Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: 6pLgkpwzujwvd+CPgiHlxje1qXfpthzFk9KF90/kxIQ=
Subject key identifier: 41:D2:FC:4E:FD:08:F2:2A:C7:73:2A:94:01:58:42:B5:71:9B:9F:86
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 0197B7451AC90F961C4411A1F6A901557CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 04AD
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: JftWGfev1VIZFbrrRiB2DGJ9Om8xZtTMWA4PC46PIj0=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1a:c9:0f:96:1c:44:11:a1:f6:a9:01:55:7c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=41d2fc4efd08f22ac7732a94015842b5719b9f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:67:a8:95:4e:77:3b:16:9e:06:89:0d:7b:
be:91:64:af:32:97:7a:ec:40:0b:4f:e7:4c:68:5e:
df:44:92:d1:3f:05:0a:8b:25:e5:63:ab:5e:50:aa:
24:0e:68:45:91:57:69:d7:21:c4:d9:5e:03:a3:a5:
aa:d7:0f:ff:2e:3c:31:ab:53:d7:6d:f5:5f:c6:e4:
15:9e:5d:ce:37:7a:06:29:e1:42:ea:04:4f:26:a3:
18:c6:c3:33:2a:06:5d:96:89:a6:65:af:bb:01:57:
79:98:a5:89:72:cf:bb:5d:d0:ee:8c:e5:42:4e:f6:
2c:49:c2:03:1c:8c:34:0e:2d:94:fc:3d:d4:c4:25:
ea:97:c3:bd:12:57:f8:5f:f7:4c:4d:52:c4:eb:63:
0c:f9:3e:0a:cf:f9:6d:98:20:0f:e4:f5:52:fa:b6:
eb:c7:7a:92:fa:88:1c:f9:0a:f3:16:34:42:06:25:
77:26:12:63:f9:2d:ec:d7:4c:57:94:23:8d:e6:36:
31:cb:92:2c:05:2a:d5:12:03:5a:ed:95:27:77:ec:
de:71:6a:c4:24:fe:ed:9b:ba:a2:86:03:63:6b:fd:
bb:96:46:69:c6:9f:26:9a:d9:00:30:38:15:43:a2:
f9:0b:d7:28:80:23:47:51:57:c0:85:fb:df:45:e2:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:FC:4E:FD:08:F2:2A:C7:73:2A:94:01:58:42:B5:71:9B:9F:86
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9d:50:2a:a8:37:cd:e4:9a:9a:fd:0d:c0:a1:cf:42:22:c2:
d3:de:08:98:fc:03:37:9f:14:0a:d5:a5:28:0c:7d:70:78:07:
89:be:6c:a1:9d:e9:fd:7e:d2:af:f8:30:50:fc:df:1b:dd:37:
6d:dd:8c:45:2c:da:0e:05:79:9a:7d:59:f0:c3:db:09:a7:b9:
64:79:05:c4:59:91:f7:56:e9:c7:ca:4d:35:11:e5:ba:28:ef:
be:cc:03:d9:cc:f3:dc:5d:7a:ea:d1:4a:d9:ec:a0:a3:7b:eb:
0c:47:01:90:45:23:21:45:14:c0:da:fd:c3:44:69:b7:a9:51:
e5:f5:44:2c:30:a6:e5:4c:1c:53:13:98:87:03:42:ab:22:87:
70:4d:dd:d5:9c:eb:b0:72:e9:16:05:2c:a5:d4:11:b1:fc:29:
2b:48:20:a7:bc:f6:c0:c0:4b:6f:6b:ef:6c:40:83:a0:94:d9:
1a:34:db:ea:59:d6:4d:63:46:52:01:8d:27:3c:a8:8e:77:76:
09:52:c0:97:02:ec:d3:72:8e:c6:ae:14:81:78:06:8e:2a:10:
f3:e7:e5:27:8c:da:22:bc:13:c7:0b:95:f5:20:62:3c:fa:e4:
82:87:2e:4e:ab:60:48:e7:91:e2:fd:b8:2a:af:c6:00:7d:af:
bf:97:0e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRrJD5YcRBGh9qkBVXzUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZmZmMDAxMzZjODNmNTNhMzhhYzNlZWFjOTcxMGE3OTkz
NmIyNGMwHhcNMjUwNjI4MTYwMDQ4WhcNMjUwNjI5MTYwMDQ4WjAzMTEwLwYDVQQD
Eyg0MWQyZmM0ZWZkMDhmMjJhYzc3MzJhOTQwMTU4NDJiNTcxOWI5Zjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm9nqJVOdzsWngaJDXu+kWSvMpd6
7EALT+dMaF7fRJLRPwUKiyXlY6teUKokDmhFkVdp1yHE2V4Do6Wq1w//Ljwxq1PX
bfVfxuQVnl3ON3oGKeFC6gRPJqMYxsMzKgZdlommZa+7AVd5mKWJcs+7XdDujOVC
TvYsScIDHIw0Di2U/D3UxCXql8O9Elf4X/dMTVLE62MM+T4Kz/ltmCAP5PVS+rbr
x3qS+ogc+QrzFjRCBiV3JhJj+S3s10xXlCON5jYxy5IsBSrVEgNa7ZUnd+zecWrE
JP7tm7qihgNja/27lkZpxp8mmtkAMDgVQ6L5C9cogCNHUVfAhfvfReLAiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHS/E79CPIqx3MqlAFYQrVxm5+GMB8GA1UdIwQY
MBaAFGX/8AE2yD9To4rD7qyXEKeZNrJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDkt
MGQ1OWQ5ZDExNTA1LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDktMGQ1OWQ5ZDExNTA1
LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJ1QKqg3
zeSamv0NwKHPQiLC094ImPwDN58UCtWlKAx9cHgHib5soZ3p/X7Sr/gwUPzfG903
bd2MRSzaDgV5mn1Z8MPbCae5ZHkFxFmR91bpx8pNNRHluijvvswD2czz3F166tFK
2eygo3vrDEcBkEUjIUUUwNr9w0Rpt6lR5fVELDCm5UwcUxOYhwNCqyKHcE3d1Zzr
sHLpFgUspdQRsfwpK0ggp7z2wMBLb2vvbECDoJTZGjTb6lnWTWNGUgGNJzyojnd2
CVLAlwLs03KOxq4UgXgGjioQ8+flJ4zaIrwTxwuV9SBiPPrkgocuTqtgSOeR4v24
Kq/GAH2vv5cOVg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:02 2025 by rpki-client