Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: Op34Jj0m2HyzeQ70mPXrQLLLII44Glq82mKSppiPxRE=
Subject key identifier: 3F:77:73:65:FE:9E:13:DA:C3:6B:61:3F:4E:19:78:73:47:09:49:F7
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 019770081AA5EB15619E7F4F86E4827115B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 08B4
Signing time: Sat 14 Jun 2025 20:01:08 +0000
Manifest this update: Sat 14 Jun 2025 20:01:08 +0000
Manifest next update: Sun 15 Jun 2025 20:01:08 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: GzqDlXySRMz8SfBJYjjw8nThzYrYazdD14aR+w1seGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:08:1a:a5:eb:15:61:9e:7f:4f:86:e4:82:71:15:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Jun 14 20:01:08 2025 GMT
Not After : Jun 15 20:01:08 2025 GMT
Subject: CN=3f777365fe9e13dac36b613f4e197873470949f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:ac:89:de:96:cd:28:88:bf:b6:63:2f:05:
89:bb:e8:c8:40:9b:20:6e:e4:4b:a5:2e:52:0e:c1:
06:40:ea:01:08:8f:4f:00:02:d6:3b:37:df:d7:60:
e4:34:a4:9e:c8:97:c0:d9:d8:ed:80:57:ee:15:0a:
51:43:dc:21:b7:2d:5a:4e:26:dd:b5:cc:7c:0f:15:
67:63:c8:c8:71:e8:6a:00:c1:f1:cc:31:95:74:3d:
c3:f9:cc:de:96:26:ac:9c:5b:e7:49:bb:5a:0c:64:
71:b5:26:c2:b0:da:18:c3:99:77:1a:9b:93:a6:55:
7e:9d:5a:ea:ec:a4:33:6c:e9:26:96:63:6d:58:ac:
90:f8:2c:f7:d5:99:70:32:28:ae:d3:fa:ba:dd:dc:
f4:3f:ab:49:28:23:d7:6f:d8:48:60:e8:c0:4e:8b:
20:02:3d:a9:f7:a4:8b:7c:a8:70:17:65:89:cb:65:
48:f0:ed:01:6a:a3:28:38:db:be:0b:d9:2d:f2:76:
93:87:95:82:4c:35:15:44:35:fd:8a:c0:99:0a:13:
be:5d:e8:54:3a:64:51:02:65:21:cd:25:a2:78:fd:
67:53:71:a5:2a:7a:67:37:25:9a:70:eb:2f:6f:91:
24:a6:2b:58:b0:4d:d6:2c:c5:37:8a:c4:a0:ee:b9:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:73:65:FE:9E:13:DA:C3:6B:61:3F:4E:19:78:73:47:09:49:F7
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:0d:dc:44:1a:e2:e3:79:c0:a4:7f:99:00:c5:ae:1f:d1:
81:9e:98:23:a8:7c:fe:c6:cd:a9:5d:3d:79:a8:05:ce:98:e6:
bc:c0:6f:ce:9f:10:67:19:bc:64:c5:60:90:ca:ef:01:07:5e:
81:ab:83:69:ea:28:2c:08:85:ea:4b:4d:91:cc:e6:67:26:cf:
c9:13:f0:b3:d7:0c:98:82:f8:3d:3f:38:07:c3:5f:46:43:f4:
08:68:69:da:76:c9:31:b5:72:5b:c7:52:99:98:0f:e4:35:b3:
05:9c:75:69:c0:bb:a6:dc:c0:a0:40:7a:97:28:96:6e:39:c2:
11:97:42:34:65:05:a2:37:27:d7:fb:fc:ff:f4:28:c9:d0:5c:
96:1d:aa:6b:91:ba:67:9f:1e:45:52:9a:8b:16:51:60:86:68:
b3:8a:f6:1a:78:46:48:64:c2:bc:6e:e6:b7:af:06:46:5d:b3:
14:65:0c:ba:5c:a3:bd:ec:2c:6a:2b:bb:36:27:c0:ac:a2:4d:
3e:b0:cf:65:50:c6:19:2b:6f:79:1e:53:21:80:6b:ff:2b:75:
14:80:b0:d4:8e:07:cb:d8:26:aa:cf:d7:a7:ea:77:e9:ac:87:
b3:97:98:14:cf:3d:72:5a:09:94:8b:20:a8:17:6e:5e:fc:98:
49:45:a7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwCBql6xVhnn9PhuSCcRW3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQwZTM5ZDc4ZmM2MjAyMjU1YTViNGFkYjU0NTgzZDlk
ZWRkY2UwHhcNMjUwNjE0MjAwMTA4WhcNMjUwNjE1MjAwMTA4WjAzMTEwLwYDVQQD
EygzZjc3NzM2NWZlOWUxM2RhYzM2YjYxM2Y0ZTE5Nzg3MzQ3MDk0OWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK2sid6WzSiIv7ZjLwWJu+jIQJsg
buRLpS5SDsEGQOoBCI9PAALWOzff12DkNKSeyJfA2djtgFfuFQpRQ9whty1aTibd
tcx8DxVnY8jIcehqAMHxzDGVdD3D+czeliasnFvnSbtaDGRxtSbCsNoYw5l3GpuT
plV+nVrq7KQzbOkmlmNtWKyQ+Cz31ZlwMiiu0/q63dz0P6tJKCPXb9hIYOjATosg
Aj2p96SLfKhwF2WJy2VI8O0BaqMoONu+C9kt8naTh5WCTDUVRDX9isCZChO+XehU
OmRRAmUhzSWieP1nU3GlKnpnNyWacOsvb5EkpitYsE3WLMU3isSg7rmg1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD93c2X+nhPaw2thP04ZeHNHCUn3MB8GA1UdIwQY
MBaAFM0tDjnXj8YgIlWltK21RYPZ3t3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQt
MWExOTc5MmExZDI2LzEvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQtMWExOTc5MmExZDI2
LzEvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBgN3EQa
4uN5wKR/mQDFrh/RgZ6YI6h8/sbNqV09eagFzpjmvMBvzp8QZxm8ZMVgkMrvAQde
gauDaeooLAiF6ktNkczmZybPyRPws9cMmIL4PT84B8NfRkP0CGhp2nbJMbVyW8dS
mZgP5DWzBZx1acC7ptzAoEB6lyiWbjnCEZdCNGUFojcn1/v8//QoydBclh2qa5G6
Z58eRVKaixZRYIZos4r2GnhGSGTCvG7mt68GRl2zFGUMulyjvewsaiu7NifArKJN
PrDPZVDGGStveR5TIYBr/yt1FICw1I4Hy9gmqs/Xp+p36ayHs5eYFM89cloJlIsg
qBduXvyYSUWnvQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:27:12 2025 by rpki-client