Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: yRYY4zZEU2mVF72J+a3Po+0PUgDyZlDnn7uuPvOriJo=
Subject key identifier: 2C:C7:74:33:11:80:88:AB:EE:A3:1A:85:68:E9:5C:C8:E1:02:D8:16
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 0197B6A06A8BAC383B1753F80C66C49518D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: DPZcZk+puItFo8ZXHOiUVbOwH5x4CN5fQmrCU+xSLt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6a:8b:ac:38:3b:17:53:f8:0c:66:c4:95:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=2cc77433118088abeea31a8568e95cc8e102d816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:85:ba:a8:13:85:d1:ab:6b:78:c3:58:75:
a9:34:f1:b2:e1:7d:97:50:f0:41:bf:6a:68:f4:ba:
b4:56:c4:98:0b:d1:b0:df:38:0c:30:06:e9:bb:54:
4e:76:89:4f:c8:4a:9a:5d:9e:14:b7:09:50:1b:df:
3b:98:83:ac:a2:92:2e:95:2d:06:ea:13:0e:64:8b:
3e:90:fa:2f:f5:64:5e:27:d2:36:52:57:80:3d:a2:
21:c6:26:d4:cf:0a:68:67:c3:cb:76:5c:01:ab:4c:
21:f1:1c:c3:b2:36:da:9d:69:77:84:b2:9a:0b:0a:
34:84:73:e8:e3:07:10:45:04:6c:24:80:78:8a:c7:
34:5e:21:6c:c2:d1:e4:8d:e5:49:ca:31:53:d2:7e:
35:03:06:ff:55:2c:ad:18:54:21:c7:80:e9:ea:e9:
9b:86:ff:a0:43:26:b1:82:c3:2a:26:e9:5d:66:84:
71:60:99:e8:09:a5:8d:4e:85:39:cb:7e:2f:05:7e:
9f:97:ba:74:a0:60:bb:3e:22:62:da:3d:53:34:4a:
0c:b2:25:74:5f:aa:9e:1c:56:56:1c:66:e7:f6:22:
ea:04:2b:47:91:fb:9a:b9:52:a0:4f:fc:86:6b:19:
bd:41:d8:dd:04:e4:35:58:30:54:51:65:7e:9a:e3:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C7:74:33:11:80:88:AB:EE:A3:1A:85:68:E9:5C:C8:E1:02:D8:16
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:6c:a4:04:15:56:37:23:09:5b:b9:42:57:c3:5e:45:51:
c3:48:69:69:d5:cd:e3:9a:be:9d:8f:ce:da:66:0a:b0:7f:04:
82:3b:b5:5d:d1:46:46:a5:5c:4c:85:71:f9:dc:cd:93:5c:6e:
40:dd:19:f0:57:91:88:cf:74:d4:db:54:4e:47:3d:58:68:aa:
cd:01:b3:6e:18:5d:b3:63:aa:33:4f:bb:f8:3b:af:af:c0:8d:
6d:d7:83:36:96:29:35:bd:f2:67:5f:be:b6:f2:e5:36:d7:54:
60:3d:69:1d:33:3a:2a:e2:ea:ab:1c:b7:d4:07:3b:ba:83:93:
2c:82:fa:3b:4a:7d:be:69:38:c4:c7:ea:7d:db:a6:10:06:9a:
26:fd:c1:2a:00:65:23:aa:b8:c6:4d:0b:d6:79:14:3d:66:ca:
2c:2a:f3:54:ee:31:40:fc:4c:cf:fb:9d:a6:31:e4:f1:1b:b5:
a9:95:33:85:2d:90:b0:98:1f:f6:ad:2e:08:d0:57:84:4d:69:
0f:7c:3f:f0:8f:76:bf:58:e0:4f:17:1d:f9:7e:ff:b4:11:5c:
9e:b4:19:01:1d:dc:df:7c:3c:97:83:49:63:b3:f9:c9:d8:61:
bd:d1:ce:91:21:04:1a:e5:fc:2a:fd:84:c8:f0:b5:e8:d2:5e:
7a:5c:88:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oGqLrDg7F1P4DGbElRjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm
ZDg1NWIwHhcNMjUwNjI4MTMwMDU1WhcNMjUwNjI5MTMwMDU1WjAzMTEwLwYDVQQD
EygyY2M3NzQzMzExODA4OGFiZWVhMzFhODU2OGU5NWNjOGUxMDJkODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyeFuqgThdGra3jDWHWpNPGy4X2X
UPBBv2po9Lq0VsSYC9Gw3zgMMAbpu1ROdolPyEqaXZ4UtwlQG987mIOsopIulS0G
6hMOZIs+kPov9WReJ9I2UleAPaIhxibUzwpoZ8PLdlwBq0wh8RzDsjbanWl3hLKa
Cwo0hHPo4wcQRQRsJIB4isc0XiFswtHkjeVJyjFT0n41Awb/VSytGFQhx4Dp6umb
hv+gQyaxgsMqJuldZoRxYJnoCaWNToU5y34vBX6fl7p0oGC7PiJi2j1TNEoMsiV0
X6qeHFZWHGbn9iLqBCtHkfuauVKgT/yGaxm9QdjdBOQ1WDBUUWV+muNgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzHdDMRgIir7qMahWjpXMjhAtgWMB8GA1UdIwQY
MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt
NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew
LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABv5spAQV
VjcjCVu5QlfDXkVRw0hpadXN45q+nY/O2mYKsH8Egju1XdFGRqVcTIVx+dzNk1xu
QN0Z8FeRiM901NtUTkc9WGiqzQGzbhhds2OqM0+7+Duvr8CNbdeDNpYpNb3yZ1++
tvLlNtdUYD1pHTM6KuLqqxy31Ac7uoOTLIL6O0p9vmk4xMfqfdumEAaaJv3BKgBl
I6q4xk0L1nkUPWbKLCrzVO4xQPxMz/udpjHk8Ru1qZUzhS2QsJgf9q0uCNBXhE1p
D3w/8I92v1jgTxcd+X7/tBFcnrQZAR3c33w8l4NJY7P5ydhhvdHOkSEEGuX8Kv2E
yPC16NJeelyImw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:08 2025 by rpki-client