Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: nY25O4MxD0uWuAEassG1HFOg5IXLRzZFKz0Iw4tWbVE=
Subject key identifier: B5:04:2F:E0:BB:30:4B:5A:71:1E:B7:D2:AA:72:C2:70:CF:94:AB:9E
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 0197B7456367EAACDF8DB43A77B1BB12BCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0D38
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: f7l+Rz/1+/HT1woUBuHNDram5uPwKPdAKfnfMsYLLK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:63:67:ea:ac:df:8d:b4:3a:77:b1:bb:12:bc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=b5042fe0bb304b5a711eb7d2aa72c270cf94ab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:e1:32:18:1e:68:5f:80:2f:45:4a:a9:8b:
1c:9b:5a:0d:73:4c:93:6d:04:33:af:56:ca:e4:ef:
a7:ea:60:f6:45:f6:9d:c4:36:93:58:e3:f3:5b:bf:
24:90:c3:fe:f7:0c:a7:67:7e:3a:97:fe:fe:ac:21:
88:63:15:93:da:cf:3a:75:d6:ab:f2:1f:19:6e:04:
fb:b0:05:eb:ef:ee:41:ab:da:a5:28:3a:53:11:e6:
6b:ca:06:61:5e:36:40:f5:c0:77:7c:f6:8b:97:56:
44:85:3e:53:80:28:46:98:95:36:ae:4a:dc:cd:42:
9b:9f:16:19:c3:c3:db:5a:45:47:cb:92:08:bf:c8:
2d:a4:e6:95:0d:75:e2:03:10:4b:5e:3f:a6:5c:4e:
24:78:0f:5d:0c:40:81:f1:55:e7:e4:1a:ae:d2:84:
af:34:54:9b:5f:1e:3c:2f:81:51:a3:ba:d5:d1:99:
1c:cb:3b:bf:e4:2c:5c:a4:6f:6c:f5:c1:17:c9:fd:
ec:d3:86:10:88:71:da:e4:f5:45:6c:ed:31:0e:cd:
ed:f2:55:e4:eb:e7:6b:14:5a:54:54:35:34:82:50:
45:18:dc:5c:42:28:46:22:1a:14:06:eb:a1:22:0e:
93:df:26:1a:c0:24:4b:8f:18:d9:b7:82:20:1d:9e:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:04:2F:E0:BB:30:4B:5A:71:1E:B7:D2:AA:72:C2:70:CF:94:AB:9E
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:1c:cd:28:60:f8:25:16:93:d6:4e:83:14:9f:cc:5a:97:
17:4c:d0:17:a7:67:e5:c0:a9:a8:68:69:16:a9:fb:58:d7:b7:
95:8d:cb:4d:78:b6:bd:6a:2e:e8:18:87:05:80:2a:7a:ad:11:
f8:4e:1b:4d:fa:26:d0:26:90:4f:f3:07:3b:7a:7a:c6:c6:3a:
c1:66:12:b8:30:32:e4:d4:6b:aa:c4:70:cc:91:78:1b:7f:fd:
d1:71:96:52:a5:68:f3:08:9a:4f:6d:33:8e:96:3a:64:a2:7d:
88:4c:50:49:81:41:4b:10:71:b6:bb:37:4b:09:c1:cd:da:4d:
8e:f3:1d:4e:cd:22:51:cb:77:e5:bb:3c:41:95:a0:79:b6:09:
f9:fd:ad:f7:39:3c:21:1c:a4:90:d5:a4:76:42:22:fd:65:a5:
1c:09:46:f0:b3:4d:56:e4:28:56:c5:74:cc:cf:53:77:1b:2f:
d4:d9:03:0c:fe:3f:86:5f:63:28:12:ce:01:0e:63:bf:5c:02:
ed:fd:c2:54:fa:28:05:b0:c2:da:62:2a:99:2c:be:30:fb:af:
1e:19:c5:f3:e3:7a:53:cd:b7:89:78:62:e5:9a:b6:43:1e:16:
03:b6:94:06:7c:6e:3e:e6:20:58:9a:37:d9:9a:37:7f:5d:41:
b5:5f:77:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RWNn6qzfjbQ6d7G7ErzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2RhZjEyMmUzYTg3YWNhYTZmZGI2MmMzNWEyNTJhMTk5
YTU4ZDkwHhcNMjUwNjI4MTYwMTA3WhcNMjUwNjI5MTYwMTA3WjAzMTEwLwYDVQQD
EyhiNTA0MmZlMGJiMzA0YjVhNzExZWI3ZDJhYTcyYzI3MGNmOTRhYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8bhMhgeaF+AL0VKqYscm1oNc0yT
bQQzr1bK5O+n6mD2RfadxDaTWOPzW78kkMP+9wynZ346l/7+rCGIYxWT2s86ddar
8h8ZbgT7sAXr7+5Bq9qlKDpTEeZrygZhXjZA9cB3fPaLl1ZEhT5TgChGmJU2rkrc
zUKbnxYZw8PbWkVHy5IIv8gtpOaVDXXiAxBLXj+mXE4keA9dDECB8VXn5Bqu0oSv
NFSbXx48L4FRo7rV0Zkcyzu/5CxcpG9s9cEXyf3s04YQiHHa5PVFbO0xDs3t8lXk
6+drFFpUVDU0glBFGNxcQihGIhoUBuuhIg6T3yYawCRLjxjZt4IgHZ4NtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUEL+C7MEtacR630qpywnDPlKueMB8GA1UdIwQY
MBaAFGQ9rxIuOoesqm/bYsNaJSoZmljZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYt
ZGNkNWU5NDc4MDg0LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYtZGNkNWU5NDc4MDg0
LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWg4czShg
+CUWk9ZOgxSfzFqXF0zQF6dn5cCpqGhpFqn7WNe3lY3LTXi2vWou6BiHBYAqeq0R
+E4bTfom0CaQT/MHO3p6xsY6wWYSuDAy5NRrqsRwzJF4G3/90XGWUqVo8wiaT20z
jpY6ZKJ9iExQSYFBSxBxtrs3SwnBzdpNjvMdTs0iUct35bs8QZWgebYJ+f2t9zk8
IRykkNWkdkIi/WWlHAlG8LNNVuQoVsV0zM9Tdxsv1NkDDP4/hl9jKBLOAQ5jv1wC
7f3CVPooBbDC2mIqmSy+MPuvHhnF8+N6U823iXhi5Zq2Qx4WA7aUBnxuPuYgWJo3
2Zo3f11BtV939g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:37 2025 by rpki-client