
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: 2N0yCjYMq8zZ8PN2LjLt41xDn7Gb0xNPKF2OgUN4TVM=
Subject key identifier: 68:42:86:DD:DC:54:3B:C5:B1:C2:E8:83:D9:1F:90:02:05:2C:D6:76
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 0197B5C4AA4EC59A0FABB6CF2991EB7DC58A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:00:54 +0000
Manifest this update: Sat 28 Jun 2025 09:00:54 +0000
Manifest next update: Sun 29 Jun 2025 09:00:54 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: 6uDdi0LGoVtph8DBta+QuP77JjssmQDCYGew4NC3gew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:aa:4e:c5:9a:0f:ab:b6:cf:29:91:eb:7d:c5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Jun 28 09:00:54 2025 GMT
Not After : Jun 29 09:00:54 2025 GMT
Subject: CN=684286dddc543bc5b1c2e883d91f9002052cd676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:3a:44:fc:e4:53:f8:4f:4d:7c:85:5e:48:
ef:cd:fe:03:11:82:04:ff:41:4f:66:2c:02:f5:d8:
45:a9:2b:6c:b6:12:58:8d:34:c0:73:ea:fd:a2:65:
d7:08:ab:c6:b8:bf:74:3b:6a:6f:4b:02:95:29:50:
1f:e1:4a:2f:a6:e3:95:44:13:d6:1a:cc:f7:1a:b8:
cf:86:fa:f3:b0:88:3a:1d:6e:63:8c:77:96:1a:7b:
34:af:41:9c:31:97:85:d1:c3:b8:b1:90:88:b4:bb:
4e:f7:69:e5:79:d8:f9:a7:81:ab:ce:b4:5f:65:3f:
bf:2f:2c:7e:b9:05:3d:ed:68:9e:96:be:78:62:be:
91:6a:cd:4b:48:3e:c3:c8:5b:ef:ae:de:67:eb:1d:
73:70:5e:34:aa:77:c8:04:cb:31:3e:e7:9b:5f:73:
08:6b:de:e6:2b:1d:55:9c:f3:93:cd:9c:2b:ab:c1:
31:a3:5f:42:6a:99:bc:93:da:9b:8c:8e:26:42:d1:
7d:73:16:7d:de:d3:c0:49:a4:96:64:56:7c:15:ed:
aa:50:92:2c:24:fa:65:5d:4f:14:68:41:5b:7d:8c:
8b:39:08:9d:31:c9:8c:30:63:8e:b7:b5:18:29:88:
fc:0e:fd:69:36:8b:0f:ba:51:9e:d0:32:7e:51:47:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:42:86:DD:DC:54:3B:C5:B1:C2:E8:83:D9:1F:90:02:05:2C:D6:76
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:60:f8:af:cc:2b:3e:dd:21:11:73:42:79:7d:a0:81:db:90:
8c:a5:ab:de:0d:2d:4d:fe:28:5f:69:e9:dc:b5:19:c0:b0:6a:
71:01:30:28:0a:0c:0f:8b:d8:30:be:06:a1:a8:b8:ef:f3:25:
bf:14:7f:5e:a9:78:19:86:e1:09:c2:53:50:f1:ca:07:4c:f4:
ff:82:62:25:e5:cb:eb:1b:37:e4:ad:aa:cd:de:e8:42:6d:3f:
cd:3b:48:bb:28:61:99:f9:9e:8d:c6:3c:fe:64:7e:f0:f2:9c:
0f:e3:60:eb:57:2f:23:87:64:ce:f8:31:34:66:1e:be:2b:c0:
12:ad:4a:14:62:8a:51:66:0b:8b:d4:6d:8a:85:01:de:6c:0a:
39:60:77:98:55:aa:dc:14:6f:91:d1:15:72:4c:ee:b2:20:29:
ec:94:7d:50:bf:18:bd:a9:66:1e:19:c0:38:ea:83:02:67:e9:
db:b4:76:1c:fa:43:8a:99:30:1c:65:10:93:4f:c4:43:2a:9c:
18:cb:26:89:ab:8e:05:bc:12:d2:86:be:8f:c8:62:a6:79:fa:
73:f0:28:f9:65:c3:6d:d2:a7:b6:68:9c:c9:5c:11:b5:9d:c4:
05:58:c2:e1:28:35:62:b2:80:23:13:f1:ba:0c:2e:c0:7d:46:
bc:6b:06:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xKpOxZoPq7bPKZHrfcWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDE1Y2JhMjJlMzMxYWRhOTFmZjRkYzY2ODhlNWZhMGFm
NDU3NjkwHhcNMjUwNjI4MDkwMDU0WhcNMjUwNjI5MDkwMDU0WjAzMTEwLwYDVQQD
Eyg2ODQyODZkZGRjNTQzYmM1YjFjMmU4ODNkOTFmOTAwMjA1MmNkNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJo6RPzkU/hPTXyFXkjvzf4DEYIE
/0FPZiwC9dhFqStsthJYjTTAc+r9omXXCKvGuL90O2pvSwKVKVAf4UovpuOVRBPW
Gsz3GrjPhvrzsIg6HW5jjHeWGns0r0GcMZeF0cO4sZCItLtO92nledj5p4GrzrRf
ZT+/Lyx+uQU97Wielr54Yr6Ras1LSD7DyFvvrt5n6x1zcF40qnfIBMsxPuebX3MI
a97mKx1VnPOTzZwrq8Exo19Capm8k9qbjI4mQtF9cxZ93tPASaSWZFZ8Fe2qUJIs
JPplXU8UaEFbfYyLOQidMcmMMGOOt7UYKYj8Dv1pNosPulGe0DJ+UUdaPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhCht3cVDvFscLog9kfkAIFLNZ2MB8GA1UdIwQY
MBaAFGdBXLoi4zGtqR/03GaI5foK9FdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDIt
NjY2NDNlMDY2M2RmLzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDItNjY2NDNlMDY2M2Rm
LzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2D4r8wr
Pt0hEXNCeX2ggduQjKWr3g0tTf4oX2np3LUZwLBqcQEwKAoMD4vYML4Goai47/Ml
vxR/Xql4GYbhCcJTUPHKB0z0/4JiJeXL6xs35K2qzd7oQm0/zTtIuyhhmfmejcY8
/mR+8PKcD+Ng61cvI4dkzvgxNGYevivAEq1KFGKKUWYLi9RtioUB3mwKOWB3mFWq
3BRvkdEVckzusiAp7JR9UL8YvalmHhnAOOqDAmfp27R2HPpDipkwHGUQk0/EQyqc
GMsmiauOBbwS0oa+j8hipnn6c/Ao+WXDbdKntmicyVwRtZ3EBVjC4Sg1YrKAIxPx
ugwuwH1GvGsGmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:32 2025 by rpki-client