Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: tpqjRERqcwmdkt0wBBxFVhUx8LAQSTVoM+gYWIP7P6I=
Subject key identifier: 51:D1:95:E8:AF:9F:62:E8:00:34:3D:E6:24:94:A1:BB:B1:37:79:6B
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019774F7BDD17E6E4A21C380E801B3A61B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0188
Signing time: Sun 15 Jun 2025 19:01:22 +0000
Manifest this update: Sun 15 Jun 2025 19:01:22 +0000
Manifest next update: Mon 16 Jun 2025 19:01:22 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: fjqOp+MgRkGyc5IAmeYSaz7pJnEG/N5g2A/xXoTwqwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:bd:d1:7e:6e:4a:21:c3:80:e8:01:b3:a6:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Jun 15 19:01:22 2025 GMT
Not After : Jun 16 19:01:22 2025 GMT
Subject: CN=51d195e8af9f62e800343de62494a1bbb137796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:be:db:c5:f1:dc:32:ce:48:24:b5:82:38:
1f:57:66:61:ba:2f:e0:04:8c:cc:9f:41:a7:0b:8c:
94:96:75:ef:ae:ce:45:5e:0c:25:f5:26:7b:b4:aa:
23:20:67:f2:2c:41:af:b2:8b:ae:9b:65:20:8e:70:
4a:31:c5:9c:7b:7a:e3:dd:88:13:d9:0c:5b:27:a8:
70:05:fc:d0:a8:30:4e:73:70:1c:ee:e2:7e:92:ca:
ea:2d:e2:92:68:17:8f:27:e1:aa:4f:44:b5:a7:75:
f8:c7:97:e9:30:39:34:dc:cd:6e:57:bf:63:d9:21:
53:76:2d:22:cb:ac:95:ce:6b:46:7e:af:ed:52:0f:
91:2a:c8:df:7c:4d:01:41:f2:50:fe:4b:2d:1a:92:
8a:b9:6b:e4:a2:b4:32:4f:a7:c0:79:93:e0:5c:e0:
71:27:56:b4:d0:a1:d8:3e:28:71:62:fa:15:a3:a9:
46:c2:43:82:c1:23:e1:23:37:cb:8c:24:c9:57:11:
5a:5e:c2:14:b7:ca:d3:aa:7e:f6:de:03:d1:69:9f:
69:4c:e8:8e:29:85:de:bd:c9:e2:3d:62:a5:41:f4:
d5:22:a1:6a:5f:1d:af:a1:2a:7b:02:9c:f3:cf:04:
09:d8:cb:50:5a:7a:02:cc:bf:38:9a:db:63:6a:3a:
25:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:95:E8:AF:9F:62:E8:00:34:3D:E6:24:94:A1:BB:B1:37:79:6B
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1c:66:ba:0a:de:21:2c:d0:4d:e2:a0:87:45:92:83:3d:4c:
4e:83:1f:0b:69:76:a6:b0:1f:2d:0e:c4:26:a0:e5:52:40:e1:
e7:e7:09:b3:87:9d:92:f6:8f:c3:36:c1:01:b0:a3:23:46:72:
72:8c:d5:13:f3:9a:cd:ab:c2:9f:29:5a:6a:d8:70:b0:66:bc:
cd:45:b1:ab:ff:49:5a:b2:3a:55:c8:0d:e6:43:9a:c4:13:f5:
e5:cd:a3:38:06:c0:8a:a7:64:e0:f8:a0:ee:cd:d1:e8:05:a5:
2e:72:7f:a6:92:da:86:32:ce:17:80:9e:c2:d6:fd:d5:53:e6:
60:ac:75:8d:f9:2e:7f:8e:d5:92:ce:7b:9a:2a:d6:0c:5b:5a:
e1:69:7d:05:bb:f7:a6:3c:d7:88:db:a4:17:c0:6b:e9:d1:d9:
f3:f5:00:87:a5:d2:64:ce:7f:3d:81:1d:01:3e:a7:8c:bb:08:
99:bd:97:2e:fd:79:3d:ae:b7:b0:75:10:e1:a7:13:7a:e1:31:
ea:a9:20:34:f4:68:97:56:58:31:73:aa:a5:fc:a8:a1:93:a9:
f5:00:64:a1:2f:ca:3d:af:57:90:d2:59:4c:05:13:a0:ca:68:
58:df:b1:26:ed:19:03:52:d2:38:1b:59:c2:a0:94:fc:3b:aa:
d9:cb:a4:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0973Rfm5KIcOA6AGzphtNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj
NDE4NDMwHhcNMjUwNjE1MTkwMTIyWhcNMjUwNjE2MTkwMTIyWjAzMTEwLwYDVQQD
Eyg1MWQxOTVlOGFmOWY2MmU4MDAzNDNkZTYyNDk0YTFiYmIxMzc3OTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyG+28Xx3DLOSCS1gjgfV2Zhui/g
BIzMn0GnC4yUlnXvrs5FXgwl9SZ7tKojIGfyLEGvsouum2UgjnBKMcWce3rj3YgT
2QxbJ6hwBfzQqDBOc3Ac7uJ+ksrqLeKSaBePJ+GqT0S1p3X4x5fpMDk03M1uV79j
2SFTdi0iy6yVzmtGfq/tUg+RKsjffE0BQfJQ/kstGpKKuWvkorQyT6fAeZPgXOBx
J1a00KHYPihxYvoVo6lGwkOCwSPhIzfLjCTJVxFaXsIUt8rTqn723gPRaZ9pTOiO
KYXevcniPWKlQfTVIqFqXx2voSp7ApzzzwQJ2MtQWnoCzL84mttjajolwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHRleivn2LoADQ95iSUobuxN3lrMB8GA1UdIwQY
MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt
YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy
LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhxmugre
ISzQTeKgh0WSgz1MToMfC2l2prAfLQ7EJqDlUkDh5+cJs4edkvaPwzbBAbCjI0Zy
cozVE/OazavCnylaathwsGa8zUWxq/9JWrI6VcgN5kOaxBP15c2jOAbAiqdk4Pig
7s3R6AWlLnJ/ppLahjLOF4Cewtb91VPmYKx1jfkuf47Vks57mirWDFta4Wl9Bbv3
pjzXiNukF8Br6dHZ8/UAh6XSZM5/PYEdAT6njLsImb2XLv15Pa63sHUQ4acTeuEx
6qkgNPRol1ZYMXOqpfyooZOp9QBkoS/KPa9XkNJZTAUToMpoWN+xJu0ZA1LSOBtZ
wqCU/Duq2cuk1A==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:42 2025 by rpki-client