
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier: Bi0M5tcKwvzVxgdiDWREM07VC5BAJImWrNgSJ2t+anA=
Subject key identifier: 2F:15:15:DA:3C:41:D8:D9:52:56:59:2E:B1:8C:3A:9E:B0:07:2A:29
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer: /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial: 0197B5C4CCC45BFB8630928925DD41C9A2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 09:01:02 +0000
Manifest this update: Sat 28 Jun 2025 09:01:02 +0000
Manifest next update: Sun 29 Jun 2025 09:01:02 +0000
Files and hashes: 1: 1v8i4fKHGgVFWMzHMhW8J-xxCqk.roa (hash: 3nrn/SO1kBcjpxN/GEFTE06I2/Ei7ozh8XwfvRrFcmg=)
2: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: RSKn8GHIsvU/62xzsOVgNK3yCHls67ds3WPPOVdI/K8=)
3: clYhAW8kFlSaTpdGL_6AqwLYC_c.roa (hash: XEbICpC7LdXsG9DjCaajLcED5VcPq/8r93ZX2PiFgnw=)
4: nXVN6v3CzmLleKeTxS_kRgT2CK8.roa (hash: oJxgRFyz2Xezz+l0iWGdoRK6g6HPkdzeG09BGt4Hpn8=)
5: yAPFTHuBSG8S3cBogTgaLXQHsIA.roa (hash: Dghvk7oUxYxn4x3kqmECJ3G0zYv5Ok/s1CWEsFSe7A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:cc:c4:5b:fb:86:30:92:89:25:dd:41:c9:a2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Validity
Not Before: Jun 28 09:01:02 2025 GMT
Not After : Jun 29 09:01:02 2025 GMT
Subject: CN=2f1515da3c41d8d95256592eb18c3a9eb0072a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:2e:c4:d7:8a:89:cf:6a:be:d0:fe:4f:8b:
9b:c1:67:98:1a:83:07:75:a1:51:2e:b6:97:d8:43:
c8:b0:23:73:43:2a:2f:1b:18:f2:08:4d:0f:47:e5:
f1:81:94:70:49:f5:d8:fe:cf:e9:a7:ce:84:c6:bf:
49:85:dc:b0:0c:55:d2:01:4b:1d:81:3a:4e:25:d9:
02:fa:bd:30:8f:d1:97:d4:93:35:ba:27:3a:fc:ce:
80:3d:52:e8:a3:7f:5f:e2:5b:6c:14:16:ab:7a:a9:
9e:c9:f5:ca:75:83:bd:88:39:c1:85:ba:2d:71:86:
af:28:89:0f:e0:ff:f7:9e:23:52:1c:c8:63:93:6b:
58:44:9a:2a:4d:f3:bf:67:d1:1b:4c:3b:82:1d:dc:
0a:db:27:ab:d2:ed:f8:b8:0e:e0:d2:e2:0d:78:9e:
a6:e3:30:ab:5c:17:45:35:68:2c:50:ce:1f:4b:64:
7b:88:ed:4c:3f:3e:65:50:96:73:e3:a0:0b:5f:1f:
d3:b2:f4:fc:7e:db:91:a0:57:ca:e6:ab:91:db:f7:
e4:25:c8:1e:85:a4:13:73:71:ec:8e:99:c1:21:78:
b1:83:cb:28:8c:77:05:8c:1a:69:78:19:d5:ca:11:
4f:1d:1e:fb:c1:d4:70:64:fa:67:e1:3e:f6:13:14:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:15:DA:3C:41:D8:D9:52:56:59:2E:B1:8C:3A:9E:B0:07:2A:29
X509v3 Authority Key Identifier:
keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0c:cc:2a:ef:49:75:36:63:17:5f:e3:bf:84:b1:ea:97:c6:
47:3a:bb:7c:51:02:e5:06:93:e9:65:69:af:67:6f:41:62:23:
22:b0:81:8b:e8:2e:05:f5:9f:1e:2a:f7:8d:39:a7:28:bd:de:
7c:62:67:c3:ca:a0:34:e6:62:fd:32:9b:c2:cb:b8:33:5d:62:
0b:b6:37:cf:be:cf:15:52:30:de:10:be:00:2d:31:5d:cf:2a:
bb:53:f2:ae:b7:52:e0:3c:8b:6c:e7:eb:f3:ba:82:4e:35:69:
4d:94:27:d7:58:dd:d6:72:13:61:2c:1c:1f:11:87:c4:66:27:
0c:13:86:37:d8:af:8d:7a:cc:be:13:4f:4c:a7:da:78:0a:9d:
0f:47:f4:90:d3:ee:86:05:1a:0d:aa:98:40:08:91:ec:f4:01:
3e:6b:4e:70:6f:bf:d1:03:39:e8:9d:91:28:7b:14:42:ae:b1:
6d:b1:9e:86:bc:fd:70:7f:0c:2b:d0:aa:e7:d8:9f:14:95:5b:
55:6f:39:ba:9c:46:26:4b:c1:16:23:d0:6f:4e:f5:ad:39:cf:
58:59:a3:55:30:9e:e4:b2:97:e3:15:0d:ff:ee:a7:8d:db:fb:
8a:c9:3a:7f:32:13:95:34:ed:a2:2a:e1:76:bb:4d:23:38:3c:
df:bd:5f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xMzEW/uGMJKJJd1ByaLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjUwNjI4MDkwMTAyWhcNMjUwNjI5MDkwMTAyWjAzMTEwLwYDVQQD
EygyZjE1MTVkYTNjNDFkOGQ5NTI1NjU5MmViMThjM2E5ZWIwMDcyYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC4uxNeKic9qvtD+T4ubwWeYGoMH
daFRLraX2EPIsCNzQyovGxjyCE0PR+XxgZRwSfXY/s/pp86Exr9JhdywDFXSAUsd
gTpOJdkC+r0wj9GX1JM1uic6/M6APVLoo39f4ltsFBareqmeyfXKdYO9iDnBhbot
cYavKIkP4P/3niNSHMhjk2tYRJoqTfO/Z9EbTDuCHdwK2yer0u34uA7g0uINeJ6m
4zCrXBdFNWgsUM4fS2R7iO1MPz5lUJZz46ALXx/TsvT8ftuRoFfK5quR2/fkJcge
haQTc3HsjpnBIXixg8sojHcFjBppeBnVyhFPHR77wdRwZPpn4T72ExS3lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8VFdo8QdjZUlZZLrGMOp6wByopMB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQzMKu9J
dTZjF1/jv4Sx6pfGRzq7fFEC5QaT6WVpr2dvQWIjIrCBi+guBfWfHir3jTmnKL3e
fGJnw8qgNOZi/TKbwsu4M11iC7Y3z77PFVIw3hC+AC0xXc8qu1PyrrdS4DyLbOfr
87qCTjVpTZQn11jd1nITYSwcHxGHxGYnDBOGN9ivjXrMvhNPTKfaeAqdD0f0kNPu
hgUaDaqYQAiR7PQBPmtOcG+/0QM56J2RKHsUQq6xbbGehrz9cH8MK9Cq59ifFJVb
VW85upxGJkvBFiPQb071rTnPWFmjVTCe5LKX4xUN/+6njdv7isk6fzITlTTtoirh
drtNIzg8371fFw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:05 2025 by rpki-client