Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: XxV4SshzEyGH9k5Dxk/YnbR/VpmfxFNoNDLwx3beQzE=
Subject key identifier: 90:34:58:BF:1C:D9:D7:69:13:69:E0:07:71:06:BE:40:8A:F5:68:8C
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 01977865D3E8E7EB061FFAA85A84D68F85E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 13A4
Signing time: Mon 16 Jun 2025 11:00:28 +0000
Manifest this update: Mon 16 Jun 2025 11:00:28 +0000
Manifest next update: Tue 17 Jun 2025 11:00:28 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: iIUxP6ArXd2QBL3PEppZh9RKYjzrDr9klIBqGQYLfm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:d3:e8:e7:eb:06:1f:fa:a8:5a:84:d6:8f:85:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Jun 16 11:00:28 2025 GMT
Not After : Jun 17 11:00:28 2025 GMT
Subject: CN=903458bf1cd9d7691369e0077106be408af5688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1c:f2:a1:7e:a4:7e:a1:8f:ce:58:80:61:33:
87:89:4d:02:31:be:c4:ab:4e:61:e3:79:45:ac:5c:
ff:24:96:b9:fc:6b:ad:30:c4:7a:49:f1:2a:14:02:
04:d1:ca:92:13:7d:a0:0e:15:e2:68:a9:02:47:e2:
df:e6:ac:1f:6c:c6:31:56:da:d8:19:67:2e:12:35:
ab:89:44:08:4b:5b:41:db:49:6d:aa:ad:fb:70:aa:
9d:27:41:26:61:32:13:c3:9f:73:c5:d3:be:36:b0:
3a:1c:5d:26:01:32:20:d2:94:cf:68:f9:ea:38:15:
50:ed:8c:7d:1d:4a:59:ce:37:4c:fb:7c:3d:f5:a6:
a2:74:9c:c0:cd:82:ee:d4:e7:f7:15:05:aa:4c:64:
88:a6:d4:6a:40:08:6d:5f:59:25:03:f6:dc:1e:c8:
c6:3c:e7:21:09:a7:7c:fd:e4:a8:b6:15:8e:ed:15:
39:4b:a6:0e:43:3d:10:7e:b5:c6:4d:e5:eb:07:db:
a6:c2:04:76:7e:aa:34:13:2b:54:8d:9a:c9:35:50:
7d:67:17:d7:f4:40:8a:9b:da:e0:98:fe:22:25:b2:
c2:cf:36:82:25:de:e2:c3:e0:c5:6a:22:cd:0e:23:
33:ab:b6:ff:62:ff:8b:62:d7:c9:f5:9e:93:76:5e:
e7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:58:BF:1C:D9:D7:69:13:69:E0:07:71:06:BE:40:8A:F5:68:8C
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:32:00:1a:3e:6b:ef:0e:d0:65:ad:1a:b0:a8:da:94:cb:
3c:d3:a6:72:1f:b9:c0:9a:7a:eb:8c:d4:88:60:16:fb:0a:8f:
75:08:89:02:0c:a2:ed:0f:ac:30:05:52:3a:9f:0f:cc:3d:db:
c7:07:3b:32:9b:98:d6:55:72:2f:d8:07:5a:04:9c:f0:e1:93:
d5:2a:23:ce:54:7c:4e:f1:93:92:ce:50:47:6f:73:76:60:25:
b2:36:37:b0:ed:14:53:6b:f0:5a:40:dd:da:b8:d2:68:ee:5a:
72:b2:57:72:6f:14:14:0c:be:bf:1d:ef:d1:df:68:35:2e:8d:
8b:f9:74:9e:87:3d:d4:e0:d3:1e:71:4d:0f:c7:f9:26:54:c4:
b0:5f:43:6c:9c:28:f5:82:42:d9:24:78:b2:9e:7f:61:3b:58:
b7:17:6e:8a:97:88:7b:c8:27:db:4d:ac:b9:a9:5e:59:e9:4c:
30:73:52:5b:5b:c8:67:d8:8e:c3:90:bc:b1:ed:e5:c5:aa:df:
85:1b:81:ef:d8:27:aa:df:b8:71:10:bb:fc:40:70:18:b0:be:
54:8a:c4:87:c5:00:ed:d8:45:05:e5:1d:63:ec:be:3f:0d:0a:
70:30:f2:89:cb:e7:16:1b:f0:db:e4:b5:0a:14:5f:25:16:64:
3d:a5:9c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4ZdPo5+sGH/qoWoTWj4XlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODAwYWJhNDA2MzliZjM4ZDFlYjZjOTE1N2I5OTRmMTkz
MjNiMTMwHhcNMjUwNjE2MTEwMDI4WhcNMjUwNjE3MTEwMDI4WjAzMTEwLwYDVQQD
Eyg5MDM0NThiZjFjZDlkNzY5MTM2OWUwMDc3MTA2YmU0MDhhZjU2ODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxzyoX6kfqGPzliAYTOHiU0CMb7E
q05h43lFrFz/JJa5/GutMMR6SfEqFAIE0cqSE32gDhXiaKkCR+Lf5qwfbMYxVtrY
GWcuEjWriUQIS1tB20ltqq37cKqdJ0EmYTITw59zxdO+NrA6HF0mATIg0pTPaPnq
OBVQ7Yx9HUpZzjdM+3w99aaidJzAzYLu1Of3FQWqTGSIptRqQAhtX1klA/bcHsjG
POchCad8/eSothWO7RU5S6YOQz0QfrXGTeXrB9umwgR2fqo0EytUjZrJNVB9ZxfX
9ECKm9rgmP4iJbLCzzaCJd7iw+DFaiLNDiMzq7b/Yv+LYtfJ9Z6Tdl7nqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA0WL8c2ddpE2ngB3EGvkCK9WiMMB8GA1UdIwQY
MBaAFGeACrpAY5vzjR62yRV7mU8ZMjsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEt
MjkyNjI3OTA0MDlkLzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEtMjkyNjI3OTA0MDlk
LzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUp8yABo+
a+8O0GWtGrCo2pTLPNOmch+5wJp664zUiGAW+wqPdQiJAgyi7Q+sMAVSOp8PzD3b
xwc7MpuY1lVyL9gHWgSc8OGT1SojzlR8TvGTks5QR29zdmAlsjY3sO0UU2vwWkDd
2rjSaO5acrJXcm8UFAy+vx3v0d9oNS6Ni/l0noc91ODTHnFND8f5JlTEsF9DbJwo
9YJC2SR4sp5/YTtYtxduipeIe8gn202sualeWelMMHNSW1vIZ9iOw5C8se3lxarf
hRuB79gnqt+4cRC7/EBwGLC+VIrEh8UA7dhFBeUdY+y+Pw0KcDDyicvnFhvw2+S1
ChRfJRZkPaWcbQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:27:17 2025 by rpki-client