Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: 7bFVwCaHxY88U/2fP9G4ppJqf6Nmcc9KBbR16Ov/Vzo=
Subject key identifier: F4:6D:BE:24:97:38:ED:8E:C0:DF:CB:10:A1:80:96:10:4F:2C:32:B7
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 01977640FACDEAEA15E524D0C331C25D4FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 12A1
Signing time: Mon 16 Jun 2025 01:00:59 +0000
Manifest this update: Mon 16 Jun 2025 01:00:59 +0000
Manifest next update: Tue 17 Jun 2025 01:00:59 +0000
Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: ngQ8ubtOwlGyXZodnCXWqfudLqjMhwd1x99IgYOxBkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:fa:cd:ea:ea:15:e5:24:d0:c3:31:c2:5d:4f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Jun 16 01:00:59 2025 GMT
Not After : Jun 17 01:00:59 2025 GMT
Subject: CN=f46dbe249738ed8ec0dfcb10a18096104f2c32b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:7d:84:fa:03:3e:0b:ec:53:8c:b0:ea:8f:
16:f7:9b:75:f2:a2:8a:22:1d:7b:f6:cb:ec:8b:06:
5d:26:08:12:b2:00:ee:0a:5e:ec:91:c8:e3:8e:7c:
1b:5d:86:71:e9:d4:6d:3f:d7:10:ee:7f:ed:33:5c:
23:72:28:2f:3a:17:6d:fd:f3:af:56:38:c1:0f:1c:
a8:41:56:79:89:2e:ef:89:f6:fb:29:44:ad:6f:74:
24:dd:46:1c:88:8c:14:24:61:98:2a:c2:0e:13:7e:
7d:d5:10:01:e1:fe:b4:03:05:df:e9:22:9a:80:37:
53:0d:c0:6e:82:9f:ea:6a:cc:b7:67:51:c5:4b:9d:
bc:40:7d:c7:2e:f5:8a:47:39:e1:4e:ca:56:39:95:
e5:f9:fe:c9:ff:03:11:cf:d2:f9:8d:6d:3d:f7:aa:
0b:5b:60:c7:c0:88:12:2b:ca:37:89:9d:49:81:0f:
f5:34:33:0f:90:7e:3b:a0:1a:07:07:62:f5:a3:18:
68:a1:54:e1:63:45:15:08:a7:b6:67:41:76:62:7b:
dc:9c:9e:c7:21:d1:92:68:64:0b:89:47:0e:4a:49:
d9:2f:8f:51:71:4f:73:60:d1:2e:9e:d0:7f:10:c5:
69:13:f6:41:e9:41:53:22:92:13:17:1e:78:5e:3e:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6D:BE:24:97:38:ED:8E:C0:DF:CB:10:A1:80:96:10:4F:2C:32:B7
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3e:ba:b5:3b:25:53:b6:de:ba:f5:69:5a:77:97:40:02:4f:
58:81:be:fb:55:07:81:31:b4:a0:1e:05:3d:7a:d9:9c:8c:bb:
66:92:2b:6a:9f:27:9c:0c:82:1c:8d:95:34:85:cf:48:36:aa:
3e:eb:f5:3b:29:87:f7:29:59:fc:41:6e:38:e8:42:5b:34:fb:
1b:c1:b0:1c:55:ec:83:75:6c:7f:0a:a9:d2:aa:94:bf:d5:d9:
1a:09:c3:e0:b9:cd:c7:3f:3b:e4:8f:66:03:d0:2e:56:b0:64:
6c:3d:b7:87:ba:75:6b:25:7d:e8:1b:fc:13:b6:d8:15:28:8f:
0f:c2:68:82:61:cd:9a:ab:a9:ad:37:85:76:67:30:5a:be:87:
51:16:aa:c4:e3:06:cb:6c:8e:c2:f0:9b:93:79:b9:a8:41:56:
f3:61:76:a5:8f:c6:e6:c4:a0:33:65:31:f8:27:33:2d:e2:8d:
ed:e3:93:cb:04:3f:ab:f5:53:09:9f:fa:9f:49:b5:96:b1:ad:
45:2f:e4:ef:7f:3f:1b:98:a7:0c:26:8d:7c:e1:8b:19:d5:6c:
87:d1:4b:e3:48:6c:72:09:7a:0e:0c:20:c2:53:fb:04:01:bc:
87:95:4e:8a:02:cf:5e:b2:24:48:47:8a:58:4f:7d:af:55:e4:
fa:c3:1b:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2QPrN6uoV5STQwzHCXU/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjUwNjE2MDEwMDU5WhcNMjUwNjE3MDEwMDU5WjAzMTEwLwYDVQQD
EyhmNDZkYmUyNDk3MzhlZDhlYzBkZmNiMTBhMTgwOTYxMDRmMmMzMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJx9hPoDPgvsU4yw6o8W95t18qKK
Ih179svsiwZdJggSsgDuCl7skcjjjnwbXYZx6dRtP9cQ7n/tM1wjcigvOhdt/fOv
VjjBDxyoQVZ5iS7vifb7KUStb3Qk3UYciIwUJGGYKsIOE3591RAB4f60AwXf6SKa
gDdTDcBugp/qasy3Z1HFS528QH3HLvWKRznhTspWOZXl+f7J/wMRz9L5jW0996oL
W2DHwIgSK8o3iZ1JgQ/1NDMPkH47oBoHB2L1oxhooVThY0UVCKe2Z0F2YnvcnJ7H
IdGSaGQLiUcOSknZL49RcU9zYNEuntB/EMVpE/ZB6UFTIpITFx54Xj54aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRtviSXOO2OwN/LEKGAlhBPLDK3MB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGj66tTsl
U7beuvVpWneXQAJPWIG++1UHgTG0oB4FPXrZnIy7ZpIrap8nnAyCHI2VNIXPSDaq
Puv1OymH9ylZ/EFuOOhCWzT7G8GwHFXsg3Vsfwqp0qqUv9XZGgnD4LnNxz875I9m
A9AuVrBkbD23h7p1ayV96Bv8E7bYFSiPD8JogmHNmquprTeFdmcwWr6HURaqxOMG
y2yOwvCbk3m5qEFW82F2pY/G5sSgM2Ux+CczLeKN7eOTywQ/q/VTCZ/6n0m1lrGt
RS/k738/G5inDCaNfOGLGdVsh9FL40hscgl6DgwgwlP7BAG8h5VOigLPXrIkSEeK
WE99r1Xk+sMbcQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 08:21:40 2025 by rpki-client