Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: JS7JffSt4lDmbrFQLWA5IeloZeB3CHkVSeANlZd5oBQ=
Subject key identifier: 66:9F:4D:D3:99:39:6D:1D:0A:30:3E:40:2C:B5:21:D5:97:A2:AE:9A
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 019780FB417D8C2B13BA4D388CDE111B72DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 14D9
Signing time: Wed 18 Jun 2025 03:00:39 +0000
Manifest this update: Wed 18 Jun 2025 03:00:39 +0000
Manifest next update: Thu 19 Jun 2025 03:00:39 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: nULZ9/hJ57Svfu1gkABdyyhPN1/Yjn4KOH74YOXLIWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:41:7d:8c:2b:13:ba:4d:38:8c:de:11:1b:72:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Jun 18 03:00:39 2025 GMT
Not After : Jun 19 03:00:39 2025 GMT
Subject: CN=669f4dd399396d1d0a303e402cb521d597a2ae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:6a:10:59:cf:ca:aa:9b:e7:f3:6f:1a:00:
c0:a0:1b:54:7e:43:e8:e8:fd:fa:3d:94:2a:31:22:
14:84:3d:ed:70:43:80:b2:91:ab:72:06:ca:3d:cb:
c6:45:ed:96:ac:03:c8:14:39:bf:1d:e5:3d:37:ad:
46:3b:1d:a4:68:49:9b:ae:06:f3:c8:9d:6f:33:ec:
4d:3f:72:09:9c:55:38:ee:ef:30:76:fb:f9:72:f9:
68:8f:0e:f1:4a:06:08:ba:7f:ce:95:ae:38:05:06:
a4:b1:3d:00:d6:a0:a8:45:33:38:9a:c1:de:37:90:
0f:f8:ec:11:17:9c:32:05:7a:47:4c:d0:cb:c8:94:
a8:c6:d4:01:12:bb:30:26:4d:ad:3d:fb:94:65:fd:
ac:86:eb:3c:a1:34:f2:10:76:51:46:92:3a:cc:d1:
80:9f:fa:02:91:e8:bb:bb:b4:c6:18:2b:dd:70:93:
af:08:b1:4a:7a:ab:ca:d3:71:ae:08:20:8c:48:44:
78:e1:cf:c5:14:c0:0f:31:27:fb:f5:4c:83:83:02:
5a:af:c0:37:0b:28:d4:86:37:77:ba:d7:c5:f8:85:
15:d4:d7:b6:4d:5a:fe:2c:d9:6a:da:53:bd:7e:bc:
90:82:a9:34:39:37:e9:69:0a:11:56:51:a3:44:0a:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:4D:D3:99:39:6D:1D:0A:30:3E:40:2C:B5:21:D5:97:A2:AE:9A
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9b:a5:e7:b4:e5:44:31:88:fa:7e:87:08:27:d2:0a:79:1d:
32:36:66:8b:c5:ee:9d:7f:f7:04:88:75:ef:50:9a:c7:4a:12:
cb:fa:ce:2b:32:74:19:6e:f4:72:aa:8d:7f:c7:95:6d:cf:fa:
1d:20:f7:f6:c0:ce:96:ca:6f:d1:68:eb:47:c3:b9:8d:8a:7c:
f5:9e:45:34:6d:39:ec:4b:d7:cb:00:31:00:88:19:b1:e3:b2:
25:aa:20:78:59:e0:2d:e3:07:83:ca:e9:60:ae:d3:5a:8c:97:
2b:ab:3d:5c:c8:96:a2:12:c7:12:65:d2:11:2e:85:4a:51:b9:
14:75:ef:0b:3a:69:b7:53:26:e3:5f:c7:7f:9d:64:75:18:78:
b7:f5:76:22:17:a0:17:76:65:6d:32:64:7f:ff:be:12:09:1e:
fd:b8:0d:b5:76:bc:45:e0:55:0d:3a:88:95:2b:76:58:32:19:
1e:12:9a:cf:6d:13:87:66:e5:e5:e5:ee:29:97:34:c7:26:af:
2f:e2:70:c5:60:8f:1f:71:ea:28:af:8c:8c:ff:bc:71:fd:6a:
d6:ba:3a:6e:75:ec:e7:4d:f2:01:4f:61:a0:25:0b:a9:d7:60:
55:ab:b1:54:f6:d1:46:a1:50:cd:a0:ae:f5:de:48:9e:3d:bd:
71:e1:dc:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeA+0F9jCsTuk04jN4RG3LcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzdjYTNhYmNhNWUxNGFjMTFiYzdmM2MxNTYyYTY0ZDYz
OTFkMjIwHhcNMjUwNjE4MDMwMDM5WhcNMjUwNjE5MDMwMDM5WjAzMTEwLwYDVQQD
Eyg2NjlmNGRkMzk5Mzk2ZDFkMGEzMDNlNDAyY2I1MjFkNTk3YTJhZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2pqEFnPyqqb5/NvGgDAoBtUfkPo
6P36PZQqMSIUhD3tcEOAspGrcgbKPcvGRe2WrAPIFDm/HeU9N61GOx2kaEmbrgbz
yJ1vM+xNP3IJnFU47u8wdvv5cvlojw7xSgYIun/Ola44BQaksT0A1qCoRTM4msHe
N5AP+OwRF5wyBXpHTNDLyJSoxtQBErswJk2tPfuUZf2shus8oTTyEHZRRpI6zNGA
n/oCkei7u7TGGCvdcJOvCLFKeqvK03GuCCCMSER44c/FFMAPMSf79UyDgwJar8A3
CyjUhjd3utfF+IUV1Ne2TVr+LNlq2lO9fryQgqk0OTfpaQoRVlGjRAqQaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGafTdOZOW0dCjA+QCy1IdWXoq6aMB8GA1UdIwQY
MBaAFM43yjq8peFKwRvH88FWKmTWOR0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQt
MDM4MDM1ZDgwYzBiLzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iZTY2YmYtNTYxYy00ZDU1LTgyNmQtMDM4MDM1ZDgwYzBi
LzEvempmS09yeWw0VXJCRzhmendWWXFaTlk1SFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5ul57Tl
RDGI+n6HCCfSCnkdMjZmi8XunX/3BIh171Cax0oSy/rOKzJ0GW70cqqNf8eVbc/6
HSD39sDOlspv0WjrR8O5jYp89Z5FNG057EvXywAxAIgZseOyJaogeFngLeMHg8rp
YK7TWoyXK6s9XMiWohLHEmXSES6FSlG5FHXvCzppt1Mm41/Hf51kdRh4t/V2Iheg
F3ZlbTJkf/++Egke/bgNtXa8ReBVDTqIlSt2WDIZHhKaz20Th2bl5eXuKZc0xyav
L+JwxWCPH3HqKK+MjP+8cf1q1ro6bnXs503yAU9hoCULqddgVauxVPbRRqFQzaCu
9d5Inj29ceHc8Q==
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:54:39 2025 by rpki-client