Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: 90O80trLxdF0ZMkDidfZ6ccQqgNJMarRfROvw0BKnjE=
Subject key identifier: 38:10:09:F7:66:91:8E:13:D8:FB:3C:25:A9:80:FC:8E:BC:84:02:5B
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0197B6A08D1D099BE49D556D2B52BD80F01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 12FB
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: IqJCZf7rFmKRUrKMVqLq8VXDeC2bozqsWjfCLk7r8JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8d:1d:09:9b:e4:9d:55:6d:2b:52:bd:80:f0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=381009f766918e13d8fb3c25a980fc8ebc84025b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:46:1f:d4:23:b8:39:ee:da:e4:86:80:d9:
fb:d2:07:50:72:3a:cd:0c:a5:46:be:4f:01:6e:21:
32:af:01:8b:f1:3e:05:9f:23:ec:7d:c0:ff:b2:d9:
00:cf:9c:4f:05:6c:1c:b4:62:bb:68:fc:b5:09:a5:
d1:c6:67:a5:03:10:c7:86:ea:a4:41:58:5d:6c:d6:
5b:9f:e1:fa:49:73:f3:d1:46:e4:82:51:bb:e7:ea:
e0:c2:4a:20:4d:9d:12:c6:f2:fc:11:cf:bd:ad:4a:
ca:b7:e1:3a:5a:82:e3:f4:d9:7d:bc:c6:48:67:4f:
ba:e6:ee:28:74:d6:fa:e9:e6:b7:8a:dc:56:d5:43:
94:46:cd:1a:b3:11:ad:4b:e9:81:fa:d8:02:3e:f2:
3f:a2:10:56:66:f4:0e:06:e2:c9:65:1a:8d:b5:d5:
da:65:f7:c2:d8:45:79:68:8b:db:79:39:cf:81:63:
fd:b0:f5:5a:ea:d1:3c:19:c0:c8:ca:9c:c9:6c:9e:
ae:bb:6a:45:82:84:1a:a1:22:c3:a9:6c:9e:6b:c5:
23:5e:b1:2b:87:41:b9:c4:bc:0f:54:ab:50:8c:91:
ec:38:ee:d1:f9:cf:11:1d:f8:b3:12:17:86:c0:46:
c3:d3:6f:cd:44:5d:f1:73:4a:1f:8b:bb:39:62:f0:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:09:F7:66:91:8E:13:D8:FB:3C:25:A9:80:FC:8E:BC:84:02:5B
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e5:01:05:42:93:e2:1c:e4:f1:97:60:c4:fc:d7:5e:df:8c:
83:7c:46:25:e4:71:8a:e3:66:7b:cd:82:25:8e:01:77:ed:28:
bb:6d:c2:2f:02:f8:3b:ac:2f:33:42:2f:3d:0b:ab:71:3a:e6:
84:15:a2:92:8c:1f:bd:05:d7:4e:5d:3f:1a:e6:61:e0:36:d3:
d0:67:53:dc:57:12:6b:a2:6b:6a:fb:0e:ed:fe:36:e1:6d:ac:
de:5a:d1:1c:19:bf:12:c9:96:76:b0:1b:75:12:9e:39:ee:1c:
7e:1c:2b:fc:cc:d8:d6:0a:4a:18:53:42:d1:3c:aa:90:e7:a1:
e6:59:78:b5:c4:9a:ad:e3:af:60:61:06:b1:e8:84:f0:6a:cd:
a5:55:75:75:55:46:74:2b:13:e1:b2:81:0b:51:98:6a:ec:d3:
db:cf:84:42:cb:76:a2:2a:e8:29:5d:86:3b:48:69:33:e9:da:
31:a4:98:39:75:4b:4d:35:a9:23:9b:b5:d7:14:88:0a:04:ef:
e4:b8:ec:e9:d3:0d:87:37:d2:d2:01:22:ce:d6:1d:ae:0b:98:
8d:ea:cb:72:a9:a5:55:13:94:6d:69:cc:51:79:62:31:67:f3:
7d:b7:09:52:38:c5:43:ef:f5:73:c8:dc:87:92:ee:09:18:16:
d5:ca:23:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oI0dCZvknVVtK1K9gPAdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmY1NWQzNzcxMjdmMjhjZTI2Yjc4ZmQ4M2JlY2Y0MWJl
Y2FkNGIwHhcNMjUwNjI4MTMwMTA0WhcNMjUwNjI5MTMwMTA0WjAzMTEwLwYDVQQD
EygzODEwMDlmNzY2OTE4ZTEzZDhmYjNjMjVhOTgwZmM4ZWJjODQwMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdhGH9QjuDnu2uSGgNn70gdQcjrN
DKVGvk8BbiEyrwGL8T4FnyPsfcD/stkAz5xPBWwctGK7aPy1CaXRxmelAxDHhuqk
QVhdbNZbn+H6SXPz0UbkglG75+rgwkogTZ0SxvL8Ec+9rUrKt+E6WoLj9Nl9vMZI
Z0+65u4odNb66ea3itxW1UOURs0asxGtS+mB+tgCPvI/ohBWZvQOBuLJZRqNtdXa
ZffC2EV5aIvbeTnPgWP9sPVa6tE8GcDIypzJbJ6uu2pFgoQaoSLDqWyea8UjXrEr
h0G5xLwPVKtQjJHsOO7R+c8RHfizEheGwEbD02/NRF3xc0ofi7s5YvBLOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgQCfdmkY4T2Ps8JamA/I68hAJbMB8GA1UdIwQY
MBaAFGYvVdN3En8ozia3j9g77PQb7K1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgt
OGJlMTQ2MjUzMzU2LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgtOGJlMTQ2MjUzMzU2
LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOUBBUKT
4hzk8ZdgxPzXXt+Mg3xGJeRxiuNme82CJY4Bd+0ou23CLwL4O6wvM0IvPQurcTrm
hBWikowfvQXXTl0/GuZh4DbT0GdT3FcSa6JravsO7f424W2s3lrRHBm/EsmWdrAb
dRKeOe4cfhwr/MzY1gpKGFNC0TyqkOeh5ll4tcSareOvYGEGseiE8GrNpVV1dVVG
dCsT4bKBC1GYauzT28+EQst2oiroKV2GO0hpM+naMaSYOXVLTTWpI5u11xSICgTv
5Ljs6dMNhzfS0gEiztYdrguYjerLcqmlVROUbWnMUXliMWfzfbcJUjjFQ+/1c8jc
h5LuCRgW1coj5w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:16 2025 by rpki-client