Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: THK51/DltyHjjkzjz0pRWbUUEUJ/Nd2cVINzdk4InNU=
Subject key identifier: 71:31:05:71:46:F5:FC:54:30:E6:35:35:34:A1:61:68:4A:93:48:C5
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 0197B6A1C23A8A8F32FD219987FC0B9FA076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: Czut7kmygNyVvlWwdnRVPBXtZJHwz7fcjooS8tg6l0E=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c2:3a:8a:8f:32:fd:21:99:87:fc:0b:9f:a0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=7131057146f5fc5430e6353534a161684a9348c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:ab:12:be:64:a8:64:37:9a:bd:d9:72:3e:
f9:35:18:33:6b:f4:04:be:98:eb:88:b3:63:9d:bb:
ba:6f:25:81:de:43:ec:f1:1d:fe:10:cd:20:6f:b4:
4a:e9:89:91:6b:c4:44:7b:0a:5e:08:d7:0c:66:e4:
7c:c3:48:62:24:02:0f:4b:25:63:ba:c9:22:5f:fa:
56:d9:da:f2:13:4c:70:a6:83:90:9b:09:85:6e:2c:
0e:04:eb:d7:ca:e2:b5:19:af:ac:f4:65:1f:59:a2:
bf:4f:2a:3b:ab:5f:46:3f:ee:d3:b7:4b:55:b9:c3:
42:73:0a:4c:4b:2d:b2:56:1b:83:ca:49:a0:bb:d0:
0d:94:78:20:de:2c:0f:a1:d2:d7:14:01:a5:64:84:
97:0e:72:5a:c6:ab:0b:e8:1c:31:35:8a:8d:d1:71:
03:e7:4b:96:d1:a5:3d:7b:5d:8d:75:56:9d:6b:a1:
90:e4:f6:42:4c:3f:d4:ac:fd:a4:c0:6d:92:29:79:
a3:76:02:e7:f1:47:03:61:2a:a1:23:93:f1:0a:89:
b9:cc:05:6b:c9:73:9f:a8:4c:27:11:2a:cd:1d:d7:
81:76:82:60:fa:50:34:e7:1e:51:8c:6e:d0:ec:5b:
20:39:7c:2d:6a:7b:0f:32:1b:30:ae:36:ff:73:7b:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:31:05:71:46:F5:FC:54:30:E6:35:35:34:A1:61:68:4A:93:48:C5
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9c:75:d2:2c:3c:a8:de:33:63:63:1e:1e:8a:5b:ac:4f:7c:
89:40:4d:4a:a8:af:0c:56:60:d2:78:eb:55:09:7a:d6:fe:13:
06:e6:42:bd:d0:4c:a5:a9:56:53:33:bf:ca:98:66:d0:b4:46:
10:af:40:cd:76:bb:2a:7e:a7:6b:b3:c1:7c:a3:ac:be:fc:31:
35:fd:db:77:dd:2a:e1:44:18:19:79:d8:48:df:42:2b:84:fb:
bc:e4:65:4e:26:a4:f9:cb:70:77:07:e0:1f:c2:c4:12:29:96:
a4:38:69:37:56:d9:0f:2a:c9:e1:1b:83:b8:ec:82:fb:cf:5a:
5b:4c:87:47:9e:0a:43:23:5a:9a:6d:0f:d5:4a:4b:33:cf:0f:
52:93:e2:17:12:9b:30:92:d9:a4:48:ee:69:2f:2d:be:9f:9d:
c3:c6:63:58:61:6d:ab:f2:43:6e:17:68:b8:e1:63:05:f1:66:
4d:8d:a1:0b:0d:9a:43:df:1e:de:b4:fe:53:5f:8e:fb:fb:f5:
fa:61:9e:4c:50:7b:31:2d:2e:c9:3e:df:f1:69:bd:d0:e3:2f:
20:ff:4e:b0:a5:8a:57:88:d1:e5:05:df:e2:49:7a:82:53:05:
f8:c1:7d:43:be:9a:f8:6d:4f:37:b5:ff:76:29:d1:43:98:1e:
e4:45:0f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ocI6io8y/SGZh/wLn6B2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTkwNjI3MDIxYWRjZmE1NjI0MzQyZDNlNWY4YjQ4MDM1
YWNmYjQwHhcNMjUwNjI4MTMwMjIzWhcNMjUwNjI5MTMwMjIzWjAzMTEwLwYDVQQD
Eyg3MTMxMDU3MTQ2ZjVmYzU0MzBlNjM1MzUzNGExNjE2ODRhOTM0OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAWrEr5kqGQ3mr3Zcj75NRgza/QE
vpjriLNjnbu6byWB3kPs8R3+EM0gb7RK6YmRa8REewpeCNcMZuR8w0hiJAIPSyVj
uskiX/pW2dryE0xwpoOQmwmFbiwOBOvXyuK1Ga+s9GUfWaK/Tyo7q19GP+7Tt0tV
ucNCcwpMSy2yVhuDykmgu9ANlHgg3iwPodLXFAGlZISXDnJaxqsL6BwxNYqN0XED
50uW0aU9e12NdVada6GQ5PZCTD/UrP2kwG2SKXmjdgLn8UcDYSqhI5PxCom5zAVr
yXOfqEwnESrNHdeBdoJg+lA05x5RjG7Q7FsgOXwtansPMhswrjb/c3sfowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHExBXFG9fxUMOY1NTShYWhKk0jFMB8GA1UdIwQY
MBaAFGTpBicCGtz6ViQ0LT5fi0gDWs+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYt
NWYyODgyZGUzZWM3LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYtNWYyODgyZGUzZWM3
LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpx10iw8
qN4zY2MeHopbrE98iUBNSqivDFZg0njrVQl61v4TBuZCvdBMpalWUzO/yphm0LRG
EK9AzXa7Kn6na7PBfKOsvvwxNf3bd90q4UQYGXnYSN9CK4T7vORlTiak+ctwdwfg
H8LEEimWpDhpN1bZDyrJ4RuDuOyC+89aW0yHR54KQyNamm0P1UpLM88PUpPiFxKb
MJLZpEjuaS8tvp+dw8ZjWGFtq/JDbhdouOFjBfFmTY2hCw2aQ98e3rT+U1+O+/v1
+mGeTFB7MS0uyT7f8Wm90OMvIP9OsKWKV4jR5QXf4kl6glMF+MF9Q76a+G1PN7X/
dinRQ5ge5EUP+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:04 2025 by rpki-client