Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: ILFT8TfZdDVcIDocXkmERYc5WeD6HTo54+ePsTsAJCE=
Subject key identifier: 84:C5:15:BF:9B:7B:B5:06:F1:4E:1F:93:BA:E7:5B:27:53:05:62:66
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 0197B70EF35F3A712D8450B8B0DEBF6E13CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0BE1
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: ZOvGN09ag2ev9n2U7mILxmRjjGj6NXoePkwa9cztTHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f3:5f:3a:71:2d:84:50:b8:b0:de:bf:6e:13:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=84c515bf9b7bb506f14e1f93bae75b2753056266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:cb:bb:e2:02:5c:a1:6a:44:bf:51:9d:6e:
9a:f7:21:cb:66:14:71:d4:a0:aa:f7:49:19:16:db:
c5:59:8b:63:2c:8d:2f:76:b4:2c:65:c4:7d:14:60:
18:95:81:c5:1a:a8:d9:24:e4:78:3a:dc:bc:a2:47:
ee:b1:29:79:19:13:aa:20:c5:2b:84:c2:15:55:2f:
97:ad:5f:24:95:6f:b1:30:f6:86:1f:ee:fd:fa:f5:
a4:b3:cd:bf:9e:d3:d7:ea:5a:ec:6c:9c:37:cd:04:
18:2b:97:d0:7c:7a:a3:df:5d:2d:23:4f:56:e5:69:
14:4e:9d:56:9f:5e:da:17:a6:c7:5b:ce:83:b2:03:
de:03:84:55:d4:6c:0b:f4:f4:5a:06:c5:dc:5c:3c:
97:2d:87:c4:e9:ab:f3:25:e7:86:33:6c:30:d3:ee:
8f:4b:43:20:c8:de:89:53:ed:74:5c:e3:d0:bd:00:
8c:96:32:8a:e7:c3:00:71:bd:84:a1:4f:7d:aa:dd:
0e:d4:f9:9e:1f:86:77:31:5e:a4:a4:1a:36:b2:6a:
90:d2:0e:b5:69:a0:26:3d:0a:c1:b3:36:64:fd:a1:
08:00:f3:52:11:34:29:40:ef:04:4c:42:68:05:bd:
4e:d3:15:89:ec:de:4e:56:5b:25:43:c8:6d:f3:fd:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C5:15:BF:9B:7B:B5:06:F1:4E:1F:93:BA:E7:5B:27:53:05:62:66
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:85:2e:dc:25:f1:40:19:6c:00:5b:d6:2f:de:70:0c:92:cc:
6b:22:c9:67:6a:f4:a4:e2:e9:08:51:6b:c8:34:d2:1f:fd:1b:
6b:18:7f:3f:fe:56:ec:79:c2:f8:9b:68:88:3c:20:e0:56:65:
1d:74:14:b0:3b:21:7a:35:62:de:16:7c:53:cc:a6:69:20:4e:
4e:dd:1e:fa:d5:6a:64:20:27:22:0c:c3:85:66:5e:68:fc:68:
7f:42:d3:b4:45:7d:ce:31:75:e8:3d:3d:a6:40:18:0d:79:81:
98:8f:a2:17:f8:e0:33:7c:a2:73:24:46:8c:a2:75:15:40:ff:
00:05:53:23:69:e9:6a:a3:eb:0a:e1:29:73:48:a6:27:47:85:
b5:22:d1:8b:b3:ed:ba:41:3c:e1:a1:55:b0:29:ff:3c:15:16:
f7:d6:2f:f4:b2:94:a2:99:f8:e0:e8:96:0d:ec:a6:2a:b1:27:
7d:29:93:98:be:6b:e7:f2:0d:50:eb:c4:ad:27:ab:57:d3:be:
ea:1a:6c:52:72:da:30:f3:bc:3f:0b:da:e1:43:94:c6:01:49:
f6:41:79:ac:77:d1:1e:be:db:2d:d8:2f:fc:75:86:8b:6c:70:
ee:d6:64:84:e1:f4:53:db:ab:35:5a:6e:ca:2b:3f:a6:3d:b6:
b7:98:31:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvNfOnEthFC4sN6/bhPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2
YjkzZmQwHhcNMjUwNjI4MTUwMTM5WhcNMjUwNjI5MTUwMTM5WjAzMTEwLwYDVQQD
Eyg4NGM1MTViZjliN2JiNTA2ZjE0ZTFmOTNiYWU3NWIyNzUzMDU2MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcrLu+ICXKFqRL9RnW6a9yHLZhRx
1KCq90kZFtvFWYtjLI0vdrQsZcR9FGAYlYHFGqjZJOR4Oty8okfusSl5GROqIMUr
hMIVVS+XrV8klW+xMPaGH+79+vWks82/ntPX6lrsbJw3zQQYK5fQfHqj310tI09W
5WkUTp1Wn17aF6bHW86DsgPeA4RV1GwL9PRaBsXcXDyXLYfE6avzJeeGM2ww0+6P
S0MgyN6JU+10XOPQvQCMljKK58MAcb2EoU99qt0O1PmeH4Z3MV6kpBo2smqQ0g61
aaAmPQrBszZk/aEIAPNSETQpQO8ETEJoBb1O0xWJ7N5OVlslQ8ht8/3J/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITFFb+be7UG8U4fk7rnWydTBWJmMB8GA1UdIwQY
MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt
NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5
LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboUu3CXx
QBlsAFvWL95wDJLMayLJZ2r0pOLpCFFryDTSH/0baxh/P/5W7HnC+JtoiDwg4FZl
HXQUsDshejVi3hZ8U8ymaSBOTt0e+tVqZCAnIgzDhWZeaPxof0LTtEV9zjF16D09
pkAYDXmBmI+iF/jgM3yicyRGjKJ1FUD/AAVTI2npaqPrCuEpc0imJ0eFtSLRi7Pt
ukE84aFVsCn/PBUW99Yv9LKUopn44OiWDeymKrEnfSmTmL5r5/INUOvErSerV9O+
6hpsUnLaMPO8Pwva4UOUxgFJ9kF5rHfRHr7bLdgv/HWGi2xw7tZkhOH0U9urNVpu
yis/pj22t5gxnQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:41 2025 by rpki-client