Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json)
Hash identifier: k3ucBTY40kYXmRBchBbyb3yWNdX4FgMQb3slNHRTMJE=
Subject key identifier: 78:70:0A:13:D0:B9:83:EF:39:A5:68:97:1A:83:AA:AF:88:14:8D:C6
Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Certificate serial: 0197B8C58A7F5F16D3A0B0D776AF101674E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
Manifest number: 0898
Signing time: Sat 28 Jun 2025 23:00:43 +0000
Manifest this update: Sat 28 Jun 2025 23:00:43 +0000
Manifest next update: Sun 29 Jun 2025 23:00:43 +0000
Files and hashes: 1: HEFFTvFDeW6D2zdX6lHRPyk7Ea4.roa (hash: IVFC13YcAYnwyOjaJYcCEYaHPK701G8dlJpbO9aBcgU=)
2: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: 9f7gtL/7aSOoMbWvlIBCpX9HsIU9niSb2nzSPBPfPzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:8a:7f:5f:16:d3:a0:b0:d7:76:af:10:16:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a
Validity
Not Before: Jun 28 23:00:43 2025 GMT
Not After : Jun 29 23:00:43 2025 GMT
Subject: CN=78700a13d0b983ef39a568971a83aaaf88148dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:49:55:9f:0f:17:13:78:44:20:8d:c7:44:
67:20:10:9a:b0:2a:c0:db:56:71:5a:f8:aa:aa:2b:
02:4a:8d:5c:5d:c6:d1:3e:cd:36:25:68:62:a2:9a:
f9:8f:d8:e0:f4:d4:c8:f7:55:60:3a:bd:2f:28:fa:
47:c0:bd:05:d8:39:20:75:8a:39:77:ea:2e:4d:ce:
6a:3c:e1:8b:19:33:56:8b:1e:91:a3:f1:74:b1:a7:
39:b9:e3:b4:eb:22:a5:ae:7b:75:cd:09:a1:b4:76:
6b:7e:6f:2d:f1:34:4d:57:d3:af:5c:1e:77:16:9d:
e9:20:d7:17:24:09:ef:48:c2:d4:1b:c4:b2:53:f1:
3d:95:43:72:63:0d:da:f2:c6:c5:f5:5d:2c:d2:a2:
aa:cc:40:82:72:f8:b0:7c:fc:9b:7a:20:29:cc:dd:
97:cb:a0:50:b3:5d:13:ee:5b:aa:2a:d5:4f:03:94:
fd:c1:0d:d3:2b:83:d8:b2:2b:64:bc:7a:b3:59:8c:
76:3f:53:db:ca:63:2b:69:fd:11:2e:b7:2f:f0:da:
5f:01:d9:c2:d5:38:58:bc:f5:a6:aa:2e:10:9b:88:
fd:0a:6f:4b:e3:4f:ac:91:f2:09:d9:72:62:e9:a3:
45:92:dd:ce:06:bc:6a:b3:34:27:3a:fc:b3:bf:ad:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:0A:13:D0:B9:83:EF:39:A5:68:97:1A:83:AA:AF:88:14:8D:C6
X509v3 Authority Key Identifier:
keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:2d:cd:a2:cc:a7:4d:44:ae:4e:b9:c8:a2:51:cc:34:44:
92:32:1c:12:25:2e:f0:bb:bb:21:1a:70:fe:90:e4:3d:6c:46:
3a:2e:ca:07:7e:b4:c3:86:62:db:7a:fa:c5:41:bb:78:a2:0c:
56:4b:bc:a7:03:63:01:ea:c1:64:05:f0:f5:58:1c:89:be:c1:
52:43:4f:bd:8e:68:fb:a9:02:30:e5:b3:91:bf:67:6e:e8:cf:
3e:ab:c1:e4:17:dc:f0:11:b5:52:fa:63:09:63:ee:db:90:29:
b2:f5:fa:1a:f6:fe:b7:5b:37:33:cc:ce:47:53:2b:9e:c5:f3:
29:ec:d2:7c:bc:5c:2d:9c:44:7b:0e:b8:e8:a1:a0:77:21:48:
b5:3c:c2:47:44:42:67:b5:1c:54:ed:df:6a:cc:55:f1:96:4b:
14:b8:55:fb:c7:81:61:95:89:c3:12:14:df:62:ff:83:14:d0:
89:9a:a8:52:b9:1e:84:14:29:1c:bc:af:e0:4a:be:f9:cc:b3:
f8:cb:9c:1e:7c:62:9a:94:93:04:0d:0d:3a:53:3d:94:3f:7c:
ac:fc:e7:61:a6:22:76:6d:3b:ea:6a:63:53:c5:d4:33:89:93:
f5:87:1b:61:9f:e6:79:6b:08:f1:45:cc:57:bb:90:73:a5:d2:
de:84:df:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xYp/XxbToLDXdq8QFnTpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj
Yzg3OGEwHhcNMjUwNjI4MjMwMDQzWhcNMjUwNjI5MjMwMDQzWjAzMTEwLwYDVQQD
Eyg3ODcwMGExM2QwYjk4M2VmMzlhNTY4OTcxYTgzYWFhZjg4MTQ4ZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG5JVZ8PFxN4RCCNx0RnIBCasCrA
21ZxWviqqisCSo1cXcbRPs02JWhiopr5j9jg9NTI91VgOr0vKPpHwL0F2DkgdYo5
d+ouTc5qPOGLGTNWix6Ro/F0sac5ueO06yKlrnt1zQmhtHZrfm8t8TRNV9OvXB53
Fp3pINcXJAnvSMLUG8SyU/E9lUNyYw3a8sbF9V0s0qKqzECCcviwfPybeiApzN2X
y6BQs10T7luqKtVPA5T9wQ3TK4PYsitkvHqzWYx2P1PbymMraf0RLrcv8NpfAdnC
1ThYvPWmqi4Qm4j9Cm9L40+skfIJ2XJi6aNFkt3OBrxqszQnOvyzv62PtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhwChPQuYPvOaVolxqDqq+IFI3GMB8GA1UdIwQY
MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt
MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk
LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtQtzaLM
p01Erk65yKJRzDREkjIcEiUu8Lu7IRpw/pDkPWxGOi7KB360w4Zi23r6xUG7eKIM
Vku8pwNjAerBZAXw9Vgcib7BUkNPvY5o+6kCMOWzkb9nbujPPqvB5Bfc8BG1Uvpj
CWPu25ApsvX6Gvb+t1s3M8zOR1MrnsXzKezSfLxcLZxEew646KGgdyFItTzCR0RC
Z7UcVO3fasxV8ZZLFLhV+8eBYZWJwxIU32L/gxTQiZqoUrkehBQpHLyv4Eq++cyz
+MucHnximpSTBA0NOlM9lD98rPznYaYidm076mpjU8XUM4mT9YcbYZ/meWsI8UXM
V7uQc6XS3oTfFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:13 2025 by rpki-client