Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: XIKVF7WrhpUDA4CoLipW022nlRpuMiiPNuszaME4gt0=
Subject key identifier: 35:BA:EE:F9:3E:C9:D6:B9:41:17:40:CE:8C:22:8D:EC:F1:1F:BE:03
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 0197B70F4BEE65D8534FC9C0A19FE39AA363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 048B
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: 972jWhj/xBo3gWE6TjHJagl+gnHO8psoIn1KWDVgVcI=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4b:ee:65:d8:53:4f:c9:c0:a1:9f:e3:9a:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=35baeef93ec9d6b9411740ce8c228decf11fbe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:4b:72:f9:7b:f3:0c:b7:c1:bb:d8:4a:70:
1e:34:b6:b2:bf:82:43:93:a3:c6:7d:15:9b:e4:1f:
83:85:11:e8:31:5d:29:2f:0b:3f:2c:00:de:44:7a:
26:04:18:a2:84:2a:26:60:f1:60:db:75:6f:1b:c0:
f6:4e:c0:c2:c3:42:7b:4a:49:40:e9:6a:b9:e6:af:
6e:48:0a:a0:11:ab:6b:3a:6e:61:e5:33:8f:84:37:
f8:63:19:f8:9c:21:e1:be:6b:e0:f0:3b:42:11:ed:
b1:dd:f1:b2:be:df:3e:b1:d6:ee:47:4d:41:52:70:
15:f8:9b:78:d2:6a:d8:09:82:dd:81:a3:08:4f:4c:
67:85:e1:3b:04:ca:16:27:28:dc:77:fc:6f:5e:49:
5d:10:c3:f7:8e:13:5b:0f:02:f4:3c:e9:85:d1:4d:
62:5f:4c:92:a8:54:48:46:99:de:95:2d:47:dc:ad:
84:75:51:f7:48:76:6d:ec:eb:08:3e:62:65:01:1c:
93:3a:d8:1f:72:3e:c4:ed:c2:b6:71:7b:18:61:9b:
56:2a:66:5f:c2:cb:93:a0:3f:2e:a4:02:64:cc:46:
89:84:31:b8:c0:1e:5e:f1:52:5a:c2:d3:2f:dc:08:
71:c1:ad:39:a3:f1:d3:49:1e:07:25:f8:02:0a:bb:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:EE:F9:3E:C9:D6:B9:41:17:40:CE:8C:22:8D:EC:F1:1F:BE:03
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f1:c4:4e:f6:cd:69:1d:82:ac:06:df:e8:e0:39:40:1c:97:
41:a7:11:76:9c:4e:83:90:63:d8:2f:9a:4b:b6:dd:1b:2f:51:
b4:5b:24:1c:b7:d1:b5:14:e0:8a:0b:7b:1f:37:6b:f2:26:b2:
7a:7a:70:cd:be:c4:7c:92:5d:fc:c6:39:f2:8e:91:76:89:da:
80:84:fb:3d:89:eb:7f:99:b6:e8:1d:65:ac:de:df:1c:eb:3e:
35:71:89:84:9b:2a:ac:7c:e2:e8:6a:89:b9:c8:0f:33:e2:bc:
31:ab:fa:24:d9:fd:71:70:ae:58:be:9e:00:90:7a:97:f4:07:
c0:44:f1:b5:bf:c2:53:cd:a0:08:db:63:21:28:af:b0:cd:f6:
fd:52:31:10:d2:f1:88:2b:04:7a:0f:ea:38:eb:aa:70:2d:02:
17:99:e8:d1:98:ed:97:f4:a6:aa:c9:27:1b:98:27:23:c4:3b:
0c:56:eb:d4:2f:b8:7c:1c:fd:47:c2:2e:24:98:d4:03:dd:b2:
4f:70:ee:95:39:b5:81:15:4f:54:ad:94:ba:bf:fb:b0:b0:84:
46:50:42:c7:68:22:14:35:9b:67:bc:70:29:75:55:72:7e:28:
ec:a0:fd:1f:2d:df:a5:d4:d1:1e:34:65:5d:1a:35:2f:6c:b2:
0b:7b:45:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0vuZdhTT8nAoZ/jmqNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl
NWE4ZDAwHhcNMjUwNjI4MTUwMjAyWhcNMjUwNjI5MTUwMjAyWjAzMTEwLwYDVQQD
EygzNWJhZWVmOTNlYzlkNmI5NDExNzQwY2U4YzIyOGRlY2YxMWZiZTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuidLcvl78wy3wbvYSnAeNLayv4JD
k6PGfRWb5B+DhRHoMV0pLws/LADeRHomBBiihComYPFg23VvG8D2TsDCw0J7SklA
6Wq55q9uSAqgEatrOm5h5TOPhDf4Yxn4nCHhvmvg8DtCEe2x3fGyvt8+sdbuR01B
UnAV+Jt40mrYCYLdgaMIT0xnheE7BMoWJyjcd/xvXkldEMP3jhNbDwL0POmF0U1i
X0ySqFRIRpnelS1H3K2EdVH3SHZt7OsIPmJlARyTOtgfcj7E7cK2cXsYYZtWKmZf
wsuToD8upAJkzEaJhDG4wB5e8VJawtMv3Ahxwa05o/HTSR4HJfgCCrv0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW67vk+yda5QRdAzowijezxH74DMB8GA1UdIwQY
MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut
MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi
LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/HETvbN
aR2CrAbf6OA5QByXQacRdpxOg5Bj2C+aS7bdGy9RtFskHLfRtRTgigt7Hzdr8iay
enpwzb7EfJJd/MY58o6RdonagIT7PYnrf5m26B1lrN7fHOs+NXGJhJsqrHzi6GqJ
ucgPM+K8Mav6JNn9cXCuWL6eAJB6l/QHwETxtb/CU82gCNtjISivsM32/VIxENLx
iCsEeg/qOOuqcC0CF5no0Zjtl/SmqsknG5gnI8Q7DFbr1C+4fBz9R8IuJJjUA92y
T3DulTm1gRVPVK2Uur/7sLCERlBCx2giFDWbZ7xwKXVVcn4o7KD9Hy3fpdTRHjRl
XRo1L2yyC3tFjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:54 2025 by rpki-client