Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: RHWFEPRMA8xKyybZ4l4X0B9RESLxyajqSTOTK5Gcvs4=
Subject key identifier: 99:3C:81:CD:12:A4:B4:89:1A:A9:B5:A7:8F:40:03:7E:45:DC:90:D4
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 019775D285F8641227361A52C43959DD61D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1595
Signing time: Sun 15 Jun 2025 23:00:20 +0000
Manifest this update: Sun 15 Jun 2025 23:00:20 +0000
Manifest next update: Mon 16 Jun 2025 23:00:20 +0000
Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=)
2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: 6SlappwlzzdVhBfwnwT7sT7iHSRePuIich2ggYE4puo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:85:f8:64:12:27:36:1a:52:c4:39:59:dd:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: Jun 15 23:00:20 2025 GMT
Not After : Jun 16 23:00:20 2025 GMT
Subject: CN=993c81cd12a4b4891aa9b5a78f40037e45dc90d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:2f:29:89:4e:cb:e3:4c:9c:14:64:df:2d:
30:5c:07:82:6a:00:7f:0f:33:78:48:29:20:b6:a4:
4d:a2:3d:4e:0d:e4:d5:5d:92:6b:92:3d:46:46:50:
e1:86:e2:2b:97:d4:f1:3f:27:14:ba:71:80:05:b3:
11:7a:bd:c6:b4:ff:e5:1e:a9:f3:60:7b:60:69:bc:
18:55:46:14:89:5f:c2:a6:9b:81:e6:aa:d3:e4:ec:
13:fc:1c:8d:ad:5d:42:f2:06:01:e3:61:09:29:21:
a5:33:d9:cd:8e:e8:0a:58:f6:f3:ac:cb:27:40:5a:
ed:5d:96:d7:70:da:e2:5c:d1:ff:68:01:6c:d8:9d:
9a:aa:38:66:56:31:b7:29:77:2a:f9:e4:5b:86:7b:
6e:18:a4:4c:e8:54:35:d1:c4:f7:a0:13:ac:d7:0b:
12:5e:36:3a:e8:2e:e7:a8:d1:da:74:1b:97:0c:30:
dd:05:42:91:18:70:38:6b:60:9e:4f:c4:94:6b:9f:
3d:07:5d:52:2a:04:2c:0f:19:de:5b:50:e5:af:a5:
46:a8:9f:46:25:b0:28:9d:68:69:14:f6:11:0d:e2:
43:2d:b1:34:07:42:92:39:5d:dd:9b:cc:77:8d:a4:
3f:13:e7:8c:96:c8:4e:18:85:53:c3:84:98:bc:66:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:81:CD:12:A4:B4:89:1A:A9:B5:A7:8F:40:03:7E:45:DC:90:D4
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:71:aa:fd:8c:bb:39:fe:88:81:77:47:3d:f9:1e:8f:91:
b3:95:46:2a:28:8b:48:44:ff:ca:8e:8c:9e:bf:48:5a:3c:80:
79:bd:df:b9:89:51:ee:02:97:3a:e7:29:6d:5c:b7:af:50:58:
f8:c5:68:05:ee:03:2a:31:ca:d8:04:94:ee:18:f8:4e:99:c5:
e5:de:14:0e:53:9e:b9:91:ca:96:25:32:16:93:e6:f7:56:e9:
9d:b7:1b:99:49:a4:9a:19:6a:7c:18:18:6c:20:af:2b:e1:63:
1f:7e:3d:40:55:03:19:7d:38:5a:a7:55:7b:44:47:5d:17:c2:
4b:e1:2c:a2:ca:59:99:68:a1:84:8a:d6:48:f5:64:26:22:74:
26:a2:60:a7:b2:69:f1:f5:d0:da:de:04:df:d6:1a:2b:7f:c3:
e6:0d:56:63:34:77:58:7b:dc:4a:5f:2b:59:f0:27:57:73:66:
2b:dc:11:9b:f8:88:d6:9b:d1:b7:76:5c:58:39:a8:96:7a:05:
49:95:03:c9:7e:42:29:0f:23:e0:0d:5b:76:31:76:e4:fb:25:
a7:cf:6c:01:06:8f:97:8d:91:41:bf:53:b8:bd:6a:d8:9a:83:
16:e7:4f:71:a1:b6:0b:d1:bd:1e:5a:4c:e6:8b:ab:8a:2f:ec:
0e:5f:e7:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd10oX4ZBInNhpSxDlZ3WHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzI5MzM4MGJjNDFmNTJkOTEzMTU4NWE4NTgwMDM4Zjky
ZjVkY2MwHhcNMjUwNjE1MjMwMDIwWhcNMjUwNjE2MjMwMDIwWjAzMTEwLwYDVQQD
Eyg5OTNjODFjZDEyYTRiNDg5MWFhOWI1YTc4ZjQwMDM3ZTQ1ZGM5MGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9QvKYlOy+NMnBRk3y0wXAeCagB/
DzN4SCkgtqRNoj1ODeTVXZJrkj1GRlDhhuIrl9TxPycUunGABbMRer3GtP/lHqnz
YHtgabwYVUYUiV/CppuB5qrT5OwT/ByNrV1C8gYB42EJKSGlM9nNjugKWPbzrMsn
QFrtXZbXcNriXNH/aAFs2J2aqjhmVjG3KXcq+eRbhntuGKRM6FQ10cT3oBOs1wsS
XjY66C7nqNHadBuXDDDdBUKRGHA4a2CeT8SUa589B11SKgQsDxneW1Dlr6VGqJ9G
JbAonWhpFPYRDeJDLbE0B0KSOV3dm8x3jaQ/E+eMlshOGIVTw4SYvGaROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk8gc0SpLSJGqm1p49AA35F3JDUMB8GA1UdIwQY
MBaAFGXCkzgLxB9S2RMVhahYADj5L13MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYt
ZmU2ZGMxNzU4M2UzLzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iMTcwZmItYTFiZS00YmQ5LWFkYjYtZmU2ZGMxNzU4M2Uz
LzEvWmNLVE9BdkVIMUxaRXhXRnFGZ0FPUGt2WGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfhxqv2M
uzn+iIF3Rz35Ho+Rs5VGKiiLSET/yo6Mnr9IWjyAeb3fuYlR7gKXOucpbVy3r1BY
+MVoBe4DKjHK2ASU7hj4TpnF5d4UDlOeuZHKliUyFpPm91bpnbcbmUmkmhlqfBgY
bCCvK+FjH349QFUDGX04WqdVe0RHXRfCS+EsospZmWihhIrWSPVkJiJ0JqJgp7Jp
8fXQ2t4E39YaK3/D5g1WYzR3WHvcSl8rWfAnV3NmK9wRm/iI1pvRt3ZcWDmolnoF
SZUDyX5CKQ8j4A1bdjF25Pslp89sAQaPl42RQb9TuL1q2JqDFudPcaG2C9G9HlpM
5ourii/sDl/nQw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:28:43 2025 by rpki-client