Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
File: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft (raw, json)
Hash identifier: uQiIZ1joEhq6caBpz1JQbEPBoF+BQOIFAymkXgoTXnE=
Subject key identifier: 06:42:EF:69:53:95:33:56:F4:17:A8:85:73:28:44:C5:F3:93:A1:D8
Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170
Certificate serial: 0197B6A0A76C3F99CC5D0CF083790CC35BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: 7vdGx51ck_YIgYpkt1SPNVfsVKE.roa (hash: Nw+uAqY1I65YKmQSbXqROB23bDhd2atga2x/5hREPHM=)
2: ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl (hash: 2uwwuDuE1523hkFPc5MYNszEH2RDk5Ebp1WBj2voZA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a7:6c:3f:99:cc:5d:0c:f0:83:79:0c:c3:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64daba15d1d366cb53095412d06490e23498e170
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=0642ef6953953356f417a885732844c5f393a1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e7:ce:50:8c:ce:82:7f:1e:74:90:90:a1:91:
a9:ce:27:5f:08:1c:54:bd:bc:9e:ba:21:6d:4f:cf:
57:ca:48:0e:43:33:8f:ba:67:af:8c:f7:fc:87:31:
07:b1:e1:10:df:89:35:4b:a6:17:47:cb:8a:4a:13:
83:54:7d:0d:89:8a:4b:bc:ba:3c:c9:b3:17:71:6b:
9e:47:3b:87:ca:61:66:c7:06:c2:05:a5:d6:45:b3:
9c:3a:b4:77:da:0f:ea:64:db:c6:c9:b0:65:e8:9a:
5c:62:00:09:28:df:01:cb:bd:a5:27:85:98:22:32:
4d:42:99:ab:ef:a8:56:f7:fb:d1:b8:40:38:38:61:
cb:8e:d4:42:cb:44:ca:04:0c:43:e9:0e:9e:17:42:
4f:c0:b7:60:6d:54:05:26:05:b9:44:33:bb:f7:3a:
52:61:56:30:82:61:cb:3e:af:5b:bb:f8:b9:0b:06:
5a:1c:59:d6:9d:ef:5e:70:03:ff:8b:96:ed:1a:c1:
bc:29:8f:1f:d0:ac:e0:20:a2:48:13:bf:ba:6e:3e:
65:c2:88:4f:e1:fe:ea:33:cb:f1:75:67:d7:23:f4:
73:be:a9:ec:09:69:4f:8f:96:99:6e:49:18:f2:81:
bd:42:21:85:81:27:8d:a8:ab:a6:b8:86:2a:39:98:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:42:EF:69:53:95:33:56:F4:17:A8:85:73:28:44:C5:F3:93:A1:D8
X509v3 Authority Key Identifier:
keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4d:04:1c:ff:c8:a5:6b:87:05:18:ee:bf:63:22:8e:f2:8b:
86:00:c2:4c:70:f7:0c:76:ed:e3:d9:37:b7:b0:90:5d:97:c7:
f1:16:32:91:d6:4e:28:46:6c:00:cb:80:f5:6d:bf:b8:43:6d:
6f:fd:e3:30:e8:cc:c0:ad:a0:25:ed:00:ad:f8:96:a7:46:ef:
8f:af:75:0d:8b:b0:f6:71:58:5d:df:cc:b7:cb:71:bd:98:df:
00:0b:76:52:8c:44:a7:38:f1:6c:f8:a2:f5:ef:99:b0:42:cd:
09:60:ec:e7:dd:2b:7b:dd:d6:fd:ae:ad:b5:31:8d:a2:91:79:
32:64:59:ca:02:5a:d5:9c:9a:e4:ba:03:87:a1:9e:85:60:1e:
4a:2f:57:ce:93:d6:36:f5:1b:d7:6b:f1:0c:b1:39:40:f7:af:
63:00:b7:00:ec:46:3a:da:e2:16:d0:c7:51:96:e9:eb:f2:a9:
4b:6d:20:b6:7e:77:55:56:bc:da:29:4e:b3:31:3a:c6:0c:4b:
52:e0:cd:b3:6f:b6:ef:fc:dd:47:9e:b8:81:b1:a6:6c:3e:c3:
fb:a5:9d:26:53:04:d9:92:cc:2a:8c:e5:74:65:ba:33:33:46:
b5:4a:c4:7a:67:4a:49:4f:a8:1f:45:7f:9f:37:0f:a9:54:74:
c9:18:10:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKdsP5nMXQzwg3kMw1vAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZGFiYTE1ZDFkMzY2Y2I1MzA5NTQxMmQwNjQ5MGUyMzQ5
OGUxNzAwHhcNMjUwNjI4MTMwMTExWhcNMjUwNjI5MTMwMTExWjAzMTEwLwYDVQQD
EygwNjQyZWY2OTUzOTUzMzU2ZjQxN2E4ODU3MzI4NDRjNWYzOTNhMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnufOUIzOgn8edJCQoZGpzidfCBxU
vbyeuiFtT89XykgOQzOPumevjPf8hzEHseEQ34k1S6YXR8uKShODVH0NiYpLvLo8
ybMXcWueRzuHymFmxwbCBaXWRbOcOrR32g/qZNvGybBl6JpcYgAJKN8By72lJ4WY
IjJNQpmr76hW9/vRuEA4OGHLjtRCy0TKBAxD6Q6eF0JPwLdgbVQFJgW5RDO79zpS
YVYwgmHLPq9bu/i5CwZaHFnWne9ecAP/i5btGsG8KY8f0KzgIKJIE7+6bj5lwohP
4f7qM8vxdWfXI/RzvqnsCWlPj5aZbkkY8oG9QiGFgSeNqKumuIYqOZgNIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZC72lTlTNW9BeohXMoRMXzk6HYMB8GA1UdIwQY
MBaAFGTauhXR02bLUwlUEtBkkOI0mOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2Et
YTk0ZGQ4Y2NhZjlmLzEvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2EtYTk0ZGQ4Y2NhZjlm
LzEvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeE0EHP/I
pWuHBRjuv2MijvKLhgDCTHD3DHbt49k3t7CQXZfH8RYykdZOKEZsAMuA9W2/uENt
b/3jMOjMwK2gJe0ArfiWp0bvj691DYuw9nFYXd/Mt8txvZjfAAt2UoxEpzjxbPii
9e+ZsELNCWDs590re93W/a6ttTGNopF5MmRZygJa1Zya5LoDh6GehWAeSi9XzpPW
NvUb12vxDLE5QPevYwC3AOxGOtriFtDHUZbp6/KpS20gtn53VVa82ilOszE6xgxL
UuDNs2+27/zdR564gbGmbD7D+6WdJlME2ZLMKozldGW6MzNGtUrEemdKSU+oH0V/
nzcPqVR0yRgQbA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:48 2025 by rpki-client