Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: JxaHVxqeNhItDYujYfT2GMP4HRJlbC4FwF1fUHBYmRY=
Subject key identifier: ED:66:22:B1:31:D7:BD:74:8F:1A:CC:11:82:42:BD:A1:57:ED:6F:D8
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 019848898E83D117DAC0D43B6CEB03C5BA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 0319
Signing time: Sat 26 Jul 2025 21:00:31 +0000
Manifest this update: Sat 26 Jul 2025 21:00:31 +0000
Manifest next update: Sun 27 Jul 2025 21:00:31 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: SOTzTy/cjLbQ0hpDIcgUePtJWrftkhJ5RE8vU63SOW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:8e:83:d1:17:da:c0:d4:3b:6c:eb:03:c5:ba:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Jul 26 21:00:31 2025 GMT
Not After : Jul 27 21:00:31 2025 GMT
Subject: CN=ed6622b131d7bd748f1acc118242bda157ed6fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:f8:34:b4:50:6b:e9:59:6e:e1:b3:6d:c5:
95:ab:7a:f2:89:54:6d:de:5a:0b:c7:e2:3e:8f:9e:
a3:4b:67:66:04:c1:1c:30:c9:6d:8f:00:08:5d:4a:
79:bd:67:22:ae:e4:54:43:b8:00:56:10:46:5b:ef:
24:a9:7f:74:32:25:f3:26:a6:01:6b:bd:3a:b2:ae:
46:dd:37:b2:d2:47:2e:16:8c:1b:5c:43:f2:af:82:
91:8a:c1:b0:99:7a:8c:10:9b:af:d9:78:df:b2:fe:
9c:b5:20:d2:82:27:71:3f:87:93:da:18:f1:15:63:
b2:c4:ce:ab:5d:76:d4:84:58:68:f7:ba:c4:12:83:
03:24:ca:9a:eb:da:c8:71:be:80:0e:e3:8c:ac:2c:
a8:73:57:df:3a:73:70:7d:e7:3c:43:70:23:2e:83:
21:00:1d:59:aa:1c:40:29:5f:21:6f:c9:31:12:11:
1a:4b:9e:e9:17:cb:4d:82:80:b5:e8:20:15:75:de:
7e:99:d0:99:24:76:9f:80:6f:4d:80:2f:94:56:6a:
e4:e4:e4:7d:8f:59:25:51:7b:32:67:82:bd:79:47:
87:4d:ed:ee:d4:7b:67:ac:6f:72:41:14:04:7d:98:
e1:06:96:90:c8:42:16:df:a7:66:83:61:3b:21:39:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:22:B1:31:D7:BD:74:8F:1A:CC:11:82:42:BD:A1:57:ED:6F:D8
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:36:06:fe:73:2e:34:54:6b:a1:62:af:19:0e:d0:97:79:ca:
20:92:4f:15:6f:ed:90:76:23:13:a3:2d:fb:73:19:4d:54:2d:
6e:76:63:aa:fc:46:df:8a:6f:6e:4d:9f:8a:0b:16:9c:72:ac:
e9:c1:8b:3c:72:ba:9a:02:0e:27:fd:67:6e:80:a3:10:5f:1e:
fe:94:c9:00:c1:2f:d7:c9:7a:cd:a8:31:12:f7:58:c3:78:93:
b6:e2:d0:df:eb:0a:ef:d6:d0:fa:b2:51:b2:17:da:dc:53:27:
69:be:65:68:07:83:5d:74:9e:0e:37:48:fb:50:b6:4c:b2:3d:
bf:cd:02:9a:ca:45:9a:2f:ef:49:74:65:03:3a:bc:f0:73:88:
db:81:4b:0c:fc:f2:d4:f6:cc:0b:2d:7a:32:18:0e:d0:51:2f:
63:db:13:34:93:0d:44:a6:b0:f2:d5:b2:85:de:b8:04:4b:e5:
b3:ba:5f:2a:1b:98:47:57:c1:0e:74:ee:97:74:64:b6:c1:a9:
0d:99:d8:9a:67:fc:b7:67:af:93:b1:79:d3:8e:26:a3:b0:66:
b9:5a:3b:ed:33:e3:4f:f9:c9:1e:5a:f3:c6:25:d5:a3:4c:c0:
05:7f:7d:7b:9d:16:02:eb:54:46:66:9c:ec:a4:e8:f6:08:30:
64:73:89:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiY6D0RfawNQ7bOsDxbqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2NiOTdiNTIzYzczZjE0MDZkNjNjNzY3YzczZDljOTU3
ZDQzM2IwHhcNMjUwNzI2MjEwMDMxWhcNMjUwNzI3MjEwMDMxWjAzMTEwLwYDVQQD
EyhlZDY2MjJiMTMxZDdiZDc0OGYxYWNjMTE4MjQyYmRhMTU3ZWQ2ZmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7v4NLRQa+lZbuGzbcWVq3ryiVRt
3loLx+I+j56jS2dmBMEcMMltjwAIXUp5vWciruRUQ7gAVhBGW+8kqX90MiXzJqYB
a706sq5G3Tey0kcuFowbXEPyr4KRisGwmXqMEJuv2Xjfsv6ctSDSgidxP4eT2hjx
FWOyxM6rXXbUhFho97rEEoMDJMqa69rIcb6ADuOMrCyoc1ffOnNwfec8Q3AjLoMh
AB1ZqhxAKV8hb8kxEhEaS57pF8tNgoC16CAVdd5+mdCZJHafgG9NgC+UVmrk5OR9
j1klUXsyZ4K9eUeHTe3u1HtnrG9yQRQEfZjhBpaQyEIW36dmg2E7ITkNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1mIrEx1710jxrMEYJCvaFX7W/YMB8GA1UdIwQY
MBaAFM18uXtSPHPxQG1jx2fHPZyVfUM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEt
MDUxMTZjOWY4YWVmLzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEtMDUxMTZjOWY4YWVm
LzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjYG/nMu
NFRroWKvGQ7Ql3nKIJJPFW/tkHYjE6Mt+3MZTVQtbnZjqvxG34pvbk2figsWnHKs
6cGLPHK6mgIOJ/1nboCjEF8e/pTJAMEv18l6zagxEvdYw3iTtuLQ3+sK79bQ+rJR
shfa3FMnab5laAeDXXSeDjdI+1C2TLI9v80CmspFmi/vSXRlAzq88HOI24FLDPzy
1PbMCy16MhgO0FEvY9sTNJMNRKaw8tWyhd64BEvls7pfKhuYR1fBDnTul3RktsGp
DZnYmmf8t2evk7F5044mo7BmuVo77TPjT/nJHlrzxiXVo0zABX99e50WAutURmac
7KTo9ggwZHOJUQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:33:53 2025 by rpki-client