Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
File: ZePmyEfHm7BarCTUF4F41vfARIU.mft (raw, json)
Hash identifier: bp2nmkxnhGMMEIcbeKzbaAdxiEox8tbW1EwX+lvleV0=
Subject key identifier: 8C:6E:FC:CE:E6:80:E3:62:97:11:A5:CA:59:25:44:09:48:2A:E8:BE
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial: 0197B7EAD7ADC4F8DAA2C0B622B5FF358041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
Manifest number: 0253
Signing time: Sat 28 Jun 2025 19:01:50 +0000
Manifest this update: Sat 28 Jun 2025 19:01:50 +0000
Manifest next update: Sun 29 Jun 2025 19:01:50 +0000
Files and hashes: 1: ZePmyEfHm7BarCTUF4F41vfARIU.crl (hash: pGF27HoehKskO1RABlqL1RHIEB0xrEJLrKv1gmt6LLU=)
2: _G6b2YObaO8vXwxmRAdxtdM520E.roa (hash: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d7:ad:c4:f8:da:a2:c0:b6:22:b5:ff:35:80:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Validity
Not Before: Jun 28 19:01:50 2025 GMT
Not After : Jun 29 19:01:50 2025 GMT
Subject: CN=8c6efccee680e3629711a5ca59254409482ae8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:28:4f:57:63:93:0c:7f:36:16:88:91:1e:
f0:6d:8d:a4:e4:43:b1:42:65:6a:eb:84:7a:a5:2c:
e2:1a:8f:17:b5:97:e9:bf:4c:35:6b:80:e3:63:57:
c6:b7:10:ea:94:a8:64:04:25:10:84:46:a7:df:07:
8f:45:76:8d:a1:09:ba:2f:60:55:38:f1:28:9d:5a:
18:02:6c:fe:4a:f3:76:3f:f3:24:68:77:cb:f2:87:
f8:ab:09:67:38:2e:64:a7:cf:ca:1b:62:12:4e:71:
35:c4:ff:b7:20:91:92:c1:42:3a:bf:5c:bc:4a:1c:
5f:e9:e4:e9:10:c5:8b:d7:8e:b4:33:bd:15:e8:c1:
24:06:93:1d:29:80:55:af:50:44:3a:98:98:20:92:
41:fe:22:c3:42:56:29:a6:90:68:e1:54:dc:b8:2d:
a0:59:b9:38:4a:7d:da:d0:03:2f:35:0f:d2:e3:a8:
4d:99:71:9f:73:e0:65:b7:44:32:08:a2:14:09:52:
73:28:f0:b6:41:82:3f:41:38:27:7b:37:29:b1:c7:
0e:94:64:b4:bb:12:fd:01:c9:7f:fd:f0:97:56:70:
59:0b:08:65:09:bd:02:09:c2:7a:1d:ae:f7:92:3c:
57:02:5a:34:9c:c1:b2:48:a0:1e:f1:fc:15:c4:8e:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:FC:CE:E6:80:E3:62:97:11:A5:CA:59:25:44:09:48:2A:E8:BE
X509v3 Authority Key Identifier:
keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b6:a4:6f:63:b1:fe:10:ec:c5:9c:e5:20:d1:3d:50:cd:1c:
a3:fa:19:b4:18:60:0c:2a:2b:67:d6:60:90:b7:95:c4:fc:8e:
9f:02:a1:6d:f6:8b:bb:0c:e7:44:b4:2c:3c:b9:cd:e3:6b:07:
12:74:e1:1b:56:52:45:f4:8d:5e:61:2e:0f:d5:c5:04:33:13:
01:e5:ef:25:94:6e:10:38:62:9f:e7:4d:dd:a0:c0:0a:ea:ea:
eb:62:cb:a2:ed:69:44:eb:be:88:0c:f7:bb:cc:b6:a0:1b:b7:
43:9e:d2:96:39:a0:9b:af:3f:60:cc:ed:3c:1a:6b:57:f0:d4:
58:1a:1f:87:cf:2e:65:85:88:32:14:e9:58:24:94:b1:14:1f:
2f:2a:45:07:f1:04:e1:cd:ef:97:f2:32:fa:47:c1:e2:6a:79:
22:ff:cd:de:48:45:f3:0f:d1:0f:94:54:97:b8:fb:42:64:ee:
a7:61:c4:ab:61:e8:31:88:27:12:b3:ad:3a:32:15:dd:af:bc:
a8:c8:ae:2d:25:bd:5a:72:25:08:7a:2b:b3:fb:2f:0f:c0:8c:
e3:b6:2f:35:ef:cb:bf:3e:6b:70:bb:7e:28:98:16:f1:0e:de:
44:81:52:93:72:82:88:c7:79:93:c9:4c:05:26:23:ad:e8:28:
72:c1:dd:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36tetxPjaosC2IrX/NYBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTNlNmM4NDdjNzliYjA1YWFjMjRkNDE3ODE3OGQ2Zjdj
MDQ0ODUwHhcNMjUwNjI4MTkwMTUwWhcNMjUwNjI5MTkwMTUwWjAzMTEwLwYDVQQD
Eyg4YzZlZmNjZWU2ODBlMzYyOTcxMWE1Y2E1OTI1NDQwOTQ4MmFlOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhQoT1djkwx/NhaIkR7wbY2k5EOx
QmVq64R6pSziGo8XtZfpv0w1a4DjY1fGtxDqlKhkBCUQhEan3wePRXaNoQm6L2BV
OPEonVoYAmz+SvN2P/MkaHfL8of4qwlnOC5kp8/KG2ISTnE1xP+3IJGSwUI6v1y8
Shxf6eTpEMWL1460M70V6MEkBpMdKYBVr1BEOpiYIJJB/iLDQlYpppBo4VTcuC2g
Wbk4Sn3a0AMvNQ/S46hNmXGfc+Blt0QyCKIUCVJzKPC2QYI/QTgnezcpsccOlGS0
uxL9Acl//fCXVnBZCwhlCb0CCcJ6Ha73kjxXAlo0nMGySKAe8fwVxI4bswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxu/M7mgONilxGlylklRAlIKui+MB8GA1UdIwQY
MBaAFGXj5shHx5uwWqwk1BeBeNb3wESFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVQbXlFZkhtN0JhckNUVUY0RjQxdmZBUklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hMzgxMDAtYzc2MC00OGI4LThiM2Yt
MmY3YmY3MDRmNzRhLzEvWmVQbXlFZkhtN0JhckNUVUY0RjQxdmZBUklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hMzgxMDAtYzc2MC00OGI4LThiM2YtMmY3YmY3MDRmNzRh
LzEvWmVQbXlFZkhtN0JhckNUVUY0RjQxdmZBUklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7akb2Ox
/hDsxZzlINE9UM0co/oZtBhgDCorZ9ZgkLeVxPyOnwKhbfaLuwznRLQsPLnN42sH
EnThG1ZSRfSNXmEuD9XFBDMTAeXvJZRuEDhin+dN3aDACurq62LLou1pROu+iAz3
u8y2oBu3Q57Sljmgm68/YMztPBprV/DUWBofh88uZYWIMhTpWCSUsRQfLypFB/EE
4c3vl/Iy+kfB4mp5Iv/N3khF8w/RD5RUl7j7QmTup2HEq2HoMYgnErOtOjIV3a+8
qMiuLSW9WnIlCHors/svD8CM47YvNe/Lvz5rcLt+KJgW8Q7eRIFSk3KCiMd5k8lM
BSYjregocsHdUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:18 2025 by rpki-client