Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
File: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft (raw, json)
Hash identifier: 6ypJ40p2DLBUCC2Vm5KOsdUFbpih65eakvaQdLePggA=
Subject key identifier: E4:EE:11:94:DD:82:DB:CD:48:62:C9:C8:19:84:B4:C2:33:FA:B6:A2
Authority key identifier: 66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
Certificate issuer: /CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Certificate serial: 0197B5FBE564194FB603FF8EEFE284A1672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
Manifest number: 06D4
Signing time: Sat 28 Jun 2025 10:01:13 +0000
Manifest this update: Sat 28 Jun 2025 10:01:13 +0000
Manifest next update: Sun 29 Jun 2025 10:01:13 +0000
Files and hashes: 1: 1s99Tw3afz1xnVyZeR8lNzEPEk8.roa (hash: b6Tn8In4pLbU3Aif4BcpGyzCXnOKH3eVjkyvFPcCx0s=)
2: ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl (hash: SDApaff4Z2pggJZgK/wVB991QLilcRP2WYtB5TWPd7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:e5:64:19:4f:b6:03:ff:8e:ef:e2:84:a1:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694f5b0fab5fed2df9535e2a9c029f187d55404
Validity
Not Before: Jun 28 10:01:13 2025 GMT
Not After : Jun 29 10:01:13 2025 GMT
Subject: CN=e4ee1194dd82dbcd4862c9c81984b4c233fab6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:6d:86:f2:36:38:5c:87:d0:a1:a4:7c:7c:
95:be:88:77:20:b9:74:cd:80:cd:d0:c1:dc:03:3f:
21:8d:8c:94:7d:4b:98:ab:94:6b:70:75:da:9d:04:
93:53:d4:a1:68:3f:3f:ba:01:38:5d:07:88:50:79:
05:f2:0b:cf:12:69:19:eb:a1:6d:5c:9f:48:10:8c:
99:40:14:8f:8b:4e:df:d4:b2:22:bd:55:c3:21:99:
5d:55:a1:14:51:a0:30:04:bd:11:ca:90:cf:9e:28:
7b:0d:98:ea:3b:8c:bf:ba:50:39:3c:be:5a:ad:c5:
6f:0a:2c:39:5f:f2:43:6d:22:d0:70:f2:9d:0a:aa:
e2:1e:74:6c:7f:8e:b4:8a:17:9f:88:1b:93:b5:e8:
37:22:db:23:7d:70:b4:5f:10:1b:eb:52:91:37:1c:
c5:3d:9c:fd:03:7d:e4:3e:dc:ec:1d:55:76:30:f0:
e5:21:c4:d4:d6:78:8d:0e:04:4e:01:89:c9:bd:b9:
00:49:ca:59:2b:48:0a:d6:cd:47:0c:f3:e8:5c:99:
bc:ba:5c:20:9d:46:65:51:7d:a8:26:2f:bf:c0:c4:
60:2b:07:65:c9:f8:b5:ec:5a:64:71:d9:e1:f7:31:
40:74:51:b4:ed:82:3d:9c:57:3b:ac:eb:1a:d2:2d:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:11:94:DD:82:DB:CD:48:62:C9:C8:19:84:B4:C2:33:FA:B6:A2
X509v3 Authority Key Identifier:
keyid:66:94:F5:B0:FA:B5:FE:D2:DF:95:35:E2:A9:C0:29:F1:87:D5:54:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bf30d-69eb-41a4-a90d-21b9f12d22f3/1/ZpT1sPq1_tLflTXiqcAp8YfVVAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:ba:8c:1d:8a:68:cc:8b:c2:a5:1d:ef:96:95:a8:a7:4e:
92:8b:85:c2:85:73:1a:2d:64:1b:88:d5:94:01:2b:1b:57:68:
e9:61:8c:3b:ce:ca:0c:4d:27:29:0a:e5:35:12:3e:33:54:b2:
37:42:21:cf:6a:63:d5:dd:9b:83:f6:8c:d7:bd:c8:43:21:98:
a4:00:18:77:95:f1:13:77:0b:32:6e:4f:08:5a:bb:aa:4b:6f:
11:ab:cc:3f:94:68:ad:65:6e:cd:c9:40:e7:48:ba:36:55:b5:
16:16:8f:2f:19:10:7b:4d:2b:4f:d2:46:7f:12:d0:60:6d:9d:
9f:2e:dc:f0:24:97:11:fb:11:d7:4d:53:8c:fd:6c:2a:f5:4e:
3b:1f:45:44:72:86:3b:10:ad:b0:b5:b5:e9:0a:32:86:aa:49:
53:72:12:a5:c4:d0:35:c9:36:a8:c1:a1:95:67:47:77:11:ed:
7c:e3:7f:68:83:87:2e:be:11:cd:01:8a:2c:fd:4e:17:f3:0f:
94:76:f3:a1:b0:fa:1d:dd:4b:a9:6a:a3:c8:3e:1a:05:e8:03:
ba:45:b5:f1:c6:e9:fd:5c:18:d8:f6:f3:f9:60:96:3a:34:7c:
c8:17:af:c8:82:82:ad:5a:f4:fb:e7:58:ac:cd:b6:53:9b:90:
0a:92:a4:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1++VkGU+2A/+O7+KEoWcvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTRmNWIwZmFiNWZlZDJkZjk1MzVlMmE5YzAyOWYxODdk
NTU0MDQwHhcNMjUwNjI4MTAwMTEzWhcNMjUwNjI5MTAwMTEzWjAzMTEwLwYDVQQD
EyhlNGVlMTE5NGRkODJkYmNkNDg2MmM5YzgxOTg0YjRjMjMzZmFiNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwtthvI2OFyH0KGkfHyVvoh3ILl0
zYDN0MHcAz8hjYyUfUuYq5RrcHXanQSTU9ShaD8/ugE4XQeIUHkF8gvPEmkZ66Ft
XJ9IEIyZQBSPi07f1LIivVXDIZldVaEUUaAwBL0RypDPnih7DZjqO4y/ulA5PL5a
rcVvCiw5X/JDbSLQcPKdCqriHnRsf460ihefiBuTteg3ItsjfXC0XxAb61KRNxzF
PZz9A33kPtzsHVV2MPDlIcTU1niNDgROAYnJvbkAScpZK0gK1s1HDPPoXJm8ulwg
nUZlUX2oJi+/wMRgKwdlyfi17Fpkcdnh9zFAdFG07YI9nFc7rOsa0i02DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTuEZTdgtvNSGLJyBmEtMIz+raiMB8GA1UdIwQY
MBaAFGaU9bD6tf7S35U14qnAKfGH1VQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQt
MjFiOWYxMmQyMmYzLzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YmYzMGQtNjllYi00MWE0LWE5MGQtMjFiOWYxMmQyMmYz
LzEvWnBUMXNQcTFfdExmbFRYaXFjQXA4WWZWVkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcW6jB2K
aMyLwqUd75aVqKdOkouFwoVzGi1kG4jVlAErG1do6WGMO87KDE0nKQrlNRI+M1Sy
N0Ihz2pj1d2bg/aM173IQyGYpAAYd5XxE3cLMm5PCFq7qktvEavMP5RorWVuzclA
50i6NlW1FhaPLxkQe00rT9JGfxLQYG2dny7c8CSXEfsR101TjP1sKvVOOx9FRHKG
OxCtsLW16QoyhqpJU3ISpcTQNck2qMGhlWdHdxHtfON/aIOHLr4RzQGKLP1OF/MP
lHbzobD6Hd1LqWqjyD4aBegDukW18cbp/VwY2Pbz+WCWOjR8yBevyIKCrVr0++dY
rM22U5uQCpKkcQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:55 2025 by rpki-client