Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier: NZhIYNkuGHj2DuEZ8dUkLlBEhsAxAD08ULAJyd5CnR8=
Subject key identifier: C1:4B:59:81:40:34:F6:4D:BE:FB:3B:9A:DE:11:93:5B:89:B1:3E:3B
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial: 0197B6D76B0D49082466BC905BA4E983A672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number: 1529
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: bQCcjhs7ELGPf+X/5vteafSXO2ggBlp5RmpPggQ1nEk=)
2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6b:0d:49:08:24:66:bc:90:5b:a4:e9:83:a6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=c14b59814034f64dbefb3b9ade11935b89b13e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:1e:33:91:ea:3c:65:7a:78:e4:67:a7:57:
55:93:cb:76:ea:42:db:ad:a9:e8:23:b4:32:3a:02:
ed:b8:70:b0:41:ed:ce:ee:d4:d7:f3:69:47:c0:54:
b7:41:97:e3:90:0a:a8:be:95:67:2c:9b:90:a6:aa:
22:00:5c:6b:52:b0:46:26:7c:9a:19:72:59:96:ab:
b6:ec:88:d5:6d:22:d4:9e:a0:bb:9b:eb:a0:86:e3:
b0:c8:f1:c9:b6:9b:c0:37:ff:0a:47:6c:57:fa:4f:
49:c9:e2:29:8b:0c:b2:a0:c3:e2:18:6b:e0:47:2f:
6f:e2:4c:f5:f7:ab:d2:e2:76:ea:05:f2:e1:57:47:
32:87:e8:7d:a3:e8:98:30:ac:4b:a8:14:05:9a:1f:
ad:1a:9d:55:2d:af:74:d3:73:4f:4d:b3:52:5a:29:
ad:0b:a4:15:c1:f5:ee:7a:08:bf:68:29:bf:b5:fe:
fc:e8:39:89:b1:f7:6f:a8:c1:6d:22:93:36:17:73:
03:97:de:c3:f6:e5:ef:f4:b9:00:75:d8:e8:cb:a0:
8d:4e:29:b4:46:c1:92:f1:bd:4e:eb:a5:09:97:aa:
83:0d:05:b7:32:72:82:dd:80:f9:f0:5a:13:1f:ba:
de:2b:71:13:77:69:73:00:83:68:88:d8:04:a5:89:
b8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4B:59:81:40:34:F6:4D:BE:FB:3B:9A:DE:11:93:5B:89:B1:3E:3B
X509v3 Authority Key Identifier:
keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0a:09:1d:e9:c8:83:bc:35:32:21:a8:df:14:e9:2a:79:d2:
61:61:4c:9c:af:c9:b4:a7:ae:73:76:f0:b2:6f:e3:7e:7d:86:
b3:f3:38:30:7a:5a:3a:9e:5b:54:f3:22:30:91:c6:f7:b4:b7:
5f:f8:54:fb:c3:8e:95:ad:bb:20:b7:bd:8f:8c:01:dc:e5:cb:
b8:f0:20:c5:ae:dd:b9:4f:70:df:82:10:d0:ec:dd:bf:29:fe:
90:a9:b4:cd:7c:49:a8:c9:f8:4a:cc:42:02:53:c5:4c:6a:a5:
59:8e:86:84:80:ea:33:62:42:2b:d7:62:4e:74:29:9f:a8:0a:
28:6f:8d:b3:e1:94:9c:99:0e:80:d6:55:42:e0:a9:19:44:07:
01:dc:66:7f:e9:a8:a8:bf:a6:a3:9f:e8:b8:a4:8d:ed:45:18:
c7:8e:18:9b:43:72:c4:e7:d0:69:06:16:f1:58:52:f1:92:96:
5c:a5:75:f4:95:ef:4d:d3:4e:e4:48:8c:c3:f1:01:4d:3f:2d:
ca:e5:f2:fe:d5:36:f6:c6:67:fb:a5:cb:92:82:64:23:4f:5e:
54:ff:ea:84:fb:cd:85:4d:e8:80:1e:e9:c7:e6:61:83:2f:93:
be:e8:99:cb:71:40:55:33:e9:c4:54:3e:3e:64:fb:0d:fd:dc:
e6:79:01:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212sNSQgkZryQW6Tpg6ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NmQ5N2NlYjg0ZTljNjE2YmZlNmQ5MzU3NmNjMzNiYmY0
YjYzZWYwHhcNMjUwNjI4MTQwMTAwWhcNMjUwNjI5MTQwMTAwWjAzMTEwLwYDVQQD
EyhjMTRiNTk4MTQwMzRmNjRkYmVmYjNiOWFkZTExOTM1Yjg5YjEzZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7oeM5HqPGV6eORnp1dVk8t26kLb
ranoI7QyOgLtuHCwQe3O7tTX82lHwFS3QZfjkAqovpVnLJuQpqoiAFxrUrBGJnya
GXJZlqu27IjVbSLUnqC7m+ughuOwyPHJtpvAN/8KR2xX+k9JyeIpiwyyoMPiGGvg
Ry9v4kz196vS4nbqBfLhV0cyh+h9o+iYMKxLqBQFmh+tGp1VLa9003NPTbNSWimt
C6QVwfXuegi/aCm/tf786DmJsfdvqMFtIpM2F3MDl97D9uXv9LkAddjoy6CNTim0
RsGS8b1O66UJl6qDDQW3MnKC3YD58FoTH7reK3ETd2lzAINoiNgEpYm4WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFLWYFANPZNvvs7mt4Rk1uJsT47MB8GA1UdIwQY
MBaAFGZtl864Tpxha/5tk1dswzu/S2PvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODkt
NjliYWFmZGQ5YTZlLzEvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84MTIzNWItMmUwNC00NzFmLTg2ODktNjliYWFmZGQ5YTZl
LzEvWm0yWHpyaE9uR0ZyX20yVFYyekRPNzlMWS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggoJHenI
g7w1MiGo3xTpKnnSYWFMnK/JtKeuc3bwsm/jfn2Gs/M4MHpaOp5bVPMiMJHG97S3
X/hU+8OOla27ILe9j4wB3OXLuPAgxa7duU9w34IQ0Ozdvyn+kKm0zXxJqMn4SsxC
AlPFTGqlWY6GhIDqM2JCK9diTnQpn6gKKG+Ns+GUnJkOgNZVQuCpGUQHAdxmf+mo
qL+mo5/ouKSN7UUYx44Ym0NyxOfQaQYW8VhS8ZKWXKV19JXvTdNO5EiMw/EBTT8t
yuXy/tU29sZn+6XLkoJkI09eVP/qhPvNhU3ogB7px+Zhgy+TvuiZy3FAVTPpxFQ+
PmT7Df3c5nkBCg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:12 2025 by rpki-client