkiQetm28MB8GA1UdIwQY
MBaAFGWpBm1basMBnCA39XnRG64aXupzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt
MThmMzQzNDg4Mjg2LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2
LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwjawspX
A+0WErnXwN7Xn0ecHxcMpbjsaiAHrpSnBhNRtpnzZKaO6LGpO4NYsOPqgPXPgffW
nngzprWDTHaCV1c1vle/c/yuWaSFsacC82vQTEaMh1e84uucWJ6+IMs3QN2TVC85
B3BEJbWLn6kMOalM+vIuPduccRMCZwrNBgWH8N3+f8ZpKE1NyIlVfBvU23Hm7nCb
j1mVSzMKDRWCefVMsTMiYINMnZJq0F42BrEbQAdVop7p4NryNJiJsjvH41brq/C7
YynF1BtnN6ZlTQe4e7NX4N/VeQo6gZad1wO//Jq8xPdc1sGs2SFeuyrlhuoEMAUX
fPzKtgVXrHloUw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:10:44 2025 by rpki-client