Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: yjqH1v+mwixFWdyg0ykL+XZHpJxfNAgF2durUccO6k8=
Subject key identifier: 37:4A:D6:57:C1:FC:33:45:28:9E:7D:04:03:06:FD:D0:EC:B6:68:7E
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019771BFAECBAA930B24568D7B3707696AC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 03F0
Signing time: Sun 15 Jun 2025 04:01:16 +0000
Manifest this update: Sun 15 Jun 2025 04:01:16 +0000
Manifest next update: Mon 16 Jun 2025 04:01:16 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: LAPZWFhKhQ7RfyGNBFJwhtuzt2JpxeSlzZQYWLmThfQ=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:ae:cb:aa:93:0b:24:56:8d:7b:37:07:69:6a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Jun 15 04:01:16 2025 GMT
Not After : Jun 16 04:01:16 2025 GMT
Subject: CN=374ad657c1fc3345289e7d040306fdd0ecb6687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:bd:ad:f9:8d:37:34:d2:83:c4:e7:73:be:
cf:5e:b4:4c:a2:cf:e3:83:e1:69:3e:33:5a:df:d3:
da:e3:c3:06:3d:c1:cf:1a:7c:bf:03:86:eb:0a:52:
79:c3:38:2a:43:a2:fb:e1:59:b3:ae:7b:b8:d3:2f:
53:03:df:6f:48:2e:92:4e:8b:a5:1a:ca:cd:96:f3:
3d:21:b1:05:03:17:79:20:ab:ee:1b:d4:62:a9:d0:
b1:64:52:5a:f8:64:0c:7a:32:f9:e5:cf:c6:36:f4:
15:02:ae:d6:70:25:51:18:35:1b:6a:dd:1d:84:8e:
d8:15:48:0c:df:73:84:ee:0b:b0:ed:5b:58:7e:69:
58:7e:5f:32:ca:1c:7f:c8:14:68:fa:fe:a9:b0:fb:
b2:e3:5e:0e:6e:25:95:e5:bc:6f:21:bc:76:6d:d6:
59:8c:52:30:37:69:67:f5:01:c9:cd:bf:79:cf:b3:
73:2a:66:4b:e7:78:a2:17:58:41:08:68:c4:33:b8:
e1:86:c4:3c:a8:89:14:5b:d7:0f:25:6f:fe:e7:84:
0f:07:1c:4b:cd:ef:b4:5a:6a:32:1d:5a:82:13:da:
69:a4:15:c2:ce:f3:bb:12:44:c1:86:56:54:3b:04:
04:95:b6:7d:52:de:45:32:61:bd:ea:f9:c3:d7:27:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:D6:57:C1:FC:33:45:28:9E:7D:04:03:06:FD:D0:EC:B6:68:7E
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4c:a8:c1:50:c6:c6:f7:e4:a0:3a:b1:40:a2:64:93:7d:8d:
9b:fb:85:5c:c3:f3:bc:1a:55:75:f7:f7:6d:f8:a9:c0:24:f5:
44:43:e9:5b:9a:a5:c2:bb:c7:6f:02:c8:23:fe:ad:89:a6:5a:
48:92:d1:d3:4c:7c:39:41:9f:5c:9d:df:cb:3d:18:1c:2e:41:
d2:27:8f:ed:c8:e0:95:f9:dc:02:55:39:c2:9a:3e:0c:70:5b:
bd:a2:de:33:5d:87:d3:c4:f8:4b:37:63:e4:40:b4:48:b6:c5:
f6:2f:e0:67:a8:92:1a:63:d1:e2:86:5a:70:ba:22:ec:90:0c:
70:47:8e:9e:32:fd:22:5c:9d:0b:55:1a:0a:75:2b:80:d5:69:
2a:65:50:6c:e8:4a:ec:a1:2c:dc:2f:f4:cc:a4:7e:e9:26:2c:
c5:d0:0d:50:c6:de:39:c2:07:db:4d:2f:28:52:ff:e5:61:41:
f5:94:67:55:8e:01:21:2a:2d:5b:d4:3c:ef:94:aa:ab:a2:d9:
00:ad:84:9c:bf:fb:26:bd:94:d1:b8:c7:f1:68:90:69:a6:7b:
6f:dc:31:82:98:e8:cc:b6:3f:7f:47:59:0f:f2:df:55:8f:5d:
b6:54:53:a5:84:43:39:35:55:66:d6:c6:92:30:1e:2b:ce:3e:
0f:0d:12:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv67LqpMLJFaNezcHaWrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh
NmFiOGQwHhcNMjUwNjE1MDQwMTE2WhcNMjUwNjE2MDQwMTE2WjAzMTEwLwYDVQQD
EygzNzRhZDY1N2MxZmMzMzQ1Mjg5ZTdkMDQwMzA2ZmRkMGVjYjY2ODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss69rfmNNzTSg8Tnc77PXrRMos/j
g+FpPjNa39Pa48MGPcHPGny/A4brClJ5wzgqQ6L74Vmzrnu40y9TA99vSC6SToul
GsrNlvM9IbEFAxd5IKvuG9RiqdCxZFJa+GQMejL55c/GNvQVAq7WcCVRGDUbat0d
hI7YFUgM33OE7guw7VtYfmlYfl8yyhx/yBRo+v6psPuy414ObiWV5bxvIbx2bdZZ
jFIwN2ln9QHJzb95z7NzKmZL53iiF1hBCGjEM7jhhsQ8qIkUW9cPJW/+54QPBxxL
ze+0WmoyHVqCE9pppBXCzvO7EkTBhlZUOwQElbZ9Ut5FMmG96vnD1ycPKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdK1lfB/DNFKJ59BAMG/dDstmh+MB8GA1UdIwQY
MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt
MzUwMDRhNjcxZWIzLzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz
LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkyowVDG
xvfkoDqxQKJkk32Nm/uFXMPzvBpVdff3bfipwCT1REPpW5qlwrvHbwLII/6tiaZa
SJLR00x8OUGfXJ3fyz0YHC5B0ieP7cjglfncAlU5wpo+DHBbvaLeM12H08T4Szdj
5EC0SLbF9i/gZ6iSGmPR4oZacLoi7JAMcEeOnjL9IlydC1UaCnUrgNVpKmVQbOhK
7KEs3C/0zKR+6SYsxdANUMbeOcIH200vKFL/5WFB9ZRnVY4BISotW9Q875Sqq6LZ
AK2EnL/7Jr2U0bjH8WiQaaZ7b9wxgpjozLY/f0dZD/LfVY9dtlRTpYRDOTVVZtbG
kjAeK84+Dw0S5Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:22:16 2025 by rpki-client