Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: 0uss6SXRq/Q4+H6KA7jHPTQS6uMYspet1Tlm6nV2+yU=
Subject key identifier: 91:1D:1A:75:BC:A4:2D:BB:BD:11:48:A2:8D:CC:C7:30:3F:94:3A:82
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 01976D06AD758447E666111677FC3F9BB41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 06:00:43 +0000
Manifest this update: Sat 14 Jun 2025 06:00:43 +0000
Manifest next update: Sun 15 Jun 2025 06:00:43 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: bmMMnR2O3j/4ZntpqBUNyecymyihG5tJl+KU2eFik38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:ad:75:84:47:e6:66:11:16:77:fc:3f:9b:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Jun 14 06:00:43 2025 GMT
Not After : Jun 15 06:00:43 2025 GMT
Subject: CN=911d1a75bca42dbbbd1148a28dccc7303f943a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:cb:54:46:3c:c0:42:fd:cb:6a:0b:20:64:
51:a7:fc:5b:01:b4:b4:04:7c:32:59:64:d4:69:e8:
54:cf:e1:e0:e6:b1:77:57:a8:ed:a5:eb:65:56:33:
45:7e:76:9f:04:96:69:db:07:f1:2f:7b:da:38:ca:
87:a0:4d:82:61:58:64:32:59:7d:84:6f:13:93:fb:
b8:ef:11:45:77:58:ac:1a:01:a4:10:da:41:44:32:
f2:27:10:ec:de:99:a4:08:47:58:38:15:be:f2:38:
6c:5a:2c:4b:b6:19:d0:70:2d:39:92:90:96:cc:6c:
4b:c5:a5:f7:f3:73:14:8f:8d:a6:a7:85:26:3d:9e:
8e:17:80:c0:0f:7a:41:b0:e3:14:d6:49:01:8a:fa:
d7:52:56:0a:42:fb:b4:74:83:dd:91:f8:d7:ef:10:
cc:ee:d7:fb:73:0b:1b:fc:14:a9:42:bb:17:f7:0a:
ae:5f:2f:67:40:5f:4e:70:09:8c:00:23:54:cf:8d:
66:9b:21:18:d9:37:d9:18:f1:2f:9d:9f:b7:13:8a:
ef:e5:07:98:a7:1b:48:c1:0b:1c:d2:9e:d9:af:b0:
a4:25:2e:e8:65:f9:1c:1e:7d:89:28:82:79:21:8f:
fa:42:b9:b9:6d:56:c7:dd:6e:63:b0:70:34:56:33:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:1A:75:BC:A4:2D:BB:BD:11:48:A2:8D:CC:C7:30:3F:94:3A:82
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a9:1a:7a:63:45:ee:0d:38:0e:dd:6e:4b:1d:66:a9:5f:42:
5a:81:a4:5c:27:c8:ed:45:33:2a:e9:1d:58:f7:26:8f:ca:87:
35:a6:1c:1c:bc:0f:43:06:c6:15:21:31:36:71:ca:a6:78:96:
af:5f:36:f1:5a:90:d6:f7:43:50:fd:aa:67:05:de:11:79:d5:
72:6f:63:d2:22:64:48:92:8e:f2:e2:80:cc:5a:66:50:8f:8f:
a0:14:02:c8:b3:ce:f6:41:6f:87:13:01:d1:35:10:b2:be:e5:
22:f0:f8:e0:36:aa:10:2b:d4:aa:21:4c:bd:77:da:94:fb:19:
0b:37:ef:6a:77:ca:02:d1:98:3b:22:aa:1c:db:da:08:20:4f:
1f:20:ad:84:e0:04:fa:6b:a0:e1:77:56:91:96:c6:18:c8:b0:
2c:53:90:33:53:19:0c:c0:c0:fd:69:84:5a:c7:a6:6d:5a:83:
d2:bf:bc:fb:05:e3:41:7d:d0:c0:31:16:99:f8:ef:e4:36:2a:
84:5b:44:3c:fa:41:f3:04:a0:0b:e2:09:c9:48:6f:f7:90:fc:
c4:90:6b:13:c5:ad:19:82:19:9b:8f:ff:6e:57:d3:5a:47:ef:
34:cc:1d:07:9d:07:97:92:4b:a7:b7:dd:66:66:2d:ef:51:a4:
e3:aa:9d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBq11hEfmZhEWd/w/m7QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm
ZDg1NWIwHhcNMjUwNjE0MDYwMDQzWhcNMjUwNjE1MDYwMDQzWjAzMTEwLwYDVQQD
Eyg5MTFkMWE3NWJjYTQyZGJiYmQxMTQ4YTI4ZGNjYzczMDNmOTQzYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfLLVEY8wEL9y2oLIGRRp/xbAbS0
BHwyWWTUaehUz+Hg5rF3V6jtpetlVjNFfnafBJZp2wfxL3vaOMqHoE2CYVhkMll9
hG8Tk/u47xFFd1isGgGkENpBRDLyJxDs3pmkCEdYOBW+8jhsWixLthnQcC05kpCW
zGxLxaX383MUj42mp4UmPZ6OF4DAD3pBsOMU1kkBivrXUlYKQvu0dIPdkfjX7xDM
7tf7cwsb/BSpQrsX9wquXy9nQF9OcAmMACNUz41mmyEY2TfZGPEvnZ+3E4rv5QeY
pxtIwQsc0p7Zr7CkJS7oZfkcHn2JKIJ5IY/6Qrm5bVbH3W5jsHA0VjNvnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEdGnW8pC27vRFIoo3MxzA/lDqCMB8GA1UdIwQY
MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt
NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew
LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUakaemNF
7g04Dt1uSx1mqV9CWoGkXCfI7UUzKukdWPcmj8qHNaYcHLwPQwbGFSExNnHKpniW
r1828VqQ1vdDUP2qZwXeEXnVcm9j0iJkSJKO8uKAzFpmUI+PoBQCyLPO9kFvhxMB
0TUQsr7lIvD44DaqECvUqiFMvXfalPsZCzfvanfKAtGYOyKqHNvaCCBPHyCthOAE
+mug4XdWkZbGGMiwLFOQM1MZDMDA/WmEWsembVqD0r+8+wXjQX3QwDEWmfjv5DYq
hFtEPPpB8wSgC+IJyUhv95D8xJBrE8WtGYIZm4//blfTWkfvNMwdB50Hl5JLp7fd
ZmYt71Gk46qd1w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:41 2025 by rpki-client