Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: fEOiG3DTL08rIjVJf3cSwHvLl84/sP+kuZgbGYHQuGs=
Subject key identifier: 6C:37:06:AD:AF:44:4C:67:B3:86:69:2D:7D:08:FE:F7:DB:7E:C7:B4
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 01987A88CDD78767EF63F716F6A097F7BEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 05C0
Signing time: Tue 05 Aug 2025 14:00:42 +0000
Manifest this update: Tue 05 Aug 2025 14:00:42 +0000
Manifest next update: Wed 06 Aug 2025 14:00:42 +0000
Files and hashes: 1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: L2psqFXr49lQxrSBmyKghvpkllYX58Y3l/RZFlWjM80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:cd:d7:87:67:ef:63:f7:16:f6:a0:97:f7:be:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Aug 5 14:00:42 2025 GMT
Not After : Aug 6 14:00:42 2025 GMT
Subject: CN=6c3706adaf444c67b386692d7d08fef7db7ec7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:16:5a:18:46:de:75:7a:4e:fa:f9:77:2a:
cf:9b:e0:79:9c:41:13:98:ec:1f:b8:24:b4:dd:1f:
98:54:29:22:02:cc:4e:77:8d:21:36:8a:ed:c5:5c:
41:b7:6c:e3:57:15:d8:19:1e:a4:df:23:d8:1a:f7:
2e:52:05:0f:89:f1:7d:cf:b9:b3:66:de:77:ba:48:
a6:d7:64:84:5b:d1:e7:35:a5:ff:75:1a:19:e1:5d:
bb:ae:a3:35:55:f5:57:44:e3:a8:e4:f5:c4:26:6d:
c2:1b:7b:13:8f:b2:56:04:86:76:ce:66:0d:62:a3:
20:22:de:60:f6:6f:f5:d5:55:85:38:17:32:34:a2:
12:be:d7:51:50:c4:2a:d5:6b:52:d2:bf:7a:bd:54:
5f:42:8a:e3:7f:28:73:48:12:b0:c4:e8:e4:ab:d4:
6f:89:d2:7a:f1:b1:ef:f3:de:a4:da:53:a3:e2:76:
c6:8b:0f:78:45:58:b1:ba:ce:95:04:88:81:79:28:
cf:aa:81:8e:37:a6:ad:94:80:30:92:81:f0:54:f0:
71:7e:2c:cf:a6:5a:f7:dc:4e:e1:0d:f7:f6:0e:ce:
eb:b9:e0:ac:bd:91:35:3c:f4:36:01:b7:26:fd:e4:
36:2e:e7:f6:ac:eb:0a:c5:0a:76:44:d8:c7:23:03:
c1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:06:AD:AF:44:4C:67:B3:86:69:2D:7D:08:FE:F7:DB:7E:C7:B4
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ae:95:61:55:2d:b8:9c:1b:d1:d2:ae:6e:fa:fb:96:d3:b0:
33:b7:98:b3:f1:61:51:80:ae:e8:5e:fd:f7:13:00:bf:fc:30:
07:05:e8:a1:43:30:f7:cc:a1:ce:ab:30:41:3c:77:8c:e2:ec:
1f:b5:57:52:5b:d1:f1:7a:1c:79:3b:f5:92:6a:2b:2c:d0:cd:
5e:ad:67:d3:ce:80:cc:53:48:bd:12:0c:ca:e7:79:4f:22:91:
af:9b:5b:20:1d:00:c4:99:d6:38:60:35:3a:51:d3:8f:72:82:
23:b7:e6:f8:f0:e3:ab:16:b2:4d:da:21:7a:58:97:48:37:f1:
c5:dd:2d:38:ce:14:47:5e:e8:6f:a1:1c:e9:98:69:60:5c:33:
39:63:cc:6c:84:78:2b:94:a0:71:46:ad:6d:8a:b4:84:3a:a9:
96:a9:64:af:4f:05:d1:d2:a2:23:f2:ea:51:29:a1:8e:0e:80:
7f:72:eb:6f:53:0c:9b:9b:1c:53:e5:5f:77:36:eb:fa:b0:04:
8d:89:9d:cf:e3:c0:eb:5f:f7:35:26:b3:3f:65:2b:f0:e9:1d:
2a:57:3a:04:59:b6:d4:9d:d0:47:aa:0b:fc:a1:a0:d0:3d:5c:
02:d2:1e:a6:ef:21:26:c6:7e:7e:12:38:23:db:b0:5d:d4:86:
74:d2:ab:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iM3Xh2fvY/cW9qCX976lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh
NzQ5NjEwHhcNMjUwODA1MTQwMDQyWhcNMjUwODA2MTQwMDQyWjAzMTEwLwYDVQQD
Eyg2YzM3MDZhZGFmNDQ0YzY3YjM4NjY5MmQ3ZDA4ZmVmN2RiN2VjN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDMWWhhG3nV6Tvr5dyrPm+B5nEET
mOwfuCS03R+YVCkiAsxOd40hNortxVxBt2zjVxXYGR6k3yPYGvcuUgUPifF9z7mz
Zt53ukim12SEW9HnNaX/dRoZ4V27rqM1VfVXROOo5PXEJm3CG3sTj7JWBIZ2zmYN
YqMgIt5g9m/11VWFOBcyNKISvtdRUMQq1WtS0r96vVRfQorjfyhzSBKwxOjkq9Rv
idJ68bHv896k2lOj4nbGiw94RVixus6VBIiBeSjPqoGON6atlIAwkoHwVPBxfizP
plr33E7hDff2Ds7rueCsvZE1PPQ2Abcm/eQ2Luf2rOsKxQp2RNjHIwPBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGw3Bq2vRExns4ZpLX0I/vfbfse0MB8GA1UdIwQY
MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt
M2Q3OTY1NTM5YmM3LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3
LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcq6VYVUt
uJwb0dKubvr7ltOwM7eYs/FhUYCu6F799xMAv/wwBwXooUMw98yhzqswQTx3jOLs
H7VXUlvR8XoceTv1kmorLNDNXq1n086AzFNIvRIMyud5TyKRr5tbIB0AxJnWOGA1
OlHTj3KCI7fm+PDjqxayTdoheliXSDfxxd0tOM4UR17ob6Ec6ZhpYFwzOWPMbIR4
K5SgcUatbYq0hDqplqlkr08F0dKiI/LqUSmhjg6Af3Lrb1MMm5scU+Vfdzbr+rAE
jYmdz+PA61/3NSazP2Ur8OkdKlc6BFm21J3QR6oL/KGg0D1cAtIepu8hJsZ+fhI4
I9uwXdSGdNKr/g==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:12 2025 by rpki-client