Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: 0qvN6D2PFi4mYzdk0BDh9K/FOEjlOrU6NiSqNZ8Ndqk=
Subject key identifier: 1C:94:7D:27:FE:13:09:8B:31:9F:EA:6A:77:E3:39:0B:81:62:ED:B3
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 0197B8C5F8C410FBD4C3B78871207103B74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 23:01:11 +0000
Manifest this update: Sat 28 Jun 2025 23:01:11 +0000
Manifest next update: Sun 29 Jun 2025 23:01:11 +0000
Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: eE2791PU+0FYxWgPc9lgRiQlK/moc/kPNiRl4nw4fkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:f8:c4:10:fb:d4:c3:b7:88:71:20:71:03:b7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: Jun 28 23:01:11 2025 GMT
Not After : Jun 29 23:01:11 2025 GMT
Subject: CN=1c947d27fe13098b319fea6a77e3390b8162edb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:1b:83:a1:60:ca:5b:2e:c2:4b:9d:c2:9f:
4f:09:94:ba:38:4e:a7:28:d5:4c:95:2b:8a:e1:4f:
af:58:2b:b4:90:3b:db:f7:82:29:3a:a3:a0:3a:f9:
a6:70:b0:c9:7c:4a:af:4a:87:58:66:ab:8c:87:20:
ba:52:9f:ed:62:44:57:18:96:97:c0:88:a1:9e:c5:
42:1c:db:21:62:93:9e:61:f2:43:e9:1d:65:ac:bd:
be:7a:bb:cb:27:a4:d6:f1:c3:d1:8a:4e:1d:6b:5e:
c2:5e:e2:48:c4:e8:e2:73:ae:86:41:53:55:e4:bb:
db:b6:97:02:5c:9c:1e:40:7c:6c:61:72:15:ad:d8:
2d:5b:90:f3:7d:14:cd:9e:a0:4d:7b:8d:fc:5f:83:
ce:60:4c:d5:38:bc:03:ed:c1:29:48:ee:2c:64:65:
df:c8:19:fa:b7:dd:54:9e:ca:06:86:2a:c5:7f:80:
16:e8:de:c0:e8:38:64:67:8e:af:60:99:d5:72:fc:
e7:40:4a:69:45:9a:cb:12:80:5f:e7:11:e3:5c:69:
80:82:a0:10:7f:49:52:76:f7:a4:db:71:ef:9a:8b:
bc:6e:14:f9:af:13:0c:51:be:9b:e2:b1:d0:99:29:
e8:ec:da:06:25:56:12:28:ef:ba:c0:7b:e9:53:85:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:7D:27:FE:13:09:8B:31:9F:EA:6A:77:E3:39:0B:81:62:ED:B3
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:29:3d:06:64:34:b8:3e:16:0d:e8:5b:ea:cb:d1:76:92:03:
74:d0:57:56:62:ea:75:c4:8c:44:50:68:88:0a:18:92:8a:64:
08:a8:4d:73:1d:c6:8b:08:a1:6a:96:c9:0b:d8:a5:02:bb:fc:
7f:fd:2b:aa:c9:fc:c5:f5:80:c4:72:a2:ef:66:bd:89:b9:62:
bd:78:5e:82:c8:cd:c4:c5:26:6f:94:04:d5:c5:6d:0c:2e:e5:
a5:1c:98:c5:80:52:04:83:37:78:f3:10:8b:65:b2:0c:48:d4:
ab:65:dd:09:1d:5d:07:be:83:63:b5:41:9d:80:9d:a3:64:e1:
20:bb:7e:de:58:84:11:c2:07:c9:fa:ac:4f:d6:42:51:d2:0f:
e3:02:45:d3:dc:df:7a:65:54:5f:5d:1a:09:1e:d9:18:62:ab:
5a:84:26:37:00:fd:e8:1d:59:a3:af:30:89:b4:05:87:b8:81:
f6:e3:86:06:fa:bf:0c:56:ff:71:d9:99:ac:ae:e8:9a:a6:26:
cc:b1:f4:78:41:25:62:66:d5:60:a6:04:0c:d8:4c:ad:05:f4:
b7:f4:40:f0:cd:8c:1a:e3:97:c3:cb:d3:0a:bc:47:45:e5:f1:
24:ce:4b:5c:f0:9b:a1:6a:8b:22:6a:a4:18:37:9c:b3:34:10:
1b:6f:0b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xfjEEPvUw7eIcSBxA7dNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjJkZDE5NzI1YjZhNTllNzlmMGZmMzk3ODlhNTY1OGU0
YTVmZGQwHhcNMjUwNjI4MjMwMTExWhcNMjUwNjI5MjMwMTExWjAzMTEwLwYDVQQD
EygxYzk0N2QyN2ZlMTMwOThiMzE5ZmVhNmE3N2UzMzkwYjgxNjJlZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvQbg6Fgylsuwkudwp9PCZS6OE6n
KNVMlSuK4U+vWCu0kDvb94IpOqOgOvmmcLDJfEqvSodYZquMhyC6Up/tYkRXGJaX
wIihnsVCHNshYpOeYfJD6R1lrL2+ervLJ6TW8cPRik4da17CXuJIxOjic66GQVNV
5LvbtpcCXJweQHxsYXIVrdgtW5DzfRTNnqBNe438X4POYEzVOLwD7cEpSO4sZGXf
yBn6t91UnsoGhirFf4AW6N7A6DhkZ46vYJnVcvznQEppRZrLEoBf5xHjXGmAgqAQ
f0lSdvek23Hvmou8bhT5rxMMUb6b4rHQmSno7NoGJVYSKO+6wHvpU4XLqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByUfSf+EwmLMZ/qanfjOQuBYu2zMB8GA1UdIwQY
MBaAFM4i3RlyW2pZ558P85eJpWWOSl/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5Nzgt
YjE4MjI3NTVmNzEyLzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jNzVmMTItOTdhNC00ZDllLTk5NzgtYjE4MjI3NTVmNzEy
LzEvemlMZEdYSmJhbG5ubndfemw0bWxaWTVLWDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUik9BmQ0
uD4WDehb6svRdpIDdNBXVmLqdcSMRFBoiAoYkopkCKhNcx3GiwihapbJC9ilArv8
f/0rqsn8xfWAxHKi72a9iblivXhegsjNxMUmb5QE1cVtDC7lpRyYxYBSBIM3ePMQ
i2WyDEjUq2XdCR1dB76DY7VBnYCdo2ThILt+3liEEcIHyfqsT9ZCUdIP4wJF09zf
emVUX10aCR7ZGGKrWoQmNwD96B1Zo68wibQFh7iB9uOGBvq/DFb/cdmZrK7omqYm
zLH0eEElYmbVYKYEDNhMrQX0t/RA8M2MGuOXw8vTCrxHReXxJM5LXPCboWqLImqk
GDecszQQG28Lsw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:26:41 2025 by rpki-client