
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: qD/ogS4rj5f06mUkUTpNVW0r7D92NZOvfYY1Sd304dQ=
Subject key identifier: FF:C2:99:54:ED:28:BE:51:CF:69:EF:B0:A3:BB:92:77:2C:FD:CB:6A
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 0197B70F496B43087E10ECF6C0629FFD7796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0CD6
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: QEmClZPBmSPXutoiyhRimpvmN3HCABlHpAhzbSCN1rk=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:49:6b:43:08:7e:10:ec:f6:c0:62:9f:fd:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=ffc29954ed28be51cf69efb0a3bb92772cfdcb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:e6:4b:d9:7e:0b:e9:ba:72:15:d6:e2:de:
a4:ff:c6:72:1f:a8:ed:ca:5f:e5:bb:86:f0:d5:3b:
29:f2:99:09:89:30:06:e9:a0:f9:ae:40:11:a9:04:
d6:f3:c8:5d:6a:9c:1f:c7:94:fe:78:ec:d1:0a:66:
8d:6a:7a:3e:c9:86:c2:2e:8a:77:f1:f8:4a:4c:99:
03:2f:09:cf:b9:b8:3d:0f:78:2e:51:83:c1:b0:b8:
b6:7a:71:37:22:2a:55:06:dd:d3:83:e9:96:f8:45:
18:62:56:5e:5d:fb:7f:10:b2:33:01:31:85:7a:7c:
bb:6e:53:3c:a7:9d:e6:40:82:3b:06:1a:b3:f9:3e:
d1:84:e2:df:f2:31:b0:c4:bb:c8:2b:9d:69:b4:42:
05:f2:9c:8b:30:2e:cc:62:b6:1d:ce:be:01:30:d0:
50:e9:45:ac:74:1f:76:26:ba:2a:e1:eb:3d:b6:ea:
eb:1f:95:08:51:95:82:01:24:9e:61:35:cd:2e:2b:
34:77:bf:d2:11:35:86:9b:91:3d:37:57:11:4d:4c:
51:db:02:4e:ad:7c:80:2a:8f:f4:84:6c:fe:b3:0c:
32:ee:30:3c:f7:06:43:5b:b6:56:c1:84:dd:76:98:
13:cb:01:a4:e9:94:cc:6f:69:87:5c:9f:27:03:ef:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C2:99:54:ED:28:BE:51:CF:69:EF:B0:A3:BB:92:77:2C:FD:CB:6A
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:45:d4:58:ac:cd:9e:c6:85:56:c7:8d:56:cf:f8:d6:60:ec:
5b:2d:3c:3a:fe:5d:cd:a8:04:f3:6e:26:94:2a:95:1f:b6:b5:
7f:90:da:4b:0a:15:6f:43:a3:65:c5:ac:c6:d6:79:8e:43:eb:
94:dd:eb:9c:ac:d2:c0:4f:87:9f:6c:96:1c:df:09:5a:4e:b8:
9a:49:38:3f:40:a4:f9:0e:ae:5a:3b:ab:0c:2e:36:f7:24:1e:
ee:8d:b4:4b:5e:28:be:32:ff:87:44:05:3c:0e:95:5a:d3:a1:
ec:df:ab:03:ca:27:57:8b:22:12:b0:b5:68:95:8b:85:09:bd:
a7:12:e6:1a:53:b3:ff:eb:08:a2:6b:b5:35:10:81:0f:12:1a:
b0:ec:98:b0:65:dd:a6:5c:9e:a1:7d:3d:4c:9a:d7:53:09:4f:
98:13:de:31:06:94:18:12:67:95:c9:a9:1b:7e:66:f9:9c:2e:
98:f6:ff:cd:f6:55:89:ee:d9:72:2f:a7:39:aa:57:fa:15:ba:
11:63:ab:34:dd:8c:c5:3e:d0:6f:dc:0a:fc:8d:55:49:7a:c7:
52:5b:2f:ca:2c:b0:7e:f5:d0:b2:9c:e0:18:eb:b3:4d:7e:34:
48:79:7d:99:a8:c1:85:77:4f:38:4b:5a:b0:49:90:e5:b2:8a:
80:ca:8c:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3D0lrQwh+EOz2wGKf/XeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3M2Y4ODc0ZDk3MzFmNjc2ODJhMjEzZTZmZTVlMGIwZGYz
NGU2Y2IwHhcNMjUwNjI4MTUwMjAxWhcNMjUwNjI5MTUwMjAxWjAzMTEwLwYDVQQD
EyhmZmMyOTk1NGVkMjhiZTUxY2Y2OWVmYjBhM2JiOTI3NzJjZmRjYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/TmS9l+C+m6chXW4t6k/8ZyH6jt
yl/lu4bw1Tsp8pkJiTAG6aD5rkARqQTW88hdapwfx5T+eOzRCmaNano+yYbCLop3
8fhKTJkDLwnPubg9D3guUYPBsLi2enE3IipVBt3Tg+mW+EUYYlZeXft/ELIzATGF
eny7blM8p53mQII7Bhqz+T7RhOLf8jGwxLvIK51ptEIF8pyLMC7MYrYdzr4BMNBQ
6UWsdB92Jroq4es9turrH5UIUZWCASSeYTXNLis0d7/SETWGm5E9N1cRTUxR2wJO
rXyAKo/0hGz+swwy7jA89wZDW7ZWwYTddpgTywGk6ZTMb2mHXJ8nA+9V4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/CmVTtKL5Rz2nvsKO7kncs/ctqMB8GA1UdIwQY
MBaAFGc/iHTZcx9naCohPm/l4LDfNObLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYt
OTg1MjMxNjM1NDIxLzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYtOTg1MjMxNjM1NDIx
LzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUXUWKzN
nsaFVseNVs/41mDsWy08Ov5dzagE824mlCqVH7a1f5DaSwoVb0OjZcWsxtZ5jkPr
lN3rnKzSwE+Hn2yWHN8JWk64mkk4P0Ck+Q6uWjurDC429yQe7o20S14ovjL/h0QF
PA6VWtOh7N+rA8onV4siErC1aJWLhQm9pxLmGlOz/+sIomu1NRCBDxIasOyYsGXd
plyeoX09TJrXUwlPmBPeMQaUGBJnlcmpG35m+ZwumPb/zfZVie7Zci+nOapX+hW6
EWOrNN2MxT7Qb9wK/I1VSXrHUlsvyiywfvXQspzgGOuzTX40SHl9majBhXdPOEta
sEmQ5bKKgMqM2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:02 2025 by rpki-client