Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: 9xXeuACXd+bK8uXVWxeWIDfhF+6mKyGZM5tH8Zh3dDY=
Subject key identifier: C8:DB:6E:F2:E7:04:8E:D0:0C:3E:8C:AC:C1:4F:20:D1:9A:96:49:7D
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 01976EF4AB80CD5C6D786D291836720C0E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 10D9
Signing time: Sat 14 Jun 2025 15:00:17 +0000
Manifest this update: Sat 14 Jun 2025 15:00:17 +0000
Manifest next update: Sun 15 Jun 2025 15:00:17 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: ouai0Cg7hFUl+3gHQtp0xjlAIQp3CLNA2/O0/uyyFSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:ab:80:cd:5c:6d:78:6d:29:18:36:72:0c:0e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Jun 14 15:00:17 2025 GMT
Not After : Jun 15 15:00:17 2025 GMT
Subject: CN=c8db6ef2e7048ed00c3e8cacc14f20d19a96497d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:12:98:da:03:c6:08:fb:d0:53:42:9c:c6:12:
3b:e4:fe:03:67:00:cc:06:b6:f2:ad:e2:72:ed:0b:
5d:d5:f8:11:d4:ac:66:e3:77:13:e1:cf:bd:83:4a:
4b:1c:f3:80:67:42:2e:0f:bf:99:4c:be:2c:8b:d8:
86:70:df:db:02:f5:72:85:cc:66:b3:e3:5c:2e:de:
3e:eb:57:f7:27:35:90:0f:90:7e:f0:6d:00:8b:d5:
fc:43:78:30:db:87:79:80:30:bd:18:13:60:1f:bd:
b3:77:05:65:c3:d2:7b:bb:f6:58:5d:59:8a:c0:2c:
9b:b0:11:73:7a:5b:46:56:84:b3:25:0b:c8:41:99:
36:0b:1f:e4:22:9e:44:e4:06:75:32:17:a9:b3:1a:
3c:5f:ba:9b:f6:8e:3e:dc:68:a1:c2:6a:63:7c:ed:
ee:51:2b:fe:e3:f9:24:25:66:98:ec:39:5d:af:d6:
5a:21:12:6d:fe:77:f8:e7:1a:0a:2c:e7:aa:6e:d5:
fe:c8:4e:8c:15:82:55:87:c8:77:4b:bf:6b:b0:0f:
0c:c6:d6:3d:34:ff:5c:cb:d4:da:84:1a:9d:38:ec:
40:e9:1c:f9:5b:77:ce:2b:3f:83:41:8b:00:d9:83:
ae:22:5c:b6:c6:61:8e:d6:0c:e9:fa:60:c9:5a:49:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DB:6E:F2:E7:04:8E:D0:0C:3E:8C:AC:C1:4F:20:D1:9A:96:49:7D
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6a:f2:4f:fa:40:68:88:70:e0:eb:d0:80:db:3f:a1:ab:11:
e3:45:2b:fc:4d:27:31:d4:34:33:fe:4b:b3:8a:42:9f:70:4f:
05:5b:8b:68:cf:ec:6e:9b:88:b8:ca:27:82:20:05:a5:6f:97:
5e:3f:cd:f7:8c:03:ec:12:97:ff:74:83:f8:2d:71:eb:83:94:
6b:44:71:91:b2:ad:32:29:53:ea:80:a9:59:7c:e9:2e:f1:4b:
62:cc:11:ac:d5:c7:61:20:79:44:79:ea:13:32:a9:98:ad:a6:
91:ec:ce:c7:2c:89:13:a4:7d:68:21:d3:90:58:4b:43:b0:d1:
7d:56:01:4c:2e:32:6d:57:8f:b5:e8:44:68:e1:3d:93:ec:35:
74:7b:81:d9:9e:c2:83:db:8a:11:b8:a4:df:5f:ba:92:04:4c:
17:8b:ce:9c:89:ca:7f:82:cf:d0:ff:49:92:68:4b:95:c6:81:
fa:3f:ba:78:d9:cc:3f:d8:e3:e6:84:95:11:42:19:2d:92:d8:
41:26:57:e6:6e:fa:c1:14:f4:50:bd:61:e7:2b:2a:ca:23:e8:
3c:8b:50:88:f7:41:3f:3c:d5:2e:b5:ad:6f:45:d8:2c:d0:69:
50:87:34:22:26:1a:75:7f:a3:6d:5b:69:0f:e6:95:b1:c1:57:
b6:00:0f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9KuAzVxteG0pGDZyDA5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk
OTFjNmYwHhcNMjUwNjE0MTUwMDE3WhcNMjUwNjE1MTUwMDE3WjAzMTEwLwYDVQQD
EyhjOGRiNmVmMmU3MDQ4ZWQwMGMzZThjYWNjMTRmMjBkMTlhOTY0OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hKY2gPGCPvQU0KcxhI75P4DZwDM
BrbyreJy7Qtd1fgR1Kxm43cT4c+9g0pLHPOAZ0IuD7+ZTL4si9iGcN/bAvVyhcxm
s+NcLt4+61f3JzWQD5B+8G0Ai9X8Q3gw24d5gDC9GBNgH72zdwVlw9J7u/ZYXVmK
wCybsBFzeltGVoSzJQvIQZk2Cx/kIp5E5AZ1Mhepsxo8X7qb9o4+3GihwmpjfO3u
USv+4/kkJWaY7Dldr9ZaIRJt/nf45xoKLOeqbtX+yE6MFYJVh8h3S79rsA8MxtY9
NP9cy9TahBqdOOxA6Rz5W3fOKz+DQYsA2YOuIly2xmGO1gzp+mDJWkkbHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjbbvLnBI7QDD6MrMFPINGalkl9MB8GA1UdIwQY
MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt
ZWY2YmQyNmEwMzA1LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1
LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2ryT/pA
aIhw4OvQgNs/oasR40Ur/E0nMdQ0M/5Ls4pCn3BPBVuLaM/sbpuIuMongiAFpW+X
Xj/N94wD7BKX/3SD+C1x64OUa0RxkbKtMilT6oCpWXzpLvFLYswRrNXHYSB5RHnq
EzKpmK2mkezOxyyJE6R9aCHTkFhLQ7DRfVYBTC4ybVePtehEaOE9k+w1dHuB2Z7C
g9uKEbik31+6kgRMF4vOnInKf4LP0P9JkmhLlcaB+j+6eNnMP9jj5oSVEUIZLZLY
QSZX5m76wRT0UL1h5ysqyiPoPItQiPdBPzzVLrWtb0XYLNBpUIc0IiYadX+jbVtp
D+aVscFXtgAPTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:13:18 2025 by rpki-client