Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: izi33Aydf5cjXnylo5FVHCHw5+IjBCTg1xesk+JHeF4=
Subject key identifier: F8:B5:37:2C:84:B0:63:B8:08:AA:22:06:DA:BA:CF:80:F1:A6:86:AC
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 0197B77CA6FA9E29F40814327C89BC9B4F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 0F1C
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: z4JsJJgrcLYJTJLiMZ8iOlI1VT0Seq5UumHZiZjJhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a6:fa:9e:29:f4:08:14:32:7c:89:bc:9b:4f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=f8b5372c84b063b808aa2206dabacf80f1a686ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:9a:68:3a:6d:21:09:c9:3e:a8:9a:b6:fb:
d2:d9:71:92:87:ec:cf:f1:b4:f8:a9:97:60:d9:87:
4f:95:13:d4:ea:6d:78:31:18:75:19:09:ee:7b:74:
23:8f:ff:6d:87:e3:f5:24:a3:ed:ea:76:b2:52:b3:
f6:da:c6:06:f1:26:51:f1:ba:e4:d8:41:d7:61:52:
02:34:00:71:f9:72:2f:1c:a9:38:48:48:03:d8:13:
61:8a:f2:53:91:7b:e8:3e:e2:e7:59:3a:76:35:5e:
bd:6e:c2:12:bd:ca:23:ad:84:6b:1f:bd:91:61:60:
0c:7f:0c:ae:66:ea:8e:cf:06:23:48:87:86:54:80:
81:e6:66:8e:9b:c8:3b:fa:94:05:2d:f3:6c:fe:76:
93:8f:8d:83:1b:1d:8d:e1:47:6b:4f:4e:31:37:5f:
27:b9:ca:e3:11:3d:dd:aa:2f:18:1f:03:5f:82:f9:
95:4a:f8:73:6b:4a:4d:c8:ef:d3:8e:70:a1:5c:f2:
33:4e:a5:05:1c:08:21:d7:f7:99:ef:89:98:f4:f1:
8e:30:b8:ff:a6:66:e9:6f:02:2e:ed:a1:2c:90:25:
01:b4:7c:d0:95:e2:30:70:57:d3:e4:03:6f:aa:71:
41:f6:3e:d9:a8:60:bf:b2:13:2e:4a:b3:dc:25:b7:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:37:2C:84:B0:63:B8:08:AA:22:06:DA:BA:CF:80:F1:A6:86:AC
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:46:93:2f:55:f9:01:ca:c3:5f:bc:6f:1a:0d:e9:29:bc:1a:
db:b1:57:ef:77:67:aa:52:ae:83:80:60:c8:06:8b:f5:ce:b8:
e3:26:5b:67:86:4f:5f:69:45:39:7b:7f:9e:0b:26:d4:82:48:
51:97:56:8a:64:38:84:7e:d3:14:dc:d1:5e:21:5d:ad:8d:c3:
e0:2d:81:96:b5:97:0f:33:84:92:fd:42:2f:06:c3:08:ce:03:
08:6b:75:1c:18:a9:af:31:7d:23:ba:23:77:7d:98:b6:5e:80:
c4:bd:c4:86:56:83:ec:bb:7b:77:98:32:ab:c0:86:12:22:9f:
b5:4e:f0:82:06:04:e8:51:c3:06:30:bb:79:8b:04:16:ad:57:
ee:51:c0:8b:a0:23:55:10:1a:01:02:d8:f2:1b:46:b1:cd:96:
0e:33:1b:a3:64:37:3e:36:25:e9:67:60:f8:d4:e1:23:be:2b:
d9:c3:32:d8:98:d9:08:fc:7d:b5:08:01:a3:c2:38:11:66:71:
63:29:9e:eb:37:43:77:c3:78:0d:a2:cf:c7:4b:f7:c0:e1:e1:
c1:b3:6f:eb:e5:47:53:b4:6d:a5:13:b2:6c:c5:cf:08:b8:59:
95:27:8a:42:cf:43:d9:4d:6e:59:2a:fb:47:da:17:c4:84:80:
0d:94:10:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fKb6nin0CBQyfIm8m08rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4
MDljZjkwHhcNMjUwNjI4MTcwMTI5WhcNMjUwNjI5MTcwMTI5WjAzMTEwLwYDVQQD
EyhmOGI1MzcyYzg0YjA2M2I4MDhhYTIyMDZkYWJhY2Y4MGYxYTY4NmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkauaaDptIQnJPqiatvvS2XGSh+zP
8bT4qZdg2YdPlRPU6m14MRh1GQnue3Qjj/9th+P1JKPt6nayUrP22sYG8SZR8brk
2EHXYVICNABx+XIvHKk4SEgD2BNhivJTkXvoPuLnWTp2NV69bsISvcojrYRrH72R
YWAMfwyuZuqOzwYjSIeGVICB5maOm8g7+pQFLfNs/naTj42DGx2N4UdrT04xN18n
ucrjET3dqi8YHwNfgvmVSvhza0pNyO/TjnChXPIzTqUFHAgh1/eZ74mY9PGOMLj/
pmbpbwIu7aEskCUBtHzQleIwcFfT5ANvqnFB9j7ZqGC/shMuSrPcJbemkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPi1NyyEsGO4CKoiBtq6z4DxpoasMB8GA1UdIwQY
MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt
NTFhZDAwZTU0MzMyLzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy
LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEaTL1X5
AcrDX7xvGg3pKbwa27FX73dnqlKug4BgyAaL9c644yZbZ4ZPX2lFOXt/ngsm1IJI
UZdWimQ4hH7TFNzRXiFdrY3D4C2BlrWXDzOEkv1CLwbDCM4DCGt1HBiprzF9I7oj
d32Ytl6AxL3EhlaD7Lt7d5gyq8CGEiKftU7wggYE6FHDBjC7eYsEFq1X7lHAi6Aj
VRAaAQLY8htGsc2WDjMbo2Q3PjYl6Wdg+NThI74r2cMy2JjZCPx9tQgBo8I4EWZx
Yyme6zdDd8N4DaLPx0v3wOHhwbNv6+VHU7RtpROybMXPCLhZlSeKQs9D2U1uWSr7
R9oXxISADZQQtw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:33 2025 by rpki-client