Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: olPPHC9OrYTWY9x0xVVAyJde7B5XtkJTSL84sJMPeJQ=
Subject key identifier: 85:35:5C:44:E0:ED:E7:62:28:DD:8A:F9:57:79:87:DA:88:C3:D2:21
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 0197B77C3F3D726D1E4BAC0B743260B9B2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 0F21
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: pDhGAUUYTY1UyjFCug_VA9YXDfc.roa (hash: 6QASzR15fgb6kzzjuyGG0IHeby7n6I+Zv7YlWcP1xhM=)
2: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: h3V77qR7s2i/Gcl3HLNsYUTp35GtHPsCj2+GF4bbQC8=)
3: zX5SsCvbtwgH75QXuBUCbtdy6Ww.roa (hash: wvJG3iztzAVZHUfCx2K+W5TdCzTlwS3eoby1xR0ldnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3f:3d:72:6d:1e:4b:ac:0b:74:32:60:b9:b2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=85355c44e0ede76228dd8af9577987da88c3d221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:4c:6c:3a:53:f0:ae:c5:19:33:61:83:27:
f0:51:dc:d6:f7:1f:9b:3e:86:f9:43:a4:9e:ce:f6:
d8:9b:f3:76:e6:59:96:5b:55:45:73:a6:c0:98:20:
63:82:d2:6a:aa:e5:8c:80:89:70:ee:b8:83:16:00:
46:ae:db:e5:bb:d4:c3:cf:05:7b:be:c0:5a:48:fc:
5b:6b:bc:74:fc:d8:2e:d6:1c:e7:63:5b:28:1d:9c:
51:e2:a7:1a:a0:37:e2:05:41:e4:31:78:be:cd:89:
69:f4:3e:00:54:ed:fc:fc:da:72:93:13:50:91:6d:
e5:a8:4e:54:0e:c4:5c:28:93:93:62:97:fd:0b:7e:
07:49:91:a1:6d:11:2a:cf:bd:58:f0:7e:19:fa:d9:
db:88:38:ee:b3:c3:0b:f3:af:ad:f3:d5:6d:f8:d3:
c1:2a:f4:80:ec:aa:4b:72:56:f2:cc:16:b5:e7:d3:
8a:54:91:b8:da:c9:68:5f:71:8f:59:05:41:66:19:
bb:e8:da:48:ee:05:58:93:30:55:69:e2:b3:2e:76:
d6:a1:51:b0:6c:2e:f6:aa:ab:78:49:d9:e1:c1:26:
ac:fa:9f:34:d7:5e:78:a4:b6:02:d8:d5:bf:fd:75:
02:ac:bd:3b:21:6b:b6:85:d0:d0:84:fe:47:21:9d:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:35:5C:44:E0:ED:E7:62:28:DD:8A:F9:57:79:87:DA:88:C3:D2:21
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cf:de:f4:87:c8:ec:d4:1c:8f:2a:3e:94:df:45:8b:9e:2c:
00:d1:e1:94:5d:ad:4f:4a:f8:4f:09:07:e8:61:29:44:f0:74:
73:44:07:97:ed:25:fd:a9:35:92:d6:b0:9e:95:10:e9:9c:9c:
61:3c:31:a5:b3:7c:c6:39:b9:39:63:e8:a3:51:f9:ae:f1:b8:
a9:fb:f8:07:5a:d0:e7:e5:1c:fc:d4:8f:2b:87:c8:61:86:86:
5d:86:77:b0:5c:57:86:da:f4:02:11:a8:4b:81:e3:87:19:ee:
dc:57:6d:e3:65:4f:1c:69:b4:55:01:6c:07:04:e1:c9:ae:f1:
03:39:89:3c:9c:97:0f:d4:76:23:6e:b9:1f:08:a9:8b:ae:00:
ed:5d:f7:4b:ff:9f:d0:36:9e:4c:cf:0f:6a:fb:4e:c0:bd:2d:
dd:e7:17:14:9c:7d:83:61:2a:32:57:6d:a1:88:79:15:f0:62:
1f:06:b7:0c:25:45:cb:05:4f:23:be:9f:e8:bd:fa:ff:61:28:
28:eb:a1:52:46:c0:02:de:ce:b8:9d:10:b8:ee:d5:36:e5:02:
97:f2:bc:36:49:5f:f7:63:50:e8:a8:83:dd:db:84:29:26:01:
99:ca:1d:c6:f5:f1:dc:5f:29:9a:63:22:86:5d:51:b7:d9:bb:
13:82:d9:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fD89cm0eS6wLdDJgubLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2RmNjUxNjIzN2Q0MjVlOWFlMzgxN2VjYjE0MWY0ODE3
NzNjMTIwHhcNMjUwNjI4MTcwMTAyWhcNMjUwNjI5MTcwMTAyWjAzMTEwLwYDVQQD
Eyg4NTM1NWM0NGUwZWRlNzYyMjhkZDhhZjk1Nzc5ODdkYTg4YzNkMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvFMbDpT8K7FGTNhgyfwUdzW9x+b
Pob5Q6SezvbYm/N25lmWW1VFc6bAmCBjgtJqquWMgIlw7riDFgBGrtvlu9TDzwV7
vsBaSPxba7x0/Ngu1hznY1soHZxR4qcaoDfiBUHkMXi+zYlp9D4AVO38/NpykxNQ
kW3lqE5UDsRcKJOTYpf9C34HSZGhbREqz71Y8H4Z+tnbiDjus8ML86+t89Vt+NPB
KvSA7KpLclbyzBa159OKVJG42sloX3GPWQVBZhm76NpI7gVYkzBVaeKzLnbWoVGw
bC72qqt4SdnhwSas+p801154pLYC2NW//XUCrL07IWu2hdDQhP5HIZ3gqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIU1XETg7ediKN2K+Vd5h9qIw9IhMB8GA1UdIwQY
MBaAFMzN9lFiN9Ql6a44F+yxQfSBdzwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEt
MWI1MDE1MjA1MzJiLzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYjc0ODUtOGI3NC00ZDUwLTk3NGEtMWI1MDE1MjA1MzJi
LzEvek0zMlVXSTMxQ1hwcmpnWDdMRkI5SUYzUEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACM/e9IfI
7NQcjyo+lN9Fi54sANHhlF2tT0r4TwkH6GEpRPB0c0QHl+0l/ak1ktawnpUQ6Zyc
YTwxpbN8xjm5OWPoo1H5rvG4qfv4B1rQ5+Uc/NSPK4fIYYaGXYZ3sFxXhtr0AhGo
S4Hjhxnu3Fdt42VPHGm0VQFsBwThya7xAzmJPJyXD9R2I265Hwipi64A7V33S/+f
0DaeTM8PavtOwL0t3ecXFJx9g2EqMldtoYh5FfBiHwa3DCVFywVPI76f6L36/2Eo
KOuhUkbAAt7OuJ0QuO7VNuUCl/K8Nklf92NQ6KiD3duEKSYBmcodxvXx3F8pmmMi
hl1Rt9m7E4LZ/A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:37 2025 by rpki-client