Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: wbaFER4nQYWkOF31VoOZS4dJln3Z/w+t+aBrNnzMBG4=
Subject key identifier: EF:C3:5A:FF:41:DC:75:B6:9D:32:80:81:FD:EF:BD:AF:10:36:49:44
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 01976F2BAA52212FA4A73EE5D562B4DA8CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 109B
Signing time: Sat 14 Jun 2025 16:00:21 +0000
Manifest this update: Sat 14 Jun 2025 16:00:21 +0000
Manifest next update: Sun 15 Jun 2025 16:00:21 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: k3Qxgy+PDDC3NhlHTlSgbLN2kpscU76zDuIHcVPKq6g=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:aa:52:21:2f:a4:a7:3e:e5:d5:62:b4:da:8c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Jun 14 16:00:21 2025 GMT
Not After : Jun 15 16:00:21 2025 GMT
Subject: CN=efc35aff41dc75b69d328081fdefbdaf10364944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:df:ee:8f:4a:fd:bd:4f:9f:df:41:58:c6:e7:
37:48:ef:2b:65:d4:4b:56:09:78:90:07:58:27:15:
b8:50:72:ca:d0:52:e5:4f:0c:26:35:4c:1d:10:db:
3c:6b:9c:54:f4:38:13:ad:d4:d3:7f:6d:4f:b6:7a:
6e:aa:5e:fd:93:cc:2e:ae:89:4f:c6:21:de:d1:7c:
9a:92:f2:72:b6:da:00:e2:fd:b6:a7:80:7b:04:3d:
9d:2a:0b:ce:37:fc:bc:2f:e9:37:29:e1:a3:fe:97:
60:94:d1:eb:36:fe:55:f9:01:92:1b:b4:c9:72:6d:
0c:c0:e3:e4:1c:d4:3f:98:64:5e:dc:9a:0a:0e:a0:
dd:fa:f5:da:ff:7b:97:d1:56:9e:de:01:77:ed:19:
a2:d6:ad:19:0e:85:4a:1d:94:ae:dd:7f:0b:99:70:
97:a9:bd:5b:d6:f6:72:02:a0:38:0b:e3:42:b8:70:
26:b9:00:1e:da:7d:4c:c7:ea:c3:78:eb:7b:8e:da:
7e:16:df:14:bf:80:fd:fa:17:c9:33:5e:b2:4d:e4:
47:19:cd:c8:af:d4:1e:14:84:5d:5f:78:19:93:d0:
2d:8b:78:58:99:5d:6f:8a:f9:8c:f6:ad:12:4d:4e:
1a:4b:b2:12:a1:6d:a1:e8:2a:8c:fb:ff:03:db:87:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C3:5A:FF:41:DC:75:B6:9D:32:80:81:FD:EF:BD:AF:10:36:49:44
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fd:ad:e5:e7:66:2d:a9:50:47:c7:b6:9c:26:99:2b:a5:63:
8b:8f:40:73:e7:04:43:43:81:bf:fc:34:59:bf:44:98:91:48:
b3:3a:fc:52:d3:6e:6b:84:c0:95:ea:9a:ad:34:f1:20:cb:3d:
11:ba:28:54:60:e0:48:28:d8:7f:94:07:64:ff:ce:f9:02:ee:
65:a1:c8:a8:c4:84:d6:dc:3b:a9:bd:12:3f:d8:14:37:72:b3:
c3:8c:9d:aa:fe:a6:8b:73:cb:8e:87:01:7f:a7:c9:cf:48:f2:
cf:6c:94:42:c1:9d:8b:b5:09:f7:eb:b0:6f:d8:c8:fb:db:e2:
fa:a9:20:a6:0c:6f:ca:5d:a1:9a:fe:a2:76:24:d0:42:c5:e4:
57:ad:96:70:56:41:ff:fe:53:5a:37:3d:0d:d8:ac:73:16:48:
2e:7a:23:fa:9d:d3:90:14:e1:34:5e:72:7e:47:33:55:23:fb:
9a:f8:2c:c8:86:54:24:94:ca:d5:cd:90:66:95:97:da:40:f0:
1f:de:49:39:eb:5c:03:3e:bf:80:21:d7:3a:c5:a1:79:e8:cd:
7b:9e:0c:6e:d1:52:d3:2d:f5:3a:83:28:c0:fd:d6:20:fc:cf:
11:56:25:46:a5:c2:82:36:5c:37:5a:d3:bb:36:b0:9f:aa:30:
ce:1f:d6:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK6pSIS+kpz7l1WK02oyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjUwNjE0MTYwMDIxWhcNMjUwNjE1MTYwMDIxWjAzMTEwLwYDVQQD
EyhlZmMzNWFmZjQxZGM3NWI2OWQzMjgwODFmZGVmYmRhZjEwMzY0OTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9/uj0r9vU+f30FYxuc3SO8rZdRL
Vgl4kAdYJxW4UHLK0FLlTwwmNUwdENs8a5xU9DgTrdTTf21Ptnpuql79k8wurolP
xiHe0XyakvJyttoA4v22p4B7BD2dKgvON/y8L+k3KeGj/pdglNHrNv5V+QGSG7TJ
cm0MwOPkHNQ/mGRe3JoKDqDd+vXa/3uX0Vae3gF37Rmi1q0ZDoVKHZSu3X8LmXCX
qb1b1vZyAqA4C+NCuHAmuQAe2n1Mx+rDeOt7jtp+Ft8Uv4D9+hfJM16yTeRHGc3I
r9QeFIRdX3gZk9Ati3hYmV1vivmM9q0STU4aS7ISoW2h6CqM+/8D24eTowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/DWv9B3HW2nTKAgf3vva8QNklEMB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/2t5edm
LalQR8e2nCaZK6Vji49Ac+cEQ0OBv/w0Wb9EmJFIszr8UtNua4TAleqarTTxIMs9
EbooVGDgSCjYf5QHZP/O+QLuZaHIqMSE1tw7qb0SP9gUN3Kzw4ydqv6mi3PLjocB
f6fJz0jyz2yUQsGdi7UJ9+uwb9jI+9vi+qkgpgxvyl2hmv6idiTQQsXkV62WcFZB
//5TWjc9DdiscxZILnoj+p3TkBThNF5yfkczVSP7mvgsyIZUJJTK1c2QZpWX2kDw
H95JOetcAz6/gCHXOsWheejNe54MbtFS0y31OoMowP3WIPzPEVYlRqXCgjZcN1rT
uzawn6owzh/Wug==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:16:25 2025 by rpki-client