Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: 4V7DwwXtmkPIP8lGW6j3RxTy+58Oen8O/+xE6e9RUqs=
Subject key identifier: 18:E1:C7:D6:81:FE:CE:C8:86:88:C3:33:D6:35:E3:69:D7:45:5C:FB
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 0197B6A12E6E19DD82B190CF16420A0468AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:45 +0000
Manifest this update: Sat 28 Jun 2025 13:01:45 +0000
Manifest next update: Sun 29 Jun 2025 13:01:45 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: ZiW7wETG+pQVGEvrOSUzL/nqLxw1PafLaiQJkAiSGz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2e:6e:19:dd:82:b1:90:cf:16:42:0a:04:68:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Jun 28 13:01:45 2025 GMT
Not After : Jun 29 13:01:45 2025 GMT
Subject: CN=18e1c7d681fecec88688c333d635e369d7455cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:2d:02:d0:bf:29:e9:93:ee:44:5b:9b:8e:
34:44:9e:2e:84:c4:43:f2:45:75:29:0a:8a:34:bf:
1b:0d:ab:c5:fd:a6:bd:88:11:c5:7e:11:4d:10:a7:
6c:a9:e2:47:f6:0c:2c:0a:d3:55:cf:1a:f4:af:26:
d4:68:76:91:96:d0:0a:29:ea:2f:c7:24:0f:b4:b7:
53:b9:a4:b9:00:c5:d4:dd:53:64:46:98:ae:bf:f3:
7e:30:6a:ba:fb:26:f0:2a:d5:2a:c3:b5:9a:53:70:
f9:77:d3:18:6a:fc:35:7e:fc:5e:b4:65:02:2e:96:
74:7b:4b:5e:09:09:6d:5b:1b:fb:82:20:a4:fd:44:
38:cd:b2:d5:e4:5d:54:6e:76:e3:b6:e0:0d:2f:5c:
e0:92:52:dd:78:2b:dc:05:2a:54:4b:2b:f4:16:95:
25:b5:16:b2:1b:ac:78:f1:72:1d:4b:c1:7c:c7:74:
e4:0d:f4:b3:ed:ab:f8:a5:05:cb:e9:4f:0a:cb:85:
36:23:f2:42:13:60:91:43:ec:1f:5d:e7:ef:bc:b6:
bf:d4:2e:20:69:e0:c6:e7:5f:ac:f2:a2:e7:9a:e0:
fb:73:e3:06:9a:e9:5e:c8:38:b2:63:ca:89:40:7f:
86:9b:43:0d:5b:f4:41:8f:de:7a:0d:0f:99:d6:46:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:C7:D6:81:FE:CE:C8:86:88:C3:33:D6:35:E3:69:D7:45:5C:FB
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:77:a4:f5:64:30:1b:a4:6b:40:ed:7b:29:f3:cd:ac:a9:ff:
75:a9:2c:ec:4c:d1:6f:82:56:85:c3:7d:75:89:5f:3b:ae:0f:
7e:73:34:c2:b0:48:50:5a:1a:b5:c7:ba:ad:27:cd:ff:ff:75:
36:d6:6f:d1:1b:c3:42:c2:69:81:be:a2:07:44:3c:b4:8f:37:
b5:1f:48:0e:55:1d:6a:ff:16:02:04:2f:ea:8b:f4:1a:69:21:
8a:c7:2a:57:92:c3:8d:be:7f:da:41:83:13:74:f1:a7:ce:1e:
51:80:cd:41:84:b4:0a:37:33:71:21:c7:21:67:fb:3b:3e:ea:
2c:d4:a0:1c:f1:b7:2a:40:c9:ba:df:e3:85:0d:53:62:c0:5c:
be:bd:09:32:71:87:29:c3:20:3c:1b:c7:8e:f4:7d:ba:b0:70:
b6:c8:25:1f:7b:17:7f:aa:86:c3:7c:33:ef:9d:2b:95:c7:00:
07:9a:12:e9:63:13:1c:fb:d9:ff:a5:f4:ae:65:01:f8:cc:e0:
f3:f9:1a:e6:74:9f:05:c4:0c:f4:36:72:e4:7a:6b:1c:d2:83:
89:69:10:77:04:29:e0:62:82:50:1b:12:5a:1a:8d:9d:62:92:
f3:65:f1:a3:4e:47:fc:35:b6:11:e2:72:ae:38:c9:7d:4f:30:
a8:3b:4f:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oS5uGd2CsZDPFkIKBGirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy
YzAwMjMwHhcNMjUwNjI4MTMwMTQ1WhcNMjUwNjI5MTMwMTQ1WjAzMTEwLwYDVQQD
EygxOGUxYzdkNjgxZmVjZWM4ODY4OGMzMzNkNjM1ZTM2OWQ3NDU1Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpotAtC/KemT7kRbm440RJ4uhMRD
8kV1KQqKNL8bDavF/aa9iBHFfhFNEKdsqeJH9gwsCtNVzxr0rybUaHaRltAKKeov
xyQPtLdTuaS5AMXU3VNkRpiuv/N+MGq6+ybwKtUqw7WaU3D5d9MYavw1fvxetGUC
LpZ0e0teCQltWxv7giCk/UQ4zbLV5F1UbnbjtuANL1zgklLdeCvcBSpUSyv0FpUl
tRayG6x48XIdS8F8x3TkDfSz7av4pQXL6U8Ky4U2I/JCE2CRQ+wfXefvvLa/1C4g
aeDG51+s8qLnmuD7c+MGmuleyDiyY8qJQH+Gm0MNW/RBj956DQ+Z1kYGhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjhx9aB/s7IhojDM9Y142nXRVz7MB8GA1UdIwQY
MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et
M2VlMWU2OTkxMjY5LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5
LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3ek9WQw
G6RrQO17KfPNrKn/daks7EzRb4JWhcN9dYlfO64PfnM0wrBIUFoatce6rSfN//91
NtZv0RvDQsJpgb6iB0Q8tI83tR9IDlUdav8WAgQv6ov0GmkhiscqV5LDjb5/2kGD
E3Txp84eUYDNQYS0CjczcSHHIWf7Oz7qLNSgHPG3KkDJut/jhQ1TYsBcvr0JMnGH
KcMgPBvHjvR9urBwtsglH3sXf6qGw3wz750rlccAB5oS6WMTHPvZ/6X0rmUB+Mzg
8/ka5nSfBcQM9DZy5HprHNKDiWkQdwQp4GKCUBsSWhqNnWKS82Xxo05H/DW2EeJy
rjjJfU8wqDtPJw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:53 2025 by rpki-client