Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: m43JXhWhcQuJ8aaN5HtBAnaJFudA4qALEEtf8jQa1iY=
Subject key identifier: E7:22:34:52:09:A0:14:91:03:A0:8B:7E:9A:6B:4A:4B:69:AF:AE:5C
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019774BFD7DB847030D3C28B94B3F7DD5E93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0703
Signing time: Sun 15 Jun 2025 18:00:19 +0000
Manifest this update: Sun 15 Jun 2025 18:00:19 +0000
Manifest next update: Mon 16 Jun 2025 18:00:19 +0000
Files and hashes: 1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=)
2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: 4p1CUfuTCs57kNvahTwesE6eYzgpM9+GA2cy6AijnjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:bf:d7:db:84:70:30:d3:c2:8b:94:b3:f7:dd:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Jun 15 18:00:19 2025 GMT
Not After : Jun 16 18:00:19 2025 GMT
Subject: CN=e722345209a0149103a08b7e9a6b4a4b69afae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:80:22:82:60:ad:77:b0:8b:eb:f3:29:7c:
04:03:82:68:db:68:11:8f:da:77:c9:fc:e9:04:7a:
df:e2:a1:0d:83:67:e1:ad:d8:b9:ce:d7:04:73:05:
32:a5:04:3b:45:d2:a2:e3:31:b6:96:4f:18:53:84:
f6:45:0f:f5:48:c5:80:6b:89:de:06:e9:b3:1b:4d:
a5:76:1e:80:f0:6d:c1:ff:91:0e:65:23:a3:53:80:
b0:44:40:39:88:86:94:90:b6:b1:16:ef:8f:90:d3:
1f:28:f9:6b:5c:91:61:16:11:2c:14:5a:2f:98:5d:
7a:6a:df:b6:37:15:a7:28:a8:fa:13:3f:9b:61:08:
29:2f:76:99:c6:c9:cb:c8:ee:07:53:97:f6:31:98:
d0:50:a3:0e:c8:58:c3:65:4f:95:68:ce:91:de:29:
ad:66:6a:0a:70:f5:4b:42:65:2d:7d:5c:58:ec:49:
12:c2:da:f6:f0:eb:51:da:bb:44:ea:81:2e:9b:36:
b2:72:34:ee:f6:df:46:5f:46:c5:44:3b:16:6f:3e:
c3:ee:3a:6a:03:c1:f6:79:5b:b7:28:1a:3d:bc:13:
15:39:54:4d:b3:62:94:29:19:fb:11:84:2f:be:f8:
f6:92:30:df:29:b2:b5:3b:5a:c7:38:c0:62:e9:9c:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:34:52:09:A0:14:91:03:A0:8B:7E:9A:6B:4A:4B:69:AF:AE:5C
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e2:43:a5:27:10:c8:51:fa:d7:47:aa:c4:58:90:45:d3:7e:
45:8e:30:b3:88:e9:e1:6c:fe:02:b3:87:f3:18:48:60:3f:eb:
20:49:f8:6d:fc:25:a1:b4:1c:d2:3b:c1:72:ac:af:64:48:53:
36:ba:32:61:3c:0e:01:3a:1e:15:5c:07:34:ea:13:8b:67:61:
64:3b:44:c5:04:1a:4d:2e:a7:1a:55:c4:6f:f1:0e:01:61:e4:
4c:36:48:99:a7:9a:48:f9:6e:93:b0:92:09:41:ac:03:81:e8:
6d:83:f9:90:2a:1f:cd:ed:bc:fc:a3:02:a7:0c:54:f7:3f:6f:
72:f9:ac:d9:fd:07:9d:48:fb:ee:df:46:8d:a7:52:0b:de:e9:
53:8f:b2:11:93:51:8f:c6:d8:fb:1b:96:55:94:ea:97:86:21:
66:1f:33:e8:0f:9c:10:0d:e4:54:4e:6f:e0:fd:fa:0e:d7:c9:
31:b0:59:5e:64:e3:8f:42:4f:e9:58:1a:1e:35:49:3e:55:98:
98:08:85:59:0f:54:7c:22:13:6a:f3:3e:8e:03:72:2f:ad:fd:
73:c6:bb:7a:0e:4b:ed:bf:23:83:19:74:66:fb:4a:6a:1c:cc:
88:af:d2:7f:93:ee:8d:18:4d:4d:4d:14:03:8a:b6:d9:08:d5:
a0:76:ea:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0v9fbhHAw08KLlLP33V6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy
MjQxODkwHhcNMjUwNjE1MTgwMDE5WhcNMjUwNjE2MTgwMDE5WjAzMTEwLwYDVQQD
EyhlNzIyMzQ1MjA5YTAxNDkxMDNhMDhiN2U5YTZiNGE0YjY5YWZhZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rKAIoJgrXewi+vzKXwEA4Jo22gR
j9p3yfzpBHrf4qENg2fhrdi5ztcEcwUypQQ7RdKi4zG2lk8YU4T2RQ/1SMWAa4ne
BumzG02ldh6A8G3B/5EOZSOjU4CwREA5iIaUkLaxFu+PkNMfKPlrXJFhFhEsFFov
mF16at+2NxWnKKj6Ez+bYQgpL3aZxsnLyO4HU5f2MZjQUKMOyFjDZU+VaM6R3imt
ZmoKcPVLQmUtfVxY7EkSwtr28OtR2rtE6oEumzaycjTu9t9GX0bFRDsWbz7D7jpq
A8H2eVu3KBo9vBMVOVRNs2KUKRn7EYQvvvj2kjDfKbK1O1rHOMBi6ZwA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOciNFIJoBSRA6CLfpprSktpr65cMB8GA1UdIwQY
MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt
NjM1OWY5MmUxZDJmLzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm
LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOJDpScQ
yFH610eqxFiQRdN+RY4ws4jp4Wz+ArOH8xhIYD/rIEn4bfwlobQc0jvBcqyvZEhT
NroyYTwOAToeFVwHNOoTi2dhZDtExQQaTS6nGlXEb/EOAWHkTDZImaeaSPluk7CS
CUGsA4HobYP5kCofze28/KMCpwxU9z9vcvms2f0HnUj77t9GjadSC97pU4+yEZNR
j8bY+xuWVZTql4YhZh8z6A+cEA3kVE5v4P36DtfJMbBZXmTjj0JP6VgaHjVJPlWY
mAiFWQ9UfCITavM+jgNyL639c8a7eg5L7b8jgxl0ZvtKahzMiK/Sf5PujRhNTU0U
A4q22QjVoHbqeg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:47 2025 by rpki-client