Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: CVfgUPdqtMY1oxDn8Z16L9y4Cd5iATWgVUebDlYlvAU=
Subject key identifier: 7F:FF:73:9A:3C:D7:58:DA:EA:0C:83:91:7E:AD:9F:19:C0:BB:0D:5F
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 0197D8BEB91D34D59B2DD70377AFE1827393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0D78
Signing time: Sat 05 Jul 2025 04:01:07 +0000
Manifest this update: Sat 05 Jul 2025 04:01:07 +0000
Manifest next update: Sun 06 Jul 2025 04:01:07 +0000
Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=)
2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: nLcx53MTcAOhzNNG030UaCUom2pcnLhpZ13GskZFxqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:be:b9:1d:34:d5:9b:2d:d7:03:77:af:e1:82:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Jul 5 04:01:07 2025 GMT
Not After : Jul 6 04:01:07 2025 GMT
Subject: CN=7fff739a3cd758daea0c83917ead9f19c0bb0d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:a9:ce:b8:90:51:44:7e:ae:e5:08:e5:3f:
b1:9b:14:ac:d7:1b:c7:90:0e:9d:1c:65:87:aa:3c:
91:6b:45:4b:71:81:b8:2d:43:b2:c4:82:41:2b:30:
83:0f:7d:80:da:87:59:f7:16:19:2b:9a:44:a6:ce:
62:9f:1c:14:35:6b:e3:3b:3b:05:3f:5a:e4:b1:fb:
ae:49:11:a0:0e:b4:0f:48:a1:94:f4:6b:d5:f6:0a:
90:7b:01:57:19:69:ce:b8:c3:1d:c2:c6:9c:44:46:
be:d0:a7:31:1b:65:c5:86:b0:ee:09:b8:c5:79:14:
2c:a1:ee:c0:76:0c:1e:fb:7e:7e:3e:27:40:89:c2:
79:40:63:18:d6:22:9e:23:c2:ea:05:ae:b6:45:00:
5b:d8:0e:d0:3b:42:0f:bd:c2:2a:69:d1:c9:56:f7:
d3:25:46:99:d9:f6:6e:f6:d2:7c:56:f1:12:4e:e6:
a7:f4:61:45:0e:32:a1:f4:26:f7:45:76:27:e5:5d:
84:3a:bd:ea:89:df:25:1e:d2:c2:df:1f:3d:62:73:
48:7c:46:b5:9b:01:40:98:ba:4e:03:d1:cc:3a:70:
3e:e4:f7:fb:f1:f4:af:59:ae:07:2a:83:3b:4a:1f:
58:00:67:d0:c3:a5:b8:cd:60:86:fb:5d:3b:6a:4f:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FF:73:9A:3C:D7:58:DA:EA:0C:83:91:7E:AD:9F:19:C0:BB:0D:5F
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:eb:9e:62:99:66:74:4d:d4:28:27:a8:15:d3:f2:e3:d7:e8:
56:8d:25:1d:2d:aa:53:1e:18:7b:19:68:8b:f1:7c:0e:5c:09:
b0:d1:89:8d:bb:92:a8:8c:79:57:87:29:7b:a4:15:0c:e1:e7:
0d:25:ce:12:a2:6b:ca:d5:7f:3a:63:76:46:b2:14:76:7d:40:
c6:99:62:bd:6f:6b:cb:3a:b5:8e:8d:7e:36:8b:eb:c7:e8:f1:
87:d4:d9:13:ee:3e:b3:ee:87:cf:43:78:38:e7:91:e7:14:d5:
0c:ce:a5:e4:7e:e1:42:b5:9a:ae:1a:9b:10:37:7c:20:be:9b:
9a:5f:32:4d:21:50:b5:f1:15:bc:d1:f6:60:68:f9:9c:05:95:
b0:83:34:59:7d:0f:3c:5b:b0:65:be:f4:bb:c1:b4:62:4b:15:
5f:46:3e:a9:59:2e:a7:8e:60:ef:3e:7b:0c:10:4d:2f:35:f7:
01:82:2f:6c:9e:e9:02:06:2c:bb:18:c7:09:17:be:42:1c:78:
75:e6:2a:d0:95:95:fb:ae:85:cc:4c:7e:4d:f8:b4:bb:3c:3a:
6e:f1:8a:ba:26:37:a9:c0:57:20:c2:61:28:da:7e:60:f0:ac:
98:9b:55:29:b5:03:05:75:f6:bc:f5:a0:5f:76:bf:99:1e:72:
f6:c3:9a:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfYvrkdNNWbLdcDd6/hgnOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4
NzExZDQwHhcNMjUwNzA1MDQwMTA3WhcNMjUwNzA2MDQwMTA3WjAzMTEwLwYDVQQD
Eyg3ZmZmNzM5YTNjZDc1OGRhZWEwYzgzOTE3ZWFkOWYxOWMwYmIwZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3upzriQUUR+ruUI5T+xmxSs1xvH
kA6dHGWHqjyRa0VLcYG4LUOyxIJBKzCDD32A2odZ9xYZK5pEps5inxwUNWvjOzsF
P1rksfuuSRGgDrQPSKGU9GvV9gqQewFXGWnOuMMdwsacREa+0KcxG2XFhrDuCbjF
eRQsoe7Adgwe+35+PidAicJ5QGMY1iKeI8LqBa62RQBb2A7QO0IPvcIqadHJVvfT
JUaZ2fZu9tJ8VvESTuan9GFFDjKh9Cb3RXYn5V2EOr3qid8lHtLC3x89YnNIfEa1
mwFAmLpOA9HMOnA+5Pf78fSvWa4HKoM7Sh9YAGfQw6W4zWCG+107ak9P1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH//c5o811ja6gyDkX6tnxnAuw1fMB8GA1UdIwQY
MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt
MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll
LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOueYplm
dE3UKCeoFdPy49foVo0lHS2qUx4Yexloi/F8DlwJsNGJjbuSqIx5V4cpe6QVDOHn
DSXOEqJrytV/OmN2RrIUdn1AxplivW9ryzq1jo1+Novrx+jxh9TZE+4+s+6Hz0N4
OOeR5xTVDM6l5H7hQrWarhqbEDd8IL6bml8yTSFQtfEVvNH2YGj5nAWVsIM0WX0P
PFuwZb70u8G0YksVX0Y+qVkup45g7z57DBBNLzX3AYIvbJ7pAgYsuxjHCRe+Qhx4
deYq0JWV+66FzEx+Tfi0uzw6bvGKuiY3qcBXIMJhKNp+YPCsmJtVKbUDBXX2vPWg
X3a/mR5y9sOaqg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 08:19:38 2025 by rpki-client