Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: Lio7wPz8dhNVT5cNErR48vzTeZDo/UAeexjH08NFOSE=
Subject key identifier: F7:2D:B4:57:90:D2:7F:5A:54:E6:06:A4:94:87:B9:F7:3A:D7:96:A0
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 019858D8906394C7A3D24F35027ADA4BE816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 0F87
Signing time: Wed 30 Jul 2025 01:00:44 +0000
Manifest this update: Wed 30 Jul 2025 01:00:44 +0000
Manifest next update: Thu 31 Jul 2025 01:00:44 +0000
Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: gprxRpjPcH3Bg8468ln5z5ekQ7D2s1kgpPzNk4omrUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d8:90:63:94:c7:a3:d2:4f:35:02:7a:da:4b:e8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Jul 30 01:00:44 2025 GMT
Not After : Jul 31 01:00:44 2025 GMT
Subject: CN=f72db45790d27f5a54e606a49487b9f73ad796a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:65:b7:7f:88:3c:cd:d1:97:9e:f8:e1:13:
a7:10:bb:85:aa:6f:d0:be:d6:75:f1:ef:19:aa:fe:
6e:59:69:ea:66:32:59:a5:52:aa:7f:a4:ef:45:2b:
e6:91:7b:8a:b1:a1:2f:5b:12:89:fa:54:77:69:bb:
49:02:f6:ca:22:ca:87:a7:6a:bf:7d:9f:d3:92:e3:
2c:26:c4:5f:fd:b2:05:a3:e9:19:d9:34:1b:5c:4c:
a0:2f:34:79:fe:b9:9c:d1:3b:23:9f:97:8a:f6:14:
8a:19:bb:a0:8d:d9:2e:a2:fa:47:7d:2f:c5:16:1f:
86:29:8b:58:c3:9a:6d:cc:25:2a:37:5f:ea:4a:ca:
77:e7:b8:65:ea:8e:11:f6:86:1f:31:ca:b6:1d:9b:
96:bb:f1:ad:7b:bf:03:77:28:87:05:75:56:b1:23:
62:bf:de:44:32:83:51:8f:7d:9c:68:5a:49:65:2c:
eb:ac:9d:e7:a5:00:6b:dc:b8:31:00:75:cf:cc:74:
f6:3f:71:c5:ed:f0:7a:2e:32:76:f1:b0:68:a1:92:
f2:a6:a3:04:09:6c:da:4d:96:e0:ea:60:c0:84:c0:
14:bd:6b:75:b4:e2:47:7f:cf:a1:d1:40:c0:74:c7:
80:2d:eb:80:aa:f0:47:62:97:34:b2:4e:18:14:c2:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2D:B4:57:90:D2:7F:5A:54:E6:06:A4:94:87:B9:F7:3A:D7:96:A0
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b8:22:68:d4:0a:66:aa:38:7d:85:23:6a:ab:e8:b2:70:35:
a5:b0:b0:cb:c4:44:11:07:ba:f9:61:6e:1c:d6:3d:41:dc:18:
c4:d6:ef:12:b3:db:0e:b6:56:34:3c:46:3f:ce:e4:4a:75:e6:
71:07:75:c6:01:7c:5b:dd:b5:0a:c1:8c:56:c3:fc:75:78:e3:
e8:1a:5b:fa:6d:81:60:dc:a2:7f:ad:78:f6:e7:7b:9e:b9:97:
42:a6:f7:ed:2c:28:5e:66:85:86:c2:28:5a:ed:ae:85:82:56:
a1:fe:51:23:88:6a:6d:7b:0a:ea:06:3c:02:1e:5a:10:7a:d5:
c4:5a:ac:0c:11:6a:c8:0b:5e:86:96:c7:df:53:d9:10:13:fb:
e5:9c:45:1e:78:99:fd:11:2b:bf:f9:64:ac:e0:19:2c:71:28:
c9:65:5e:d6:2a:a2:27:7f:a2:58:92:41:29:3b:28:79:f5:9c:
38:3f:19:bd:f6:b9:16:4a:69:94:f0:00:a7:07:1f:9d:b1:8f:
9e:a9:28:60:31:4f:14:fe:47:70:7a:e4:30:61:01:bd:35:f6:
c5:11:99:0c:2b:49:18:f5:d4:a3:22:82:14:52:07:ee:4f:aa:
25:e6:ab:e5:04:26:69:0e:eb:34:1f:b7:d9:ae:8f:9c:a5:af:
02:80:de:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhY2JBjlMej0k81AnraS+gWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzA4N2NjNzAyYzhkOTM1M2ZlNzhmNzkzMjQ0MGI3ZTg0
MmZjNmUwHhcNMjUwNzMwMDEwMDQ0WhcNMjUwNzMxMDEwMDQ0WjAzMTEwLwYDVQQD
EyhmNzJkYjQ1NzkwZDI3ZjVhNTRlNjA2YTQ5NDg3YjlmNzNhZDc5NmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaxlt3+IPM3Rl5744ROnELuFqm/Q
vtZ18e8Zqv5uWWnqZjJZpVKqf6TvRSvmkXuKsaEvWxKJ+lR3abtJAvbKIsqHp2q/
fZ/TkuMsJsRf/bIFo+kZ2TQbXEygLzR5/rmc0Tsjn5eK9hSKGbugjdkuovpHfS/F
Fh+GKYtYw5ptzCUqN1/qSsp357hl6o4R9oYfMcq2HZuWu/Gte78DdyiHBXVWsSNi
v95EMoNRj32caFpJZSzrrJ3npQBr3LgxAHXPzHT2P3HF7fB6LjJ28bBooZLypqME
CWzaTZbg6mDAhMAUvWt1tOJHf8+h0UDAdMeALeuAqvBHYpc0sk4YFMLFIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcttFeQ0n9aVOYGpJSHufc615agMB8GA1UdIwQY
MBaAFM0wh8xwLI2TU/5495MkQLfoQvxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWIt
ZjA4ZDcxYzRmM2RiLzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wNThhYTUtNjQ5NC00NTk1LTgxOWItZjA4ZDcxYzRmM2Ri
LzEvelRDSHpIQXNqWk5UX25qM2t5UkF0LWhDX0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbgiaNQK
Zqo4fYUjaqvosnA1pbCwy8REEQe6+WFuHNY9QdwYxNbvErPbDrZWNDxGP87kSnXm
cQd1xgF8W921CsGMVsP8dXjj6Bpb+m2BYNyif6149ud7nrmXQqb37SwoXmaFhsIo
Wu2uhYJWof5RI4hqbXsK6gY8Ah5aEHrVxFqsDBFqyAtehpbH31PZEBP75ZxFHniZ
/RErv/lkrOAZLHEoyWVe1iqiJ3+iWJJBKTsoefWcOD8Zvfa5FkpplPAApwcfnbGP
nqkoYDFPFP5HcHrkMGEBvTX2xRGZDCtJGPXUoyKCFFIH7k+qJear5QQmaQ7rNB+3
2a6PnKWvAoDeaA==
-----END CERTIFICATE-----
Generated at Wed Jul 30 04:18:12 2025 by rpki-client