Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: vUcjsCXZE9Gv7AKyQk22OcW8+yTJ1XNWf/n5MzyRW38=
Subject key identifier: 54:B1:E8:D1:CC:85:A0:B2:31:6C:CB:4B:B2:32:3D:67:64:1D:BE:41
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 0197B6A0597B10C3D08FBC336F699EDF732F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 0FB3
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: V2EVjCh2XvTTuPUY0Ak-ADU0N0o.roa (hash: VWCe010VtFOUbqTmIo3pVm3sseFcd/9FPMczSAveexo=)
2: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: wwjvWHrpMRklrhAJptH/xR+DwLi+24PwV6Ut9CG/Ns4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:59:7b:10:c3:d0:8f:bc:33:6f:69:9e:df:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=54b1e8d1cc85a0b2316ccb4bb2323d67641dbe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:a2:d1:37:e8:6d:cf:a3:40:fe:2b:cc:ea:
b6:7f:6e:54:e1:34:77:a9:87:09:53:f0:40:ed:b5:
75:8b:66:42:08:8f:38:ba:3f:24:fd:33:c3:96:84:
6c:de:f2:c7:92:44:a9:6c:f4:fb:7d:b2:d4:61:19:
e8:e6:e0:cc:7c:42:81:08:3b:1a:70:f1:45:a9:d5:
b3:8a:25:44:18:e5:68:54:0a:7b:e1:47:3e:86:43:
fa:22:fd:f7:4e:12:2c:a1:a3:ad:4a:9a:c6:5e:df:
30:0d:ec:e9:c7:5f:dd:4d:b2:9c:70:46:7e:a7:13:
f6:3f:40:d3:f7:70:87:af:e8:82:81:cd:08:b7:1e:
e4:09:48:01:c0:80:bd:49:5e:c1:80:fa:3c:c2:b1:
c9:d2:c0:4f:7b:f3:67:3d:bb:63:2a:60:ca:1c:f8:
39:bf:6d:b3:03:93:6f:ee:0f:58:29:11:2e:6d:f4:
91:2b:03:b4:57:30:dd:4c:96:7c:8f:11:74:c3:23:
42:34:dc:ce:79:74:2a:67:33:2f:b6:c3:d4:7d:55:
1a:11:5e:51:da:1f:76:b0:21:a8:c9:ab:db:05:26:
31:db:e9:b3:99:fb:f0:91:50:fa:c6:57:03:cf:2c:
64:4e:58:c5:ad:e6:30:3a:ef:f7:38:14:85:fa:48:
c3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:E8:D1:CC:85:A0:B2:31:6C:CB:4B:B2:32:3D:67:64:1D:BE:41
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:2d:1b:61:9a:0b:43:f4:e7:77:db:df:a7:74:bf:50:14:
ff:74:9a:63:dc:b7:95:d8:a1:4a:97:dd:0f:29:6f:cc:52:43:
e1:f4:6f:81:f7:5f:3a:3d:10:9c:e5:16:07:88:39:ba:4a:0b:
eb:f4:bf:32:20:17:d3:ee:f7:2f:42:2b:10:40:4f:45:42:7e:
50:93:de:7f:24:33:c9:16:d6:74:fd:9b:39:aa:ef:22:04:a6:
d3:c7:f3:60:85:3c:07:48:a6:d1:a9:7c:a1:73:09:e8:19:cc:
30:e1:1d:cb:66:c3:49:0f:43:55:66:9a:28:13:33:46:00:da:
08:0c:a9:10:78:68:51:20:aa:28:3c:75:b8:72:f8:7e:c8:7b:
a9:cf:7f:97:e6:1e:5c:a6:d4:a1:2d:d9:67:d2:82:ea:1a:be:
83:cb:47:8d:ad:28:37:9e:de:5f:9d:56:20:d5:9d:fe:36:92:
92:5d:91:3c:b9:3b:b3:0f:c6:4c:f8:6d:cc:00:83:54:f1:41:
c1:1a:fe:4f:52:5a:5a:d8:fb:8b:ff:b9:27:65:90:65:64:0a:
5e:7c:eb:0f:fa:96:48:b3:45:5f:6b:d1:46:82:18:80:38:65:
29:69:47:12:09:65:f0:6e:ca:47:29:58:dd:f2:c8:02:1a:c5:
61:59:88:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFl7EMPQj7wzb2me33MvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz
NWUyMmIwHhcNMjUwNjI4MTMwMDUxWhcNMjUwNjI5MTMwMDUxWjAzMTEwLwYDVQQD
Eyg1NGIxZThkMWNjODVhMGIyMzE2Y2NiNGJiMjMyM2Q2NzY0MWRiZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Ci0Tfobc+jQP4rzOq2f25U4TR3
qYcJU/BA7bV1i2ZCCI84uj8k/TPDloRs3vLHkkSpbPT7fbLUYRno5uDMfEKBCDsa
cPFFqdWziiVEGOVoVAp74Uc+hkP6Iv33ThIsoaOtSprGXt8wDezpx1/dTbKccEZ+
pxP2P0DT93CHr+iCgc0Itx7kCUgBwIC9SV7BgPo8wrHJ0sBPe/NnPbtjKmDKHPg5
v22zA5Nv7g9YKREubfSRKwO0VzDdTJZ8jxF0wyNCNNzOeXQqZzMvtsPUfVUaEV5R
2h92sCGoyavbBSYx2+mzmfvwkVD6xlcDzyxkTljFreYwOu/3OBSF+kjD4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSx6NHMhaCyMWzLS7IyPWdkHb5BMB8GA1UdIwQY
MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt
MWE4MGEyZjdkN2VhLzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh
LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJgtG2Ga
C0P053fb36d0v1AU/3SaY9y3ldihSpfdDylvzFJD4fRvgfdfOj0QnOUWB4g5ukoL
6/S/MiAX0+73L0IrEEBPRUJ+UJPefyQzyRbWdP2bOarvIgSm08fzYIU8B0im0al8
oXMJ6BnMMOEdy2bDSQ9DVWaaKBMzRgDaCAypEHhoUSCqKDx1uHL4fsh7qc9/l+Ye
XKbUoS3ZZ9KC6hq+g8tHja0oN57eX51WINWd/jaSkl2RPLk7sw/GTPhtzACDVPFB
wRr+T1JaWtj7i/+5J2WQZWQKXnzrD/qWSLNFX2vRRoIYgDhlKWlHEgll8G7KRylY
3fLIAhrFYVmISA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:06 2025 by rpki-client