Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: s+oUQb18xfpheTJ4TuK4E2fFqbaH3HWHnvUxKA1jhLc=
Subject key identifier: AF:81:EB:61:03:86:2C:18:1A:A9:19:08:BA:56:03:17:DC:47:FB:E5
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019770E37EE2B361097A3937D9C928CF7267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 00:00:46 +0000
Manifest this update: Sun 15 Jun 2025 00:00:46 +0000
Manifest next update: Mon 16 Jun 2025 00:00:46 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: EfJ6qGe0IrdxnxIF9rfY8Me0gfMJJZNoRPZJEl6S2HA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:7e:e2:b3:61:09:7a:39:37:d9:c9:28:cf:72:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Jun 15 00:00:46 2025 GMT
Not After : Jun 16 00:00:46 2025 GMT
Subject: CN=af81eb6103862c181aa91908ba560317dc47fbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:65:4f:93:d2:08:d3:93:0b:b4:32:90:40:ef:
38:1e:cf:34:9c:80:ad:01:0c:8b:d5:b1:e4:e0:dc:
85:da:15:11:f7:eb:28:ee:a9:14:2d:97:f9:a7:c9:
be:66:8a:9f:aa:12:22:c7:e0:bc:0e:da:7b:13:6f:
78:1e:c5:2d:64:8f:b5:62:87:1a:a6:65:93:21:b0:
f9:b1:ec:37:3d:57:2d:38:64:9c:2a:40:0a:80:27:
25:24:81:48:64:4a:01:e7:95:28:d5:07:10:a2:4c:
77:74:e4:b4:7d:34:d7:27:6d:e9:a8:20:64:89:ef:
86:79:4a:d9:15:64:f0:c3:8a:7c:ae:03:a3:96:b1:
8e:d7:e8:f7:c7:8d:95:b3:31:1f:81:3d:bf:02:5e:
75:c3:36:15:67:a5:f3:39:0c:0f:cc:f3:2f:4b:4c:
30:a7:2a:70:ed:8b:3c:f2:11:5f:29:53:c5:52:34:
06:ee:fc:8a:83:02:3d:ca:56:0b:1b:cb:79:20:5a:
69:fa:e0:4b:76:7f:9e:10:bc:7a:70:ea:66:d4:f7:
53:a9:80:cb:28:04:6d:92:40:9e:6c:c7:47:4e:14:
3b:3e:ab:4d:d2:13:b7:de:b2:d4:21:87:d3:b1:40:
40:56:93:87:4e:e8:47:83:8a:9d:55:1c:7d:3b:61:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:EB:61:03:86:2C:18:1A:A9:19:08:BA:56:03:17:DC:47:FB:E5
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:af:19:71:0c:7b:08:26:b3:43:35:31:9b:a3:4b:f3:83:89:
e7:c1:f9:d2:f5:50:e1:0a:69:0d:c5:3f:2a:79:55:8f:44:6c:
52:9f:32:0e:06:b1:49:df:d2:44:4a:ab:b6:2d:5c:4c:52:42:
52:29:eb:ff:06:dd:44:b2:d3:9b:c6:21:66:07:65:5d:b6:cc:
5e:ba:64:ff:d1:ab:78:6f:ac:5b:21:2a:0a:17:53:ba:d7:bb:
d3:86:93:1f:0d:a4:1c:06:51:e7:78:c3:f5:96:bb:fb:0e:cf:
9d:1c:4e:90:c0:e9:e6:59:0d:5e:a6:6a:51:ee:8a:5e:17:5a:
eb:bc:52:21:1c:71:82:9a:60:77:29:ca:9b:fd:4b:bd:07:c6:
3e:80:89:b5:92:f4:ee:4d:13:e1:71:71:7d:96:ce:d5:45:6a:
81:ad:70:36:83:95:e3:8e:ab:e3:33:e0:2e:a3:87:d5:1e:71:
65:e0:be:8d:26:f0:ee:b0:7d:fd:09:3f:d6:c2:c7:5d:07:04:
28:ba:eb:79:80:f8:77:2b:6a:c4:fc:73:56:5d:c0:3f:6b:97:
14:d3:1d:5c:67:2b:df:d5:64:f3:d1:84:68:d6:41:8f:3b:fa:
0f:50:7b:23:2f:c4:64:ac:0d:3f:c8:5c:66:1e:9e:49:4a:e3:
2e:16:44:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdw437is2EJejk32ckoz3JnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx
MDc4NTQwHhcNMjUwNjE1MDAwMDQ2WhcNMjUwNjE2MDAwMDQ2WjAzMTEwLwYDVQQD
EyhhZjgxZWI2MTAzODYyYzE4MWFhOTE5MDhiYTU2MDMxN2RjNDdmYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mVPk9II05MLtDKQQO84Hs80nICt
AQyL1bHk4NyF2hUR9+so7qkULZf5p8m+ZoqfqhIix+C8Dtp7E294HsUtZI+1Yoca
pmWTIbD5sew3PVctOGScKkAKgCclJIFIZEoB55Uo1QcQokx3dOS0fTTXJ23pqCBk
ie+GeUrZFWTww4p8rgOjlrGO1+j3x42VszEfgT2/Al51wzYVZ6XzOQwPzPMvS0ww
pypw7Ys88hFfKVPFUjQG7vyKgwI9ylYLG8t5IFpp+uBLdn+eELx6cOpm1PdTqYDL
KARtkkCebMdHThQ7PqtN0hO33rLUIYfTsUBAVpOHTuhHg4qdVRx9O2EQNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+B62EDhiwYGqkZCLpWAxfcR/vlMB8GA1UdIwQY
MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt
Y2YwMTI0Y2VkNGQ2LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2
LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq8ZcQx7
CCazQzUxm6NL84OJ58H50vVQ4QppDcU/KnlVj0RsUp8yDgaxSd/SREqrti1cTFJC
Uinr/wbdRLLTm8YhZgdlXbbMXrpk/9GreG+sWyEqChdTute704aTHw2kHAZR53jD
9Za7+w7PnRxOkMDp5lkNXqZqUe6KXhda67xSIRxxgppgdynKm/1LvQfGPoCJtZL0
7k0T4XFxfZbO1UVqga1wNoOV446r4zPgLqOH1R5xZeC+jSbw7rB9/Qk/1sLHXQcE
KLrreYD4dytqxPxzVl3AP2uXFNMdXGcr39Vk89GEaNZBjzv6D1B7Iy/EZKwNP8hc
Zh6eSUrjLhZEJw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:18:16 2025 by rpki-client