Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: RQOC4XsV1mZpvq9fnU0/SGzkxj2qBFONRNogFIB6gv4=
Subject key identifier: A1:75:F8:B8:C0:91:73:D2:62:DC:D9:80:D5:C3:90:26:2E:62:E8:F6
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 0197B820F574BD8E5A0249ABA3B89DEB8CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0DB9
Signing time: Sat 28 Jun 2025 20:00:57 +0000
Manifest this update: Sat 28 Jun 2025 20:00:57 +0000
Manifest next update: Sun 29 Jun 2025 20:00:57 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: Lgfx4zj1jmHwIJyG2O1n3oKQaGJoOf/tEmlRpe5PxJo=)
2: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (hash: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f5:74:bd:8e:5a:02:49:ab:a3:b8:9d:eb:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Jun 28 20:00:57 2025 GMT
Not After : Jun 29 20:00:57 2025 GMT
Subject: CN=a175f8b8c09173d262dcd980d5c390262e62e8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:f8:20:7a:5c:d6:c9:3f:62:a0:e3:d2:f2:
61:fe:8a:71:8b:cd:f5:e2:73:64:4b:ee:a9:5e:e0:
98:1c:40:5b:5f:ef:b8:79:32:0b:a6:8f:ca:c2:0c:
3f:c5:75:7c:28:8a:ee:50:57:b6:1d:70:85:71:de:
47:e5:8e:31:c9:9d:c2:0b:e8:18:59:2e:23:b0:66:
db:60:3b:6a:7c:be:f2:e3:67:7f:e5:50:bf:f5:a2:
39:ce:4b:c6:29:19:2b:a4:01:a1:0f:54:95:db:5d:
a9:2a:c2:b8:35:fc:1d:35:57:9a:24:65:f3:e4:2e:
ce:b0:de:0f:3f:7f:20:70:16:3f:8b:03:0f:06:f3:
b2:a5:2b:fa:4e:0a:29:7e:d5:ff:4d:50:bd:4f:c5:
22:91:99:67:be:9a:74:f6:49:1c:cb:20:b6:c5:73:
25:22:55:14:75:d3:68:00:15:32:0b:9d:f5:11:92:
df:16:95:ed:da:3f:60:7a:6f:fb:7d:3c:91:80:19:
17:fa:a0:b0:b9:89:7a:f2:11:31:cf:66:98:00:c2:
44:70:33:60:90:f9:b9:ff:6f:71:be:81:be:f5:be:
ef:39:b0:8e:10:91:2e:fa:23:26:ca:0c:e6:6f:ce:
1e:df:bc:30:34:37:79:91:58:60:e9:a5:11:41:de:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:75:F8:B8:C0:91:73:D2:62:DC:D9:80:D5:C3:90:26:2E:62:E8:F6
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fc:76:17:a7:25:a2:79:30:3e:c0:e4:17:2f:04:72:60:36:
28:f1:8b:22:12:e3:9f:59:04:ed:1a:60:6d:83:8a:ec:fb:5d:
c6:7a:a6:be:47:65:c8:cb:5f:d6:8b:27:33:03:1c:0d:21:da:
56:3e:1b:17:c2:35:3e:5c:88:51:40:91:b5:b2:09:0e:d1:f5:
2a:d5:67:78:4e:0c:c0:cd:c9:8a:ba:54:87:30:ff:5f:a2:0f:
b3:80:60:4e:f9:3a:42:47:86:e5:ec:27:2b:7e:68:1b:3b:70:
5e:6d:b9:b7:c4:1e:85:f5:97:a6:e3:6d:4b:e1:2d:9e:a8:52:
d0:16:fe:55:3c:1a:ee:ff:73:b4:f9:b7:08:53:e5:78:ea:e8:
39:13:0e:c1:8c:8b:8a:46:1c:07:b9:c4:d6:a7:9a:48:1f:8d:
9d:44:d9:8e:8d:af:b5:64:f2:06:7c:f4:ad:3a:74:7a:9e:33:
03:1c:e0:8e:e6:25:14:ee:dc:5e:f0:37:06:65:c6:db:81:55:
2a:c8:7c:97:bc:a0:97:06:e3:ec:a5:4d:c4:b6:dd:2e:66:87:
96:30:4d:40:77:8e:08:c7:7b:34:21:55:98:86:23:f6:84:29:
3d:2e:65:c8:e6:d2:a9:d2:66:67:6d:e8:ef:94:55:5a:7a:44:
68:dd:c5:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPV0vY5aAkmro7id64yvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YzVmZDFkYzBjNDU3ZDllYzExM2QyM2JkNDkzNWM3MjNl
OWVjZjQwHhcNMjUwNjI4MjAwMDU3WhcNMjUwNjI5MjAwMDU3WjAzMTEwLwYDVQQD
EyhhMTc1ZjhiOGMwOTE3M2QyNjJkY2Q5ODBkNWMzOTAyNjJlNjJlOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAj4IHpc1sk/YqDj0vJh/opxi831
4nNkS+6pXuCYHEBbX++4eTILpo/Kwgw/xXV8KIruUFe2HXCFcd5H5Y4xyZ3CC+gY
WS4jsGbbYDtqfL7y42d/5VC/9aI5zkvGKRkrpAGhD1SV212pKsK4NfwdNVeaJGXz
5C7OsN4PP38gcBY/iwMPBvOypSv6TgopftX/TVC9T8UikZlnvpp09kkcyyC2xXMl
IlUUddNoABUyC531EZLfFpXt2j9gem/7fTyRgBkX+qCwuYl68hExz2aYAMJEcDNg
kPm5/29xvoG+9b7vObCOEJEu+iMmygzmb84e37wwNDd5kVhg6aURQd6tbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF1+LjAkXPSYtzZgNXDkCYuYuj2MB8GA1UdIwQY
MBaAFGTF/R3AxFfZ7BE9I71JNccj6ez0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEt
NGNiMDY3OWFjZTdmLzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEtNGNiMDY3OWFjZTdm
LzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfx2F6cl
onkwPsDkFy8EcmA2KPGLIhLjn1kE7RpgbYOK7PtdxnqmvkdlyMtf1osnMwMcDSHa
Vj4bF8I1PlyIUUCRtbIJDtH1KtVneE4MwM3JirpUhzD/X6IPs4BgTvk6QkeG5ewn
K35oGztwXm25t8QehfWXpuNtS+EtnqhS0Bb+VTwa7v9ztPm3CFPleOroORMOwYyL
ikYcB7nE1qeaSB+NnUTZjo2vtWTyBnz0rTp0ep4zAxzgjuYlFO7cXvA3BmXG24FV
Ksh8l7yglwbj7KVNxLbdLmaHljBNQHeOCMd7NCFVmIYj9oQpPS5lyObSqdJmZ23o
75RVWnpEaN3FkQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:22 2025 by rpki-client