Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: R5EYMEaJlOaaGL+Y3SsBorBzSVYNs4WwLdJBMj6FY7U=
Subject key identifier: 51:1E:47:17:FB:B5:75:62:F0:D8:75:31:A2:FA:33:DE:35:50:E0:ED
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 0197B820E1DF578A7304888F0108A4DDA237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 0441
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: q3qohSjTyykTeoe8qvF5tgpc9PK8rJobPuIg1Kxr45s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e1:df:57:8a:73:04:88:8f:01:08:a4:dd:a2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=511e4717fbb57562f0d87531a2fa33de3550e0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:fa:e4:4f:30:20:7f:0f:e3:c3:5c:b5:56:
8c:f1:d5:09:f8:93:76:af:30:77:5e:54:fb:db:24:
10:36:ab:cb:55:cd:62:9b:18:05:db:06:07:31:31:
74:a6:ad:e3:a0:b5:ae:aa:cf:4a:07:ac:2e:57:5a:
7d:1d:ba:eb:1c:62:09:e0:a8:06:79:30:0e:6f:41:
b1:52:e4:ef:18:9f:8d:19:39:e5:3d:de:66:58:e5:
3d:53:43:49:de:86:d4:43:73:be:4e:b7:c9:35:e4:
3c:73:cd:76:82:5e:e1:91:b0:ee:d6:2d:c1:ba:f9:
ac:06:b7:b1:9c:c2:3a:dc:0d:3a:17:80:68:93:77:
1d:3f:22:53:ba:17:b5:80:7a:77:c8:39:cc:49:14:
64:bc:ac:50:e9:85:2b:70:9a:e8:95:ce:ef:32:eb:
78:9e:a1:9c:c5:97:48:3f:48:85:3a:ce:d4:ef:9d:
7e:f2:ab:dd:b1:5f:7d:15:d4:75:55:2a:b6:05:82:
9f:4a:17:89:ea:f4:5f:c7:bd:c9:a2:f8:5c:c5:ab:
d6:9a:28:12:4a:ff:78:ec:4f:e7:1e:ca:26:2c:90:
68:ee:74:60:2f:c5:94:79:fd:00:85:b5:e1:f8:c1:
89:79:ca:59:69:d0:95:6a:dc:cd:1c:a0:ae:ec:b3:
3b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1E:47:17:FB:B5:75:62:F0:D8:75:31:A2:FA:33:DE:35:50:E0:ED
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d4:f5:96:45:4c:99:b8:31:1e:85:c5:34:f5:75:9e:14:99:
d1:01:c7:21:3f:b3:6d:ab:eb:82:47:a1:7d:a2:97:59:30:0c:
35:ce:35:cf:6f:60:00:28:06:d2:fd:f7:a4:0d:f9:b7:c9:8e:
ac:45:a4:94:42:65:18:04:60:30:3a:8c:99:0b:2a:9a:94:c5:
bf:c1:7c:49:65:57:75:ca:e0:2b:e5:93:ff:ed:ab:ae:f4:9c:
39:94:06:00:99:c4:93:af:0c:7f:4e:b3:a3:b7:93:3e:ca:4a:
33:f4:c1:b9:e6:1d:85:98:d9:3a:ce:d2:26:89:1b:34:31:ab:
43:bc:53:02:49:ec:d0:99:08:11:e8:cd:07:ab:2b:a2:7b:d6:
a4:93:8c:23:82:53:a8:1a:7d:5d:08:ba:ca:fc:16:63:65:30:
d7:86:52:89:ec:f7:ea:64:d0:ed:f6:4c:d2:7d:72:6e:6d:df:
dc:64:1c:51:94:07:48:c2:19:e8:fd:cb:97:29:a0:4e:ca:ad:
fa:30:ef:5a:c3:b6:43:5b:0f:f3:22:d5:8f:13:8b:b3:8a:1d:
a9:41:35:61:98:2c:f8:09:e8:95:aa:fe:67:ed:0e:cf:0e:e6:
6a:c6:16:2a:8e:0a:64:9b:7c:4b:29:df:ef:10:79:0d:ef:a0:
71:92:b0:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IOHfV4pzBIiPAQik3aI3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk4ZjdmM2Q1YjNiODJkY2ZkZWM5MDJiMDNmNzMzZDg5
NWRhZTcwHhcNMjUwNjI4MjAwMDUyWhcNMjUwNjI5MjAwMDUyWjAzMTEwLwYDVQQD
Eyg1MTFlNDcxN2ZiYjU3NTYyZjBkODc1MzFhMmZhMzNkZTM1NTBlMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFf65E8wIH8P48NctVaM8dUJ+JN2
rzB3XlT72yQQNqvLVc1imxgF2wYHMTF0pq3joLWuqs9KB6wuV1p9HbrrHGIJ4KgG
eTAOb0GxUuTvGJ+NGTnlPd5mWOU9U0NJ3obUQ3O+TrfJNeQ8c812gl7hkbDu1i3B
uvmsBrexnMI63A06F4Bok3cdPyJTuhe1gHp3yDnMSRRkvKxQ6YUrcJrolc7vMut4
nqGcxZdIP0iFOs7U751+8qvdsV99FdR1VSq2BYKfSheJ6vRfx73JovhcxavWmigS
Sv947E/nHsomLJBo7nRgL8WUef0AhbXh+MGJecpZadCVatzNHKCu7LM7AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEeRxf7tXVi8Nh1MaL6M941UODtMB8GA1UdIwQY
MBaAFM05j389WzuC3P3skCsD9zPYldrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAt
YWM1OGIyODdmYjY0LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xOGQ5NTUtZTk5Mi00ZmEwLWJiYTAtYWM1OGIyODdmYjY0
LzEvelRtUGZ6MWJPNExjX2V5UUt3UDNNOWlWMnVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddT1lkVM
mbgxHoXFNPV1nhSZ0QHHIT+zbavrgkehfaKXWTAMNc41z29gACgG0v33pA35t8mO
rEWklEJlGARgMDqMmQsqmpTFv8F8SWVXdcrgK+WT/+2rrvScOZQGAJnEk68Mf06z
o7eTPspKM/TBueYdhZjZOs7SJokbNDGrQ7xTAkns0JkIEejNB6sronvWpJOMI4JT
qBp9XQi6yvwWY2Uw14ZSiez36mTQ7fZM0n1ybm3f3GQcUZQHSMIZ6P3LlymgTsqt
+jDvWsO2Q1sP8yLVjxOLs4odqUE1YZgs+Anolar+Z+0Ozw7masYWKo4KZJt8Synf
7xB5De+gcZKw2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:04 2025 by rpki-client