Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
File: ZN7YXZoFsd9omotsMT-BKMegC2c.mft (raw, json)
Hash identifier: 4NI8eZqyPnSXq/mmogj0ubuc6dF2KgT6rj/ceI0XB5o=
Subject key identifier: 5F:92:0B:69:A2:AB:37:E4:E2:91:E0:70:A4:56:98:25:FE:96:B2:1B
Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Certificate serial: 01976C98ADF6128DDA11D4D7EB8515AF3738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 04:00:34 +0000
Manifest this update: Sat 14 Jun 2025 04:00:34 +0000
Manifest next update: Sun 15 Jun 2025 04:00:34 +0000
Files and hashes: 1: ZN7YXZoFsd9omotsMT-BKMegC2c.crl (hash: ZSBKypW9DugDhZus2kxn+l6uQ1KbuQ/FQYeF7VrCG1c=)
2: mVTx8X7zW9-jF_MuhkLfqeZLvKg.roa (hash: tYbEebrUyUiI4ejPIzbtFxeT7l12ooRdzaX7lTItoII=)
3: uq1i3QTcOfr9aoUS3uiTj-7_PxQ.roa (hash: TsR7okYr+7CVrm7zPPpfCJyYKvk1uxkHBTpNsw0aMrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:ad:f6:12:8d:da:11:d4:d7:eb:85:15:af:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67
Validity
Not Before: Jun 14 04:00:34 2025 GMT
Not After : Jun 15 04:00:34 2025 GMT
Subject: CN=5f920b69a2ab37e4e291e070a4569825fe96b21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:e0:cf:b1:2e:8e:a9:b8:a2:7e:3a:b7:ea:
be:42:66:1b:94:6a:7b:12:d0:31:2d:83:a7:f1:54:
62:8f:d5:94:36:ac:49:b6:2e:e7:38:7f:55:18:6c:
df:3d:c1:29:5d:8c:69:ff:bc:ac:f3:81:ae:10:e7:
73:58:a9:c6:65:59:2e:88:4d:d1:e5:71:d7:6e:58:
e3:8b:e0:9a:82:06:b3:eb:cc:81:99:d8:6d:62:c5:
dc:18:ca:ee:a8:25:34:81:cf:49:1e:b2:8a:32:13:
2c:ef:0e:30:fe:5c:fd:1e:16:96:5c:9e:d4:c3:57:
2e:a6:51:8b:84:0a:48:66:0a:78:bf:d9:73:ae:6a:
80:d7:4a:4d:64:92:5b:77:97:6e:81:df:11:59:5c:
2a:9d:b0:9e:d4:77:29:4f:1c:2b:65:82:49:91:eb:
67:00:09:64:b7:d6:c9:7b:71:4f:7c:da:a3:0d:d1:
1d:75:a0:ea:28:23:fe:6c:86:84:d2:f6:f6:5d:c3:
16:09:be:b4:bf:c0:d5:81:85:02:71:14:79:fe:b3:
d7:25:ae:6a:c3:ad:a0:1b:94:58:77:ae:52:ea:1a:
94:25:2e:04:fb:65:18:87:41:f0:02:89:e9:55:a3:
69:9c:d3:f3:3e:9e:b2:8b:4c:34:4f:19:dc:28:af:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:0B:69:A2:AB:37:E4:E2:91:E0:70:A4:56:98:25:FE:96:B2:1B
X509v3 Authority Key Identifier:
keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:10:53:88:12:3d:e8:ad:63:99:71:7d:f7:13:75:34:7b:64:
a8:15:2c:93:5d:42:cf:8f:66:fb:be:8e:d7:a8:c4:e5:d0:f8:
6e:86:56:7b:b8:9a:35:e0:7f:bb:6f:63:db:9d:b8:da:43:aa:
96:a6:ea:b5:fd:50:a0:e3:f1:32:ad:78:b6:3a:5e:bb:35:3b:
27:2e:54:53:43:ba:74:c5:d1:ec:9b:ea:7d:79:e3:32:50:a1:
cc:a9:37:c4:1b:49:b4:1a:4d:53:f6:f2:de:40:44:91:76:b5:
10:25:24:80:e0:fb:30:43:1c:a7:50:41:01:ac:e2:5c:2d:13:
3b:cc:97:a1:05:09:94:cf:48:a3:32:5c:60:d9:e9:19:2d:ef:
28:ee:8b:5e:e1:fe:0d:ee:13:1f:2a:f5:4b:de:2e:e1:3a:0d:
24:72:0f:ae:9f:f0:4f:f3:f8:da:e5:51:75:a0:0e:11:9c:6b:
88:28:2e:14:52:68:9b:2d:6d:e6:ff:b1:fd:a6:72:51:34:83:
11:fe:07:4a:e7:59:28:f2:11:1c:cb:8f:42:d7:db:6b:e1:02:
77:3b:00:26:8b:27:7c:db:be:8b:f2:3f:31:48:1b:ea:45:75:
9e:6e:27:90:5f:68:df:2a:89:e7:27:ee:6b:8d:98:02:a3:bc:
15:72:87:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmK32Eo3aEdTX64UVrzc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh
MDBiNjcwHhcNMjUwNjE0MDQwMDM0WhcNMjUwNjE1MDQwMDM0WjAzMTEwLwYDVQQD
Eyg1ZjkyMGI2OWEyYWIzN2U0ZTI5MWUwNzBhNDU2OTgyNWZlOTZiMjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRbgz7Eujqm4on46t+q+QmYblGp7
EtAxLYOn8VRij9WUNqxJti7nOH9VGGzfPcEpXYxp/7ys84GuEOdzWKnGZVkuiE3R
5XHXbljji+Caggaz68yBmdhtYsXcGMruqCU0gc9JHrKKMhMs7w4w/lz9HhaWXJ7U
w1cuplGLhApIZgp4v9lzrmqA10pNZJJbd5dugd8RWVwqnbCe1HcpTxwrZYJJketn
AAlkt9bJe3FPfNqjDdEddaDqKCP+bIaE0vb2XcMWCb60v8DVgYUCcRR5/rPXJa5q
w62gG5RYd65S6hqUJS4E+2UYh0HwAonpVaNpnNPzPp6yi0w0TxncKK9e6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+SC2miqzfk4pHgcKRWmCX+lrIbMB8GA1UdIwQY
MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt
YjllYjg3MWY2ZDk2LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2
LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxBTiBI9
6K1jmXF99xN1NHtkqBUsk11Cz49m+76O16jE5dD4boZWe7iaNeB/u29j25242kOq
lqbqtf1QoOPxMq14tjpeuzU7Jy5UU0O6dMXR7JvqfXnjMlChzKk3xBtJtBpNU/by
3kBEkXa1ECUkgOD7MEMcp1BBAaziXC0TO8yXoQUJlM9IozJcYNnpGS3vKO6LXuH+
De4THyr1S94u4ToNJHIPrp/wT/P42uVRdaAOEZxriCguFFJomy1t5v+x/aZyUTSD
Ef4HSudZKPIRHMuPQtfba+ECdzsAJosnfNu+i/I/MUgb6kV1nm4nkF9o3yqJ5yfu
a42YAqO8FXKHyA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:33:49 2025 by rpki-client