Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
File: ZNFx-TzBynFvyAbjalWFLN9PHBw.mft (raw, json)
Hash identifier: NU+dIG1oxHZtAK27VB7cCoPFgDZKM+NDafwPHwdHV+g=
Subject key identifier: A0:E3:58:9D:24:C4:FA:3B:28:26:40:41:F9:79:FA:72:95:95:6B:C4
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 0197496828421DFFBDF1E9BAB3410A26D1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
Manifest number: 158A
Signing time: Sat 07 Jun 2025 08:00:51 +0000
Manifest this update: Sat 07 Jun 2025 08:00:51 +0000
Manifest next update: Sun 08 Jun 2025 08:00:51 +0000
Files and hashes: 1: 4DVldFO5y9KBtzxCTr71AtgC-eU.roa (hash: sBM0L37YAXg4FUlTCLrrPugqQEHySprVmExRuh4Lv3Y=)
2: 6kPkXmlWSAQjjCwMVOC6F-rjNv0.roa (hash: sTc836fo7TkkLRKHAoIO0+HiUzTAeRmVazBYlJks2f4=)
3: Ai07EY_IrLJeSRlVULJ-hyiwIik.roa (hash: SAAKzZyhC7heFcOPxTR1SIf1TFq7lgei6jj4stUF64s=)
4: ZNFx-TzBynFvyAbjalWFLN9PHBw.crl (hash: dDIVKRNhTnmGXJkD7JigF7UosBBcBnfrY4uAbXGAmqA=)
5: _9bhuNhFLcA0HPv8bquRW0OUHTY.roa (hash: +AAi2JdNKRV5CFL7Yq+UFdnc1nHIGlMicPgKcuKxkmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:28:42:1d:ff:bd:f1:e9:ba:b3:41:0a:26:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jun 7 08:00:51 2025 GMT
Not After : Jun 8 08:00:51 2025 GMT
Subject: CN=a0e3589d24c4fa3b28264041f979fa7295956bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:a0:1f:58:53:d8:6a:0b:7f:7c:46:d8:55:
53:b7:c5:fa:43:b3:39:c8:ee:aa:31:b9:b1:3d:6c:
a2:71:f5:80:c6:d7:23:d5:69:8b:1a:e9:5e:33:13:
4a:15:ab:f3:c0:74:33:70:23:e6:48:66:42:b2:e6:
69:67:46:03:b8:c1:6b:e1:0a:31:0b:26:6f:95:f7:
60:6c:b5:c8:be:86:22:b4:7b:11:2e:00:ac:dd:74:
49:b8:70:d9:18:ed:01:b1:5d:a9:73:0d:e6:9e:b5:
57:1e:9e:38:52:1c:27:5f:79:89:0d:b3:85:07:ba:
cd:29:cb:9d:d9:4e:28:41:30:f5:d4:2a:de:8b:06:
11:4b:4a:b3:68:02:b5:ba:f7:93:45:c6:d9:6c:58:
4f:38:82:8f:57:1d:da:ac:b3:ab:ef:40:b1:06:5b:
73:ed:d0:76:b3:fc:00:7e:af:73:e4:a1:5f:9f:2f:
11:99:95:ba:db:59:4d:e7:78:fc:8f:d0:eb:87:d7:
dd:2e:99:e7:5a:e5:13:97:4b:13:82:5f:91:8a:34:
27:4c:07:96:9b:c8:a5:72:44:9e:0c:5e:02:42:67:
ad:d7:da:6b:5a:c4:dc:c3:44:96:4c:42:aa:01:1f:
27:23:10:81:d9:36:81:0e:ec:96:86:5c:11:c3:9b:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E3:58:9D:24:C4:FA:3B:28:26:40:41:F9:79:FA:72:95:95:6B:C4
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6d:bf:16:66:60:30:12:7a:5b:fc:87:37:71:f0:8d:eb:fe:
04:56:e9:fa:16:ff:22:60:3c:65:8d:c7:d8:45:50:df:f0:7d:
fd:92:f4:da:0b:6d:d1:fb:9e:fe:1a:a3:37:ae:a8:79:11:bf:
0c:72:7c:c2:b8:6b:83:4e:f3:1a:e3:d8:e0:76:34:d5:ac:88:
94:52:49:bb:78:19:96:17:80:19:e5:82:80:a1:57:1e:95:b7:
49:d1:4a:c9:e7:a2:42:94:f7:41:9b:49:5b:01:e5:61:ac:42:
bb:f0:2a:7d:41:c1:26:88:97:32:b0:61:4e:45:1e:96:23:05:
31:f0:48:c4:07:02:ad:e8:1c:de:2f:4f:97:b7:30:02:c0:9c:
58:cd:40:ef:2a:72:8a:b9:e6:b3:b0:91:87:b5:e2:fc:e5:6d:
cd:3c:15:10:55:ba:bd:21:a9:85:e6:ae:c3:a4:25:fa:88:a9:
19:dd:81:24:a8:9e:a2:68:67:07:04:a2:88:51:81:6c:f2:a9:
a7:4f:ac:58:32:89:a7:4a:6f:d5:f9:5b:be:ce:91:23:70:d5:
f8:c0:4f:a8:d7:fe:c5:61:64:71:6c:6f:b4:74:14:9a:7d:ed:
d0:1c:43:84:7e:f7:3f:dd:49:fd:3f:52:61:77:66:00:57:c7:
8a:03:c6:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaChCHf+98em6s0EKJtHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDE3MWY5M2NjMWNhNzE2ZmM4MDZlMzZhNTU4NTJjZGY0
ZjFjMWMwHhcNMjUwNjA3MDgwMDUxWhcNMjUwNjA4MDgwMDUxWjAzMTEwLwYDVQQD
EyhhMGUzNTg5ZDI0YzRmYTNiMjgyNjQwNDFmOTc5ZmE3Mjk1OTU2YmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh2gH1hT2GoLf3xG2FVTt8X6Q7M5
yO6qMbmxPWyicfWAxtcj1WmLGuleMxNKFavzwHQzcCPmSGZCsuZpZ0YDuMFr4Qox
CyZvlfdgbLXIvoYitHsRLgCs3XRJuHDZGO0BsV2pcw3mnrVXHp44UhwnX3mJDbOF
B7rNKcud2U4oQTD11CreiwYRS0qzaAK1uveTRcbZbFhPOIKPVx3arLOr70CxBltz
7dB2s/wAfq9z5KFfny8RmZW621lN53j8j9Drh9fdLpnnWuUTl0sTgl+RijQnTAeW
m8ilckSeDF4CQmet19prWsTcw0SWTEKqAR8nIxCB2TaBDuyWhlwRw5uXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDjWJ0kxPo7KCZAQfl5+nKVlWvEMB8GA1UdIwQY
MBaAFGTRcfk8wcpxb8gG42pVhSzfTxwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAt
YTQ2MzVkZjQ3ZDcwLzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMmQ5ZGYtMTZlYi00NDllLTgzZjAtYTQ2MzVkZjQ3ZDcw
LzEvWk5GeC1UekJ5bkZ2eUFiamFsV0ZMTjlQSEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp22/FmZg
MBJ6W/yHN3Hwjev+BFbp+hb/ImA8ZY3H2EVQ3/B9/ZL02gtt0fue/hqjN66oeRG/
DHJ8wrhrg07zGuPY4HY01ayIlFJJu3gZlheAGeWCgKFXHpW3SdFKyeeiQpT3QZtJ
WwHlYaxCu/AqfUHBJoiXMrBhTkUeliMFMfBIxAcCregc3i9Pl7cwAsCcWM1A7ypy
irnms7CRh7Xi/OVtzTwVEFW6vSGpheauw6Ql+oipGd2BJKieomhnBwSiiFGBbPKp
p0+sWDKJp0pv1flbvs6RI3DV+MBPqNf+xWFkcWxvtHQUmn3t0BxDhH73P91J/T9S
YXdmAFfHigPG2A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:23:34 2025 by rpki-client