Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: eKQ/HwD5aNSH3+HXpDFrPsGt3idw3jOW6GOUj2QXL2Y=
Subject key identifier: 82:DF:77:C2:60:02:23:07:6B:DF:7B:9B:29:38:60:FB:65:C9:7B:FB
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 019776AE42D79FCBC3446F368508B8B94239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 15DB
Signing time: Mon 16 Jun 2025 03:00:21 +0000
Manifest this update: Mon 16 Jun 2025 03:00:21 +0000
Manifest next update: Tue 17 Jun 2025 03:00:21 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: Hb1uRSP8+Bfqs/4TIYxZfF0NxGfAoF+Sew2VeNjTyfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:42:d7:9f:cb:c3:44:6f:36:85:08:b8:b9:42:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Jun 16 03:00:21 2025 GMT
Not After : Jun 17 03:00:21 2025 GMT
Subject: CN=82df77c2600223076bdf7b9b293860fb65c97bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:a4:46:c0:77:4f:53:4b:56:67:49:5c:01:
3c:76:f3:c2:eb:05:3f:ba:ea:4e:8a:73:8a:57:e9:
23:07:e9:4d:ba:66:8e:9a:f4:66:02:06:aa:1c:e9:
a3:92:76:84:63:7a:80:6d:af:c5:6c:92:65:c0:20:
a3:a7:cc:74:94:7c:74:00:7f:73:16:f6:c4:1b:27:
c1:7e:d7:b5:5b:9b:cc:f4:45:9f:b2:5c:51:df:b9:
57:5f:a1:0f:ea:d4:b9:ad:d8:d4:df:62:c5:9d:97:
01:db:26:35:e0:37:2f:ea:a6:4a:4d:0a:aa:50:00:
ae:91:79:d1:50:10:90:01:55:1c:31:d3:05:ac:32:
06:2f:89:9c:23:a3:49:73:8a:fa:4f:b9:eb:15:5c:
0e:b8:47:bc:ac:5c:7f:4c:02:53:ef:25:fa:73:24:
6b:63:c5:c4:ab:34:86:a7:37:90:24:d5:78:4c:7b:
af:28:e9:90:59:42:87:a6:5f:f0:b0:33:cb:f7:f9:
be:58:98:90:2d:27:ea:cc:59:a1:7b:69:83:c7:74:
84:9d:38:8c:89:4b:97:b2:8d:1a:87:7b:7a:43:41:
b3:e8:e0:ec:c2:13:11:14:68:1a:3d:d2:6b:4e:1a:
18:ac:7e:0c:7f:4c:d2:86:7a:ce:ad:19:83:79:52:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DF:77:C2:60:02:23:07:6B:DF:7B:9B:29:38:60:FB:65:C9:7B:FB
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:a3:85:18:e9:b9:90:0a:40:88:86:c9:93:a6:36:d3:dc:
6b:3c:6c:da:05:93:46:5e:d1:92:a9:71:84:a5:47:be:d8:c5:
c3:5c:7b:db:3e:55:b2:9c:38:0f:4a:93:63:9f:ff:75:d8:93:
ad:43:9d:51:fc:7c:90:e8:5e:32:ab:9c:ed:aa:96:1c:41:e8:
ab:fd:81:7f:6b:db:3d:45:29:30:ed:32:96:82:e2:cc:97:3f:
9b:82:a7:f9:95:fa:39:23:a8:b2:d1:b7:a2:31:50:71:7f:75:
7d:b5:2f:fa:de:15:eb:69:52:b5:8d:66:b0:2e:ab:02:b1:a3:
e9:bd:f6:c3:5b:bb:22:41:d1:c9:3c:c7:63:d0:49:83:69:30:
b1:38:db:78:fe:32:f3:f7:32:56:e0:01:a9:52:56:d4:4e:93:
c9:2f:cf:07:63:79:24:12:23:55:90:bd:72:06:68:a7:e8:aa:
18:25:58:cf:9f:a8:86:71:3a:54:bb:61:d4:10:64:98:d3:c6:
88:72:7f:6c:1e:c7:4b:35:14:26:e3:96:ee:4f:29:8a:3e:81:
96:b2:83:81:14:79:8a:ae:35:0a:0f:c7:d5:9f:9d:6b:71:61:
2f:cf:ad:c2:5d:30:4e:28:94:c8:67:c4:0f:a9:bc:c8:09:30:
af:f0:0d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2rkLXn8vDRG82hQi4uUI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi
Yzc1M2IwHhcNMjUwNjE2MDMwMDIxWhcNMjUwNjE3MDMwMDIxWjAzMTEwLwYDVQQD
Eyg4MmRmNzdjMjYwMDIyMzA3NmJkZjdiOWIyOTM4NjBmYjY1Yzk3YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIKkRsB3T1NLVmdJXAE8dvPC6wU/
uupOinOKV+kjB+lNumaOmvRmAgaqHOmjknaEY3qAba/FbJJlwCCjp8x0lHx0AH9z
FvbEGyfBfte1W5vM9EWfslxR37lXX6EP6tS5rdjU32LFnZcB2yY14Dcv6qZKTQqq
UACukXnRUBCQAVUcMdMFrDIGL4mcI6NJc4r6T7nrFVwOuEe8rFx/TAJT7yX6cyRr
Y8XEqzSGpzeQJNV4THuvKOmQWUKHpl/wsDPL9/m+WJiQLSfqzFmhe2mDx3SEnTiM
iUuXso0ah3t6Q0Gz6ODswhMRFGgaPdJrThoYrH4Mf0zShnrOrRmDeVJO2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILfd8JgAiMHa997myk4YPtlyXv7MB8GA1UdIwQY
MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt
OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy
LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgijhRjp
uZAKQIiGyZOmNtPcazxs2gWTRl7RkqlxhKVHvtjFw1x72z5Vspw4D0qTY5//ddiT
rUOdUfx8kOheMquc7aqWHEHoq/2Bf2vbPUUpMO0yloLizJc/m4Kn+ZX6OSOostG3
ojFQcX91fbUv+t4V62lStY1msC6rArGj6b32w1u7IkHRyTzHY9BJg2kwsTjbeP4y
8/cyVuABqVJW1E6TyS/PB2N5JBIjVZC9cgZop+iqGCVYz5+ohnE6VLth1BBkmNPG
iHJ/bB7HSzUUJuOW7k8pij6BlrKDgRR5iq41Cg/H1Z+da3FhL8+twl0wTiiUyGfE
D6m8yAkwr/AN5g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:49:47 2025 by rpki-client