Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: 1HZv9EStotdeVFPcOYAGGic/D+aMJaoax7vONFadmLY=
Subject key identifier: 7A:EE:F1:6C:42:A5:0C:C0:9D:09:40:87:61:98:3E:0C:14:B5:19:4B
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 0197B88FAE418553DE88EBE28BD1A402F3E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:53 +0000
Manifest this update: Sat 28 Jun 2025 22:01:53 +0000
Manifest next update: Sun 29 Jun 2025 22:01:53 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: BRfjW+rmwiPDsf6iMEBAqY+z6FUFitScW6z3PVcSOnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:ae:41:85:53:de:88:eb:e2:8b:d1:a4:02:f3:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Jun 28 22:01:53 2025 GMT
Not After : Jun 29 22:01:53 2025 GMT
Subject: CN=7aeef16c42a50cc09d09408761983e0c14b5194b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:86:6f:f9:0b:43:39:3b:62:ef:1e:df:58:
ba:b5:f5:17:16:a0:2b:e5:22:0d:c0:c8:dd:23:b1:
06:61:18:a2:2f:fa:52:fd:0d:99:21:b4:32:7b:1e:
3e:37:e4:f5:83:04:ef:41:75:99:fd:f1:8e:2c:b3:
42:95:83:32:1c:d6:11:7b:fe:46:23:ce:eb:d4:71:
99:97:dc:73:85:1e:cf:8a:ae:17:7e:5a:8b:df:f0:
b6:17:40:2d:56:91:44:e4:06:5e:ea:f3:02:78:7a:
0d:86:5a:c8:3f:f4:ee:c2:b9:9e:42:89:a3:1f:6a:
81:11:7c:47:8c:01:d5:c4:c1:e7:ce:30:f5:50:8b:
5e:34:ac:47:1b:aa:26:8a:5b:9d:4d:3e:cc:15:9c:
9d:f3:7f:87:9f:e3:9f:01:f6:5c:c4:86:84:86:2d:
8a:04:1f:24:6e:54:87:df:d2:34:de:c3:c2:83:19:
86:71:2a:bf:1d:9e:15:67:dd:7e:b9:a0:5a:f2:04:
63:3e:8b:39:5e:e8:b7:ef:b3:dc:dc:4c:2b:4f:38:
04:76:5a:b9:2f:2e:49:37:1b:56:d3:dc:05:9c:20:
b8:c6:3d:d8:f1:51:0a:47:cb:eb:f6:c8:5d:7d:3b:
bd:3c:03:74:51:f0:a3:f7:3c:ec:ad:51:9c:6a:7f:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:F1:6C:42:A5:0C:C0:9D:09:40:87:61:98:3E:0C:14:B5:19:4B
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:2c:fd:7c:af:ac:82:f7:a1:78:6f:39:62:6d:fb:f6:dc:
8d:42:c6:7a:3a:50:8c:6b:31:40:5a:03:ff:d6:99:62:ac:2e:
16:9c:5c:9f:d4:a9:96:92:b1:30:ee:50:c6:da:59:dd:b3:40:
d0:4a:b6:53:09:39:58:c0:e5:cb:6d:dc:b7:8e:78:7f:c8:e1:
c4:a0:d4:0a:c5:b6:b6:61:7d:0e:59:c4:e1:db:91:38:bc:08:
da:7e:a1:64:7d:c0:b2:25:28:a5:4b:fb:a0:6b:a0:39:b3:5f:
23:1f:cf:04:c9:92:3d:cd:9a:6e:ba:44:d3:d0:53:88:a0:5c:
68:ed:b7:73:70:76:5c:e2:d9:c5:c8:5d:c3:43:8e:9d:7f:93:
8e:74:11:8f:be:62:95:bd:69:7f:7a:a3:68:db:ad:c5:f0:82:
b1:12:fd:32:f5:cd:2a:aa:08:4b:4f:95:8b:e1:13:21:dd:3f:
57:f0:f4:91:85:93:7f:ea:f1:6e:2e:b9:43:db:56:9e:dd:9f:
6d:da:da:84:5d:f2:3f:de:cf:74:63:d3:c4:d8:5d:f7:a8:37:
9f:a6:3d:da:64:2d:4a:e3:df:f7:d7:4c:4d:19:22:11:1e:1b:
73:27:6b:94:ea:d9:ec:7e:51:9d:f1:6e:6a:b8:f8:9e:d6:ef:
bf:e5:5b:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j65BhVPeiOvii9GkAvPmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5
NTIxYmIwHhcNMjUwNjI4MjIwMTUzWhcNMjUwNjI5MjIwMTUzWjAzMTEwLwYDVQQD
Eyg3YWVlZjE2YzQyYTUwY2MwOWQwOTQwODc2MTk4M2UwYzE0YjUxOTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWmGb/kLQzk7Yu8e31i6tfUXFqAr
5SINwMjdI7EGYRiiL/pS/Q2ZIbQyex4+N+T1gwTvQXWZ/fGOLLNClYMyHNYRe/5G
I87r1HGZl9xzhR7Piq4XflqL3/C2F0AtVpFE5AZe6vMCeHoNhlrIP/TuwrmeQomj
H2qBEXxHjAHVxMHnzjD1UIteNKxHG6omiludTT7MFZyd83+Hn+OfAfZcxIaEhi2K
BB8kblSH39I03sPCgxmGcSq/HZ4VZ91+uaBa8gRjPos5Xui377Pc3EwrTzgEdlq5
Ly5JNxtW09wFnCC4xj3Y8VEKR8vr9shdfTu9PAN0UfCj9zzsrVGcan9/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHru8WxCpQzAnQlAh2GYPgwUtRlLMB8GA1UdIwQY
MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt
OTgyNDZhNGNiNmY4LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4
LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB50s/Xyv
rIL3oXhvOWJt+/bcjULGejpQjGsxQFoD/9aZYqwuFpxcn9SplpKxMO5QxtpZ3bNA
0Eq2Uwk5WMDly23ct454f8jhxKDUCsW2tmF9DlnE4duROLwI2n6hZH3AsiUopUv7
oGugObNfIx/PBMmSPc2abrpE09BTiKBcaO23c3B2XOLZxchdw0OOnX+TjnQRj75i
lb1pf3qjaNutxfCCsRL9MvXNKqoIS0+Vi+ETId0/V/D0kYWTf+rxbi65Q9tWnt2f
bdrahF3yP97PdGPTxNhd96g3n6Y92mQtSuPf99dMTRkiER4bcydrlOrZ7H5RnfFu
arj4ntbvv+VbFQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:26 2025 by rpki-client