Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File: ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier: FN4bmou746mtFmnweVLKgQrPLkcTt7x1VSXDmBa5Q4g=
Subject key identifier: 33:BA:4E:DF:C5:76:69:8C:4C:1D:C9:80:2C:02:C8:54:B6:EE:9F:26
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer: /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial: 0197771CB426BF6A299C3F08AA86AA1B30DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 05:00:59 +0000
Manifest this update: Mon 16 Jun 2025 05:00:59 +0000
Manifest next update: Tue 17 Jun 2025 05:00:59 +0000
Files and hashes: 1: CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa (hash: 1bONPKFzyDS/3APoxZR25vqyDAsgCQifSMXpTfL4F0s=)
2: WxxzockSF-0jbEBubYwjKIfgtaw.roa (hash: uNom3cZ42KKzlsjBXTYNfCi+Ksse/PrjCfplRbo7jWE=)
3: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: SEpLYebsxlePvehUl6aQc9yU7E8cSq54dItZOJ8dH6I=)
4: hAuohYiSHygUFUxTjuX1SWN5QDE.roa (hash: MotGMSUysnMBdzXEwoyDH1EBq/l4jrQRez7lyisrMeA=)
5: n6ANVJpjfADW-mInHpVlhLdkL5w.roa (hash: E28ZlsfhOnBkyIyOKkYfx6xyMrKE5R52d/SAANOKtIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:b4:26:bf:6a:29:9c:3f:08:aa:86:aa:1b:30:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Validity
Not Before: Jun 16 05:00:59 2025 GMT
Not After : Jun 17 05:00:59 2025 GMT
Subject: CN=33ba4edfc576698c4c1dc9802c02c854b6ee9f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:26:99:0d:95:0a:74:ae:0f:74:14:bb:b7:da:
1b:d7:83:fd:68:1c:1c:8f:a7:d8:a4:a4:f9:15:17:
3e:f2:87:cb:c0:fe:c1:c8:6c:dd:62:51:de:23:38:
e5:5b:43:65:34:79:ff:4c:8b:90:64:ad:7f:da:f7:
c0:35:8b:0b:5c:6f:57:c8:6a:d7:f2:21:df:a4:55:
43:84:c7:85:ce:12:c2:1e:5e:b6:fc:b0:90:e1:77:
ff:72:ac:39:db:b9:a9:bd:07:de:5d:d7:7d:c4:68:
fc:12:ba:6b:95:4a:1e:61:8e:c1:87:12:64:84:33:
c7:17:04:8d:d6:00:ca:03:8f:a4:3d:fc:db:09:f5:
75:4a:c0:cf:4a:0f:11:5f:c5:c0:b3:4f:b6:64:66:
b9:79:84:58:fb:51:35:66:ab:bf:8d:b4:8c:1e:d9:
9c:18:05:84:05:85:a5:d3:d3:36:bc:da:b9:b5:ea:
e5:76:e9:af:d6:ef:6d:23:ac:26:29:da:82:bb:57:
eb:a4:d0:9a:40:d4:ed:cf:51:88:4e:cf:c9:51:fa:
0e:3e:cb:e8:a2:1f:1a:85:e2:4e:06:6a:d3:71:5c:
77:d7:2a:13:df:7f:59:26:63:53:31:65:44:9e:16:
c1:51:32:5b:41:1e:08:14:63:26:6f:e8:64:45:e3:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:4E:DF:C5:76:69:8C:4C:1D:C9:80:2C:02:C8:54:B6:EE:9F:26
X509v3 Authority Key Identifier:
keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7d:e4:10:22:20:98:7a:64:42:dd:5a:a1:21:c6:2c:b3:4a:
4d:2f:3b:fa:7f:0f:2f:8c:c3:58:26:f6:c6:e0:74:7b:99:2b:
9e:c8:e2:57:89:48:1f:7f:c0:d8:db:93:13:00:cd:61:34:24:
0d:12:1e:33:1d:43:4e:ea:33:4c:e7:e5:d4:3e:e0:4d:38:15:
bf:99:aa:9e:3c:c5:98:3c:22:a7:91:b2:90:d8:57:25:b8:f5:
2e:ad:47:be:a7:81:92:fe:9a:4b:26:da:44:5f:91:f7:cc:c2:
9c:60:29:72:72:83:4d:6f:01:bc:cb:9f:65:b8:c5:29:bd:a4:
fc:7e:a9:66:13:fd:4a:9f:1c:93:bf:a5:d6:c1:b3:e8:69:5e:
93:23:62:68:50:5a:ba:bf:54:d5:0a:40:8d:9c:ba:18:99:6a:
73:e2:d4:d9:2e:8e:bf:b2:1f:44:35:c3:01:f3:81:90:75:b0:
06:e6:c8:6e:f0:5e:f8:e6:b0:99:a1:6c:85:8e:39:e9:3b:f4:
d6:4a:ea:63:1f:33:df:f6:5b:27:87:3b:c9:87:03:92:74:7b:
d9:70:5f:4c:9d:24:47:62:ae:15:b3:0e:6a:c0:be:87:49:e7:
65:3b:f9:0b:6b:35:26:50:5f:09:db:7e:67:0b:65:ec:eb:65:
b5:b6:8c:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3HLQmv2opnD8IqoaqGzDcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MTA0ZTRmN2Q5ZjM4ZDhlMjJhMmQzMmJlMDE5MDMxOTMw
YzFhNDcwHhcNMjUwNjE2MDUwMDU5WhcNMjUwNjE3MDUwMDU5WjAzMTEwLwYDVQQD
EygzM2JhNGVkZmM1NzY2OThjNGMxZGM5ODAyYzAyYzg1NGI2ZWU5ZjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiaZDZUKdK4PdBS7t9ob14P9aBwc
j6fYpKT5FRc+8ofLwP7ByGzdYlHeIzjlW0NlNHn/TIuQZK1/2vfANYsLXG9XyGrX
8iHfpFVDhMeFzhLCHl62/LCQ4Xf/cqw527mpvQfeXdd9xGj8ErprlUoeYY7BhxJk
hDPHFwSN1gDKA4+kPfzbCfV1SsDPSg8RX8XAs0+2ZGa5eYRY+1E1Zqu/jbSMHtmc
GAWEBYWl09M2vNq5terldumv1u9tI6wmKdqCu1frpNCaQNTtz1GITs/JUfoOPsvo
oh8aheJOBmrTcVx31yoT339ZJmNTMWVEnhbBUTJbQR4IFGMmb+hkReMV0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO6Tt/FdmmMTB3JgCwCyFS27p8mMB8GA1UdIwQY
MBaAFGYQTk99nzjY4iotMr4BkDGTDBpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQt
NDc0NzJlZDNiZWNiLzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS84MmQyMjItMjIwMi00NWYyLWI5MDQtNDc0NzJlZDNiZWNi
LzEvWmhCT1QzMmZPTmppS2kweXZnR1FNWk1NR2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH3kECIg
mHpkQt1aoSHGLLNKTS87+n8PL4zDWCb2xuB0e5krnsjiV4lIH3/A2NuTEwDNYTQk
DRIeMx1DTuozTOfl1D7gTTgVv5mqnjzFmDwip5GykNhXJbj1Lq1HvqeBkv6aSyba
RF+R98zCnGApcnKDTW8BvMufZbjFKb2k/H6pZhP9Sp8ck7+l1sGz6GlekyNiaFBa
ur9U1QpAjZy6GJlqc+LU2S6Ov7IfRDXDAfOBkHWwBubIbvBe+OawmaFshY456Tv0
1krqYx8z3/ZbJ4c7yYcDknR72XBfTJ0kR2KuFbMOasC+h0nnZTv5C2s1JlBfCdt+
Zwtl7OtltbaMLg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:28:38 2025 by rpki-client