Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: 5dxbFn6XYK0SSDPx3ljK6ICehkbubEpqzUl9kc8kUAA=
Subject key identifier: 8C:42:40:52:92:86:4F:E1:0B:E6:41:DB:15:94:BD:95:9B:D3:0C:C7
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 0197B933921E12A435E895FEEAFACDB62DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 03A4
Signing time: Sun 29 Jun 2025 01:00:54 +0000
Manifest this update: Sun 29 Jun 2025 01:00:54 +0000
Manifest next update: Mon 30 Jun 2025 01:00:54 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: QC8CSfYWZpMnEMwAWJ5MB2eXBPhXncyDdPf8/phoz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:92:1e:12:a4:35:e8:95:fe:ea:fa:cd:b6:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Jun 29 01:00:54 2025 GMT
Not After : Jun 30 01:00:54 2025 GMT
Subject: CN=8c42405292864fe10be641db1594bd959bd30cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:47:74:31:74:7d:fb:09:85:5e:08:a7:b4:
7d:7a:d6:33:bd:e3:ef:79:37:68:2f:2a:b1:ab:a8:
a6:c8:3a:f8:94:16:c0:c4:9f:95:cd:eb:cf:59:84:
d5:63:89:9d:87:e6:32:48:44:ec:e0:8f:16:30:ef:
94:51:c3:89:ae:3b:ab:10:24:29:16:f0:30:d2:a4:
5b:d5:64:e1:4d:7a:1f:2f:3f:26:2e:0f:cc:72:3e:
b5:30:1a:1a:a0:43:b8:d6:a3:5d:58:ce:eb:4b:f4:
17:bc:0d:16:a0:ab:99:c4:5d:12:64:00:b8:a2:27:
08:a8:d3:20:ef:eb:b5:82:d9:07:6d:d1:7e:38:9d:
2d:e5:7b:a3:36:04:5b:c1:1c:29:24:08:45:9c:aa:
83:37:41:15:a7:51:9a:0b:c2:79:c1:41:8b:74:56:
a9:20:f0:6f:21:c4:e7:b9:57:b6:41:a0:c5:8a:2d:
fd:2b:bd:b4:d7:aa:8a:40:10:e6:3b:7b:48:67:1a:
57:d7:e3:35:6f:a2:7c:f6:a5:c7:00:11:e4:24:62:
5a:36:a6:9b:23:05:ff:be:1c:63:79:7e:bc:19:41:
01:b3:66:31:f4:10:2a:74:a3:48:0a:64:d5:ca:b6:
fd:fc:18:1b:34:d1:4f:a7:11:3b:a7:ad:df:e8:61:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:40:52:92:86:4F:E1:0B:E6:41:DB:15:94:BD:95:9B:D3:0C:C7
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:74:81:cb:66:c5:63:46:db:93:34:45:46:fe:8b:c9:8c:cf:
7e:e8:07:29:a6:51:76:c9:d3:c4:23:f2:69:0d:c4:6b:3c:7a:
f4:ee:e6:b1:10:b8:9f:81:28:99:fe:60:39:66:d7:a4:5e:85:
8f:72:f0:24:9c:08:6e:87:30:cb:b8:84:fc:59:a7:a0:c4:cc:
a7:a4:b6:f1:40:bb:e9:e4:da:e7:cf:7e:e6:05:62:bf:4c:43:
ab:74:c2:13:b8:ff:fa:02:95:b8:10:9d:12:89:c3:94:70:52:
55:f2:2a:3d:d8:0e:d4:1e:ac:40:84:cd:8f:6d:32:1f:1b:38:
2c:7b:67:16:5b:25:56:cd:d4:5f:c8:37:38:90:e8:0f:cd:86:
67:9a:94:68:92:71:fa:be:7a:01:a9:96:86:63:24:4d:78:bf:
ce:e6:ec:f3:67:87:de:95:ef:42:ab:f0:51:7f:f8:97:fc:fb:
2f:20:55:31:49:49:ac:67:81:bc:ab:17:a8:61:43:71:cd:da:
e1:7f:1c:70:3c:3b:82:5f:c3:4a:27:40:d1:c7:e7:d4:66:40:
91:a7:db:35:05:b5:fc:3d:3d:1b:62:07:8d:c8:d2:0d:c4:76:
34:5d:5a:bc:ab:b7:f9:14:da:2a:0a:f9:23:5b:52:41:46:ec:
ab:3d:54:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5M5IeEqQ16JX+6vrNti3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi
ZWQxNjYwHhcNMjUwNjI5MDEwMDU0WhcNMjUwNjMwMDEwMDU0WjAzMTEwLwYDVQQD
Eyg4YzQyNDA1MjkyODY0ZmUxMGJlNjQxZGIxNTk0YmQ5NTliZDMwY2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9hHdDF0ffsJhV4Ip7R9etYzvePv
eTdoLyqxq6imyDr4lBbAxJ+VzevPWYTVY4mdh+YySETs4I8WMO+UUcOJrjurECQp
FvAw0qRb1WThTXofLz8mLg/Mcj61MBoaoEO41qNdWM7rS/QXvA0WoKuZxF0SZAC4
oicIqNMg7+u1gtkHbdF+OJ0t5XujNgRbwRwpJAhFnKqDN0EVp1GaC8J5wUGLdFap
IPBvIcTnuVe2QaDFii39K72016qKQBDmO3tIZxpX1+M1b6J89qXHABHkJGJaNqab
IwX/vhxjeX68GUEBs2Yx9BAqdKNICmTVyrb9/BgbNNFPpxE7p63f6GFHCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxCQFKShk/hC+ZB2xWUvZWb0wzHMB8GA1UdIwQY
MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt
N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz
LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3SBy2bF
Y0bbkzRFRv6LyYzPfugHKaZRdsnTxCPyaQ3Eazx69O7msRC4n4Eomf5gOWbXpF6F
j3LwJJwIbocwy7iE/FmnoMTMp6S28UC76eTa589+5gViv0xDq3TCE7j/+gKVuBCd
EonDlHBSVfIqPdgO1B6sQITNj20yHxs4LHtnFlslVs3UX8g3OJDoD82GZ5qUaJJx
+r56AamWhmMkTXi/zubs82eH3pXvQqvwUX/4l/z7LyBVMUlJrGeBvKsXqGFDcc3a
4X8ccDw7gl/DSidA0cfn1GZAkafbNQW1/D09G2IHjcjSDcR2NF1avKu3+RTaKgr5
I1tSQUbsqz1UMQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:53:07 2025 by rpki-client