Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: 8K1WRHdvbfwfcvuLEiHjgFWGY4vWSk9ODWGE6keLxSc=
Subject key identifier: F7:09:AB:8A:F7:A2:F0:16:DD:07:B7:07:CF:FE:0E:81:E7:E9:9D:14
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 0197B6A25130231FDA0BA1EE5EF832B3E252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 01AA
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: c1FbYKgRjGxjYrApHjLCz+EZLPiPgqK7CN6bN6eDAOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:51:30:23:1f:da:0b:a1:ee:5e:f8:32:b3:e2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=f709ab8af7a2f016dd07b707cffe0e81e7e99d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:21:39:29:70:2e:72:47:b4:5f:34:f6:8f:
a3:c8:cd:19:13:b0:ef:39:a4:e0:ed:ce:0d:f1:26:
92:c0:ac:e3:ef:de:b4:83:e4:b2:42:63:6f:a1:ba:
f6:69:73:13:40:ef:ed:7d:e4:bb:ae:53:af:3d:f6:
36:cb:cf:ef:ec:e9:95:50:1e:ae:6b:10:e2:5f:c4:
2f:d4:d0:72:b1:2a:43:3f:df:1e:d6:10:ac:e0:41:
00:21:6a:35:03:1f:f8:9a:f2:f3:f5:28:80:52:13:
ee:c0:59:ee:87:06:7a:65:ed:f9:9d:9d:aa:40:d2:
74:b2:37:e3:fb:9e:ed:0c:5a:4e:b7:8e:f0:3a:e3:
e9:e2:bf:69:11:0e:c9:a6:a5:b3:9b:09:19:a6:8c:
ba:d3:bc:75:01:3f:fa:6d:f5:1f:c4:6d:73:51:9e:
ed:d9:96:ac:ff:10:ff:10:1d:ef:d2:e6:50:dc:cd:
68:b3:0e:54:96:d5:3a:ee:db:85:53:25:cf:7e:1a:
0b:4a:95:82:e0:8e:2c:ee:77:c7:91:29:e7:44:44:
6b:50:c0:da:5e:8d:41:2a:4d:04:27:27:5c:68:b6:
62:04:99:80:09:f4:69:1b:99:4b:bd:ff:52:ea:04:
25:25:33:a9:14:2c:f0:96:1b:82:ff:58:25:18:ed:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:AB:8A:F7:A2:F0:16:DD:07:B7:07:CF:FE:0E:81:E7:E9:9D:14
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:71:0c:86:71:d2:04:c0:b8:d2:4e:7e:eb:82:f5:17:cc:a9:
1b:16:bb:08:4d:45:46:cc:1b:bd:4d:39:71:23:69:ae:4b:cf:
1f:18:59:cd:c3:76:d2:6c:d4:e3:30:3d:81:b4:b8:8f:78:c5:
99:93:08:68:83:9a:8a:8d:11:6f:0d:d1:c2:85:77:97:40:fc:
37:f1:0c:61:54:67:6e:05:71:b2:14:af:de:fd:d4:97:fd:ed:
bf:be:a9:38:12:5e:81:2b:b7:1f:1e:8b:3b:04:a4:f0:d7:af:
a9:1c:87:88:43:31:d0:e6:b9:c9:1f:5e:f0:7f:94:6a:19:a9:
61:de:c6:55:36:f4:a4:42:29:a0:a0:2e:b8:91:d8:98:c3:62:
0f:0a:80:ec:94:c4:86:4e:c5:55:84:46:37:46:50:69:08:f2:
0d:a4:f6:80:b5:00:da:70:4c:ea:db:51:44:49:43:e7:5a:3f:
66:7f:e3:1d:84:e8:16:61:d6:18:0a:4b:83:b9:0f:57:3b:a4:
4d:70:ce:ef:c8:27:e3:03:c8:89:c1:c8:88:32:4a:56:20:a4:
21:b0:ba:3e:0f:33:eb:38:4f:b7:23:60:bc:ea:d0:9b:58:4f:
5b:65:5a:b7:7e:ae:5c:66:e8:2f:85:e9:f7:54:9b:d7:83:e7:
f7:c3:86:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2olEwIx/aC6HuXvgys+JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj
NDE4NDMwHhcNMjUwNjI4MTMwMzAwWhcNMjUwNjI5MTMwMzAwWjAzMTEwLwYDVQQD
EyhmNzA5YWI4YWY3YTJmMDE2ZGQwN2I3MDdjZmZlMGU4MWU3ZTk5ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsAhOSlwLnJHtF809o+jyM0ZE7Dv
OaTg7c4N8SaSwKzj7960g+SyQmNvobr2aXMTQO/tfeS7rlOvPfY2y8/v7OmVUB6u
axDiX8Qv1NBysSpDP98e1hCs4EEAIWo1Ax/4mvLz9SiAUhPuwFnuhwZ6Ze35nZ2q
QNJ0sjfj+57tDFpOt47wOuPp4r9pEQ7JpqWzmwkZpoy607x1AT/6bfUfxG1zUZ7t
2Zas/xD/EB3v0uZQ3M1osw5UltU67tuFUyXPfhoLSpWC4I4s7nfHkSnnRERrUMDa
Xo1BKk0EJydcaLZiBJmACfRpG5lLvf9S6gQlJTOpFCzwlhuC/1glGO21WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcJq4r3ovAW3Qe3B8/+DoHn6Z0UMB8GA1UdIwQY
MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt
YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy
LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHEMhnHS
BMC40k5+64L1F8ypGxa7CE1FRswbvU05cSNprkvPHxhZzcN20mzU4zA9gbS4j3jF
mZMIaIOaio0Rbw3RwoV3l0D8N/EMYVRnbgVxshSv3v3Ul/3tv76pOBJegSu3Hx6L
OwSk8NevqRyHiEMx0Oa5yR9e8H+UahmpYd7GVTb0pEIpoKAuuJHYmMNiDwqA7JTE
hk7FVYRGN0ZQaQjyDaT2gLUA2nBM6ttRRElD51o/Zn/jHYToFmHWGApLg7kPVzuk
TXDO78gn4wPIicHIiDJKViCkIbC6Pg8z6zhPtyNgvOrQm1hPW2Vat36uXGboL4Xp
91Sb14Pn98OGVg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:11:07 2025 by rpki-client