Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File: Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier: OouHG1VrWfEySXHvKZBn8YusozLEjiVCX54EjQR4Eyk=
Subject key identifier: B3:2A:25:D4:A5:C5:97:85:ED:B6:BB:92:4A:49:92:7F:05:10:11:4B
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial: 0197B5C480D9D05B80DB77C32D4934AFEF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number: 13DB
Signing time: Sat 28 Jun 2025 09:00:43 +0000
Manifest this update: Sat 28 Jun 2025 09:00:43 +0000
Manifest next update: Sun 29 Jun 2025 09:00:43 +0000
Files and hashes: 1: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: fuE7AYBcaALuIwGwP/nxbolbu557OTd5CqIbWGNxTpg=)
2: yojAQ3oth9lVhqX5wg8l8cBEUmI.roa (hash: o7RnG1CkyxwhqBFMnhN8mnO/r8Gaf2uetg2QG+K1/Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:80:d9:d0:5b:80:db:77:c3:2d:49:34:af:ef:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Validity
Not Before: Jun 28 09:00:43 2025 GMT
Not After : Jun 29 09:00:43 2025 GMT
Subject: CN=b32a25d4a5c59785edb6bb924a49927f0510114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:1f:ce:d7:ec:4f:f1:8b:d8:7c:ce:86:8b:
ba:2d:eb:c2:04:e9:9d:f3:2f:d5:c9:21:cd:7e:64:
4b:e5:22:4f:09:ab:60:f7:7c:0c:e9:1f:a2:63:75:
9b:a2:0c:89:8f:e2:56:62:89:e1:52:1b:c7:14:e4:
1f:e7:fe:5c:a4:ac:39:1b:49:d6:44:34:f3:71:ad:
0c:96:39:08:10:13:06:d5:58:fa:69:d2:b1:c1:16:
0e:f1:78:2b:6e:9d:b9:91:e4:19:fd:04:93:c5:e4:
0c:82:04:3d:44:2a:8d:67:d4:b7:47:71:08:9f:46:
e6:76:9b:7e:db:29:0f:6a:58:b7:47:85:6b:f6:2d:
8d:ee:3e:47:9c:92:70:24:65:5a:b0:65:d4:fe:15:
23:c8:c3:28:03:6d:84:59:16:15:e9:4b:73:a9:8d:
f4:0c:de:8a:6b:05:03:04:e7:de:f0:99:e5:86:61:
6b:28:7e:00:a5:12:a3:a2:1f:8d:99:87:a3:b5:14:
27:b5:47:c5:05:aa:5d:a0:70:93:04:81:65:a6:2c:
69:09:8f:7d:2f:83:25:ba:96:3c:72:da:36:62:ab:
f8:43:65:79:08:c0:5b:af:64:97:80:d0:4d:28:a1:
f8:2c:83:a4:eb:88:61:dc:e4:2f:e9:5b:c2:4f:bc:
2f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:25:D4:A5:C5:97:85:ED:B6:BB:92:4A:49:92:7F:05:10:11:4B
X509v3 Authority Key Identifier:
keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a9:ea:4a:f6:db:8c:81:fb:e0:e7:ea:68:54:22:92:d7:b8:
81:1f:08:8e:66:ea:7a:54:ee:10:1b:21:5f:21:7c:bb:77:6a:
98:9b:47:c2:77:ef:7e:a6:9c:2b:73:fc:05:82:02:cb:ba:18:
a8:e5:10:7a:2d:62:e6:76:30:35:15:1e:0e:fc:a3:79:0d:e0:
cf:8f:6b:37:2f:34:92:6b:b6:11:60:53:2b:8a:b0:82:59:b0:
e6:22:55:ef:f9:8e:ac:a1:47:76:55:97:9c:44:e0:35:a2:ff:
ec:c8:81:4d:33:ef:91:cc:4c:3a:2a:5a:a0:54:d8:20:e7:90:
dd:9f:7e:68:be:df:4a:72:18:3a:07:ba:59:19:9e:7f:78:ac:
b4:af:f6:b0:6b:c0:88:da:cd:bc:33:d2:b5:99:91:55:e3:ef:
69:c4:47:46:a8:d3:5b:97:a9:ff:b8:80:07:73:1d:93:0d:f6:
56:ac:71:50:0d:3f:85:8c:b8:86:52:de:fa:f9:fa:c2:d8:77:
97:11:2a:ce:0c:57:b8:9e:b7:e8:36:29:f8:a3:82:32:3d:f4:
e2:dc:f3:fd:19:19:87:05:f5:08:c5:84:2b:47:ab:32:88:d2:
2b:d7:6c:0a:64:80:0e:61:25:a1:56:fc:53:6c:64:1a:96:5d:
c6:1f:85:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xIDZ0FuA23fDLUk0r+8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YTRlYzM4ZjJmZjY5ZDI1MDVmN2Y2MmU5NGMzYmQ3OThi
NTg1NTIwHhcNMjUwNjI4MDkwMDQzWhcNMjUwNjI5MDkwMDQzWjAzMTEwLwYDVQQD
EyhiMzJhMjVkNGE1YzU5Nzg1ZWRiNmJiOTI0YTQ5OTI3ZjA1MTAxMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK0fztfsT/GL2HzOhou6LevCBOmd
8y/VySHNfmRL5SJPCatg93wM6R+iY3WbogyJj+JWYonhUhvHFOQf5/5cpKw5G0nW
RDTzca0MljkIEBMG1Vj6adKxwRYO8Xgrbp25keQZ/QSTxeQMggQ9RCqNZ9S3R3EI
n0bmdpt+2ykPali3R4Vr9i2N7j5HnJJwJGVasGXU/hUjyMMoA22EWRYV6UtzqY30
DN6KawUDBOfe8JnlhmFrKH4ApRKjoh+NmYejtRQntUfFBapdoHCTBIFlpixpCY99
L4MlupY8cto2Yqv4Q2V5CMBbr2SXgNBNKKH4LIOk64hh3OQv6VvCT7wvewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMqJdSlxZeF7ba7kkpJkn8FEBFLMB8GA1UdIwQY
MBaAFGek7Djy/2nSUF9/YulMO9eYtYVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAt
ZDQyZDRlOWM3NjdkLzEvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAtZDQyZDRlOWM3Njdk
LzEvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqnqSvbb
jIH74OfqaFQikte4gR8IjmbqelTuEBshXyF8u3dqmJtHwnfvfqacK3P8BYICy7oY
qOUQei1i5nYwNRUeDvyjeQ3gz49rNy80kmu2EWBTK4qwglmw5iJV7/mOrKFHdlWX
nETgNaL/7MiBTTPvkcxMOipaoFTYIOeQ3Z9+aL7fSnIYOge6WRmef3istK/2sGvA
iNrNvDPStZmRVePvacRHRqjTW5ep/7iAB3Mdkw32VqxxUA0/hYy4hlLe+vn6wth3
lxEqzgxXuJ636DYp+KOCMj304tzz/RkZhwX1CMWEK0erMojSK9dsCmSADmEloVb8
U2xkGpZdxh+FAg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:32 2025 by rpki-client