Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier: KlnA9Dc9TsAdCiCQD7c6SWA/9OE+dtuji3DVW1Hvnog=
Subject key identifier: 71:45:6E:54:F0:5E:49:D1:ED:83:3F:FE:16:43:25:B1:10:D5:3B:E9
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 019780FB85B343027340B6CD94A0648E9C19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number: 0BFE
Signing time: Wed 18 Jun 2025 03:00:56 +0000
Manifest this update: Wed 18 Jun 2025 03:00:56 +0000
Manifest next update: Thu 19 Jun 2025 03:00:56 +0000
Files and hashes: 1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=)
2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: TdGaDhbwruMTTJLetKgoVuuJJe5HafgN3m7OjEOnvG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:85:b3:43:02:73:40:b6:cd:94:a0:64:8e:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Jun 18 03:00:56 2025 GMT
Not After : Jun 19 03:00:56 2025 GMT
Subject: CN=71456e54f05e49d1ed833ffe164325b110d53be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:36:27:77:25:57:f7:56:00:b2:0c:4f:81:
47:81:94:5a:8f:e3:14:f8:ec:54:d3:85:00:0f:2e:
b0:8a:7e:73:0c:0c:da:00:33:5d:46:a5:47:44:28:
e7:1b:e5:3f:f9:7d:d7:66:a3:d7:e9:6f:10:c1:01:
2e:ec:8f:92:5c:6b:c0:28:a7:fe:80:f4:2a:0a:0d:
66:88:75:9a:33:04:22:82:e1:68:9a:bf:43:9d:dd:
6b:3d:22:26:cd:e4:84:e5:1b:ca:d5:07:d3:8d:56:
97:3a:5f:73:68:1e:cb:d8:64:b9:2f:b0:67:9a:97:
7c:ee:1d:46:4d:49:4f:b1:12:c8:97:85:38:5b:75:
78:cb:a6:38:d9:37:93:63:a6:75:93:27:b0:27:a9:
8f:b0:a8:44:a8:18:f0:a1:b9:8c:c2:a7:b7:4e:1d:
ff:c3:b5:3b:c0:73:9f:2e:db:40:10:1d:d8:b4:06:
80:a3:8f:59:b0:df:7e:80:ca:eb:d1:d9:1b:ab:dc:
05:02:9b:b4:76:d1:1d:dc:0e:d0:8f:3a:06:9e:e7:
4c:86:c7:bf:13:fb:ab:c0:47:6a:6b:be:3a:2f:4c:
be:89:33:e8:11:ca:64:60:15:b3:fd:3d:7a:cd:bc:
3e:19:c5:cb:84:81:cf:96:b6:9f:6b:d6:a9:84:10:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:6E:54:F0:5E:49:D1:ED:83:3F:FE:16:43:25:B1:10:D5:3B:E9
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:39:07:9a:3c:c3:4c:e5:3a:12:de:ed:4c:00:16:4b:1b:88:
1d:46:0b:9d:06:2a:47:65:86:f8:62:3e:17:bc:b7:7b:b2:f5:
b4:b6:17:69:69:f5:66:f9:64:62:a2:40:2b:20:b9:c0:67:d7:
e8:c7:24:9b:99:41:80:47:40:78:95:22:fd:5a:ef:09:48:e3:
06:b4:68:e9:02:b1:8a:47:e9:5b:63:47:35:c9:ac:07:cc:c0:
7f:9c:b0:34:f1:16:98:08:5c:1a:c8:2c:9e:79:78:d7:0c:d6:
b1:0b:5a:88:fe:ac:cd:24:9b:a9:8a:78:5c:d1:25:c4:fd:46:
4a:38:f8:af:8c:14:7f:08:7f:9f:d7:3a:22:d0:f7:43:00:b1:
5b:30:a4:eb:33:f8:0c:ef:35:c2:c8:95:35:ab:f1:ae:b8:17:
9c:01:42:6c:85:bb:ae:6c:51:f2:96:09:8f:9c:e3:71:8f:93:
8a:94:0e:d6:ad:95:8f:24:5b:af:15:7a:49:4c:31:2f:43:9b:
1b:83:65:30:97:45:6c:97:0c:d6:e8:29:0b:45:5f:1e:4b:2f:
d0:80:77:2a:dd:46:4f:dd:c6:88:e5:5d:dc:b8:81:a6:3d:e5:
ff:b7:35:a6:48:22:61:71:f9:0f:48:cd:5b:9a:8d:11:79:1a:
88:f5:2e:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeA+4WzQwJzQLbNlKBkjpwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTExNzAyZjQ5M2Q2ZWRlMWI2ZTg3MmJjYWNkY2I4NTQy
ODJiYWQwHhcNMjUwNjE4MDMwMDU2WhcNMjUwNjE5MDMwMDU2WjAzMTEwLwYDVQQD
Eyg3MTQ1NmU1NGYwNWU0OWQxZWQ4MzNmZmUxNjQzMjViMTEwZDUzYmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZA2J3clV/dWALIMT4FHgZRaj+MU
+OxU04UADy6win5zDAzaADNdRqVHRCjnG+U/+X3XZqPX6W8QwQEu7I+SXGvAKKf+
gPQqCg1miHWaMwQiguFomr9Dnd1rPSImzeSE5RvK1QfTjVaXOl9zaB7L2GS5L7Bn
mpd87h1GTUlPsRLIl4U4W3V4y6Y42TeTY6Z1kyewJ6mPsKhEqBjwobmMwqe3Th3/
w7U7wHOfLttAEB3YtAaAo49ZsN9+gMrr0dkbq9wFApu0dtEd3A7QjzoGnudMhse/
E/urwEdqa746L0y+iTPoEcpkYBWz/T16zbw+GcXLhIHPlrafa9aphBD6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFFblTwXknR7YM//hZDJbEQ1TvpMB8GA1UdIwQY
MBaAFM2RFwL0k9bt4bbocrys3LhUKCutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUt
MjJiNzc4MjE2MmNhLzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUtMjJiNzc4MjE2MmNh
LzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzkHmjzD
TOU6Et7tTAAWSxuIHUYLnQYqR2WG+GI+F7y3e7L1tLYXaWn1ZvlkYqJAKyC5wGfX
6Mckm5lBgEdAeJUi/VrvCUjjBrRo6QKxikfpW2NHNcmsB8zAf5ywNPEWmAhcGsgs
nnl41wzWsQtaiP6szSSbqYp4XNElxP1GSjj4r4wUfwh/n9c6ItD3QwCxWzCk6zP4
DO81wsiVNavxrrgXnAFCbIW7rmxR8pYJj5zjcY+TipQO1q2VjyRbrxV6SUwxL0Ob
G4NlMJdFbJcM1ugpC0VfHksv0IB3Kt1GT93GiOVd3LiBpj3l/7c1pkgiYXH5D0jN
W5qNEXkaiPUujA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:32:39 2025 by rpki-client