Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
File: Rzd55qd8flghMZh2TOKsDmvuYjY.mft (raw, json)
Hash identifier: tCZVdy1f5xsX48kKnDiozGmiXqW2sVvmG81e/264cGs=
Subject key identifier: 2D:A0:46:8A:4B:8E:55:34:C6:DA:42:51:7A:E2:9A:BD:EE:DB:47:7D
Authority key identifier: 47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
Certificate issuer: /CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Certificate serial: 01976CCFBB9F287E211469BA6A36C92905EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
Manifest number: 6C
Signing time: Sat 14 Jun 2025 05:00:42 +0000
Manifest this update: Sat 14 Jun 2025 05:00:42 +0000
Manifest next update: Sun 15 Jun 2025 05:00:42 +0000
Files and hashes: 1: 9MjXTd2Lr1yJdEmK8CTeSoInorE.roa (hash: YWK7+nRLe8UfaY8PNHmd6MYAPs7Oj1F/tL2OOejEg1M=)
2: Rzd55qd8flghMZh2TOKsDmvuYjY.crl (hash: 4lxjwUlj9yI2eyT+q6iPIftFgS7U7Jd0JgGGe+Pmw7I=)
3: hGPKpUabfTwURA6WsciuOkTPGQI.roa (hash: KEkDVhj8xqmITURn5vzg3xzmIbncL3eYEldek/45XYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:bb:9f:28:7e:21:14:69:ba:6a:36:c9:29:05:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473779e6a77c7e58213198764ce2ac0e6bee6236
Validity
Not Before: Jun 14 05:00:42 2025 GMT
Not After : Jun 15 05:00:42 2025 GMT
Subject: CN=2da0468a4b8e5534c6da42517ae29abdeedb477d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:79:22:1f:ea:85:46:97:b0:07:2b:89:f9:c7:
8c:eb:7e:21:12:2e:b1:d3:fb:32:2c:fe:19:6d:6d:
b2:41:40:10:c1:c7:ea:a5:ed:5f:83:04:88:a0:eb:
9d:34:0c:b9:5b:b4:32:da:42:63:f3:5f:5e:5a:62:
bd:37:dd:e3:42:60:3c:94:73:e7:ef:d9:e8:16:06:
d5:31:b4:94:29:c5:f8:12:cc:78:2e:52:f4:43:73:
6d:30:7c:44:61:dd:6f:7b:72:56:76:5a:0c:9b:0e:
b9:61:cc:63:d0:3f:5b:a9:83:ef:e2:78:61:68:00:
9b:59:0a:7e:92:df:f6:d7:12:cd:e1:05:35:22:69:
d2:41:a3:ac:3a:50:92:40:53:f6:90:05:10:5a:bf:
0e:22:63:14:52:eb:e2:55:be:17:03:6b:a4:cf:98:
5b:60:94:e8:ff:c2:23:7a:b3:bd:dc:34:2f:7a:cc:
d7:8a:5c:68:cd:a4:8f:bb:28:aa:fb:1f:3b:29:30:
10:f1:b4:76:c0:85:03:54:50:ba:29:a3:0d:b2:68:
25:72:df:bf:08:58:52:65:0c:b8:a6:c7:47:30:b6:
8f:b1:49:7d:9c:fc:1c:fa:13:b6:c4:e6:bc:d9:8c:
b0:57:ba:69:c9:81:4e:55:af:3c:fe:2c:9e:cb:7b:
56:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A0:46:8A:4B:8E:55:34:C6:DA:42:51:7A:E2:9A:BD:EE:DB:47:7D
X509v3 Authority Key Identifier:
keyid:47:37:79:E6:A7:7C:7E:58:21:31:98:76:4C:E2:AC:0E:6B:EE:62:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rzd55qd8flghMZh2TOKsDmvuYjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1d7583-d10c-47db-aee1-58d664210669/1/Rzd55qd8flghMZh2TOKsDmvuYjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c7:c2:bc:2e:39:83:71:a1:6a:2f:66:41:b7:f2:91:c6:1d:
25:df:16:29:65:0d:66:3d:82:5e:07:44:63:f4:f6:72:82:29:
16:1c:53:20:62:c8:bf:82:6e:8a:d1:e8:61:e9:a0:be:28:75:
1d:4d:f1:25:79:10:4a:6b:bb:59:89:86:3c:3a:05:b7:17:5c:
6c:da:df:a3:1a:33:89:ee:70:0e:e2:79:05:03:2e:69:58:d5:
64:65:71:a7:e9:46:52:db:13:de:ba:5e:65:c9:46:c7:a7:70:
3a:ff:77:7d:ff:6a:13:70:6c:1b:5c:55:2b:c5:a6:1f:b4:4f:
9f:5e:3d:6d:58:77:e4:b5:6b:37:01:2a:64:a2:78:8d:a9:d9:
1f:7e:53:22:f2:86:89:2f:37:4e:44:69:3f:8f:29:8c:ba:2c:
1f:75:23:ff:19:17:d0:e4:ef:3c:70:64:29:1f:24:c5:ac:1c:
12:63:95:ea:dc:a1:49:f4:00:13:8e:0e:8b:95:49:7c:18:78:
1f:c2:96:3a:fe:3a:ea:39:09:9f:4d:a2:36:60:94:05:f5:d4:
fb:73:5b:08:70:2f:6c:14:24:08:96:89:09:97:35:16:60:d4:
ff:d8:58:91:24:0a:b3:8f:b7:ea:71:9e:1c:27:02:30:c2:dd:
0e:5b:fc:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz7ufKH4hFGm6ajbJKQXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Mzc3OWU2YTc3YzdlNTgyMTMxOTg3NjRjZTJhYzBlNmJl
ZTYyMzYwHhcNMjUwNjE0MDUwMDQyWhcNMjUwNjE1MDUwMDQyWjAzMTEwLwYDVQQD
EygyZGEwNDY4YTRiOGU1NTM0YzZkYTQyNTE3YWUyOWFiZGVlZGI0NzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HkiH+qFRpewByuJ+ceM634hEi6x
0/syLP4ZbW2yQUAQwcfqpe1fgwSIoOudNAy5W7Qy2kJj819eWmK9N93jQmA8lHPn
79noFgbVMbSUKcX4Esx4LlL0Q3NtMHxEYd1ve3JWdloMmw65Ycxj0D9bqYPv4nhh
aACbWQp+kt/21xLN4QU1ImnSQaOsOlCSQFP2kAUQWr8OImMUUuviVb4XA2ukz5hb
YJTo/8IjerO93DQveszXilxozaSPuyiq+x87KTAQ8bR2wIUDVFC6KaMNsmglct+/
CFhSZQy4psdHMLaPsUl9nPwc+hO2xOa82YywV7ppyYFOVa88/iyey3tWWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2gRopLjlU0xtpCUXrimr3u20d9MB8GA1UdIwQY
MBaAFEc3eeanfH5YITGYdkzirA5r7mI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEt
NThkNjY0MjEwNjY5LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZDc1ODMtZDEwYy00N2RiLWFlZTEtNThkNjY0MjEwNjY5
LzEvUnpkNTVxZDhmbGdoTVpoMlRPS3NEbXZ1WWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcfCvC45
g3Ghai9mQbfykcYdJd8WKWUNZj2CXgdEY/T2coIpFhxTIGLIv4JuitHoYemgvih1
HU3xJXkQSmu7WYmGPDoFtxdcbNrfoxozie5wDuJ5BQMuaVjVZGVxp+lGUtsT3rpe
ZclGx6dwOv93ff9qE3BsG1xVK8WmH7RPn149bVh35LVrNwEqZKJ4janZH35TIvKG
iS83TkRpP48pjLosH3Uj/xkX0OTvPHBkKR8kxawcEmOV6tyhSfQAE44Oi5VJfBh4
H8KWOv466jkJn02iNmCUBfXU+3NbCHAvbBQkCJaJCZc1FmDU/9hYkSQKs4+36nGe
HCcCMMLdDlv8sg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:12:52 2025 by rpki-client