Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier: smzEdHl8lKqGCeajVBq/W5VNmJRKSY3o7P9OVs6y6l0=
Subject key identifier: 52:CA:1B:36:94:C3:93:D8:E2:51:84:89:77:5B:16:33:6D:A1:90:61
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 01978433628A9E4BD660D00D92CB89DA14F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number: 11EE
Signing time: Wed 18 Jun 2025 18:00:49 +0000
Manifest this update: Wed 18 Jun 2025 18:00:49 +0000
Manifest next update: Thu 19 Jun 2025 18:00:49 +0000
Files and hashes: 1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: Ls0Lqq5FvbRbsI8GvTcrHGZoMkU44eTZ93mC2aDX/HU=)
2: ZNva-8ABsvjJ6HrNFF7Xd55KW-w.roa (hash: nx2aCY2Bfbi+2/xFJXRwWrGYEeyRAMv/De92goZyeZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:62:8a:9e:4b:d6:60:d0:0d:92:cb:89:da:14:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jun 18 18:00:49 2025 GMT
Not After : Jun 19 18:00:49 2025 GMT
Subject: CN=52ca1b3694c393d8e2518489775b16336da19061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:de:9e:80:3f:eb:10:5d:87:28:2a:64:10:
44:03:35:59:70:b8:f4:e0:0c:9b:3e:43:a9:98:61:
0d:a9:d6:72:e3:8d:90:79:34:31:36:69:ee:e7:48:
d5:6b:3b:da:94:f9:9d:e7:29:d5:8d:bb:8f:11:fe:
b2:85:1d:5f:5c:93:66:f9:d8:a4:95:4e:4f:5f:d5:
85:04:10:2b:e2:eb:50:dd:c5:30:2b:3c:7f:d2:7d:
e4:f0:41:0f:8c:c0:0c:b4:ce:f3:5b:6c:a6:11:7f:
e2:07:2b:c1:c3:28:38:9d:c0:7d:4f:43:f0:52:95:
58:1d:8a:51:22:a9:61:ec:a2:69:40:0a:e3:29:1f:
d2:79:b3:5a:42:59:a5:36:05:a6:49:6d:bf:bc:34:
7f:fa:14:1f:47:86:93:bd:5e:5b:4f:2e:eb:55:65:
96:dd:ee:9d:e5:8a:e1:cf:f8:d9:5a:39:97:87:9f:
81:24:e2:0f:bb:d7:9c:84:3a:7e:32:9f:4b:2a:05:
6f:5a:d0:b0:b8:27:a7:20:19:85:55:e1:31:73:d5:
71:2b:5b:23:48:1f:3a:aa:fd:ab:83:5a:3b:6b:58:
3f:73:30:15:ed:84:73:18:2d:93:e5:4f:a0:7d:42:
b4:c4:75:a0:a0:62:24:27:11:92:63:3f:ef:84:ae:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CA:1B:36:94:C3:93:D8:E2:51:84:89:77:5B:16:33:6D:A1:90:61
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a5:2f:87:a9:b3:0a:a0:77:4e:25:79:b4:3e:1b:94:ef:1f:
e5:3f:90:ad:42:0b:ea:53:90:76:d5:3b:28:b0:13:39:fa:b7:
d5:85:8f:2d:99:c3:03:f7:d1:87:27:12:b4:b0:a7:e1:26:fb:
d2:5c:24:ce:47:da:8d:6e:a3:87:5f:9c:d6:80:3a:66:14:5c:
6b:5b:41:e9:a1:9d:74:d8:53:e0:a9:71:af:bd:24:dd:55:b5:
8f:58:3e:b7:5c:f4:d7:eb:47:ca:be:a6:d7:11:1e:d3:3a:dc:
f5:46:0c:13:f0:58:3a:88:79:ac:95:3e:10:df:f5:7c:73:a6:
be:f2:d2:1b:31:fa:9d:80:b1:2f:eb:34:c0:76:90:94:0d:f8:
f6:c0:c5:7a:29:5e:3f:7d:2d:80:95:6f:0c:a4:e2:f5:7c:c0:
81:88:a5:5e:7e:09:f2:43:31:74:9a:a1:58:c4:4f:ff:0c:46:
0c:75:07:1e:51:24:b1:b4:6c:74:a9:7c:60:d2:d5:b8:67:64:
17:ad:f2:90:ba:d6:11:c4:a2:f4:c2:1f:35:41:c8:56:25:36:
49:32:bf:1d:81:fe:08:dc:51:f0:72:c2:0a:72:38:92:53:76:
98:92:15:98:7e:37:d4:d6:c2:5b:1e:29:f9:58:23:83:30:2b:
fd:b4:57:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeEM2KKnkvWYNANksuJ2hTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzFlOTYwY2QwNjEwMzliM2IyN2ZkMjVkNDE2MDc3MWM0
OThiYWIwHhcNMjUwNjE4MTgwMDQ5WhcNMjUwNjE5MTgwMDQ5WjAzMTEwLwYDVQQD
Eyg1MmNhMWIzNjk0YzM5M2Q4ZTI1MTg0ODk3NzViMTYzMzZkYTE5MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t3enoA/6xBdhygqZBBEAzVZcLj0
4AybPkOpmGENqdZy442QeTQxNmnu50jVazvalPmd5ynVjbuPEf6yhR1fXJNm+dik
lU5PX9WFBBAr4utQ3cUwKzx/0n3k8EEPjMAMtM7zW2ymEX/iByvBwyg4ncB9T0Pw
UpVYHYpRIqlh7KJpQArjKR/SebNaQlmlNgWmSW2/vDR/+hQfR4aTvV5bTy7rVWWW
3e6d5Yrhz/jZWjmXh5+BJOIPu9echDp+Mp9LKgVvWtCwuCenIBmFVeExc9VxK1sj
SB86qv2rg1o7a1g/czAV7YRzGC2T5U+gfUK0xHWgoGIkJxGSYz/vhK55KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLKGzaUw5PY4lGEiXdbFjNtoZBhMB8GA1UdIwQY
MBaAFGQx6WDNBhA5s7J/0l1BYHccSYurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTct
ZTlkYWY3OWViNzVlLzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTctZTlkYWY3OWViNzVl
LzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaUvh6mz
CqB3TiV5tD4blO8f5T+QrUIL6lOQdtU7KLATOfq31YWPLZnDA/fRhycStLCn4Sb7
0lwkzkfajW6jh1+c1oA6ZhRca1tB6aGddNhT4Klxr70k3VW1j1g+t1z01+tHyr6m
1xEe0zrc9UYME/BYOoh5rJU+EN/1fHOmvvLSGzH6nYCxL+s0wHaQlA349sDFeile
P30tgJVvDKTi9XzAgYilXn4J8kMxdJqhWMRP/wxGDHUHHlEksbRsdKl8YNLVuGdk
F63ykLrWEcSi9MIfNUHIViU2STK/HYH+CNxR8HLCCnI4klN2mJIVmH431NbCWx4p
+VgjgzAr/bRXdg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 06:19:26 2025 by rpki-client