Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: aCHsnT0WpzWsF4Aot9UyeTJytGHaz0cX8o9nzHsagh8=
Subject key identifier: D6:D8:A7:87:CA:4F:2E:B1:5B:BC:98:86:29:46:CA:A5:5D:EC:12:30
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 01976D3DBC49475D7453BE5C6D410C16AAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 0558
Signing time: Sat 14 Jun 2025 07:00:51 +0000
Manifest this update: Sat 14 Jun 2025 07:00:51 +0000
Manifest next update: Sun 15 Jun 2025 07:00:51 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: uDH99isgTq2Kp1nkAcA7YyVJ7JfBJBatJOszxVbk0EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:bc:49:47:5d:74:53:be:5c:6d:41:0c:16:aa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Jun 14 07:00:51 2025 GMT
Not After : Jun 15 07:00:51 2025 GMT
Subject: CN=d6d8a787ca4f2eb15bbc98862946caa55dec1230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:a6:42:84:e2:0b:10:5d:2d:56:9c:8a:29:
38:09:84:b9:61:d9:f5:02:8b:6a:5a:e9:2d:7d:56:
46:f9:7e:a2:61:f3:f8:92:0b:73:cb:ab:a7:0a:e0:
28:be:93:c9:35:dc:71:0a:6a:63:ab:7a:88:3d:81:
37:93:21:cb:ff:c7:65:83:90:4d:3c:16:fd:11:de:
2e:df:da:c5:9b:c3:3e:80:9f:94:e3:32:73:ac:1b:
c7:e5:ba:04:70:fa:b5:55:e7:f6:55:b9:b9:42:71:
90:d8:1a:82:b6:12:ce:0d:30:43:83:c5:74:62:a1:
39:4e:81:fd:85:a6:00:0d:5f:29:a5:22:3d:20:9e:
01:64:96:03:7a:5f:e4:f5:de:d9:28:6a:be:72:b5:
fb:cf:ad:ea:89:b0:66:77:43:31:08:f8:d1:6e:d6:
a8:81:5a:75:26:29:86:0e:3c:0a:28:ce:5b:5b:c3:
ca:bf:a9:d0:87:52:9d:03:97:87:5d:6e:9c:70:cf:
d6:d9:03:47:e8:23:48:6d:37:e9:d1:ac:47:89:cc:
47:26:ef:95:34:f7:70:a3:bd:f7:c1:7a:b5:c9:4d:
87:b3:a6:50:b1:d5:64:bb:73:1b:d3:6e:c6:d8:b0:
d8:5b:56:46:3f:19:6e:69:e5:f7:fd:f8:69:bc:87:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D8:A7:87:CA:4F:2E:B1:5B:BC:98:86:29:46:CA:A5:5D:EC:12:30
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:de:d8:ac:50:c0:a8:a4:26:b6:2b:47:6d:d5:ab:78:c4:33:
6e:86:2f:c7:ee:72:bd:6c:f3:7a:51:68:14:d9:df:e2:9d:79:
c7:fd:ef:44:04:45:eb:82:2d:08:f6:a7:62:8c:e4:f1:f5:6a:
5b:e4:2b:13:28:19:87:0c:c9:aa:c8:78:1b:4a:38:d8:ec:bb:
b3:a1:53:aa:38:b5:12:26:6e:80:e6:2f:35:5b:b4:71:a1:1e:
5d:7c:e5:20:c4:e9:6e:8a:a8:9f:22:ac:63:c0:6b:d0:fd:11:
85:a9:43:ad:f8:cf:91:38:99:e5:43:67:51:74:ca:d5:c0:32:
cb:26:f6:65:a4:3c:98:a1:b4:f4:bb:b0:44:ed:21:0b:12:56:
4f:cc:27:59:66:22:89:2d:98:3e:ab:db:0e:0b:1f:9b:ce:7f:
78:5a:bd:78:70:05:d4:ae:ff:dd:b1:0b:ed:b2:36:8f:17:5a:
dc:69:11:99:ff:82:1e:06:a7:6d:5b:d7:30:87:f7:37:c5:64:
96:8e:04:ea:54:cf:15:fd:f7:17:0e:b0:2a:82:d4:3d:64:a6:
94:bf:e8:78:e9:f7:86:a4:99:66:69:e4:2e:c6:28:11:26:22:
c8:a9:bf:cb:70:49:07:af:d8:3e:cc:d2:0b:f9:9a:eb:0e:b8:
c4:33:ea:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPbxJR110U75cbUEMFqrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWE4ODcyYzJiM2Y5NzRjOTUxNjhkMjE0YmZkNTdmMGY5
ZTkxMTkwHhcNMjUwNjE0MDcwMDUxWhcNMjUwNjE1MDcwMDUxWjAzMTEwLwYDVQQD
EyhkNmQ4YTc4N2NhNGYyZWIxNWJiYzk4ODYyOTQ2Y2FhNTVkZWMxMjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vqmQoTiCxBdLVaciik4CYS5Ydn1
AotqWuktfVZG+X6iYfP4kgtzy6unCuAovpPJNdxxCmpjq3qIPYE3kyHL/8dlg5BN
PBb9Ed4u39rFm8M+gJ+U4zJzrBvH5boEcPq1Vef2Vbm5QnGQ2BqCthLODTBDg8V0
YqE5ToH9haYADV8ppSI9IJ4BZJYDel/k9d7ZKGq+crX7z63qibBmd0MxCPjRbtao
gVp1JimGDjwKKM5bW8PKv6nQh1KdA5eHXW6ccM/W2QNH6CNIbTfp0axHicxHJu+V
NPdwo733wXq1yU2Hs6ZQsdVku3Mb027G2LDYW1ZGPxluaeX3/fhpvIeamwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbYp4fKTy6xW7yYhilGyqVd7BIwMB8GA1UdIwQY
MBaAFMyqiHLCs/l0yVFo0hS/1X8PnpEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQt
ZTA0YzU4YTQxZjY2LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQtZTA0YzU4YTQxZjY2
LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnd7YrFDA
qKQmtitHbdWreMQzboYvx+5yvWzzelFoFNnf4p15x/3vRARF64ItCPanYozk8fVq
W+QrEygZhwzJqsh4G0o42Oy7s6FTqji1EiZugOYvNVu0caEeXXzlIMTpboqonyKs
Y8Br0P0RhalDrfjPkTiZ5UNnUXTK1cAyyyb2ZaQ8mKG09LuwRO0hCxJWT8wnWWYi
iS2YPqvbDgsfm85/eFq9eHAF1K7/3bEL7bI2jxda3GkRmf+CHganbVvXMIf3N8Vk
lo4E6lTPFf33Fw6wKoLUPWSmlL/oeOn3hqSZZmnkLsYoESYiyKm/y3BJB6/YPszS
C/ma6w64xDPqFA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:30 2025 by rpki-client