Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
File: sz3NILWulcFy0y7XKevzBhl7I-c.mft (raw, json)
Hash identifier: zIWwdbkYa4+ULx2EgY4JbBM5pTzpTQhuT01lAFiEqEo=
Subject key identifier: 5A:C2:30:32:3E:8A:94:2B:47:8B:91:4C:26:80:71:45:F8:D6:CE:6F
Authority key identifier: B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
Certificate issuer: /CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Certificate serial: 0197B7452F4C87A43440ACACF94FCEC2A8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: CIm7PdRT4tGc0ohUd0vMkXyk2Z4.roa (hash: bKi9ERQ3HDvQWS3A9n+SnlJFymCAx7E6eQcIAFgcP7o=)
2: sz3NILWulcFy0y7XKevzBhl7I-c.crl (hash: cP/YvwTuD5BJUafoj/yKHxznZNOB/CT9/7dXqYNlfx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2f:4c:87:a4:34:40:ac:ac:f9:4f:ce:c2:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b33dcd20b5ae95c172d32ed729ebf306197b23e7
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=5ac230323e8a942b478b914c26807145f8d6ce6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:cb:76:c4:2e:3a:1d:74:9d:71:4b:a5:32:
31:e4:92:37:f9:91:fa:a1:69:68:0d:0e:72:56:44:
38:a8:36:f1:93:c3:36:2d:9a:1b:95:b2:0b:a3:6f:
ac:ca:61:08:47:b4:e3:b0:6e:97:92:24:2e:1e:b5:
80:01:9c:63:56:85:62:b7:de:f6:2a:8a:89:b8:ca:
26:f9:be:93:88:1b:b7:41:68:52:6e:95:f5:3c:81:
13:fc:ce:69:c0:2c:5a:5b:0b:b2:d0:96:0f:74:f2:
4f:c6:42:3a:75:a9:d3:ab:4b:a9:0d:03:3e:4d:25:
1b:39:e6:6f:68:08:dd:29:ef:85:05:b2:c0:98:ec:
b1:fa:d5:2e:49:87:f2:3a:c6:01:4b:9d:0c:7a:db:
d0:02:82:3b:cb:96:ef:b9:61:52:c4:fb:f7:14:23:
51:9d:9b:c5:2d:44:e4:36:2d:3c:7e:58:99:ea:c2:
8e:5b:20:9f:69:70:31:18:35:24:1c:c7:63:06:3d:
ae:b8:f7:c1:4e:35:c3:71:b2:20:00:3d:bf:d9:35:
17:b8:b1:87:ad:a7:df:de:8e:0a:5d:0b:6f:9c:8c:
61:fa:9f:65:1d:0e:3d:b1:f6:a9:ef:32:8b:f3:55:
e7:b9:af:db:75:54:14:b9:9a:82:0e:f2:e8:0b:b5:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:30:32:3E:8A:94:2B:47:8B:91:4C:26:80:71:45:F8:D6:CE:6F
X509v3 Authority Key Identifier:
keyid:B3:3D:CD:20:B5:AE:95:C1:72:D3:2E:D7:29:EB:F3:06:19:7B:23:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sz3NILWulcFy0y7XKevzBhl7I-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0ac3ba-54d3-491f-9048-555a19833d8e/1/sz3NILWulcFy0y7XKevzBhl7I-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ed:c5:94:de:6f:f9:97:42:6f:3e:e8:64:3e:c5:10:98:bf:
35:db:1d:20:7b:0a:04:1a:88:e5:75:07:d4:09:6e:8a:c9:da:
49:e6:b3:66:3d:56:d0:ed:55:75:ba:dc:6e:c8:ef:1c:44:e0:
21:23:48:b5:e6:e8:57:ea:cb:7d:59:da:22:34:84:4e:43:80:
70:f2:d0:66:04:b7:49:a4:b7:9f:19:98:5f:90:7c:d3:0e:f0:
8a:7b:8f:51:68:95:e1:2b:e8:e5:ba:13:dc:65:66:9d:04:6e:
91:96:6f:9d:f9:90:00:2c:e7:a0:3d:e1:c6:76:16:2d:17:73:
ce:a8:d5:48:cb:32:70:40:50:71:9c:72:ca:77:10:25:61:60:
0b:ad:52:ff:ff:4b:f2:8c:6c:9e:89:79:9c:b9:e6:c7:db:c7:
6d:b1:1c:be:8b:07:d3:d3:cc:15:77:d1:72:79:a9:a5:68:25:
22:ad:36:86:a3:24:d6:26:44:d7:70:8e:c8:55:36:4e:77:ae:
83:87:bf:91:08:0d:71:a2:a3:d7:71:d4:20:6d:03:b8:ba:87:
ea:48:5f:22:ff:9f:66:53:c4:76:15:59:5d:93:8e:af:63:0c:
b9:c1:b3:d6:98:8d:09:07:06:36:74:bd:f8:cf:8d:7e:92:f5:
75:0a:17:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RS9Mh6Q0QKys+U/OwqjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzM2RjZDIwYjVhZTk1YzE3MmQzMmVkNzI5ZWJmMzA2MTk3
YjIzZTcwHhcNMjUwNjI4MTYwMDUzWhcNMjUwNjI5MTYwMDUzWjAzMTEwLwYDVQQD
Eyg1YWMyMzAzMjNlOGE5NDJiNDc4YjkxNGMyNjgwNzE0NWY4ZDZjZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bDLdsQuOh10nXFLpTIx5JI3+ZH6
oWloDQ5yVkQ4qDbxk8M2LZoblbILo2+symEIR7TjsG6XkiQuHrWAAZxjVoVit972
KoqJuMom+b6TiBu3QWhSbpX1PIET/M5pwCxaWwuy0JYPdPJPxkI6danTq0upDQM+
TSUbOeZvaAjdKe+FBbLAmOyx+tUuSYfyOsYBS50MetvQAoI7y5bvuWFSxPv3FCNR
nZvFLUTkNi08fliZ6sKOWyCfaXAxGDUkHMdjBj2uuPfBTjXDcbIgAD2/2TUXuLGH
raff3o4KXQtvnIxh+p9lHQ49sfap7zKL81Xnua/bdVQUuZqCDvLoC7VuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrCMDI+ipQrR4uRTCaAcUX41s5vMB8GA1UdIwQY
MBaAFLM9zSC1rpXBctMu1ynr8wYZeyPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3ozTklMV3VsY0Z5MHk3WEtldnpCaGw3SS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wYWMzYmEtNTRkMy00OTFmLTkwNDgt
NTU1YTE5ODMzZDhlLzEvc3ozTklMV3VsY0Z5MHk3WEtldnpCaGw3SS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wYWMzYmEtNTRkMy00OTFmLTkwNDgtNTU1YTE5ODMzZDhl
LzEvc3ozTklMV3VsY0Z5MHk3WEtldnpCaGw3SS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+3FlN5v
+ZdCbz7oZD7FEJi/NdsdIHsKBBqI5XUH1AluisnaSeazZj1W0O1VdbrcbsjvHETg
ISNIteboV+rLfVnaIjSETkOAcPLQZgS3SaS3nxmYX5B80w7winuPUWiV4Svo5boT
3GVmnQRukZZvnfmQACznoD3hxnYWLRdzzqjVSMsycEBQcZxyyncQJWFgC61S//9L
8oxsnol5nLnmx9vHbbEcvosH09PMFXfRcnmppWglIq02hqMk1iZE13COyFU2Tneu
g4e/kQgNcaKj13HUIG0DuLqH6khfIv+fZlPEdhVZXZOOr2MMucGz1piNCQcGNnS9
+M+NfpL1dQoXUw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:51 2025 by rpki-client