Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: QBOOe2yKqsQOdAmJOaVB9Ivag1Q1XeEG5DlNYzAaAD8=
Subject key identifier: 11:FE:AB:D8:F2:FF:DE:44:5D:7B:FA:EA:3D:B3:D5:33:FC:A5:91:B4
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 0197B6A158A0E72707003B9D1D2DADD8D749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 0F08
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: 74BpomlTE0S7hqeO+khwABWkOk6KW6SYakgAj/7EKvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:58:a0:e7:27:07:00:3b:9d:1d:2d:ad:d8:d7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=11feabd8f2ffde445d7bfaea3db3d533fca591b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:d1:c7:eb:75:75:c1:48:9f:58:b2:4e:e7:
de:9c:8c:89:86:8b:6d:f7:d8:3f:9d:39:76:df:fb:
dd:a9:2f:33:b3:d3:05:46:2f:70:f9:64:84:71:af:
72:44:29:95:fd:5f:e0:b2:83:80:f1:b9:9c:3d:3a:
1e:88:65:14:d6:c5:a8:9a:f6:98:d5:81:9b:a4:97:
fb:8d:48:50:1c:8a:0c:a9:bf:32:61:a4:72:ec:0e:
1a:04:e9:5b:c5:f4:8b:99:c2:3b:72:7d:52:39:f2:
ee:09:7a:4d:87:ef:6d:12:3b:e7:ea:61:af:cf:a7:
e6:b0:1b:41:8d:92:b0:f5:51:46:de:60:eb:1f:6b:
aa:d0:35:69:7f:1b:1f:cb:b2:e8:4f:7a:f0:ed:47:
2b:d6:4d:5d:92:26:2e:8c:9c:9f:5a:cd:e3:24:de:
da:39:4b:4b:f8:94:d8:1a:e1:8d:f7:8c:6f:39:9a:
93:39:d9:0d:0e:6b:d1:3a:ef:a9:b7:2f:1e:24:e5:
0c:a8:21:87:74:81:e1:53:4b:19:45:2b:99:51:86:
e1:75:6e:a1:61:78:97:48:e3:ae:52:5a:e0:65:f2:
a9:4d:2b:0e:8c:4b:57:f7:44:0e:52:e3:8c:18:3c:
04:a6:59:ce:3e:f0:bb:35:48:dd:d1:b9:ad:a7:44:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:AB:D8:F2:FF:DE:44:5D:7B:FA:EA:3D:B3:D5:33:FC:A5:91:B4
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:83:e2:ea:8c:ca:1c:00:3c:03:32:d9:38:09:31:31:e8:b1:
76:c0:ff:ac:37:31:07:61:52:1a:7a:ce:3e:e4:f1:6d:c1:2a:
1b:5f:a2:d4:4a:20:09:15:83:1e:33:81:ec:e9:c6:d4:68:7a:
21:20:ba:6f:e9:24:28:c3:07:4a:a0:75:8d:a7:af:06:a5:86:
6f:da:fa:6b:3f:cb:eb:2c:fa:d7:95:ab:c0:7a:99:65:30:a8:
3f:47:31:0e:d7:33:e2:cc:93:07:32:f9:c8:3e:34:f4:cd:4b:
08:97:7b:57:b4:df:b0:65:81:a6:f1:19:10:1e:52:9a:06:a3:
22:06:94:93:64:ac:25:61:49:26:44:72:dd:64:4e:87:39:b0:
ba:11:e9:54:fb:66:c4:a0:e4:3d:fe:41:e4:4f:dc:a2:ac:df:
44:d4:5d:64:8e:15:d0:47:ff:c9:f8:38:ac:84:83:75:28:9c:
56:25:b5:23:d8:32:8c:b1:05:e1:4e:e3:df:29:cd:5b:2a:56:
c1:f7:d7:2e:97:49:32:b3:c6:de:07:06:7f:14:15:12:33:2c:
45:02:3c:dc:3a:6f:bd:02:b1:9b:5d:b1:41:a5:84:60:81:8b:
a6:42:94:be:5c:e7:80:31:ed:79:64:28:ed:24:85:63:6d:9d:
bf:d8:27:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oVig5ycHADudHS2t2NdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk
N2EzYjEwHhcNMjUwNjI4MTMwMTU2WhcNMjUwNjI5MTMwMTU2WjAzMTEwLwYDVQQD
EygxMWZlYWJkOGYyZmZkZTQ0NWQ3YmZhZWEzZGIzZDUzM2ZjYTU5MWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZbRx+t1dcFIn1iyTufenIyJhott
99g/nTl23/vdqS8zs9MFRi9w+WSEca9yRCmV/V/gsoOA8bmcPToeiGUU1sWomvaY
1YGbpJf7jUhQHIoMqb8yYaRy7A4aBOlbxfSLmcI7cn1SOfLuCXpNh+9tEjvn6mGv
z6fmsBtBjZKw9VFG3mDrH2uq0DVpfxsfy7LoT3rw7Ucr1k1dkiYujJyfWs3jJN7a
OUtL+JTYGuGN94xvOZqTOdkNDmvROu+pty8eJOUMqCGHdIHhU0sZRSuZUYbhdW6h
YXiXSOOuUlrgZfKpTSsOjEtX90QOUuOMGDwEplnOPvC7NUjd0bmtp0Sd7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH+q9jy/95EXXv66j2z1TP8pZG0MB8GA1UdIwQY
MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt
OWZiOGUyNTQ1ZDczLzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz
LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIPi6ozK
HAA8AzLZOAkxMeixdsD/rDcxB2FSGnrOPuTxbcEqG1+i1EogCRWDHjOB7OnG1Gh6
ISC6b+kkKMMHSqB1jaevBqWGb9r6az/L6yz615WrwHqZZTCoP0cxDtcz4syTBzL5
yD409M1LCJd7V7TfsGWBpvEZEB5SmgajIgaUk2SsJWFJJkRy3WROhzmwuhHpVPtm
xKDkPf5B5E/coqzfRNRdZI4V0Ef/yfg4rISDdSicViW1I9gyjLEF4U7j3ynNWypW
wffXLpdJMrPG3gcGfxQVEjMsRQI83DpvvQKxm12xQaWEYIGLpkKUvlzngDHteWQo
7SSFY22dv9gnAg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:52 2025 by rpki-client