Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: 4/HGZYUpVdNu50xskH/HlWnEL0ObMVuuA92MhwqF10c=
Subject key identifier: CD:F3:3B:FE:06:10:B6:68:B4:AF:4D:D3:2D:E3:21:51:4B:C5:04:6C
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 0197665FE237A636E2840D9B2F3846E2EAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 158D
Signing time: Thu 12 Jun 2025 23:00:49 +0000
Manifest this update: Thu 12 Jun 2025 23:00:49 +0000
Manifest next update: Fri 13 Jun 2025 23:00:49 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: nBzRioAspYogjhuqMfmeJKfieBA.roa (hash: zMCnSjaFE4ydwmXDRAVpua0IoyMIX5RMql4K/75vlGo=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: zDWqpAGYG8L+xq/uO87687tTYhoek5ZPU4+zsQ6KnEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:e2:37:a6:36:e2:84:0d:9b:2f:38:46:e2:ea:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Jun 12 23:00:49 2025 GMT
Not After : Jun 13 23:00:49 2025 GMT
Subject: CN=cdf33bfe0610b668b4af4dd32de321514bc5046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:df:13:92:26:f0:60:f0:a6:5b:43:13:44:64:
be:cc:97:dc:10:1c:36:fb:61:7d:4a:e6:d0:09:7a:
2a:ec:11:b9:08:70:5d:e2:c1:44:ad:56:d3:db:a3:
ee:6c:8d:d8:78:6c:bb:57:4f:e8:fc:ab:19:8e:82:
eb:aa:8e:ac:a2:c4:d5:fb:33:1d:5e:2a:22:89:d4:
5b:0a:78:d3:54:27:16:d1:a1:a7:a5:a1:18:e1:b7:
09:c9:2f:1a:eb:0a:6c:26:14:7c:c4:aa:bb:1f:d2:
4e:3f:89:f5:d6:75:c3:ba:fd:c9:58:4f:9c:a2:66:
70:6b:3b:88:d6:7f:cd:82:45:96:06:8f:b4:02:a2:
99:b8:0e:76:56:fa:8d:8f:ab:0d:ab:ce:b2:1d:57:
4c:36:04:a3:ff:b1:90:93:9b:33:3d:14:4c:a9:d4:
97:93:08:ac:96:00:c6:09:ab:94:1d:7f:ed:87:07:
81:41:0b:4b:b9:79:4b:72:d4:4d:f0:c7:0d:f4:a0:
ca:a9:7f:c3:69:3f:84:c8:5e:bc:cd:81:06:ed:d3:
fa:27:ee:58:25:6d:27:45:20:27:1a:33:f0:64:70:
ce:c8:f1:f1:4c:6f:f5:74:9b:e9:c8:5e:ce:a0:6d:
f8:49:71:bc:eb:3c:ed:bb:d6:1d:84:3e:3e:43:25:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F3:3B:FE:06:10:B6:68:B4:AF:4D:D3:2D:E3:21:51:4B:C5:04:6C
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bc:27:c5:9e:17:9d:c7:ad:4f:f1:a5:d5:dd:57:6e:9c:f1:
e3:df:b2:57:5c:8b:e4:42:11:5f:d0:83:dc:71:05:56:a4:72:
ca:46:1e:56:b1:7a:63:79:6f:d2:49:8f:97:f9:5b:05:3d:6c:
05:1e:5f:ea:a7:80:f2:4f:4d:0c:06:cc:9c:12:a0:ba:ae:47:
10:32:c3:95:ad:97:73:00:df:70:a3:f7:9f:bf:81:4f:a1:d7:
5d:af:4c:72:d4:ae:2a:a5:ad:db:a2:0a:99:ab:72:41:60:82:
c5:ec:c5:71:6b:2e:36:3c:1a:ac:ed:88:17:a5:fe:1c:bc:b8:
1a:d5:b0:43:11:32:c2:e4:48:45:23:17:72:a4:5d:31:7f:58:
37:7f:86:15:df:a1:d9:de:10:45:3e:b8:ed:b3:d4:e1:17:24:
45:7c:91:b9:e4:fa:2f:c0:e6:ff:34:f2:7d:fd:ff:f9:ba:b1:
67:26:20:7c:56:09:a1:85:c4:f0:a4:3e:ac:75:31:47:c8:30:
b0:99:e4:e3:02:8c:ed:d7:0f:8b:fd:bf:3a:da:44:6b:88:6f:
2b:b6:1d:3a:55:51:fc:2c:71:78:3d:bc:ce:bc:44:01:b8:6c:
1b:a2:36:d2:53:5c:1f:cf:ea:2f:0d:10:c5:ad:c1:86:07:b5:
98:01:b8:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmX+I3pjbihA2bLzhG4urFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDc1NTczM2U5MTIwM2ExN2MzMDkzY2E1ZDljYjAzOTJk
OTRmNjEwHhcNMjUwNjEyMjMwMDQ5WhcNMjUwNjEzMjMwMDQ5WjAzMTEwLwYDVQQD
EyhjZGYzM2JmZTA2MTBiNjY4YjRhZjRkZDMyZGUzMjE1MTRiYzUwNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+N8TkibwYPCmW0MTRGS+zJfcEBw2
+2F9SubQCXoq7BG5CHBd4sFErVbT26PubI3YeGy7V0/o/KsZjoLrqo6sosTV+zMd
XioiidRbCnjTVCcW0aGnpaEY4bcJyS8a6wpsJhR8xKq7H9JOP4n11nXDuv3JWE+c
omZwazuI1n/NgkWWBo+0AqKZuA52VvqNj6sNq86yHVdMNgSj/7GQk5szPRRMqdSX
kwislgDGCauUHX/thweBQQtLuXlLctRN8McN9KDKqX/DaT+EyF68zYEG7dP6J+5Y
JW0nRSAnGjPwZHDOyPHxTG/1dJvpyF7OoG34SXG86zztu9YdhD4+QyUG1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3zO/4GELZotK9N0y3jIVFLxQRsMB8GA1UdIwQY
MBaAFM7XVXM+kSA6F8MJPKXZywOS2U9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUt
ZWY0YjY1OWVmZjhkLzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMmY2MWEtMTVmOS00YzZiLTkwZTUtZWY0YjY1OWVmZjhk
LzEvenRkVmN6NlJJRG9Yd3drOHBkbkxBNUxaVDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLwnxZ4X
ncetT/Gl1d1Xbpzx49+yV1yL5EIRX9CD3HEFVqRyykYeVrF6Y3lv0kmPl/lbBT1s
BR5f6qeA8k9NDAbMnBKguq5HEDLDla2XcwDfcKP3n7+BT6HXXa9MctSuKqWt26IK
matyQWCCxezFcWsuNjwarO2IF6X+HLy4GtWwQxEywuRIRSMXcqRdMX9YN3+GFd+h
2d4QRT647bPU4RckRXyRueT6L8Dm/zTyff3/+bqxZyYgfFYJoYXE8KQ+rHUxR8gw
sJnk4wKM7dcPi/2/OtpEa4hvK7YdOlVR/CxxeD28zrxEAbhsG6I20lNcH8/qLw0Q
xa3Bhge1mAG4UA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 01:39:52 2025 by rpki-client