Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: XSBCdjY18UuF1u6TCM9IUai9CrtxLRdtIWRIqW60MKs=
Subject key identifier: 18:D6:8F:2D:F2:57:46:41:2F:1E:A6:F7:D3:78:21:11:4D:0E:1B:51
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 0197D586B46C88DB7F726D6D84DA0B9A3017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 015B
Signing time: Fri 04 Jul 2025 13:01:04 +0000
Manifest this update: Fri 04 Jul 2025 13:01:04 +0000
Manifest next update: Sat 05 Jul 2025 13:01:04 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: YouC1aNsv0ljKY+vdMGofuHdP9EBaOK4b3+Mu2FPLy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:86:b4:6c:88:db:7f:72:6d:6d:84:da:0b:9a:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Jul 4 13:01:04 2025 GMT
Not After : Jul 5 13:01:04 2025 GMT
Subject: CN=18d68f2df25746412f1ea6f7d37821114d0e1b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:98:19:eb:dc:33:c7:18:2d:a5:75:e8:ef:
a0:0d:6a:57:40:77:f6:70:d2:98:36:c4:da:95:08:
a8:7f:87:ee:54:91:0a:dd:42:55:6c:23:c2:3f:84:
b5:65:57:91:95:a5:a8:cf:7b:68:f3:22:28:4e:33:
ee:94:b7:cb:ec:87:82:b1:2a:b3:80:75:42:81:e7:
ec:f6:8b:06:bd:98:57:84:02:7e:c4:de:b1:3f:33:
a8:1e:4b:e6:eb:29:8a:86:0d:8f:b2:d8:7d:c6:94:
df:71:8b:9d:2d:a4:80:5f:7b:51:d6:c9:b7:65:17:
c3:cb:b1:64:18:1f:33:c1:02:e5:0c:d9:80:7c:3c:
f5:2f:ea:4d:0f:0e:e3:8a:2b:a2:9f:c2:7c:82:41:
b5:4a:2c:2d:82:d0:47:4a:fd:9d:68:47:dd:59:b0:
6b:4b:fc:fa:36:24:75:24:d7:fa:9a:2d:fd:ee:1b:
55:39:21:6e:07:f1:03:fb:38:e0:19:9e:ec:95:a2:
97:0d:8f:36:18:f3:15:6b:72:e8:85:b8:53:8d:6a:
cb:87:1d:50:10:67:d6:76:2d:77:75:c3:e7:b7:0e:
2d:5f:a3:31:b0:6f:ca:db:99:f1:12:0a:98:23:8d:
15:4a:52:83:5c:1d:c6:f7:ea:94:a6:6d:04:a5:37:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D6:8F:2D:F2:57:46:41:2F:1E:A6:F7:D3:78:21:11:4D:0E:1B:51
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4d:f4:83:fe:3f:c3:28:59:e1:1e:75:cd:b3:ee:7a:55:15:
b2:ff:b7:a3:ee:dd:5c:26:44:5f:0f:94:95:20:de:01:e2:ba:
8e:c4:ab:f1:f3:b5:af:2f:a6:e3:a3:4c:4f:37:2a:8d:3b:e3:
ce:f4:26:98:07:2a:35:1a:92:19:6f:52:28:78:0f:86:ab:92:
e6:03:3e:55:47:26:49:99:2f:8e:ca:d4:ab:5d:ee:42:58:28:
ca:24:70:a4:6a:1b:c8:06:85:e8:3d:e1:24:8a:57:12:4e:33:
fb:a6:b1:05:36:54:8a:05:d4:69:82:17:30:0f:fe:c6:19:29:
67:cb:dd:15:f3:c4:f6:e1:b1:27:ec:7e:c9:d2:28:8a:15:d3:
51:b7:da:2d:7c:61:1d:a8:fb:e7:55:f1:63:6e:43:87:4a:88:
c2:6d:b6:25:45:35:d5:00:46:23:6d:08:bc:87:74:29:71:42:
96:a1:b7:d1:38:48:9a:8e:09:9d:a9:1f:fb:8c:2f:bf:af:d7:
0a:c1:6a:2f:8e:d0:3e:d6:28:5c:42:38:27:7f:b0:66:a0:4b:
56:42:bc:87:ac:c4:5e:ec:b8:37:c8:9e:ee:d4:fb:c7:22:ab:
64:bb:66:80:e8:41:75:c2:2c:b7:eb:9d:48:14:bb:89:91:f0:
8d:34:a3:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfVhrRsiNt/cm1thNoLmjAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj
NTQ1YzMwHhcNMjUwNzA0MTMwMTA0WhcNMjUwNzA1MTMwMTA0WjAzMTEwLwYDVQQD
EygxOGQ2OGYyZGYyNTc0NjQxMmYxZWE2ZjdkMzc4MjExMTRkMGUxYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleeYGevcM8cYLaV16O+gDWpXQHf2
cNKYNsTalQiof4fuVJEK3UJVbCPCP4S1ZVeRlaWoz3to8yIoTjPulLfL7IeCsSqz
gHVCgefs9osGvZhXhAJ+xN6xPzOoHkvm6ymKhg2Psth9xpTfcYudLaSAX3tR1sm3
ZRfDy7FkGB8zwQLlDNmAfDz1L+pNDw7jiiuin8J8gkG1SiwtgtBHSv2daEfdWbBr
S/z6NiR1JNf6mi397htVOSFuB/ED+zjgGZ7slaKXDY82GPMVa3LohbhTjWrLhx1Q
EGfWdi13dcPntw4tX6MxsG/K25nxEgqYI40VSlKDXB3G9+qUpm0EpTdiXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjWjy3yV0ZBLx6m99N4IRFNDhtRMB8GA1UdIwQY
MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt
MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex
LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbE30g/4/
wyhZ4R51zbPuelUVsv+3o+7dXCZEXw+UlSDeAeK6jsSr8fO1ry+m46NMTzcqjTvj
zvQmmAcqNRqSGW9SKHgPhquS5gM+VUcmSZkvjsrUq13uQlgoyiRwpGobyAaF6D3h
JIpXEk4z+6axBTZUigXUaYIXMA/+xhkpZ8vdFfPE9uGxJ+x+ydIoihXTUbfaLXxh
Haj751XxY25Dh0qIwm22JUU11QBGI20IvId0KXFClqG30ThImo4Jnakf+4wvv6/X
CsFqL47QPtYoXEI4J3+wZqBLVkK8h6zEXuy4N8ie7tT7xyKrZLtmgOhBdcIst+ud
SBS7iZHwjTSjEg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 21:11:54 2025 by rpki-client