Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: 94BAco66UrS6Lrc+yOY5ejIIZ35UoYaWcDQVQLlzBRY=
Subject key identifier: 4D:89:63:71:66:65:2D:C5:DD:3F:32:AA:A4:D2:AC:E5:0D:D7:33:44
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 0197B77C0A954FA8F7E472B8FB5C34C92EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 1274
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: CB6vNdT0/Hxz8oEii9xGmLgLmXrGqhd4TzUnIS9uLz0=)
2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0a:95:4f:a8:f7:e4:72:b8:fb:5c:34:c9:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=4d89637166652dc5dd3f32aaa4d2ace50dd73344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7d:9d:f4:c6:3c:c2:80:df:88:0e:c0:65:14:
2a:c0:9f:25:a8:d7:1d:9c:13:b5:2e:d8:b1:aa:8b:
81:7b:e1:8d:e8:fa:f7:c4:bc:95:04:ad:39:61:81:
d4:f0:3d:38:cd:9e:4a:03:40:00:de:30:b5:dc:80:
9a:35:60:04:02:be:80:54:6b:da:ef:d9:ce:0a:ca:
7e:e8:51:a7:8c:c7:0a:d7:c5:30:80:6c:0b:29:56:
c4:6f:0c:d6:1f:89:e6:69:ee:58:d4:01:cb:19:ab:
c5:fd:83:87:24:64:10:90:dc:53:a5:8f:81:aa:98:
ec:d3:99:b6:98:09:d6:44:2b:48:09:f2:a7:94:46:
0e:75:59:bf:ad:af:21:0f:51:cc:5d:35:4e:97:59:
8c:26:ab:de:e0:94:81:9f:e7:31:e4:ff:ea:98:aa:
15:f0:49:9b:7c:79:a1:40:bb:11:37:be:10:d2:b2:
a4:80:eb:9e:a4:0b:15:88:53:d1:22:00:a0:8a:12:
4f:31:0b:fe:07:7e:86:06:32:7b:59:fe:5b:69:d0:
99:54:e2:c5:f7:89:e4:53:c6:a7:30:aa:2f:b2:a1:
92:d4:cd:02:e3:57:aa:8e:39:d1:91:8e:8e:36:3b:
06:e1:60:03:fb:10:de:f0:dd:21:e6:73:5d:28:62:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:89:63:71:66:65:2D:C5:DD:3F:32:AA:A4:D2:AC:E5:0D:D7:33:44
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bc:53:c9:b3:02:33:97:7f:04:46:2b:ea:ec:2a:5a:8f:20:
c5:78:29:8a:57:e5:eb:42:7e:c7:06:d9:2c:3e:10:4d:fb:18:
8b:5e:42:97:3b:a8:0a:2f:88:dc:2c:dc:44:a6:b9:11:e6:70:
ee:c1:34:dd:7a:27:b7:fd:cd:6b:66:e5:f5:0e:2e:b6:dc:5b:
dc:e2:53:63:0b:4b:db:a9:28:58:2d:eb:60:28:ef:0b:e8:2b:
2f:69:78:81:fd:52:c3:e1:ec:a9:f4:c7:05:52:8b:4f:34:d3:
a3:33:ce:f9:fe:6e:3e:e0:8e:92:90:d5:82:3f:43:3c:ae:cf:
77:14:a0:16:44:21:a8:7e:97:31:72:07:0f:eb:1a:b1:3d:cd:
12:e9:43:05:bd:73:02:e3:76:8d:75:7e:f8:c1:09:d1:fa:dd:
d4:4c:85:d0:35:b7:6d:85:3b:20:d5:3b:c7:96:bd:d0:6f:36:
52:49:b7:cd:67:28:b3:e9:90:b4:51:04:41:8c:d5:7e:e6:b6:
5f:f1:59:23:3b:75:4a:f0:2c:b1:49:77:1e:91:93:fd:80:67:
f4:78:e4:93:39:e7:97:77:c3:89:7e:23:e8:9a:c2:6b:78:1d:
91:d1:14:5c:a3:70:ac:95:5d:10:b9:3d:75:a5:4f:94:fa:9f:
85:2d:b9:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fAqVT6j35HK4+1w0yS69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk
OGMzOWEwHhcNMjUwNjI4MTcwMDQ4WhcNMjUwNjI5MTcwMDQ4WjAzMTEwLwYDVQQD
Eyg0ZDg5NjM3MTY2NjUyZGM1ZGQzZjMyYWFhNGQyYWNlNTBkZDczMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh32d9MY8woDfiA7AZRQqwJ8lqNcd
nBO1LtixqouBe+GN6Pr3xLyVBK05YYHU8D04zZ5KA0AA3jC13ICaNWAEAr6AVGva
79nOCsp+6FGnjMcK18UwgGwLKVbEbwzWH4nmae5Y1AHLGavF/YOHJGQQkNxTpY+B
qpjs05m2mAnWRCtICfKnlEYOdVm/ra8hD1HMXTVOl1mMJqve4JSBn+cx5P/qmKoV
8EmbfHmhQLsRN74Q0rKkgOuepAsViFPRIgCgihJPMQv+B36GBjJ7Wf5badCZVOLF
94nkU8anMKovsqGS1M0C41eqjjnRkY6ONjsG4WAD+xDe8N0h5nNdKGJPMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2JY3FmZS3F3T8yqqTSrOUN1zNEMB8GA1UdIwQY
MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt
MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh
LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLxTybMC
M5d/BEYr6uwqWo8gxXgpilfl60J+xwbZLD4QTfsYi15ClzuoCi+I3CzcRKa5EeZw
7sE03Xont/3Na2bl9Q4uttxb3OJTYwtL26koWC3rYCjvC+grL2l4gf1Sw+HsqfTH
BVKLTzTTozPO+f5uPuCOkpDVgj9DPK7PdxSgFkQhqH6XMXIHD+sasT3NEulDBb1z
AuN2jXV++MEJ0frd1EyF0DW3bYU7INU7x5a90G82Ukm3zWcos+mQtFEEQYzVfua2
X/FZIzt1SvAssUl3HpGT/YBn9Hjkkznnl3fDiX4j6JrCa3gdkdEUXKNwrJVdELk9
daVPlPqfhS25bQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:29:56 2025 by rpki-client