Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: 8Ho7iIML796p0Ezyjf/4AQZkf7D2W7fQJiNBQbjwKt4=
Subject key identifier: B2:98:08:A8:F4:4C:2B:E0:FB:08:69:13:91:CC:02:06:4E:1C:E6:15
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 01977F43AE10573C7561A8834095152F2616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 0E42
Signing time: Tue 17 Jun 2025 19:00:31 +0000
Manifest this update: Tue 17 Jun 2025 19:00:31 +0000
Manifest next update: Wed 18 Jun 2025 19:00:31 +0000
Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: kW2zOcfjHrx5/OKk9DdMTdOQkL28HB1MG2Vitv5tcBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:43:ae:10:57:3c:75:61:a8:83:40:95:15:2f:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Jun 17 19:00:31 2025 GMT
Not After : Jun 18 19:00:31 2025 GMT
Subject: CN=b29808a8f44c2be0fb08691391cc02064e1ce615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:ea:55:f1:5a:b7:ca:38:1e:43:f3:6d:9f:
b3:c6:ec:c2:0f:0a:9d:3c:cd:47:13:47:21:c5:d5:
49:2a:cc:ea:9f:db:32:58:d6:df:73:f9:25:aa:8e:
52:70:fe:82:b0:55:c9:72:8c:06:29:a9:b7:3f:69:
c8:19:c6:4b:80:51:38:cd:bc:cc:ed:a0:54:3f:1a:
0d:ba:4d:35:5e:60:eb:53:68:1e:62:d1:95:88:b8:
67:45:36:32:b3:1b:02:b6:87:9b:f7:1b:75:b6:93:
8c:81:09:43:64:7a:0b:20:de:dc:f6:f1:7c:50:7d:
6d:f9:0c:ca:9f:fa:01:b7:43:60:bb:19:78:81:4c:
fa:56:8a:e8:54:d9:f2:63:c1:51:c0:eb:66:77:dc:
c7:15:70:2f:3b:61:6e:72:c5:02:77:ac:a6:1b:21:
b4:42:cf:8e:16:55:d3:68:c9:5c:aa:6f:10:22:41:
27:10:cb:aa:fd:a0:78:ed:36:10:e4:6c:b0:25:46:
4b:55:0f:26:00:4e:b9:d9:1b:7d:03:f1:3b:91:4d:
c6:d5:22:7b:88:d7:81:09:dc:cc:ea:99:db:aa:69:
b2:a2:f9:05:67:58:20:a2:f7:8f:0f:ee:12:c7:41:
d0:94:04:d4:70:23:5f:75:81:04:24:f1:f6:76:e8:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:98:08:A8:F4:4C:2B:E0:FB:08:69:13:91:CC:02:06:4E:1C:E6:15
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1e:f2:32:26:a7:b5:20:90:ac:87:60:57:fc:b8:46:6e:74:
fa:80:ce:6c:42:ca:64:3a:f9:1f:e0:46:1a:04:af:46:d2:7c:
57:2a:58:c1:ae:59:15:95:1a:e9:53:0b:70:f8:90:f6:1a:1b:
9a:aa:a6:eb:b5:33:da:fd:88:fa:b9:87:46:23:e1:b4:d6:5c:
03:d9:65:48:3a:4c:b7:55:2c:eb:a9:af:2d:dd:49:1a:b2:b8:
68:24:da:e9:10:07:71:e4:aa:5e:21:09:63:56:97:c8:f7:dc:
25:e1:2f:c4:34:c3:8b:35:25:d8:57:38:38:9e:a7:66:63:d9:
90:b0:59:f0:3f:08:63:81:c8:5b:47:db:57:da:15:9d:76:17:
e4:67:9e:4e:1d:8a:83:80:d7:22:fd:5a:4d:6b:5b:18:3a:90:
ab:a6:a8:9c:1d:fb:4d:87:04:07:97:15:ef:c5:e4:5f:59:ac:
ee:a2:a9:0d:6e:a6:83:2f:af:40:e4:c1:44:5d:a2:b6:69:31:
24:06:91:20:1b:ff:7f:cc:e7:66:e5:2f:86:88:45:3e:60:2b:
33:be:e7:c8:db:2e:4a:a9:cc:18:fc:f5:d1:ff:4f:fc:2b:0a:
5e:01:92:ba:a4:c3:b6:fc:49:f4:8a:77:f9:b4:65:16:07:92:
a2:ed:c2:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/Q64QVzx1YaiDQJUVLyYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1
ODUyMGMwHhcNMjUwNjE3MTkwMDMxWhcNMjUwNjE4MTkwMDMxWjAzMTEwLwYDVQQD
EyhiMjk4MDhhOGY0NGMyYmUwZmIwODY5MTM5MWNjMDIwNjRlMWNlNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YbqVfFat8o4HkPzbZ+zxuzCDwqd
PM1HE0chxdVJKszqn9syWNbfc/klqo5ScP6CsFXJcowGKam3P2nIGcZLgFE4zbzM
7aBUPxoNuk01XmDrU2geYtGViLhnRTYysxsCtoeb9xt1tpOMgQlDZHoLIN7c9vF8
UH1t+QzKn/oBt0Nguxl4gUz6VoroVNnyY8FRwOtmd9zHFXAvO2FucsUCd6ymGyG0
Qs+OFlXTaMlcqm8QIkEnEMuq/aB47TYQ5GywJUZLVQ8mAE652Rt9A/E7kU3G1SJ7
iNeBCdzM6pnbqmmyovkFZ1ggovePD+4Sx0HQlATUcCNfdYEEJPH2duh/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKYCKj0TCvg+whpE5HMAgZOHOYVMB8GA1UdIwQY
MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt
MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4
LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOB7yMian
tSCQrIdgV/y4Rm50+oDObELKZDr5H+BGGgSvRtJ8VypYwa5ZFZUa6VMLcPiQ9hob
mqqm67Uz2v2I+rmHRiPhtNZcA9llSDpMt1Us66mvLd1JGrK4aCTa6RAHceSqXiEJ
Y1aXyPfcJeEvxDTDizUl2Fc4OJ6nZmPZkLBZ8D8IY4HIW0fbV9oVnXYX5GeeTh2K
g4DXIv1aTWtbGDqQq6aonB37TYcEB5cV78XkX1ms7qKpDW6mgy+vQOTBRF2itmkx
JAaRIBv/f8znZuUvhohFPmArM77nyNsuSqnMGPz10f9P/CsKXgGSuqTDtvxJ9Ip3
+bRlFgeSou3Cag==
-----END CERTIFICATE-----
Generated at Wed Jun 18 04:48:59 2025 by rpki-client