Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
File: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft (raw, json)
Hash identifier: mg9if6GRY6dDux2gPkpu3l2EKU9OHp++q1j2nEk9pBQ=
Subject key identifier: C1:83:C1:F6:02:40:6E:56:AE:66:57:5C:60:6F:1D:F3:9F:D7:57:30
Authority key identifier: 64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
Certificate issuer: /CN=6431e960cd061039b3b27fd25d4160771c498bab
Certificate serial: 0197CBDFDF840E17D5AB6F47314181B3E582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
Manifest number: 1213
Signing time: Wed 02 Jul 2025 16:02:15 +0000
Manifest this update: Wed 02 Jul 2025 16:02:15 +0000
Manifest next update: Thu 03 Jul 2025 16:02:15 +0000
Files and hashes: 1: ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl (hash: mh2QIaclRSsGJgNicsQpfhn40lpGMJDPF/WSKuJdJQY=)
2: ZNva-8ABsvjJ6HrNFF7Xd55KW-w.roa (hash: nx2aCY2Bfbi+2/xFJXRwWrGYEeyRAMv/De92goZyeZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:df:84:0e:17:d5:ab:6f:47:31:41:81:b3:e5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6431e960cd061039b3b27fd25d4160771c498bab
Validity
Not Before: Jul 2 16:02:15 2025 GMT
Not After : Jul 3 16:02:15 2025 GMT
Subject: CN=c183c1f602406e56ae66575c606f1df39fd75730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:e0:2e:93:23:ae:66:07:0b:9b:fb:08:64:
db:49:22:d1:56:46:33:8c:91:8a:bf:89:29:4e:bc:
c0:e5:b2:d9:86:3d:df:7a:e0:89:d6:4b:2e:e4:db:
28:a7:c1:59:65:d2:7e:bd:89:70:85:2d:17:52:14:
b3:07:68:dd:56:dc:6f:8f:dd:af:81:2d:5e:b7:d1:
e7:3c:6c:c0:77:a4:fc:82:de:28:83:dd:b7:9a:33:
d4:29:09:01:20:2e:f0:fd:88:46:98:3c:9a:8f:6b:
f4:12:23:35:79:3d:52:93:1a:11:bf:d3:c1:8c:2e:
f5:f3:ac:72:22:b7:e6:bd:1b:92:32:47:1b:6e:03:
a5:22:70:1f:b0:8f:f9:90:3a:98:0b:28:db:9a:c1:
88:a7:bb:95:6f:06:92:a0:f5:94:c6:ab:57:df:06:
d8:d1:ee:ed:74:b9:30:38:22:d1:f2:af:e5:46:0e:
72:5d:8c:f5:19:2d:47:9b:07:9c:f8:3d:bd:4e:c4:
3c:48:17:2e:28:da:48:43:06:51:25:0b:aa:3e:b1:
79:b9:10:34:14:c0:c7:ac:ca:c3:ef:22:07:93:ab:
c2:b9:ae:81:ee:13:82:b8:43:df:11:ab:3b:22:a0:
f8:d7:52:29:bb:e1:bc:23:73:42:1c:4d:88:05:e4:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:C1:F6:02:40:6E:56:AE:66:57:5C:60:6F:1D:F3:9F:D7:57:30
X509v3 Authority Key Identifier:
keyid:64:31:E9:60:CD:06:10:39:B3:B2:7F:D2:5D:41:60:77:1C:49:8B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4fd931-9f22-49f3-be57-e9daf79eb75e/1/ZDHpYM0GEDmzsn_SXUFgdxxJi6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ac:65:2f:06:b7:6c:18:dc:a6:4b:fc:30:69:0f:64:10:0f:
3a:9a:5c:04:f5:5a:38:47:b9:9a:28:18:58:75:2f:ec:0d:97:
56:37:2b:56:78:c1:de:a4:54:c2:ae:8d:50:86:13:ab:da:36:
c4:5f:55:ad:1c:4b:1e:d9:77:f8:71:7a:6e:9e:0b:ed:df:54:
42:6f:7c:de:58:ca:07:d3:08:90:f7:e6:2e:fb:10:d7:21:65:
1b:d4:1b:5d:a7:83:c9:7f:8f:8f:2d:55:b0:bc:18:93:f6:67:
0b:6b:7c:c8:e1:5d:eb:b6:16:94:8c:d9:dd:89:30:49:98:36:
d4:20:6d:96:22:8c:49:bb:84:54:37:c6:3b:cc:75:84:42:81:
81:f3:a2:1b:0e:c8:a9:3f:b3:94:cc:61:c7:c6:3b:b6:68:dc:
b4:40:19:bc:36:ca:ef:24:a2:3a:64:a2:f6:b2:9e:cb:ac:1b:
59:3e:9d:28:5b:6b:48:f7:2a:8d:21:b8:d9:36:39:e8:9e:44:
8c:c4:1c:0e:2d:80:80:b3:a8:25:c8:43:56:61:ea:ec:8a:e1:
c5:37:9b:26:f7:e5:89:f2:25:10:cd:2e:ae:93:f4:b6:de:5c:
f6:f3:b8:20:29:31:c6:1e:6b:6e:e9:23:41:33:cf:e9:ca:f7:
93:b0:20:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfL39+EDhfVq29HMUGBs+WCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzFlOTYwY2QwNjEwMzliM2IyN2ZkMjVkNDE2MDc3MWM0
OThiYWIwHhcNMjUwNzAyMTYwMjE1WhcNMjUwNzAzMTYwMjE1WjAzMTEwLwYDVQQD
EyhjMTgzYzFmNjAyNDA2ZTU2YWU2NjU3NWM2MDZmMWRmMzlmZDc1NzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslfgLpMjrmYHC5v7CGTbSSLRVkYz
jJGKv4kpTrzA5bLZhj3feuCJ1ksu5Nsop8FZZdJ+vYlwhS0XUhSzB2jdVtxvj92v
gS1et9HnPGzAd6T8gt4og923mjPUKQkBIC7w/YhGmDyaj2v0EiM1eT1SkxoRv9PB
jC7186xyIrfmvRuSMkcbbgOlInAfsI/5kDqYCyjbmsGIp7uVbwaSoPWUxqtX3wbY
0e7tdLkwOCLR8q/lRg5yXYz1GS1Hmwec+D29TsQ8SBcuKNpIQwZRJQuqPrF5uRA0
FMDHrMrD7yIHk6vCua6B7hOCuEPfEas7IqD411Ipu+G8I3NCHE2IBeT1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGDwfYCQG5WrmZXXGBvHfOf11cwMB8GA1UdIwQY
MBaAFGQx6WDNBhA5s7J/0l1BYHccSYurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTct
ZTlkYWY3OWViNzVlLzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZmQ5MzEtOWYyMi00OWYzLWJlNTctZTlkYWY3OWViNzVl
LzEvWkRIcFlNMEdFRG16c25fU1hVRmdkeHhKaTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaxlLwa3
bBjcpkv8MGkPZBAPOppcBPVaOEe5migYWHUv7A2XVjcrVnjB3qRUwq6NUIYTq9o2
xF9VrRxLHtl3+HF6bp4L7d9UQm983ljKB9MIkPfmLvsQ1yFlG9QbXaeDyX+Pjy1V
sLwYk/ZnC2t8yOFd67YWlIzZ3YkwSZg21CBtliKMSbuEVDfGO8x1hEKBgfOiGw7I
qT+zlMxhx8Y7tmjctEAZvDbK7ySiOmSi9rKey6wbWT6dKFtrSPcqjSG42TY56J5E
jMQcDi2AgLOoJchDVmHq7IrhxTebJvflifIlEM0urpP0tt5c9vO4ICkxxh5rbukj
QTPP6cr3k7Ag3g==
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:09:42 2025 by rpki-client