Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: cy9vs9beix0xy/i4DKZkGPJm47JexYBuw62FYVFATUQ=
Subject key identifier: D4:44:D8:81:85:A9:EF:D1:CA:2A:11:84:E3:5F:73:DD:2A:4C:10:7D
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 0197B6A14529A753540B6A1C681B7A7DDCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: 003b/TiXf3I/+6rqvusdEt8r9B0xtxSEyctMum3FDpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:45:29:a7:53:54:0b:6a:1c:68:1b:7a:7d:dc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=d444d88185a9efd1ca2a1184e35f73dd2a4c107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:25:6e:c0:bb:37:5c:79:bd:e3:50:5d:c1:
bb:b6:8d:c4:49:1e:02:90:5a:6a:1b:b0:c5:89:72:
c3:ce:17:53:15:0f:95:50:8f:f4:85:df:a4:e3:db:
9b:23:b4:6e:a0:f1:00:a5:c2:66:4a:4f:7d:6c:88:
e8:99:bf:d0:3d:2c:f8:36:2d:03:f8:0a:a5:14:e6:
9f:9e:45:2d:e0:14:fe:54:81:c7:d2:6e:5c:2a:2a:
40:3b:cd:27:55:12:dd:0f:0a:53:e2:b6:ce:32:2c:
0a:35:9e:85:a7:fc:60:a3:cc:63:3b:0a:42:66:2f:
eb:4a:db:78:d9:89:cb:09:95:18:ed:bd:bb:f6:00:
42:b5:de:a0:5f:be:ee:18:5c:b5:98:db:0e:ff:be:
d4:98:aa:f7:19:a4:87:63:f5:37:80:ec:77:fb:8a:
fb:25:9d:05:8f:63:10:af:80:bd:00:31:2b:e6:98:
ba:5e:30:a5:b1:aa:99:04:fe:86:4e:1c:3c:da:32:
17:53:ab:a4:97:e4:5f:bb:d9:40:ee:0d:7e:5e:a7:
7e:4e:fe:fc:cc:82:fd:c2:ab:16:bf:1e:37:ab:5b:
83:f3:86:80:ea:b2:d9:70:80:30:dc:cb:0c:b5:7e:
7a:57:78:90:47:79:42:63:be:e6:03:03:0f:98:83:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:44:D8:81:85:A9:EF:D1:CA:2A:11:84:E3:5F:73:DD:2A:4C:10:7D
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a1:cd:81:aa:c0:98:dd:5d:bd:8b:d7:a3:20:7f:69:5b:46:
af:bd:d5:4e:5c:ef:9b:c9:e0:3d:92:35:b8:19:da:81:be:ca:
c8:1d:c2:b4:6a:64:90:a9:47:a7:8f:51:f4:9d:f3:8f:01:9f:
29:b8:2d:00:7e:ad:0c:1a:35:31:51:f2:5f:ed:cc:8c:21:57:
a8:04:8c:25:2d:c3:e4:f6:fc:99:aa:80:26:d5:2b:a9:fd:ec:
15:23:cf:64:f3:66:8c:5f:1e:be:89:c5:2c:48:c0:c1:ba:78:
1c:8e:8e:bb:76:62:8b:3c:62:0b:03:71:19:b5:06:fa:2d:48:
b8:11:62:c8:d7:8e:91:e1:5c:07:f4:19:c3:98:23:60:d3:67:
ed:a8:1f:bc:37:7c:f3:55:26:59:cc:85:b1:9f:73:f6:74:1d:
35:4f:fe:b9:d6:73:b8:c7:4e:c0:49:58:e1:5b:a7:3b:23:aa:
8d:bb:96:d8:70:83:49:9b:61:0f:d7:93:e5:03:94:b9:06:8e:
d9:90:12:09:07:28:66:c4:64:e8:8a:1f:ee:96:b2:96:1c:74:
88:12:f2:e3:ec:0c:a4:ba:c6:0b:fd:f5:bb:8f:6e:59:8d:fd:
6b:e8:89:cf:08:b3:e5:98:83:71:b7:82:e0:28:47:d0:58:48:
93:9d:97:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUUpp1NUC2ocaBt6fdzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2Q3ODAzZjQxZmU0OTllODAwNjY0ZTBhYWNhZGVlMTli
NjZkOWQwHhcNMjUwNjI4MTMwMTUxWhcNMjUwNjI5MTMwMTUxWjAzMTEwLwYDVQQD
EyhkNDQ0ZDg4MTg1YTllZmQxY2EyYTExODRlMzVmNzNkZDJhNGMxMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GglbsC7N1x5veNQXcG7to3ESR4C
kFpqG7DFiXLDzhdTFQ+VUI/0hd+k49ubI7RuoPEApcJmSk99bIjomb/QPSz4Ni0D
+AqlFOafnkUt4BT+VIHH0m5cKipAO80nVRLdDwpT4rbOMiwKNZ6Fp/xgo8xjOwpC
Zi/rStt42YnLCZUY7b279gBCtd6gX77uGFy1mNsO/77UmKr3GaSHY/U3gOx3+4r7
JZ0Fj2MQr4C9ADEr5pi6XjClsaqZBP6GThw82jIXU6ukl+Rfu9lA7g1+Xqd+Tv78
zIL9wqsWvx43q1uD84aA6rLZcIAw3MsMtX56V3iQR3lCY77mAwMPmIMKgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRE2IGFqe/RyioRhONfc90qTBB9MB8GA1UdIwQY
MBaAFGXNeAP0H+SZ6ABmTgqsre4Ztm2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEt
Zjk2YmZiMDRlNjQ1LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEtZjk2YmZiMDRlNjQ1
LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaHNgarA
mN1dvYvXoyB/aVtGr73VTlzvm8ngPZI1uBnagb7KyB3CtGpkkKlHp49R9J3zjwGf
KbgtAH6tDBo1MVHyX+3MjCFXqASMJS3D5Pb8maqAJtUrqf3sFSPPZPNmjF8evonF
LEjAwbp4HI6Ou3ZiizxiCwNxGbUG+i1IuBFiyNeOkeFcB/QZw5gjYNNn7agfvDd8
81UmWcyFsZ9z9nQdNU/+udZzuMdOwElY4VunOyOqjbuW2HCDSZthD9eT5QOUuQaO
2ZASCQcoZsRk6Iof7paylhx0iBLy4+wMpLrGC/31u49uWY39a+iJzwiz5ZiDcbeC
4ChH0FhIk52XXA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:43 2025 by rpki-client