Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: mgj7JkrXpCsBH4ZrDXJL3IFmMRagKQEjjkFYFebNVYw=
Subject key identifier: A5:95:1A:E2:6B:D3:6C:73:9B:D9:77:D5:D9:D1:7D:49:CA:03:A1:14
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01974FD80582A191413EA7E48DAB83BA4D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 10C2
Signing time: Sun 08 Jun 2025 14:00:46 +0000
Manifest this update: Sun 08 Jun 2025 14:00:46 +0000
Manifest next update: Mon 09 Jun 2025 14:00:46 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: hRRAhz7ktbqrcbFdjxwNOvpTjCVonY+jkSOD6kw33P4=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:05:82:a1:91:41:3e:a7:e4:8d:ab:83:ba:4d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Jun 8 14:00:46 2025 GMT
Not After : Jun 9 14:00:46 2025 GMT
Subject: CN=a5951ae26bd36c739bd977d5d9d17d49ca03a114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:23:77:db:cf:ba:a3:e7:0d:49:f1:4b:a4:
96:fe:36:12:86:fc:2a:61:d7:c6:7e:55:ac:50:42:
2b:a0:b4:cd:1b:50:32:1a:21:8e:a7:79:8b:c8:3d:
a9:f9:ea:e8:a7:6f:dc:8f:73:b7:bc:70:25:2f:ad:
d6:0b:37:96:c3:ac:02:82:8c:54:87:e2:f2:a3:17:
ec:03:bf:c9:a3:69:f3:e0:71:9a:a8:08:ba:5f:b2:
14:c2:e9:8a:6e:05:a1:a1:7a:39:56:cb:de:b7:b5:
83:52:9c:8f:f5:7d:56:18:cc:e5:6f:63:59:4c:fc:
b4:e1:60:52:df:74:2a:42:01:b4:10:bd:40:72:b2:
1f:55:cd:5b:b1:f4:00:aa:b8:77:3e:38:49:28:0c:
d2:4b:8e:22:90:f7:03:a4:29:f9:b0:96:1b:2b:a9:
97:e3:cb:1e:00:07:40:7d:f0:83:50:73:ef:bc:12:
bd:22:53:59:19:f9:05:be:50:ed:c9:b4:ad:31:80:
b3:97:bc:f9:d8:53:6c:6a:dc:00:1f:6a:db:d7:77:
42:2c:11:e2:73:7b:58:21:01:46:5f:dc:49:ed:53:
c8:14:d8:bb:fe:3e:52:52:c6:2a:a7:cc:40:90:a3:
64:1e:9b:af:b4:b6:f6:db:50:db:91:4f:92:96:b8:
2b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:95:1A:E2:6B:D3:6C:73:9B:D9:77:D5:D9:D1:7D:49:CA:03:A1:14
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2b:04:5f:9c:f9:27:32:51:f7:b2:66:89:ef:33:31:55:bb:
ab:3d:1d:eb:18:1e:b5:7a:85:d3:4a:e2:be:49:a1:6b:e1:fa:
7e:20:23:39:71:d9:c9:8c:82:c3:94:d0:1f:06:31:a0:e2:43:
d9:36:48:96:2e:eb:3d:52:5e:c3:1e:5e:36:ec:30:77:97:6d:
19:8d:f3:79:98:a5:c5:7c:7a:f3:ab:f6:2a:bb:13:b5:7e:f5:
d2:b5:20:36:93:ff:6f:88:d3:d5:c2:13:d7:bd:2a:8e:3c:1a:
53:45:77:f8:74:08:41:a3:a6:42:2f:6f:66:e7:55:2f:b1:c7:
30:4d:43:1b:65:c8:5d:d1:f9:de:9c:e9:26:c0:7f:76:fc:ea:
93:fa:b1:f1:3d:91:4f:7e:68:1b:53:c2:5c:5e:30:95:8b:fd:
40:fe:1d:38:56:7e:c1:73:96:2a:7a:72:d9:42:84:fb:af:52:
f4:33:52:a1:46:56:66:35:85:3d:9a:e8:e8:62:4a:2d:87:ff:
85:61:d4:79:b5:4d:9c:6c:e9:a8:4d:ec:3d:79:07:51:a6:06:
cb:5b:76:33:c1:a5:15:f9:89:85:8a:4f:b3:d6:e3:e9:ed:21:
4b:23:0f:c4:1d:c9:27:0b:0c:66:6b:40:c3:bb:5a:d4:41:22:
9c:13:86:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP2AWCoZFBPqfkjauDuk1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjUwNjA4MTQwMDQ2WhcNMjUwNjA5MTQwMDQ2WjAzMTEwLwYDVQQD
EyhhNTk1MWFlMjZiZDM2YzczOWJkOTc3ZDVkOWQxN2Q0OWNhMDNhMTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6wjd9vPuqPnDUnxS6SW/jYShvwq
YdfGflWsUEIroLTNG1AyGiGOp3mLyD2p+erop2/cj3O3vHAlL63WCzeWw6wCgoxU
h+LyoxfsA7/Jo2nz4HGaqAi6X7IUwumKbgWhoXo5Vsvet7WDUpyP9X1WGMzlb2NZ
TPy04WBS33QqQgG0EL1AcrIfVc1bsfQAqrh3PjhJKAzSS44ikPcDpCn5sJYbK6mX
48seAAdAffCDUHPvvBK9IlNZGfkFvlDtybStMYCzl7z52FNsatwAH2rb13dCLBHi
c3tYIQFGX9xJ7VPIFNi7/j5SUsYqp8xAkKNkHpuvtLb221DbkU+SlrgrBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWVGuJr02xzm9l31dnRfUnKA6EUMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATisEX5z5
JzJR97Jmie8zMVW7qz0d6xgetXqF00rivkmha+H6fiAjOXHZyYyCw5TQHwYxoOJD
2TZIli7rPVJewx5eNuwwd5dtGY3zeZilxXx686v2KrsTtX710rUgNpP/b4jT1cIT
170qjjwaU0V3+HQIQaOmQi9vZudVL7HHME1DG2XIXdH53pzpJsB/dvzqk/qx8T2R
T35oG1PCXF4wlYv9QP4dOFZ+wXOWKnpy2UKE+69S9DNSoUZWZjWFPZro6GJKLYf/
hWHUebVNnGzpqE3sPXkHUaYGy1t2M8GlFfmJhYpPs9bj6e0hSyMPxB3JJwsMZmtA
w7ta1EEinBOGag==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:23:52 2025 by rpki-client