Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: KlVBGtgtrMxtCBtGVAa1dbUeesViNw1gO+8nloQn4D4=
Subject key identifier: D6:F2:C5:5F:48:97:2B:BB:73:5B:36:00:A9:91:5D:9B:D0:CB:79:C1
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 01977B9E8E31372CAE19E0EA8E23AFB55F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 02:01:17 +0000
Manifest this update: Tue 17 Jun 2025 02:01:17 +0000
Manifest next update: Wed 18 Jun 2025 02:01:17 +0000
Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: 7EV+UbBceM8lHe0CQRQbqA67tTqDv5Wst9/mJZt9Yhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:9e:8e:31:37:2c:ae:19:e0:ea:8e:23:af:b5:5f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: Jun 17 02:01:17 2025 GMT
Not After : Jun 18 02:01:17 2025 GMT
Subject: CN=d6f2c55f48972bbb735b3600a9915d9bd0cb79c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:d2:0d:49:8c:0a:07:c4:6c:3c:d5:4f:a8:
b3:2c:8b:93:8e:ad:3e:8a:ef:a9:98:4b:30:48:d7:
49:c5:6f:ae:97:66:19:b0:a5:22:93:0b:54:13:d8:
e7:2a:83:3c:23:6b:72:8f:9a:de:b6:51:c2:4a:bc:
e7:b7:74:41:41:61:ac:13:10:df:5e:87:f9:8c:79:
cf:2c:0c:9b:76:2f:13:88:df:09:95:dc:3c:6a:50:
f3:2f:bb:cc:ed:d0:e6:51:8a:be:aa:23:f7:57:57:
8c:ac:aa:e4:e9:1f:e7:ff:7f:db:70:00:30:4d:be:
71:02:20:60:55:29:9b:30:13:e8:59:19:37:a4:51:
1f:65:d5:30:d7:b1:7c:a8:72:72:7f:b7:95:51:30:
66:a6:4a:4c:dd:90:2a:dd:65:18:a7:e8:ea:27:6a:
9a:09:74:33:ae:e0:12:ea:cb:5b:eb:1e:6f:9b:98:
79:d8:6a:4e:20:49:08:db:c6:08:39:cc:eb:25:bf:
26:99:54:06:ff:58:e3:19:46:ac:b9:b1:10:2e:6d:
41:d8:a9:20:51:dd:1e:b6:c4:66:93:c2:83:80:f2:
64:d0:7c:5d:4f:4d:3b:6d:23:b7:f6:43:32:7b:f0:
aa:39:ec:64:c5:d7:89:63:bc:1f:85:0a:89:88:d5:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:C5:5F:48:97:2B:BB:73:5B:36:00:A9:91:5D:9B:D0:CB:79:C1
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:03:80:36:bb:ad:6b:2e:07:c4:d6:80:45:b5:12:b8:a3:b4:
67:bc:91:24:89:6c:6f:9e:e0:66:d9:da:c6:04:32:7a:a9:f7:
fc:1a:ce:02:ad:49:c5:c2:2b:85:f9:96:09:85:a9:d8:5c:e1:
29:fe:24:bf:be:6c:a0:b0:38:15:bd:d4:b3:c1:7d:77:84:77:
de:26:2d:67:ef:bf:77:17:db:87:90:2c:b2:6f:8d:49:3b:f5:
78:e4:d7:a0:4c:b7:1c:74:ac:93:e4:a6:68:9c:cd:65:99:ac:
4d:74:73:db:4a:39:a0:2b:a6:b0:df:32:96:3c:b8:84:c8:74:
1e:d4:14:8e:d4:61:8b:1a:ed:63:0f:1b:40:c6:3b:05:01:18:
13:5f:55:cd:22:f7:10:76:6e:e1:8e:18:d9:df:64:e2:73:94:
54:e3:47:d1:72:a9:42:06:4c:fa:04:84:66:ea:a9:7c:c4:bb:
80:a8:37:98:c1:22:3e:f3:65:4e:d0:d9:90:79:d0:07:c9:a7:
b3:88:ff:62:40:01:d4:b1:d6:59:bc:74:61:fc:dc:15:f7:41:
92:8b:98:10:e4:ad:0e:d8:0d:c6:93:ed:6b:1b:c1:30:dc:7b:
66:0c:81:97:f1:c1:f4:46:04:95:14:23:b2:5e:9a:e8:df:b9:
b5:2c:49:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7no4xNyyuGeDqjiOvtV+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YmQ4MmJhMTg4MWFkNjRmNTI0ZTMzZWNlMTJhZGE0YjNi
NWQ1N2YwHhcNMjUwNjE3MDIwMTE3WhcNMjUwNjE4MDIwMTE3WjAzMTEwLwYDVQQD
EyhkNmYyYzU1ZjQ4OTcyYmJiNzM1YjM2MDBhOTkxNWQ5YmQwY2I3OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXfSDUmMCgfEbDzVT6izLIuTjq0+
iu+pmEswSNdJxW+ul2YZsKUikwtUE9jnKoM8I2tyj5retlHCSrznt3RBQWGsExDf
Xof5jHnPLAybdi8TiN8Jldw8alDzL7vM7dDmUYq+qiP3V1eMrKrk6R/n/3/bcAAw
Tb5xAiBgVSmbMBPoWRk3pFEfZdUw17F8qHJyf7eVUTBmpkpM3ZAq3WUYp+jqJ2qa
CXQzruAS6stb6x5vm5h52GpOIEkI28YIOczrJb8mmVQG/1jjGUasubEQLm1B2Kkg
Ud0etsRmk8KDgPJk0HxdT007bSO39kMye/CqOexkxdeJY7wfhQqJiNUf2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbyxV9Ilyu7c1s2AKmRXZvQy3nBMB8GA1UdIwQY
MBaAFGa9groYga1k9STjPs4SraSztdV/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMt
YmEyYjkwZDQ5NTQ3LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMtYmEyYjkwZDQ5NTQ3
LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQOANrut
ay4HxNaARbUSuKO0Z7yRJIlsb57gZtnaxgQyeqn3/BrOAq1JxcIrhfmWCYWp2Fzh
Kf4kv75soLA4Fb3Us8F9d4R33iYtZ++/dxfbh5Assm+NSTv1eOTXoEy3HHSsk+Sm
aJzNZZmsTXRz20o5oCumsN8yljy4hMh0HtQUjtRhixrtYw8bQMY7BQEYE19VzSL3
EHZu4Y4Y2d9k4nOUVONH0XKpQgZM+gSEZuqpfMS7gKg3mMEiPvNlTtDZkHnQB8mn
s4j/YkAB1LHWWbx0YfzcFfdBkouYEOStDtgNxpPtaxvBMNx7ZgyBl/HB9EYElRQj
sl6a6N+5tSxJ9A==
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:15:05 2025 by rpki-client