Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: XP+2kmIXTSaLiQPTSvLCDiktfmP8KSpKXSM8upfFQ9k=
Subject key identifier: 3A:3D:9C:F0:4F:7B:15:91:E3:AD:F5:4F:39:17:A0:92:6A:5B:EE:CA
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 0197B70EDBAACBAB8A19929C4317292E0D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: pdRxuIAzJbZVNtTojwNoTsGO7zJ0kiorja+HxA1TlPY=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:db:aa:cb:ab:8a:19:92:9c:43:17:29:2e:0d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=3a3d9cf04f7b1591e3adf54f3917a0926a5beeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a3:ba:a0:9e:73:29:59:55:b8:f6:7c:d6:29:
bc:60:9d:6f:7b:99:dd:e6:49:0c:46:2b:3a:61:94:
5c:1a:fc:7a:37:94:7d:2e:cc:bb:51:d0:69:73:a8:
ee:1a:fc:f4:65:a7:29:f1:ce:49:8f:dd:7c:85:21:
ca:65:0b:50:81:4c:09:59:c0:8d:f6:b7:b6:e6:f0:
4d:a2:2f:d5:b6:ec:23:63:a7:77:fa:70:e7:62:82:
59:04:02:9d:b1:8f:1c:ee:74:51:e8:2c:d1:44:b6:
7d:9a:d9:7a:d2:e8:4f:30:38:03:2b:39:3e:df:87:
c7:70:f7:71:8c:f0:50:81:55:e8:2f:2e:92:7c:c5:
fc:e9:28:23:a9:75:8f:bf:7d:e8:c7:7b:95:01:fe:
f4:f8:16:13:61:b7:b6:98:dc:d1:9f:c6:9f:63:0f:
d1:38:c6:66:fa:a4:74:95:36:64:b0:cc:62:89:d2:
9f:1a:3c:c2:28:6e:80:bb:ac:98:fa:c5:29:6f:ec:
ba:64:cc:c8:32:ab:20:e2:c8:c7:58:bb:36:69:05:
1b:a2:38:b3:52:8b:05:39:f8:93:1b:06:02:4a:bf:
83:d2:fb:8a:fe:41:8d:a2:a4:a3:d1:03:80:fd:be:
64:07:88:3b:f6:90:89:ec:65:9f:49:e6:f4:25:69:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3D:9C:F0:4F:7B:15:91:E3:AD:F5:4F:39:17:A0:92:6A:5B:EE:CA
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e5:1d:0c:88:bc:bd:ab:ca:ca:ad:83:4b:95:64:15:fb:8f:
3d:5a:24:bc:7a:d5:27:51:6c:86:ea:6b:ea:a7:13:b7:50:ad:
3a:b2:8b:d6:9e:61:3c:ce:5d:86:6a:e9:48:31:ac:fe:60:ee:
db:a5:e1:f1:25:37:5b:c5:b3:0d:56:b5:25:cf:14:31:00:0b:
eb:8e:63:d2:f4:fd:3e:a2:22:d3:24:cb:b4:b3:b8:63:91:b2:
0a:22:29:a7:d3:e2:99:cd:d7:91:a4:01:a5:93:c6:f8:7c:5a:
d4:56:e4:54:b2:73:08:86:c1:3c:7b:e6:ef:df:77:43:fb:9d:
b6:d3:70:40:93:84:eb:48:6a:40:35:65:dd:2e:ad:ba:d6:00:
86:45:b1:28:1b:09:e3:a9:95:95:06:79:62:a1:8c:3e:bf:10:
af:2c:a0:8c:fd:02:92:cd:0f:69:a7:90:ad:44:b6:9f:cd:41:
18:e5:2f:c1:9f:8d:b7:a2:42:bc:46:3e:d6:28:14:0d:b9:7c:
3b:02:d9:b8:9a:ce:8a:52:2d:d5:2a:63:a2:93:09:66:fd:9a:
c5:59:e3:35:f0:ab:da:bf:26:db:58:57:50:88:83:73:65:48:
0b:a6:ce:3f:38:de:33:04:7e:63:63:98:fa:53:61:85:34:1e:
ad:d6:b5:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dtuqy6uKGZKcQxcpLg0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1
NjY2YWIwHhcNMjUwNjI4MTUwMTMzWhcNMjUwNjI5MTUwMTMzWjAzMTEwLwYDVQQD
EygzYTNkOWNmMDRmN2IxNTkxZTNhZGY1NGYzOTE3YTA5MjZhNWJlZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKO6oJ5zKVlVuPZ81im8YJ1ve5nd
5kkMRis6YZRcGvx6N5R9Lsy7UdBpc6juGvz0Zacp8c5Jj918hSHKZQtQgUwJWcCN
9re25vBNoi/VtuwjY6d3+nDnYoJZBAKdsY8c7nRR6CzRRLZ9mtl60uhPMDgDKzk+
34fHcPdxjPBQgVXoLy6SfMX86SgjqXWPv33ox3uVAf70+BYTYbe2mNzRn8afYw/R
OMZm+qR0lTZksMxiidKfGjzCKG6Au6yY+sUpb+y6ZMzIMqsg4sjHWLs2aQUbojiz
UosFOfiTGwYCSr+D0vuK/kGNoqSj0QOA/b5kB4g79pCJ7GWfSeb0JWmbgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDo9nPBPexWR4631TzkXoJJqW+7KMB8GA1UdIwQY
MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt
MzM2ZTViM2RkMDcxLzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx
LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+UdDIi8
vavKyq2DS5VkFfuPPVokvHrVJ1Fshupr6qcTt1CtOrKL1p5hPM5dhmrpSDGs/mDu
26Xh8SU3W8WzDVa1Jc8UMQAL645j0vT9PqIi0yTLtLO4Y5GyCiIpp9Pimc3XkaQB
pZPG+Hxa1FbkVLJzCIbBPHvm7993Q/udttNwQJOE60hqQDVl3S6tutYAhkWxKBsJ
46mVlQZ5YqGMPr8QryygjP0Cks0PaaeQrUS2n81BGOUvwZ+Nt6JCvEY+1igUDbl8
OwLZuJrOilIt1SpjopMJZv2axVnjNfCr2r8m21hXUIiDc2VIC6bOPzjeMwR+Y2OY
+lNhhTQerda1wg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:33 2025 by rpki-client