Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: +aX7NbvSUmsBYzYFsW275IJ+yXJj4oJ2vufNf/KhM5o=
Subject key identifier: 37:8F:6B:76:DD:DC:47:A1:7C:FF:BB:5F:CB:64:8C:58:1C:19:FE:6B
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 0197B70F0E4B9F951024A00758E133601BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 04BC
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: sz7CCTs4fLZNfdNaqOp+11m0KyIWNGlR1LkenlxLtik=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0e:4b:9f:95:10:24:a0:07:58:e1:33:60:1b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=378f6b76dddc47a17cffbb5fcb648c581c19fe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:b0:2d:d3:72:f4:d9:f7:b3:05:13:67:7f:
2a:e8:27:21:c3:72:f5:e0:68:6b:23:6e:ff:e4:ae:
a5:ec:bd:a3:b5:bd:f2:49:1d:37:69:a0:68:93:e7:
12:bd:ad:a1:15:a1:a8:e6:f1:7b:1f:b7:73:6b:63:
d0:07:55:1b:c3:cb:c5:31:ce:b2:36:f7:8f:f1:e9:
37:9e:70:77:00:93:a3:52:f9:c4:4c:8f:e3:03:83:
e0:44:0d:1c:14:81:b7:3e:9b:8c:96:89:94:00:2c:
d8:d6:d7:f8:d8:95:8d:55:58:75:13:7a:99:d5:5f:
cb:89:e4:1d:93:07:1b:f6:9b:08:0c:82:14:21:a4:
59:50:77:ba:95:4c:a4:0a:fc:8d:1d:fe:f8:7a:61:
14:43:06:3d:2a:f9:0f:61:d4:f4:e6:75:c4:95:13:
8f:d3:ad:ec:c6:72:1e:32:87:ff:ae:08:af:58:48:
b7:4c:93:39:9b:53:24:80:c6:97:9a:ef:95:48:54:
a5:cb:63:f7:46:62:5c:45:87:a1:bc:04:22:e1:a9:
d0:34:d4:d2:c4:86:21:c1:2c:99:98:b8:2d:34:5e:
c7:bc:33:5e:b3:39:6f:a8:ea:4e:07:b2:c1:e2:05:
f2:98:bf:d7:6a:0f:d8:01:c2:32:ec:03:7e:54:01:
90:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:6B:76:DD:DC:47:A1:7C:FF:BB:5F:CB:64:8C:58:1C:19:FE:6B
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c9:52:a3:36:b5:cb:7e:89:de:36:83:9c:45:fb:e9:91:9f:
f0:f7:2c:c6:39:ba:ec:12:7d:1e:ac:54:97:09:9b:34:dd:9f:
75:eb:dc:db:28:a5:01:3e:1f:79:6e:7d:9d:17:ab:ae:00:db:
8f:ee:8a:e7:5d:70:fd:46:00:42:6c:2c:30:1f:cc:47:b9:74:
b8:ed:3a:28:0c:3e:4e:91:96:5a:c0:66:cd:ef:26:c9:7f:f5:
45:fc:60:3d:2a:29:bb:c3:d9:d2:fc:75:08:d5:5e:6d:b1:5e:
7e:52:b5:9f:c0:48:93:5f:65:53:3f:bb:45:6f:a1:f4:7a:12:
b7:ad:63:e3:a7:4a:4b:15:98:3a:37:48:b2:e6:da:19:8a:b6:
e2:e4:f8:8e:2f:b8:ac:23:8c:42:45:cf:72:03:b4:56:04:3c:
c5:3e:4d:8e:cf:54:b7:bf:eb:2c:4a:de:9d:a0:89:db:7e:07:
8d:7d:aa:aa:5f:9f:5f:23:5b:3a:8e:0e:82:43:b7:2c:08:a0:
0f:8a:19:ec:fd:66:36:04:b1:ba:a8:3c:03:6d:f5:78:10:5b:
e8:99:c0:14:58:3d:f0:3b:57:26:80:a7:f2:af:b3:b3:a4:32:
08:b6:04:f4:36:02:3d:2f:ca:cf:b7:cb:8b:01:43:0a:0d:41:
7e:2b:43:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dw5Ln5UQJKAHWOEzYBvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz
ZWFiYjkwHhcNMjUwNjI4MTUwMTQ2WhcNMjUwNjI5MTUwMTQ2WjAzMTEwLwYDVQQD
EygzNzhmNmI3NmRkZGM0N2ExN2NmZmJiNWZjYjY0OGM1ODFjMTlmZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8ywLdNy9Nn3swUTZ38q6Cchw3L1
4GhrI27/5K6l7L2jtb3ySR03aaBok+cSva2hFaGo5vF7H7dza2PQB1Ubw8vFMc6y
NveP8ek3nnB3AJOjUvnETI/jA4PgRA0cFIG3PpuMlomUACzY1tf42JWNVVh1E3qZ
1V/LieQdkwcb9psIDIIUIaRZUHe6lUykCvyNHf74emEUQwY9KvkPYdT05nXElROP
063sxnIeMof/rgivWEi3TJM5m1MkgMaXmu+VSFSly2P3RmJcRYehvAQi4anQNNTS
xIYhwSyZmLgtNF7HvDNeszlvqOpOB7LB4gXymL/Xag/YAcIy7AN+VAGQ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDePa3bd3EehfP+7X8tkjFgcGf5rMB8GA1UdIwQY
MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt
NjU2YzE2MmZiMjRlLzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl
LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8lSoza1
y36J3jaDnEX76ZGf8Pcsxjm67BJ9HqxUlwmbNN2fdevc2yilAT4feW59nRerrgDb
j+6K511w/UYAQmwsMB/MR7l0uO06KAw+TpGWWsBmze8myX/1RfxgPSopu8PZ0vx1
CNVebbFeflK1n8BIk19lUz+7RW+h9HoSt61j46dKSxWYOjdIsubaGYq24uT4ji+4
rCOMQkXPcgO0VgQ8xT5Njs9Ut7/rLErenaCJ234HjX2qql+fXyNbOo4OgkO3LAig
D4oZ7P1mNgSxuqg8A231eBBb6JnAFFg98DtXJoCn8q+zs6QyCLYE9DYCPS/Kz7fL
iwFDCg1BfitDAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:04 2025 by rpki-client