
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: K67GhAxF2BHdKeVY8dRj37ll6CX15vZNK0jae+cBivY=
Subject key identifier: F0:59:18:61:A3:94:F6:0A:66:D5:0B:10:1C:E9:C3:8D:E3:C3:A1:E0
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 0197B77C4773603FCE2565ABDB5FEED305CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
4: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: bbudCqbq4n3hr3VhuyUm5YSVlAVELwQcAfFLQfNVSvs=)
5: nHMt9tnZDRx6m3JgaG-0g5rC0g0.roa (hash: 1doY6wOIAWaSvtGgJud3474i9gzt/qEdhjfPhIJDXfE=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:47:73:60:3f:ce:25:65:ab:db:5f:ee:d3:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=f0591861a394f60a66d50b101ce9c38de3c3a1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:37:04:3a:8a:ae:66:d4:bf:63:b4:83:ee:
80:77:4e:f2:8d:da:f6:f6:44:b4:41:15:3f:d9:8a:
e2:96:b8:a7:4a:bf:41:c9:46:ab:b9:38:66:6c:51:
c7:c0:19:e9:c9:c1:d5:78:f5:ef:8f:2e:83:a8:85:
34:c2:65:50:97:5b:bc:47:ec:ea:a0:7b:51:ff:97:
2b:54:02:01:6d:de:78:5a:21:da:60:6f:ad:d5:37:
60:21:8b:7b:00:f1:79:63:44:a7:4e:08:60:e3:06:
64:07:9c:5f:5e:22:5b:e2:62:a7:9a:a6:25:e9:61:
a3:48:64:ca:49:ce:c7:db:e8:69:5f:71:38:0a:70:
53:8b:31:e4:e0:59:24:7e:33:26:1b:0b:56:3c:8b:
24:90:ee:5a:df:96:a7:9c:b7:9a:25:9d:e9:4d:f1:
a7:48:62:1d:ba:54:33:ea:8f:20:52:99:9b:60:2a:
e3:e2:7d:aa:5b:a9:30:be:86:a0:9c:0a:a3:2a:ad:
77:74:70:20:2f:ea:8d:f8:80:b6:f6:ad:4e:87:c9:
e1:ce:09:7d:46:28:a0:c5:02:e8:69:3b:e9:9d:11:
e5:cc:33:17:88:d1:73:ef:c6:ec:32:ef:19:1a:d5:
5b:b6:5a:e6:b5:64:f5:27:7d:60:c6:1b:bb:d9:e8:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:18:61:A3:94:F6:0A:66:D5:0B:10:1C:E9:C3:8D:E3:C3:A1:E0
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:56:1d:c1:9c:e7:88:95:4b:27:8a:c4:13:49:d4:95:35:
0a:af:d8:76:10:4e:e2:4d:58:4b:40:e8:e4:00:92:7d:91:ed:
95:4e:52:98:1a:c0:4b:b0:66:f6:46:16:eb:a3:43:88:53:e4:
ac:69:3b:f6:b3:6c:e2:c9:c9:80:ef:2c:65:44:f6:ff:8f:d2:
2d:68:65:d2:46:71:ef:63:3a:f3:2a:18:d9:f0:ff:b6:27:89:
94:75:57:28:9a:bc:d0:ac:5c:f3:5a:b6:65:50:1d:81:99:fa:
7d:07:1e:d3:c2:ba:d4:7f:45:39:fc:07:d6:6a:05:f1:60:b1:
e5:7b:f0:a3:a4:da:52:84:71:f9:a4:fb:e1:60:8e:60:37:ed:
8c:aa:dd:d0:12:94:89:fb:9c:1d:7f:4d:03:99:3e:a6:d9:fb:
4a:95:47:47:5d:a8:93:0b:29:b3:a8:38:63:6d:68:2d:d1:03:
d7:1b:66:52:b8:3d:5c:ec:df:1c:f8:41:cd:65:6c:32:7d:75:
64:9d:22:aa:cb:32:59:3e:a7:cb:a2:30:02:42:3a:83:4f:8a:
43:e6:cd:2d:02:bb:63:d9:ab:8d:94:c9:33:2a:e2:a4:01:fe:
fc:9d:cf:2b:c1:10:fc:d8:27:fd:31:d4:d5:9e:80:6b:93:6a:
62:cb:ea:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEdzYD/OJWWr21/u0wXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjUwNjI4MTcwMTA0WhcNMjUwNjI5MTcwMTA0WjAzMTEwLwYDVQQD
EyhmMDU5MTg2MWEzOTRmNjBhNjZkNTBiMTAxY2U5YzM4ZGUzYzNhMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtos3BDqKrmbUv2O0g+6Ad07yjdr2
9kS0QRU/2YrilrinSr9ByUaruThmbFHHwBnpycHVePXvjy6DqIU0wmVQl1u8R+zq
oHtR/5crVAIBbd54WiHaYG+t1TdgIYt7APF5Y0SnTghg4wZkB5xfXiJb4mKnmqYl
6WGjSGTKSc7H2+hpX3E4CnBTizHk4FkkfjMmGwtWPIskkO5a35annLeaJZ3pTfGn
SGIdulQz6o8gUpmbYCrj4n2qW6kwvoagnAqjKq13dHAgL+qN+IC29q1Oh8nhzgl9
RiigxQLoaTvpnRHlzDMXiNFz78bsMu8ZGtVbtlrmtWT1J31gxhu72egOmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBZGGGjlPYKZtULEBzpw43jw6HgMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAVWHcGc
54iVSyeKxBNJ1JU1Cq/YdhBO4k1YS0Do5ACSfZHtlU5SmBrAS7Bm9kYW66NDiFPk
rGk79rNs4snJgO8sZUT2/4/SLWhl0kZx72M68yoY2fD/tieJlHVXKJq80Kxc81q2
ZVAdgZn6fQce08K61H9FOfwH1moF8WCx5Xvwo6TaUoRx+aT74WCOYDftjKrd0BKU
ifucHX9NA5k+ptn7SpVHR12okwsps6g4Y21oLdED1xtmUrg9XOzfHPhBzWVsMn11
ZJ0iqssyWT6ny6IwAkI6g0+KQ+bNLQK7Y9mrjZTJMyripAH+/J3PK8EQ/Ngn/THU
1Z6Aa5NqYsvqHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:54 2025 by rpki-client