Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json)
Hash identifier: 2IOgxhngA3FF++Zi2hpyDS+dTUJylwKCs8D37sb1pbQ=
Subject key identifier: A7:4F:70:45:36:74:D9:82:4D:A4:7A:AE:26:22:98:C4:7E:6B:A6:96
Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Certificate serial: 0197B89035F1167526EE917E68F313CF4778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
Manifest number: 05F2
Signing time: Sat 28 Jun 2025 22:02:28 +0000
Manifest this update: Sat 28 Jun 2025 22:02:28 +0000
Manifest next update: Sun 29 Jun 2025 22:02:28 +0000
Files and hashes: 1: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: miuedQjkELUWXptVvebRAzQefI/iL6KHrvjDbxcCxi4=)
2: z_g_oyYscLU1IVMsubV8om2IHIM.roa (hash: TMMjkM/DLDsCF3bsXeBPNo5kbzaCJniVgP9Feba83Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:35:f1:16:75:26:ee:91:7e:68:f3:13:cf:47:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e
Validity
Not Before: Jun 28 22:02:28 2025 GMT
Not After : Jun 29 22:02:28 2025 GMT
Subject: CN=a74f70453674d9824da47aae262298c47e6ba696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:6e:ea:b4:11:62:87:14:d2:39:43:d0:26:
88:23:e2:a7:07:ec:b5:59:ee:23:91:98:6d:98:6c:
2f:e9:64:4f:2e:9f:67:28:e3:52:1c:35:47:50:93:
9f:84:2e:f2:aa:99:0e:5e:a4:52:5e:6d:9f:a4:71:
a2:9a:c8:c3:9d:3e:67:9b:0a:4c:4c:cd:94:08:46:
c7:30:63:27:4b:86:bd:98:81:b6:c9:80:f4:e0:67:
88:21:1e:44:4e:8a:e3:e1:39:92:e3:fc:24:47:2f:
3d:58:2a:5e:f4:ed:a9:9e:b5:91:d5:54:71:93:ef:
83:a2:34:ad:e1:08:82:a2:fe:cc:67:db:74:12:24:
63:31:b1:5c:07:61:38:11:d0:2d:1d:ec:e7:ce:47:
6c:b6:35:4c:d8:42:2e:2c:89:69:d5:e2:0b:ec:cf:
4b:ca:77:48:58:e0:9a:b9:c3:c2:6d:3a:46:0b:04:
3e:de:e4:c0:39:1e:69:be:c1:66:d4:3a:af:01:70:
ad:7d:fa:f2:4c:d3:11:39:18:b0:94:6b:e0:9d:aa:
ac:f0:e9:07:21:1e:6d:b6:92:3a:96:bc:0a:e6:f9:
f9:db:4f:46:15:2d:0a:62:11:9b:e4:14:92:13:9c:
ab:15:06:b9:42:32:6f:06:3a:05:1d:9a:07:3a:b2:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4F:70:45:36:74:D9:82:4D:A4:7A:AE:26:22:98:C4:7E:6B:A6:96
X509v3 Authority Key Identifier:
keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2c:d7:d1:bc:90:2e:e5:1b:b6:ed:24:03:2b:b6:97:94:e8:
01:ea:fd:be:4d:3d:e3:b4:07:96:6b:56:0e:85:5b:3c:e2:f7:
51:fd:34:dc:f0:b0:84:0a:f3:5c:e2:63:db:01:19:c9:5f:16:
34:df:53:4b:8c:2b:4c:90:61:ae:1a:9a:9b:ac:d8:89:96:98:
e7:a7:a3:9c:91:70:50:72:33:ef:3d:7e:e5:b8:4a:2e:ad:da:
7c:d2:f8:4b:bc:39:b7:61:01:35:27:70:e1:ea:3a:6f:c2:4d:
22:d0:46:2b:76:f7:c8:ff:74:23:71:fd:51:ef:7a:52:85:48:
9d:44:fc:ad:6d:8a:38:99:06:62:f2:e1:f6:99:ac:8e:c4:91:
bb:17:f1:5d:5c:ca:b2:ca:f7:32:05:71:83:31:4c:22:55:6e:
ac:2c:e2:ba:8e:1a:bb:15:ed:8f:a7:4d:78:9f:57:42:5b:7d:
c1:48:15:3b:58:58:10:07:8b:d0:e1:3c:9d:ae:4e:6b:a3:7c:
1a:5f:81:3d:dd:7c:18:9b:68:1a:7e:83:17:db:60:6b:01:54:
ba:21:81:71:e1:db:1e:bd:59:a6:ea:be:48:c1:a3:e1:03:9a:
51:4e:db:c3:5f:0d:c7:47:38:3e:61:2c:e5:a9:60:7b:c5:35:
09:a1:14:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kDXxFnUm7pF+aPMTz0d4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzdjMjgyYjA2OTdlZDA1NTRjODA1ZjUwMDBhYjEyYmEz
YjljN2UwHhcNMjUwNjI4MjIwMjI4WhcNMjUwNjI5MjIwMjI4WjAzMTEwLwYDVQQD
EyhhNzRmNzA0NTM2NzRkOTgyNGRhNDdhYWUyNjIyOThjNDdlNmJhNjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpxu6rQRYocU0jlD0CaII+KnB+y1
We4jkZhtmGwv6WRPLp9nKONSHDVHUJOfhC7yqpkOXqRSXm2fpHGimsjDnT5nmwpM
TM2UCEbHMGMnS4a9mIG2yYD04GeIIR5ETorj4TmS4/wkRy89WCpe9O2pnrWR1VRx
k++DojSt4QiCov7MZ9t0EiRjMbFcB2E4EdAtHeznzkdstjVM2EIuLIlp1eIL7M9L
yndIWOCaucPCbTpGCwQ+3uTAOR5pvsFm1DqvAXCtffryTNMRORiwlGvgnaqs8OkH
IR5ttpI6lrwK5vn5209GFS0KYhGb5BSSE5yrFQa5QjJvBjoFHZoHOrKiYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdPcEU2dNmCTaR6riYimMR+a6aWMB8GA1UdIwQY
MBaAFGfHwoKwaX7QVUyAX1AAqxK6O5x+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMt
MjgzNmFkMWMzMjFlLzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMtMjgzNmFkMWMzMjFl
LzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyzX0byQ
LuUbtu0kAyu2l5ToAer9vk0947QHlmtWDoVbPOL3Uf003PCwhArzXOJj2wEZyV8W
NN9TS4wrTJBhrhqam6zYiZaY56ejnJFwUHIz7z1+5bhKLq3afNL4S7w5t2EBNSdw
4eo6b8JNItBGK3b3yP90I3H9Ue96UoVInUT8rW2KOJkGYvLh9pmsjsSRuxfxXVzK
ssr3MgVxgzFMIlVurCziuo4auxXtj6dNeJ9XQlt9wUgVO1hYEAeL0OE8na5Oa6N8
Gl+BPd18GJtoGn6DF9tgawFUuiGBceHbHr1Zpuq+SMGj4QOaUU7bw18Nx0c4PmEs
5alge8U1CaEUNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:24 2025 by rpki-client