Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: x+UY7ZkFlhrZ+mLnnSqUvewzIwwqrlXLPvrT3vf0nho=
Subject key identifier: 8B:31:D1:2E:21:84:2E:FF:5E:53:6B:BB:CC:E0:5C:E2:86:59:24:52
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 0197B88FA35E47B538BC0281183B54201544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 057F
Signing time: Sat 28 Jun 2025 22:01:50 +0000
Manifest this update: Sat 28 Jun 2025 22:01:50 +0000
Manifest next update: Sun 29 Jun 2025 22:01:50 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: rRX/DKYa8Je7/nj3KkR4rtmGAgilel2vPW97ZMh4ycY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:a3:5e:47:b5:38:bc:02:81:18:3b:54:20:15:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Jun 28 22:01:50 2025 GMT
Not After : Jun 29 22:01:50 2025 GMT
Subject: CN=8b31d12e21842eff5e536bbbcce05ce286592452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9a:83:56:cb:dd:b5:97:80:24:8c:e0:f5:81:
42:64:d2:ac:d1:8e:9a:c7:e2:f9:5f:ef:77:18:76:
65:e9:c3:64:ec:d5:d7:cc:47:72:b0:fc:52:af:34:
c4:42:d1:bd:9b:c5:07:53:4f:bd:d2:31:b9:26:0d:
ec:5f:8b:7e:bd:cf:92:c7:73:06:db:99:56:4e:67:
14:30:a2:12:98:82:63:ae:e4:b8:3e:d7:61:19:7d:
a3:63:34:6d:8a:db:d5:8c:db:f5:c9:06:5d:06:8e:
15:c4:de:be:e6:a0:7f:7d:ae:df:28:75:81:31:d5:
71:6d:1d:71:e7:ba:47:7c:00:2e:69:ce:1e:0f:e2:
de:80:d7:79:6e:b4:2f:b3:d1:d4:c1:5f:f4:0e:9a:
c1:3f:09:6c:c4:3c:38:89:0c:93:a9:2a:80:41:44:
15:8e:68:86:5d:37:a2:f8:3e:42:34:36:f1:c9:84:
be:65:ed:90:cb:d8:0b:19:a5:f1:50:27:73:ad:81:
8b:69:39:03:d7:a8:fd:c3:27:b4:27:be:9f:eb:3e:
8c:16:10:bc:1b:78:b7:46:22:86:cc:6e:14:e8:d6:
77:1d:ff:dd:b1:73:0a:eb:1f:5d:30:3e:38:b6:ab:
8a:91:af:0c:01:7d:c8:e8:11:89:ea:ef:88:54:0f:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:31:D1:2E:21:84:2E:FF:5E:53:6B:BB:CC:E0:5C:E2:86:59:24:52
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:36:a8:51:dc:ea:0d:c8:15:70:43:60:2b:3d:10:7e:da:15:
31:86:7d:60:e4:f6:b7:9d:ec:e4:33:a6:61:9d:20:97:59:ca:
56:94:3b:bd:2a:a8:01:1d:da:9c:80:6f:a8:fc:64:3f:00:55:
e2:a0:7a:8e:84:44:42:ed:3c:9b:9f:33:8c:b9:cc:24:b1:16:
50:42:61:0d:27:46:41:34:41:01:ab:e1:9f:11:d2:17:6d:12:
09:fc:19:9f:b9:68:47:ae:dc:48:47:7c:0c:94:df:10:b8:25:
e2:57:03:df:85:5b:1b:c9:b9:99:7c:d1:57:7f:b2:8d:64:41:
09:14:5c:77:a5:80:3e:e7:1c:94:a0:ab:7e:86:0d:42:cd:80:
5d:f7:0f:62:ba:51:f6:4f:b2:03:ab:89:e3:c6:0d:b4:9e:c1:
57:88:61:3f:99:19:54:cd:a1:2d:04:9c:f9:26:dd:a1:3a:f5:
99:c1:1c:b1:78:40:c2:ac:ab:22:6b:a9:87:0d:65:de:8b:66:
bd:50:5b:c9:3d:57:71:6f:a9:b8:24:b6:20:3f:1e:93:0b:ea:
1f:4c:85:6f:bd:bb:5c:93:cc:05:f9:45:27:db:2f:06:72:a2:
80:7b:6a:39:bf:c1:31:7d:c4:3d:de:61:e1:d6:88:91:b5:4e:
46:88:d3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j6NeR7U4vAKBGDtUIBVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWE4ODcyYzJiM2Y5NzRjOTUxNjhkMjE0YmZkNTdmMGY5
ZTkxMTkwHhcNMjUwNjI4MjIwMTUwWhcNMjUwNjI5MjIwMTUwWjAzMTEwLwYDVQQD
Eyg4YjMxZDEyZTIxODQyZWZmNWU1MzZiYmJjY2UwNWNlMjg2NTkyNDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZqDVsvdtZeAJIzg9YFCZNKs0Y6a
x+L5X+93GHZl6cNk7NXXzEdysPxSrzTEQtG9m8UHU0+90jG5Jg3sX4t+vc+Sx3MG
25lWTmcUMKISmIJjruS4PtdhGX2jYzRtitvVjNv1yQZdBo4VxN6+5qB/fa7fKHWB
MdVxbR1x57pHfAAuac4eD+LegNd5brQvs9HUwV/0DprBPwlsxDw4iQyTqSqAQUQV
jmiGXTei+D5CNDbxyYS+Ze2Qy9gLGaXxUCdzrYGLaTkD16j9wye0J76f6z6MFhC8
G3i3RiKGzG4U6NZ3Hf/dsXMK6x9dMD44tquKka8MAX3I6BGJ6u+IVA+1HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsx0S4hhC7/XlNru8zgXOKGWSRSMB8GA1UdIwQY
MBaAFMyqiHLCs/l0yVFo0hS/1X8PnpEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQt
ZTA0YzU4YTQxZjY2LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQtZTA0YzU4YTQxZjY2
LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDaoUdzq
DcgVcENgKz0QftoVMYZ9YOT2t53s5DOmYZ0gl1nKVpQ7vSqoAR3anIBvqPxkPwBV
4qB6joREQu08m58zjLnMJLEWUEJhDSdGQTRBAavhnxHSF20SCfwZn7loR67cSEd8
DJTfELgl4lcD34VbG8m5mXzRV3+yjWRBCRRcd6WAPucclKCrfoYNQs2AXfcPYrpR
9k+yA6uJ48YNtJ7BV4hhP5kZVM2hLQSc+SbdoTr1mcEcsXhAwqyrImuphw1l3otm
vVBbyT1XcW+puCS2ID8ekwvqH0yFb727XJPMBflFJ9svBnKigHtqOb/BMX3EPd5h
4daIkbVORojTZQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:41:23 2025 by rpki-client