
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
File: ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft (raw, json)
Hash identifier: ZJ4toFubZMXRGbMGNJY4ew9k3Q1EUzJF3axiHbePo88=
Subject key identifier: 63:55:73:C7:51:79:14:53:A8:1A:77:A3:47:F3:BE:83:AF:6C:8F:44
Authority key identifier: 64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
Certificate issuer: /CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Certificate serial: 0197B6A10BCEA7B5A0CAFB771A5EB0F63BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
Manifest number: 14BD
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: A3dj5P_xKMDJjc-IVzSyCe735rY.roa (hash: +ztHeCTdZHE/HgThAQ7CjX7HR6VG5JPZ0GRqUwHJv5U=)
2: ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl (hash: ecG5ZqZ9236Dn23ctzbbvhRJi8WljVmE1IJmgn8y90A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0b:ce:a7:b5:a0:ca:fb:77:1a:5e:b0:f6:3b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647530b4fa8899a30bb2e65b93f0119fda9bc05d
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=635573c751791453a81a77a347f3be83af6c8f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:aa:57:c6:c4:cb:32:29:96:e0:59:8f:9e:
65:15:f0:1b:6f:0b:d4:0d:a6:5d:70:4a:eb:4f:b0:
49:50:9f:96:f3:a5:fe:a1:1f:22:3e:a4:f4:02:9e:
ab:0e:d0:ba:f2:a5:c0:be:15:ae:af:6e:21:99:75:
da:44:cb:ba:dd:aa:4b:f0:47:fb:b6:06:68:26:ef:
53:d4:6a:16:a6:71:bd:30:14:5d:8e:58:8f:05:b3:
a6:10:b6:42:75:a1:1e:60:7f:da:9b:24:5a:da:0c:
19:22:ea:74:92:76:69:65:1c:9f:24:b0:11:14:72:
76:bc:73:27:68:57:3d:cc:00:45:1f:12:41:b4:de:
da:4f:b8:0e:7f:2b:12:ff:3e:11:eb:f5:30:25:2f:
db:f6:c6:f5:f2:01:0a:df:c0:d7:48:99:63:46:4c:
f5:59:ac:2b:d8:6c:8e:fb:52:6c:66:c6:64:e4:26:
5a:98:c1:34:69:f7:83:c3:22:44:ec:fa:6e:df:c3:
83:00:8b:69:b8:95:17:e4:2a:cc:56:0e:e8:83:2b:
f7:cb:df:80:af:c4:62:2c:55:b4:55:65:57:0e:6f:
67:d5:d0:b9:07:f5:5c:9f:94:e5:61:9c:c7:fe:b5:
74:e9:ea:53:e3:87:e4:b3:50:23:da:80:88:a4:06:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:55:73:C7:51:79:14:53:A8:1A:77:A3:47:F3:BE:83:AF:6C:8F:44
X509v3 Authority Key Identifier:
keyid:64:75:30:B4:FA:88:99:A3:0B:B2:E6:5B:93:F0:11:9F:DA:9B:C0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUwtPqImaMLsuZbk_ARn9qbwF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/57f512-a29f-44ed-a7a1-0e7cbbcc62d0/1/ZHUwtPqImaMLsuZbk_ARn9qbwF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7e:ef:68:05:14:2b:d4:cb:c2:38:4c:9c:5c:0d:4f:4b:a9:
81:92:84:b4:19:a2:f2:6b:cf:81:d5:76:23:b9:a8:f1:0f:95:
3a:64:1b:72:fd:de:42:52:60:cd:c5:a8:fd:26:9f:a5:97:0c:
2f:e6:21:8d:8f:5f:50:8b:cd:95:13:d4:ff:e4:1f:f1:e3:df:
7a:d9:08:d0:0a:a5:4f:57:b9:44:7a:88:39:25:4d:a9:9f:2e:
5b:5b:1f:c1:5f:6e:dc:09:4e:86:ff:b0:4d:22:9f:10:86:17:
e9:78:66:e4:fd:00:62:96:c4:e2:a1:da:b7:b6:e1:47:91:65:
e6:5e:aa:82:a7:7d:be:ab:40:f1:87:8a:54:35:d5:fe:2d:59:
fe:31:e8:36:8a:3a:de:41:e5:48:57:a8:3e:8b:36:3b:c1:45:
95:a0:1e:df:25:7f:8e:29:93:a5:52:6e:81:c1:15:3a:6c:b2:
3b:0e:64:4a:3b:19:a6:17:38:9b:5b:da:7b:1e:13:02:12:4b:
09:f0:11:2f:a7:50:55:17:6d:38:56:11:32:dc:1b:d8:08:5b:
f9:fb:e9:b3:62:92:91:14:86:14:20:38:71:f1:63:89:bd:9a:
a9:a2:06:44:31:37:8c:d3:1b:67:06:77:7f:ab:06:61:f3:42:
ec:60:d8:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oQvOp7Wgyvt3Gl6w9jvqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzUzMGI0ZmE4ODk5YTMwYmIyZTY1YjkzZjAxMTlmZGE5
YmMwNWQwHhcNMjUwNjI4MTMwMTM3WhcNMjUwNjI5MTMwMTM3WjAzMTEwLwYDVQQD
Eyg2MzU1NzNjNzUxNzkxNDUzYTgxYTc3YTM0N2YzYmU4M2FmNmM4ZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvyqV8bEyzIpluBZj55lFfAbbwvU
DaZdcErrT7BJUJ+W86X+oR8iPqT0Ap6rDtC68qXAvhWur24hmXXaRMu63apL8Ef7
tgZoJu9T1GoWpnG9MBRdjliPBbOmELZCdaEeYH/amyRa2gwZIup0knZpZRyfJLAR
FHJ2vHMnaFc9zABFHxJBtN7aT7gOfysS/z4R6/UwJS/b9sb18gEK38DXSJljRkz1
Wawr2GyO+1JsZsZk5CZamME0afeDwyJE7Ppu38ODAItpuJUX5CrMVg7ogyv3y9+A
r8RiLFW0VWVXDm9n1dC5B/Vcn5TlYZzH/rV06epT44fks1Aj2oCIpAZXUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNVc8dReRRTqBp3o0fzvoOvbI9EMB8GA1UdIwQY
MBaAFGR1MLT6iJmjC7LmW5PwEZ/am8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEt
MGU3Y2JiY2M2MmQwLzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81N2Y1MTItYTI5Zi00NGVkLWE3YTEtMGU3Y2JiY2M2MmQw
LzEvWkhVd3RQcUltYU1Mc3VaYmtfQVJuOXFid0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc37vaAUU
K9TLwjhMnFwNT0upgZKEtBmi8mvPgdV2I7mo8Q+VOmQbcv3eQlJgzcWo/SafpZcM
L+YhjY9fUIvNlRPU/+Qf8ePfetkI0AqlT1e5RHqIOSVNqZ8uW1sfwV9u3AlOhv+w
TSKfEIYX6Xhm5P0AYpbE4qHat7bhR5Fl5l6qgqd9vqtA8YeKVDXV/i1Z/jHoNoo6
3kHlSFeoPos2O8FFlaAe3yV/jimTpVJugcEVOmyyOw5kSjsZphc4m1vaex4TAhJL
CfARL6dQVRdtOFYRMtwb2Ahb+fvps2KSkRSGFCA4cfFjib2aqaIGRDE3jNMbZwZ3
f6sGYfNC7GDYWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:44 2025 by rpki-client