Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: ZqIpAYhE2W06CPxAlHYXevNXydLhUvfoVjWO78v0S68=
Subject key identifier: 36:DB:91:18:B2:83:9E:2C:96:E3:94:8C:73:D4:49:5C:9B:62:F8:69
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 0197B7EAAB7D029E3B3FB70637420E5F65B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0551
Signing time: Sat 28 Jun 2025 19:01:39 +0000
Manifest this update: Sat 28 Jun 2025 19:01:39 +0000
Manifest next update: Sun 29 Jun 2025 19:01:39 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: Z8CyKx8WNhM4Ijts55NQSU04UuMBd3m1Emiq7VIeNg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:ab:7d:02:9e:3b:3f:b7:06:37:42:0e:5f:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jun 28 19:01:39 2025 GMT
Not After : Jun 29 19:01:39 2025 GMT
Subject: CN=36db9118b2839e2c96e3948c73d4495c9b62f869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:96:bc:42:f2:d6:6c:85:c7:8e:85:7e:b2:
04:c7:1c:c5:72:91:17:c7:1a:c4:a3:bd:a3:73:4c:
84:d3:91:16:01:7e:59:f4:ce:85:5e:23:63:07:1e:
8b:4e:47:f6:1e:da:bb:c4:2a:7d:07:62:1f:8f:47:
6a:fe:6b:56:4a:dd:e2:34:c7:0a:23:26:6e:19:e4:
9b:d0:60:80:5d:bc:74:09:f3:6b:2e:9c:9c:3a:18:
ba:0f:0e:e7:9e:dc:9d:6e:8e:8c:ec:b2:05:f3:b1:
aa:e9:87:5a:68:83:c5:65:2a:43:49:15:48:bc:75:
8a:75:52:00:f3:14:ef:6f:06:33:6e:af:68:c7:d8:
3b:2a:48:cf:55:e0:0e:ec:05:3a:21:16:3f:71:4a:
a3:c3:b1:28:13:0c:0d:48:ee:5e:3c:6e:79:40:01:
3c:90:32:43:a1:f0:15:2e:c6:30:80:42:96:7c:39:
b0:69:1d:12:d4:32:f2:da:c9:5e:d0:03:35:a3:8f:
e1:16:98:9a:42:7b:b4:dd:ba:72:80:b8:dd:6c:43:
b4:05:bf:17:90:85:9b:da:f4:43:85:b4:db:e9:cb:
28:37:21:48:9b:63:5d:eb:82:26:08:c7:ec:15:1e:
f3:d1:20:6a:f4:df:d1:95:a0:2e:60:f9:3a:30:5d:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:91:18:B2:83:9E:2C:96:E3:94:8C:73:D4:49:5C:9B:62:F8:69
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:92:3f:2b:8c:38:cc:59:24:ef:5a:0c:f4:ed:10:26:b9:
47:d0:bf:1c:52:8d:7a:27:a6:71:52:8f:99:90:9d:98:db:7b:
3e:b4:5d:6b:f1:bd:6a:47:8d:18:09:8b:54:41:67:ef:9b:d3:
e0:bb:d3:58:41:87:1d:12:19:b9:9e:7e:71:50:16:dc:d9:7b:
bd:f9:b1:d0:70:f3:52:b2:b6:6c:09:2d:a5:f1:22:13:45:cc:
bc:66:a1:3e:4f:73:f4:cf:fc:c3:3b:83:5d:e1:5e:91:6e:f0:
d9:d5:97:68:48:e2:cf:ae:56:7b:4d:da:b5:04:bc:2d:b8:3c:
e0:07:35:84:f8:81:50:11:f5:7d:5b:60:ae:cf:d4:0b:8e:94:
05:cf:52:ed:58:ae:dc:bf:89:4f:78:c7:94:87:fb:53:54:e6:
6c:85:e2:93:1d:3d:8e:48:6e:a9:51:db:e8:07:09:de:a7:04:
8a:37:d3:68:b2:c8:f0:98:c4:85:e5:b5:c8:d2:58:23:2a:f5:
67:87:c7:33:62:2d:0f:e2:78:af:28:cf:5d:ef:12:7b:0f:a3:
4f:23:c4:40:e1:0f:01:0b:05:3b:f9:4d:8e:64:ba:e7:b5:b4:
02:5d:e3:79:c1:c0:ce:08:a8:6d:0b:5e:12:00:29:93:dc:9a:
ac:bc:a3:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36qt9Ap47P7cGN0IOX2W4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl
OGU5N2IwHhcNMjUwNjI4MTkwMTM5WhcNMjUwNjI5MTkwMTM5WjAzMTEwLwYDVQQD
EygzNmRiOTExOGIyODM5ZTJjOTZlMzk0OGM3M2Q0NDk1YzliNjJmODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf6WvELy1myFx46FfrIExxzFcpEX
xxrEo72jc0yE05EWAX5Z9M6FXiNjBx6LTkf2Htq7xCp9B2Ifj0dq/mtWSt3iNMcK
IyZuGeSb0GCAXbx0CfNrLpycOhi6Dw7nntydbo6M7LIF87Gq6YdaaIPFZSpDSRVI
vHWKdVIA8xTvbwYzbq9ox9g7KkjPVeAO7AU6IRY/cUqjw7EoEwwNSO5ePG55QAE8
kDJDofAVLsYwgEKWfDmwaR0S1DLy2sle0AM1o4/hFpiaQnu03bpygLjdbEO0Bb8X
kIWb2vRDhbTb6csoNyFIm2Nd64ImCMfsFR7z0SBq9N/RlaAuYPk6MF0FIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbbkRiyg54sluOUjHPUSVybYvhpMB8GA1UdIwQY
MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt
MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm
LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp+SPyuM
OMxZJO9aDPTtECa5R9C/HFKNeiemcVKPmZCdmNt7PrRda/G9akeNGAmLVEFn75vT
4LvTWEGHHRIZuZ5+cVAW3Nl7vfmx0HDzUrK2bAktpfEiE0XMvGahPk9z9M/8wzuD
XeFekW7w2dWXaEjiz65We03atQS8Lbg84Ac1hPiBUBH1fVtgrs/UC46UBc9S7Viu
3L+JT3jHlIf7U1TmbIXikx09jkhuqVHb6AcJ3qcEijfTaLLI8JjEheW1yNJYIyr1
Z4fHM2ItD+J4ryjPXe8Sew+jTyPEQOEPAQsFO/lNjmS657W0Al3jecHAzgiobQte
EgApk9yarLyj3g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:22:14 2025 by rpki-client