Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: H4CnQcBR3qb8hFsLp0gIsmlF1WuhFimRpIz/0sFn4I0=
Subject key identifier: 2A:59:BF:A8:5E:32:BB:F5:02:82:5A:26:D8:60:09:94:97:62:3A:7F
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019776E55A5D8BBDE792407F176AFD67CBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 12E5
Signing time: Mon 16 Jun 2025 04:00:31 +0000
Manifest this update: Mon 16 Jun 2025 04:00:31 +0000
Manifest next update: Tue 17 Jun 2025 04:00:31 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: vXsf5gsn76+S89vOTWhCeM2WBJsFmGhwWQ4Jqf405NA=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:5a:5d:8b:bd:e7:92:40:7f:17:6a:fd:67:cb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Jun 16 04:00:31 2025 GMT
Not After : Jun 17 04:00:31 2025 GMT
Subject: CN=2a59bfa85e32bbf502825a26d860099497623a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:0b:da:07:36:35:97:b2:01:78:d7:29:2f:
d4:d3:9a:df:3e:05:f1:90:ff:d2:00:b9:44:7d:f0:
7a:14:4f:60:9c:2b:86:ec:3b:4c:15:32:16:4e:8a:
09:a5:c9:4b:86:5d:fb:db:87:33:40:0f:95:00:16:
32:5a:dd:ba:dc:cf:40:de:8b:40:40:4d:01:4c:9f:
b0:19:91:3a:cf:64:9a:ae:fa:98:e5:f2:43:e4:7f:
36:8a:3d:1b:3a:10:17:c8:9d:63:21:b9:a0:4e:e8:
44:c8:3e:42:6c:22:00:94:ac:0b:bf:b9:c2:98:e0:
b3:af:1f:cf:5d:d4:1c:f8:69:0f:ca:95:7c:75:c5:
c4:13:37:f3:56:eb:0a:d6:97:b7:c2:c5:5a:79:b0:
1b:18:7d:28:8f:a9:52:1e:3a:fe:ca:4b:85:14:95:
ae:c2:f7:67:03:98:21:66:d4:3b:00:a6:d7:00:06:
1d:ee:db:05:bc:e9:9b:09:f6:ff:42:ac:aa:4d:00:
d5:f4:89:6f:37:e8:d2:38:c8:eb:d6:dc:98:3e:f4:
e9:55:fa:b1:9d:66:dc:6c:e3:37:f4:ef:a3:52:21:
e9:69:74:0a:e7:b6:e1:61:d8:4d:57:26:bf:58:59:
79:aa:d9:99:9b:e0:19:0e:0e:b5:4c:fe:7f:63:17:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:59:BF:A8:5E:32:BB:F5:02:82:5A:26:D8:60:09:94:97:62:3A:7F
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e4:7d:17:61:97:d4:07:25:09:77:a8:eb:04:47:ae:7a:22:
30:fe:c3:92:b8:50:42:24:36:1c:d6:d8:2c:f2:e9:b2:50:3d:
90:cd:cc:9c:cc:06:1c:9a:9a:04:cd:6b:bb:fd:1f:6f:e3:dc:
2d:8f:44:d5:c4:24:dc:58:ab:f9:d6:c0:33:a1:7e:bf:7c:16:
5e:0b:76:90:7b:46:66:e3:b0:b5:06:f2:32:79:c8:ad:66:7d:
12:42:4d:28:d0:4d:be:7a:3c:6d:52:3a:95:ef:2d:00:a7:c9:
54:f8:5a:8c:c9:59:b2:07:90:bb:8c:0e:e6:b4:da:63:3f:15:
87:79:cd:69:a8:c3:a4:b7:a7:08:42:fa:68:af:96:51:13:54:
ab:3d:c2:cb:43:7a:1d:d6:80:6c:33:e1:5e:35:93:89:df:e9:
13:e0:98:73:fe:08:c8:70:d5:1f:8c:eb:91:f1:cd:c1:d4:e8:
2d:a4:dd:60:bb:bc:36:02:16:ae:28:53:08:f7:43:4b:d8:bd:
cd:e4:f4:01:7d:4f:97:9b:cc:f0:d2:78:5f:24:92:fb:38:ae:
cb:46:a7:35:31:24:6a:2b:3b:8b:56:b2:51:f0:d5:8c:a7:34:
fc:bb:25:ba:8c:1f:f9:12:ac:cd:18:c2:63:ac:35:37:ee:dc:
ba:e6:16:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25Vpdi73nkkB/F2r9Z8uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjUwNjE2MDQwMDMxWhcNMjUwNjE3MDQwMDMxWjAzMTEwLwYDVQQD
EygyYTU5YmZhODVlMzJiYmY1MDI4MjVhMjZkODYwMDk5NDk3NjIzYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYgL2gc2NZeyAXjXKS/U05rfPgXx
kP/SALlEffB6FE9gnCuG7DtMFTIWTooJpclLhl3724czQA+VABYyWt263M9A3otA
QE0BTJ+wGZE6z2SarvqY5fJD5H82ij0bOhAXyJ1jIbmgTuhEyD5CbCIAlKwLv7nC
mOCzrx/PXdQc+GkPypV8dcXEEzfzVusK1pe3wsVaebAbGH0oj6lSHjr+ykuFFJWu
wvdnA5ghZtQ7AKbXAAYd7tsFvOmbCfb/QqyqTQDV9IlvN+jSOMjr1tyYPvTpVfqx
nWbcbOM39O+jUiHpaXQK57bhYdhNVya/WFl5qtmZm+AZDg61TP5/YxcLOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpZv6heMrv1AoJaJthgCZSXYjp/MB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOR9F2GX
1AclCXeo6wRHrnoiMP7DkrhQQiQ2HNbYLPLpslA9kM3MnMwGHJqaBM1ru/0fb+Pc
LY9E1cQk3Fir+dbAM6F+v3wWXgt2kHtGZuOwtQbyMnnIrWZ9EkJNKNBNvno8bVI6
le8tAKfJVPhajMlZsgeQu4wO5rTaYz8Vh3nNaajDpLenCEL6aK+WURNUqz3Cy0N6
HdaAbDPhXjWTid/pE+CYc/4IyHDVH4zrkfHNwdToLaTdYLu8NgIWrihTCPdDS9i9
zeT0AX1Pl5vM8NJ4XySS+ziuy0anNTEkais7i1ayUfDVjKc0/Lsluowf+RKszRjC
Y6w1N+7cuuYWwg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:37:02 2025 by rpki-client