Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: ZSk4K+/URWRnN0FgV04I5x3PuGyRokCJ+CGZ4hbJRSM=
Subject key identifier: 29:03:64:C0:48:D1:91:B8:8E:31:38:EA:05:58:F1:95:FB:A2:F6:36
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 0197684E5409F3B783D09135FF8314E6FD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 0EF8
Signing time: Fri 13 Jun 2025 08:00:53 +0000
Manifest this update: Fri 13 Jun 2025 08:00:53 +0000
Manifest next update: Sat 14 Jun 2025 08:00:53 +0000
Files and hashes: 1: pDhGAUUYTY1UyjFCug_VA9YXDfc.roa (hash: 6QASzR15fgb6kzzjuyGG0IHeby7n6I+Zv7YlWcP1xhM=)
2: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: mUrJERtDuBak53OcwOiIyFsYHXbuKOd9POaJiCRFzdk=)
3: zX5SsCvbtwgH75QXuBUCbtdy6Ww.roa (hash: wvJG3iztzAVZHUfCx2K+W5TdCzTlwS3eoby1xR0ldnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:54:09:f3:b7:83:d0:91:35:ff:83:14:e6:fd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jun 13 08:00:53 2025 GMT
Not After : Jun 14 08:00:53 2025 GMT
Subject: CN=290364c048d191b88e3138ea0558f195fba2f636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:b7:7a:d4:8b:45:f9:b0:67:c1:4a:f2:83:
8d:61:56:50:83:72:ad:4c:c9:5c:f5:23:fc:49:06:
55:63:b2:aa:dd:69:95:fc:6f:2a:00:a2:6a:67:fd:
51:03:8c:32:f3:a8:b1:17:6f:08:04:97:dc:10:23:
e6:38:79:0a:f0:07:18:0b:ea:79:5c:28:db:1b:da:
1b:41:0c:fd:23:2f:7c:59:82:8e:c4:ad:96:d7:a4:
4e:7c:3d:5e:57:db:c4:d0:bd:6e:3d:8a:e6:64:5b:
7d:5c:5b:8a:7c:ea:74:42:6c:51:b8:6f:f2:09:89:
eb:89:72:25:92:f7:d4:36:1a:64:bf:7d:76:ab:50:
aa:47:3a:04:71:04:22:53:8a:ca:9a:cd:44:62:84:
6d:d3:2c:c9:87:40:a8:58:8f:6a:f2:8b:c6:08:02:
1c:8b:d7:6b:e2:2c:c6:20:e5:82:c2:5f:4e:03:4d:
1b:4b:f5:43:7c:86:ba:84:41:71:b2:c5:cc:4e:4d:
ba:10:e7:a5:9e:65:65:4c:a7:76:6b:00:0f:94:de:
50:7d:b5:13:84:c5:6d:96:95:25:e8:be:27:68:c1:
ea:de:a5:54:f2:ef:16:08:f0:68:e0:d6:cf:86:db:
aa:36:99:4b:13:f7:93:c1:dd:e1:eb:38:f0:ef:e5:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:03:64:C0:48:D1:91:B8:8E:31:38:EA:05:58:F1:95:FB:A2:F6:36
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:64:b6:4f:f8:e7:8b:a2:c2:ae:6a:ec:7e:91:92:5e:6b:5b:
fb:41:ff:7d:54:79:95:a4:94:70:6e:17:e6:99:7c:c3:c3:19:
64:71:90:1a:64:63:cd:bd:4c:7a:59:b4:ae:89:aa:b8:52:c2:
cf:ce:e7:50:9d:c5:86:5d:08:65:c8:ac:8f:c3:dd:da:2a:2f:
29:32:3b:50:5e:49:d4:62:85:93:c8:ef:ea:c6:bf:72:1d:57:
bd:5c:bf:6b:d8:de:36:50:f6:e3:58:3f:5f:a2:87:97:99:2a:
23:13:10:4c:f5:45:c8:e5:01:e0:4e:23:9f:60:8e:c9:dd:76:
c1:a4:09:6b:50:62:5a:b8:35:be:08:53:0b:f6:ea:5e:24:f3:
94:86:2b:65:ea:95:a5:80:52:99:8d:1d:4f:02:f2:36:22:64:
f7:45:e7:2e:fe:9e:80:11:85:bf:e6:05:79:bf:33:64:3d:ca:
54:6d:24:41:f7:99:c5:27:3f:9a:3b:3a:d5:c7:9a:c5:66:a3:
0a:94:fb:b8:b8:1d:83:1c:fe:b0:d1:1c:b4:38:6d:90:99:29:
75:07:ed:9f:15:7d:5e:83:7d:cb:9b:7d:ab:a6:02:42:bc:3c:
b3:b7:ed:23:78:7d:d8:fc:14:ac:14:ad:33:48:01:9c:f9:5d:
4e:12:45:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTlQJ87eD0JE1/4MU5v1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2RmNjUxNjIzN2Q0MjVlOWFlMzgxN2VjYjE0MWY0ODE3
NzNjMTIwHhcNMjUwNjEzMDgwMDUzWhcNMjUwNjE0MDgwMDUzWjAzMTEwLwYDVQQD
EygyOTAzNjRjMDQ4ZDE5MWI4OGUzMTM4ZWEwNTU4ZjE5NWZiYTJmNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDO3etSLRfmwZ8FK8oONYVZQg3Kt
TMlc9SP8SQZVY7Kq3WmV/G8qAKJqZ/1RA4wy86ixF28IBJfcECPmOHkK8AcYC+p5
XCjbG9obQQz9Iy98WYKOxK2W16ROfD1eV9vE0L1uPYrmZFt9XFuKfOp0QmxRuG/y
CYnriXIlkvfUNhpkv312q1CqRzoEcQQiU4rKms1EYoRt0yzJh0CoWI9q8ovGCAIc
i9dr4izGIOWCwl9OA00bS/VDfIa6hEFxssXMTk26EOelnmVlTKd2awAPlN5QfbUT
hMVtlpUl6L4naMHq3qVU8u8WCPBo4NbPhtuqNplLE/eTwd3h6zjw7+XDrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkDZMBI0ZG4jjE46gVY8ZX7ovY2MB8GA1UdIwQY
MBaAFMzN9lFiN9Ql6a44F+yxQfSBdzwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEt
MWI1MDE1MjA1MzJiLzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEtMWI1MDE1MjA1MzJi
LzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWS2T/jn
i6LCrmrsfpGSXmtb+0H/fVR5laSUcG4X5pl8w8MZZHGQGmRjzb1Melm0romquFLC
z87nUJ3Fhl0IZcisj8Pd2iovKTI7UF5J1GKFk8jv6sa/ch1XvVy/a9jeNlD241g/
X6KHl5kqIxMQTPVFyOUB4E4jn2COyd12waQJa1BiWrg1vghTC/bqXiTzlIYrZeqV
pYBSmY0dTwLyNiJk90XnLv6egBGFv+YFeb8zZD3KVG0kQfeZxSc/mjs61ceaxWaj
CpT7uLgdgxz+sNEctDhtkJkpdQftnxV9XoN9y5t9q6YCQrw8s7ftI3h92PwUrBSt
M0gBnPldThJFGQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:09 2025 by rpki-client