Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: 3r+TnHxohaGwCr5pVf5eCXbuYik0W45v/1LS8fGxUek=
Subject key identifier: D2:89:9D:16:FC:54:14:28:09:FE:22:B0:69:A4:D6:76:58:21:BF:E2
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 0197B77C5D11F022217B8A96D3EB9BB0C1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:10 +0000
Manifest this update: Sat 28 Jun 2025 17:01:10 +0000
Manifest next update: Sun 29 Jun 2025 17:01:10 +0000
Files and hashes: 1: J8TxeAmZBzINa9syBZ1B4yTXcxY.roa (hash: 2QfjawOPNl3mivz2h5LwmzlkbdOnVy10wna7TIvLBVY=)
2: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (hash: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=)
3: Z2S57soliueMTVEyGovf75orajw.crl (hash: A6HXbKeCnRu5rtaD17dmvMhKmXFpyc3C0OPeNcj6bTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:5d:11:f0:22:21:7b:8a:96:d3:eb:9b:b0:c1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Jun 28 17:01:10 2025 GMT
Not After : Jun 29 17:01:10 2025 GMT
Subject: CN=d2899d16fc54142809fe22b069a4d6765821bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:ec:e2:44:e3:65:2d:36:6b:5f:8c:0a:58:
45:0f:32:5e:e0:f0:50:ca:c0:56:b4:68:ea:8f:49:
7d:5f:14:37:0a:46:7a:6c:a9:bd:ea:d2:09:cd:09:
ea:cd:b2:41:fe:ab:d6:3a:60:c3:54:a8:ed:5d:95:
7a:52:00:71:7a:c7:19:07:1f:90:07:cf:d9:83:01:
4b:ea:20:12:bd:cc:ff:1b:9f:0b:ab:ea:43:09:0a:
49:53:2e:27:cd:c3:eb:17:7e:e6:2f:44:37:dd:fb:
ec:45:7a:d6:d2:44:9f:0c:b0:fe:07:48:40:e0:63:
3f:69:8e:a1:ba:30:5d:51:3d:32:7c:01:06:39:5a:
e2:e2:77:e9:fd:43:2a:9d:f7:54:25:91:6f:bb:3f:
1a:01:d4:a4:be:76:54:f2:2e:10:6d:4c:4b:19:4d:
1d:b6:05:5e:4f:43:ed:ff:69:ae:03:5b:21:3e:b1:
9b:60:7a:aa:aa:80:3c:a4:85:66:dd:0c:76:0b:bf:
87:76:ba:38:a6:d7:78:d7:48:55:26:6f:c0:ca:c4:
6b:7d:96:91:4a:90:f6:62:26:7f:b9:38:d8:41:88:
52:34:a4:fe:00:a4:10:f6:1d:8f:ff:27:e7:9e:ba:
05:ea:fa:f0:08:9a:83:37:90:dc:a6:85:ec:e0:fb:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:89:9D:16:FC:54:14:28:09:FE:22:B0:69:A4:D6:76:58:21:BF:E2
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:86:15:26:30:49:d9:d4:d0:90:85:af:80:17:ea:33:50:00:
6c:c9:20:5b:06:9d:47:a1:d4:e9:28:40:cf:ae:b7:9b:a7:42:
f8:4b:d0:b0:0d:b0:8b:a0:be:65:68:cc:bc:4c:fb:e2:1d:9d:
2f:7f:b0:58:f0:2e:13:86:57:61:a8:6d:12:df:87:bf:23:c7:
31:74:f1:1d:f6:05:ab:12:c8:f0:44:2e:5c:4c:31:aa:fd:2c:
b8:17:5a:4c:03:ff:c1:ac:ee:02:6d:75:9f:e2:f9:27:e0:41:
0d:02:9c:df:70:c5:da:43:06:61:ca:af:80:e0:8c:13:46:23:
5f:d8:21:bd:1c:08:49:80:71:3a:28:cb:9e:c2:a4:df:90:47:
6c:ec:7c:d0:0e:51:47:7f:07:8b:65:ba:97:c6:5e:cd:87:01:
bb:fc:f0:13:5e:55:a7:c7:c5:84:6c:4f:f0:45:5d:d0:0a:76:
a4:0e:7c:a5:bb:2c:ab:c8:b1:fc:26:b3:2f:70:10:f3:cd:9a:
5f:4b:4c:2b:e1:5b:1e:e8:d6:86:07:ea:e6:37:8c:a1:c5:7b:
af:37:cc:06:3f:63:98:15:83:82:1f:da:7b:f7:b5:73:df:18:
8c:60:89:d9:55:31:a2:55:0d:e6:fc:6e:8f:60:94:b2:b4:dc:
7a:9c:e7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fF0R8CIhe4qW0+ubsMG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy
YjZhM2MwHhcNMjUwNjI4MTcwMTEwWhcNMjUwNjI5MTcwMTEwWjAzMTEwLwYDVQQD
EyhkMjg5OWQxNmZjNTQxNDI4MDlmZTIyYjA2OWE0ZDY3NjU4MjFiZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ujs4kTjZS02a1+MClhFDzJe4PBQ
ysBWtGjqj0l9XxQ3CkZ6bKm96tIJzQnqzbJB/qvWOmDDVKjtXZV6UgBxescZBx+Q
B8/ZgwFL6iASvcz/G58Lq+pDCQpJUy4nzcPrF37mL0Q33fvsRXrW0kSfDLD+B0hA
4GM/aY6hujBdUT0yfAEGOVri4nfp/UMqnfdUJZFvuz8aAdSkvnZU8i4QbUxLGU0d
tgVeT0Pt/2muA1shPrGbYHqqqoA8pIVm3Qx2C7+Hdro4ptd410hVJm/AysRrfZaR
SpD2YiZ/uTjYQYhSNKT+AKQQ9h2P/yfnnroF6vrwCJqDN5DcpoXs4PvIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKJnRb8VBQoCf4isGmk1nZYIb/iMB8GA1UdIwQY
MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt
NDI1NmE0NmFmZWVjLzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj
LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIYVJjBJ
2dTQkIWvgBfqM1AAbMkgWwadR6HU6ShAz663m6dC+EvQsA2wi6C+ZWjMvEz74h2d
L3+wWPAuE4ZXYahtEt+HvyPHMXTxHfYFqxLI8EQuXEwxqv0suBdaTAP/wazuAm11
n+L5J+BBDQKc33DF2kMGYcqvgOCME0YjX9ghvRwISYBxOijLnsKk35BHbOx80A5R
R38Hi2W6l8ZezYcBu/zwE15Vp8fFhGxP8EVd0Ap2pA58pbssq8ix/CazL3AQ882a
X0tMK+FbHujWhgfq5jeMocV7rzfMBj9jmBWDgh/ae/e1c98YjGCJ2VUxolUN5vxu
j2CUsrTcepznyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:56 2025 by rpki-client