Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: T0GZNYWFtvMMQoWvAtPbNvVB4J5pcY0YtfZ3voMFpyE=
Subject key identifier: 8D:11:33:AF:B1:5E:5A:5B:B7:6E:41:EF:C7:D8:0B:94:72:7F:77:E2
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 0197B70EC60244CB08090476A3AABCBAA233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: 5GQDx0zJp4epgb038KJgN7QeauEMm/R9Pl5uAzHwNAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c6:02:44:cb:08:09:04:76:a3:aa:bc:ba:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=8d1133afb15e5a5bb76e41efc7d80b94727f77e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:8d:a1:e4:26:1f:96:d5:00:c4:c5:72:5a:
44:0c:42:86:26:9b:f1:4e:12:04:27:f9:49:49:9d:
13:92:fc:1c:28:99:8e:78:ad:2c:f0:e9:b9:63:29:
b3:e9:4f:80:25:e6:01:9c:15:12:a1:a0:97:cc:43:
9d:e3:38:dd:0d:14:c8:c4:0a:0c:95:c1:dd:48:b2:
ab:fb:ef:cd:6b:95:d3:12:18:19:6d:17:6c:a4:3e:
ed:c8:92:4b:e8:16:47:bc:39:38:fb:60:0f:00:f1:
70:74:bb:95:aa:80:85:14:2f:70:24:35:12:34:c3:
10:58:60:9a:1d:93:1a:ec:8e:97:18:21:e6:4d:b1:
6b:71:9c:cc:5d:cd:20:b8:25:89:55:80:4d:83:21:
2b:d7:1c:f7:81:8b:b9:1a:0a:27:99:0f:0f:62:ea:
5e:e9:56:38:75:83:b8:8f:de:14:f6:be:8d:d2:bc:
02:8f:ba:3c:6a:e2:6f:9a:2c:e3:3f:54:ab:5b:78:
38:d6:78:b5:b6:6e:10:3f:7a:63:62:67:a7:52:32:
10:ce:f7:4d:91:14:d2:97:c6:2a:ad:14:3d:6f:15:
f9:48:26:8c:2a:a5:b0:cc:8c:94:f0:7d:b6:c0:5e:
e6:d3:a4:c3:e2:8d:7f:84:76:1f:9b:23:c4:5c:98:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:33:AF:B1:5E:5A:5B:B7:6E:41:EF:C7:D8:0B:94:72:7F:77:E2
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:0b:5a:f7:2d:f6:4a:c6:22:6c:8d:40:74:09:ef:b1:58:8d:
84:6f:aa:74:7d:43:c8:34:a7:cc:35:78:9d:6a:e0:af:fc:e0:
c2:ca:bd:7b:58:2d:e7:c6:e1:8f:22:fe:00:95:cd:1d:43:95:
b0:b7:ac:54:ff:9d:2c:c5:44:0f:af:2b:4d:33:13:8a:ef:32:
46:74:0d:aa:2d:fe:4b:38:4f:41:0a:6f:07:e3:c0:dd:6b:fa:
48:44:08:9a:79:74:5e:c4:68:80:89:4f:a4:e0:59:c9:fd:51:
9c:1a:28:92:a6:2a:3d:6a:d2:bc:76:8c:80:b7:d3:f3:c2:e5:
9e:6e:0a:f7:28:04:c0:5e:15:c5:36:5d:9f:cc:70:16:44:04:
f0:99:44:43:82:e0:51:a7:6a:0e:54:91:46:d6:1c:a1:fc:ca:
8f:d5:db:db:35:14:3e:ab:1d:3c:82:0d:4d:1b:7d:e1:85:a5:
30:f5:89:37:1e:e7:1b:cb:11:48:71:88:b3:4d:95:0b:d6:1a:
8a:25:41:b7:52:1f:de:c1:f1:3a:f4:f3:a8:44:f8:a8:a0:2f:
9b:5a:a8:8e:5d:1e:45:0a:a0:68:13:2b:54:ce:39:51:aa:c3:
9c:ba:3d:5c:32:2e:05:69:8f:05:f9:2a:a3:09:21:b5:ca:7b:
1a:32:56:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsYCRMsICQR2o6q8uqIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjUwNjI4MTUwMTI3WhcNMjUwNjI5MTUwMTI3WjAzMTEwLwYDVQQD
Eyg4ZDExMzNhZmIxNWU1YTViYjc2ZTQxZWZjN2Q4MGI5NDcyN2Y3N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGCNoeQmH5bVAMTFclpEDEKGJpvx
ThIEJ/lJSZ0TkvwcKJmOeK0s8Om5Yymz6U+AJeYBnBUSoaCXzEOd4zjdDRTIxAoM
lcHdSLKr++/Na5XTEhgZbRdspD7tyJJL6BZHvDk4+2APAPFwdLuVqoCFFC9wJDUS
NMMQWGCaHZMa7I6XGCHmTbFrcZzMXc0guCWJVYBNgyEr1xz3gYu5GgonmQ8PYupe
6VY4dYO4j94U9r6N0rwCj7o8auJvmizjP1SrW3g41ni1tm4QP3pjYmenUjIQzvdN
kRTSl8YqrRQ9bxX5SCaMKqWwzIyU8H22wF7m06TD4o1/hHYfmyPEXJhFhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0RM6+xXlpbt25B78fYC5Ryf3fiMB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgta9y32
SsYibI1AdAnvsViNhG+qdH1DyDSnzDV4nWrgr/zgwsq9e1gt58bhjyL+AJXNHUOV
sLesVP+dLMVED68rTTMTiu8yRnQNqi3+SzhPQQpvB+PA3Wv6SEQImnl0XsRogIlP
pOBZyf1RnBookqYqPWrSvHaMgLfT88Llnm4K9ygEwF4VxTZdn8xwFkQE8JlEQ4Lg
UadqDlSRRtYcofzKj9Xb2zUUPqsdPIINTRt94YWlMPWJNx7nG8sRSHGIs02VC9Ya
iiVBt1If3sHxOvTzqET4qKAvm1qojl0eRQqgaBMrVM45UarDnLo9XDIuBWmPBfkq
owkhtcp7GjJW6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:12 2025 by rpki-client