Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: aGv0r0PrKzTFrCk2NvtJeEK5LbviaJnP2OFI1QbVrPs=
Subject key identifier: 4E:11:CB:3A:BD:BF:41:B7:98:34:28:7D:9B:B8:CF:DE:51:3F:96:CD
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 0197C500EF367F25DEE6B155D66778702F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 08:01:02 +0000
Manifest this update: Tue 01 Jul 2025 08:01:02 +0000
Manifest next update: Wed 02 Jul 2025 08:01:02 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: 3bv9t7bbpEhHFREa+DUiQQey3qJA0aOJ/Jj8QhE0Dog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:00:ef:36:7f:25:de:e6:b1:55:d6:67:78:70:2f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Jul 1 08:01:02 2025 GMT
Not After : Jul 2 08:01:02 2025 GMT
Subject: CN=4e11cb3abdbf41b79834287d9bb8cfde513f96cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:1e:22:b3:fc:01:4b:40:29:2e:cc:51:eb:
91:ee:74:20:5e:c9:5b:19:21:c8:c5:14:40:d1:63:
19:c8:ed:12:af:dc:e4:e5:21:26:49:4d:5d:92:2c:
f3:7a:65:47:a0:06:d4:ab:ec:7f:c2:62:9b:cf:ef:
02:6c:ab:40:ba:dc:02:6a:6c:af:b2:6c:e1:ba:ad:
6d:59:6f:a1:f8:a4:5c:4f:93:e3:a1:6c:75:7f:d3:
ab:2b:5c:a6:09:1a:3f:36:58:a6:96:4e:f1:3d:a8:
03:fd:6d:14:f3:fd:5d:7b:30:03:d8:52:6d:55:54:
94:b1:98:48:12:9b:8f:4c:7d:41:94:90:4e:30:4d:
4d:a5:ca:5d:1d:23:18:2d:0f:c6:38:4a:3c:50:62:
5a:ee:c9:ef:c1:ad:46:e0:81:cc:dc:aa:5c:16:9e:
bc:9b:c9:1d:8b:d0:ba:68:e9:bf:ed:ee:91:c3:d9:
c3:f9:fd:7b:d4:7b:0c:84:1d:65:72:27:5a:63:2f:
ac:d9:3a:ab:f1:fe:54:86:06:ae:87:0a:48:13:6e:
d7:03:e7:09:89:7e:cd:ae:1c:b9:e3:73:85:72:cc:
e3:03:38:3a:f8:54:72:49:75:4b:c8:79:35:c2:0d:
e2:ba:ed:30:95:b9:f7:ca:ce:4c:57:35:26:3d:a4:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:CB:3A:BD:BF:41:B7:98:34:28:7D:9B:B8:CF:DE:51:3F:96:CD
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a4:a1:01:f9:a5:df:63:ae:81:37:02:02:8d:4c:6f:86:a0:
7d:d1:1f:3f:a1:94:9d:40:5e:67:44:74:8c:3a:6b:07:3a:a7:
42:28:3b:ce:9b:94:95:30:e8:4a:31:26:f1:c4:30:f9:88:ae:
1f:1e:44:d5:07:db:ea:e5:5a:a9:c8:94:92:ce:37:3a:81:0d:
8f:f7:8b:ca:1a:b6:71:29:44:d6:70:d3:21:cb:9a:55:d3:78:
6f:32:81:c9:15:37:9a:90:61:cb:9e:b6:e5:5c:13:7b:56:d1:
89:d0:3a:c8:48:56:53:bd:1d:8e:37:0c:76:1a:c4:87:e2:98:
d8:b2:ed:9b:58:98:5c:ac:c8:f9:79:17:29:ab:00:27:f3:48:
2a:e1:55:b1:70:3d:ed:0f:b0:b3:82:78:53:f0:71:80:55:fb:
f6:41:09:c3:12:4a:fd:5d:6d:63:d2:0e:6a:2d:7d:2a:a3:bf:
68:e9:00:8f:f3:a7:7d:08:ce:6d:58:0a:f8:5e:4d:9e:57:43:
09:b2:20:41:b2:24:14:fc:85:88:28:18:f4:15:9b:99:a2:e3:
39:9b:fd:2e:ae:2a:e2:92:05:2b:26:f0:59:89:03:79:a5:0d:
74:f4:dc:b1:74:b0:e5:de:e7:ac:75:96:a1:ec:b1:d6:7f:63:
db:e4:c0:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFAO82fyXe5rFV1md4cC8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjE1MDI3NmY1NWJhZTQ1NTk4OGQzYTEzZTU5MzQxMDc0
ZGNkMGEwHhcNMjUwNzAxMDgwMTAyWhcNMjUwNzAyMDgwMTAyWjAzMTEwLwYDVQQD
Eyg0ZTExY2IzYWJkYmY0MWI3OTgzNDI4N2Q5YmI4Y2ZkZTUxM2Y5NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZceIrP8AUtAKS7MUeuR7nQgXslb
GSHIxRRA0WMZyO0Sr9zk5SEmSU1dkizzemVHoAbUq+x/wmKbz+8CbKtAutwCamyv
smzhuq1tWW+h+KRcT5PjoWx1f9OrK1ymCRo/Nlimlk7xPagD/W0U8/1dezAD2FJt
VVSUsZhIEpuPTH1BlJBOME1NpcpdHSMYLQ/GOEo8UGJa7snvwa1G4IHM3KpcFp68
m8kdi9C6aOm/7e6Rw9nD+f171HsMhB1lcidaYy+s2Tqr8f5UhgauhwpIE27XA+cJ
iX7Nrhy543OFcszjAzg6+FRySXVLyHk1wg3iuu0wlbn3ys5MVzUmPaSvZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4Ryzq9v0G3mDQofZu4z95RP5bNMB8GA1UdIwQY
MBaAFM2xUCdvVbrkVZiNOhPlk0EHTc0KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEt
MzQwN2ZjYTEyMjY3LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iZTYzMzctNjYyZS00YzNiLTgxMmEtMzQwN2ZjYTEyMjY3
LzEvemJGUUoyOVZ1dVJWbUkwNkUtV1RRUWROelFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbKShAfml
32OugTcCAo1Mb4agfdEfP6GUnUBeZ0R0jDprBzqnQig7zpuUlTDoSjEm8cQw+Yiu
Hx5E1Qfb6uVaqciUks43OoENj/eLyhq2cSlE1nDTIcuaVdN4bzKByRU3mpBhy562
5VwTe1bRidA6yEhWU70djjcMdhrEh+KY2LLtm1iYXKzI+XkXKasAJ/NIKuFVsXA9
7Q+ws4J4U/BxgFX79kEJwxJK/V1tY9IOai19KqO/aOkAj/OnfQjObVgK+F5NnldD
CbIgQbIkFPyFiCgY9BWbmaLjOZv9Lq4q4pIFKybwWYkDeaUNdPTcsXSw5d7nrHWW
oeyx1n9j2+TAIg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:18:09 2025 by rpki-client