Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: bYkW197for4/FnBPCCXmzojWUjOENqRWg5HTGX0r7dM=
Subject key identifier: 0E:8A:97:F8:BE:C6:9D:8F:DB:1B:29:2F:B6:BF:80:6D:FA:A0:95:2E
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 01984A4172518FEB314F0B966E7FCED8BCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:59 +0000
Manifest this update: Sun 27 Jul 2025 05:00:59 +0000
Manifest next update: Mon 28 Jul 2025 05:00:59 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: WnZkQAjhsxF9PmPloR+dA/ctox/e3M2AvrQwdNJQDwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:72:51:8f:eb:31:4f:0b:96:6e:7f:ce:d8:bc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Jul 27 05:00:59 2025 GMT
Not After : Jul 28 05:00:59 2025 GMT
Subject: CN=0e8a97f8bec69d8fdb1b292fb6bf806dfaa0952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8c:38:41:46:94:87:2f:5e:aa:19:e8:2d:dc:
c1:e2:ad:e7:cb:0f:25:41:c6:b6:ff:34:df:ac:13:
dc:ba:60:af:b1:55:14:e7:97:ea:37:2b:fc:1a:3d:
5f:48:e2:35:06:8d:5d:c6:6b:e9:49:9d:57:d1:d3:
c0:94:4b:26:e8:61:31:34:d9:e5:af:50:60:ea:cb:
d2:77:1f:7a:98:cb:31:4d:b1:0b:9e:3d:36:27:f5:
2b:cc:3a:0c:09:69:18:41:9f:68:14:ce:d8:e8:8c:
c5:6c:46:a7:59:65:08:d1:b1:a2:20:46:74:a3:58:
82:ab:87:81:1a:a2:cc:94:39:da:8e:c9:e1:30:52:
d3:df:ab:cd:06:6c:4f:18:fd:83:98:5a:f2:40:85:
88:f1:d7:35:bb:ea:1f:03:9b:dd:88:07:72:ca:a3:
93:c9:74:30:0d:56:52:2b:52:7a:39:55:02:2c:8b:
12:7b:0e:e0:d3:6b:81:a4:24:32:2d:81:7b:0f:e4:
c5:96:12:f8:8a:50:c3:b2:c0:e4:68:46:c3:8a:ad:
75:9d:0b:0c:8b:57:dd:4d:ef:a2:1f:7a:01:cc:10:
96:25:b3:ce:93:b8:ba:89:ab:5a:71:af:13:f6:00:
e0:59:42:27:8f:d9:ad:af:de:79:a6:96:31:7a:f8:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8A:97:F8:BE:C6:9D:8F:DB:1B:29:2F:B6:BF:80:6D:FA:A0:95:2E
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:f7:04:96:b7:b4:a3:e9:7a:8a:43:dd:ab:31:7e:be:96:
b4:95:ad:23:19:46:7f:f2:2a:87:08:96:a0:8e:88:16:34:37:
d8:1b:e4:f1:4a:cc:b7:30:2f:a2:d4:f7:6f:c2:db:c2:93:a4:
21:7b:a6:9f:54:27:6f:ce:07:e5:f1:e0:7f:d7:d9:1d:f3:81:
eb:7b:cf:1b:27:80:37:94:66:25:94:62:7a:33:51:d6:98:78:
a9:1e:de:7a:92:84:f1:95:31:62:0d:94:e4:19:6b:e1:ba:43:
21:68:5f:81:02:44:91:9b:a8:f0:ca:83:0c:e0:c3:2b:7e:68:
a7:cd:0f:c7:c8:94:f8:ea:f7:5d:26:9a:29:b5:f7:f8:34:e2:
7e:55:bb:1f:e8:26:ab:4b:9d:ec:80:b8:cd:c6:0d:d3:ff:59:
cd:49:92:3e:cb:4c:db:fe:5f:75:cd:cc:bd:4e:18:a1:56:3b:
34:76:55:39:7e:ec:d0:14:fd:81:eb:b0:0b:31:32:58:cf:e0:
f1:4f:b3:43:13:df:cd:89:fd:0c:35:68:e7:d6:b8:0f:77:72:
a3:6d:47:96:b7:91:8d:48:83:1b:dc:16:d0:d2:76:b1:0a:67:
53:cf:af:2b:dc:e0:41:2f:64:29:fd:dd:53:3a:68:4c:75:6d:
94:83:62:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQXJRj+sxTwuWbn/O2LyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0
OGExYzQwHhcNMjUwNzI3MDUwMDU5WhcNMjUwNzI4MDUwMDU5WjAzMTEwLwYDVQQD
EygwZThhOTdmOGJlYzY5ZDhmZGIxYjI5MmZiNmJmODA2ZGZhYTA5NTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4w4QUaUhy9eqhnoLdzB4q3nyw8l
Qca2/zTfrBPcumCvsVUU55fqNyv8Gj1fSOI1Bo1dxmvpSZ1X0dPAlEsm6GExNNnl
r1Bg6svSdx96mMsxTbELnj02J/UrzDoMCWkYQZ9oFM7Y6IzFbEanWWUI0bGiIEZ0
o1iCq4eBGqLMlDnajsnhMFLT36vNBmxPGP2DmFryQIWI8dc1u+ofA5vdiAdyyqOT
yXQwDVZSK1J6OVUCLIsSew7g02uBpCQyLYF7D+TFlhL4ilDDssDkaEbDiq11nQsM
i1fdTe+iH3oBzBCWJbPOk7i6iataca8T9gDgWUInj9mtr955ppYxeviLNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6Kl/i+xp2P2xspL7a/gG36oJUuMB8GA1UdIwQY
MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt
ODA1MzJkZDc0ZDRkLzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk
LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWX/3BJa3
tKPpeopD3asxfr6WtJWtIxlGf/IqhwiWoI6IFjQ32Bvk8UrMtzAvotT3b8LbwpOk
IXumn1Qnb84H5fHgf9fZHfOB63vPGyeAN5RmJZRiejNR1ph4qR7eepKE8ZUxYg2U
5Blr4bpDIWhfgQJEkZuo8MqDDODDK35op80Px8iU+Or3XSaaKbX3+DTiflW7H+gm
q0ud7IC4zcYN0/9ZzUmSPstM2/5fdc3MvU4YoVY7NHZVOX7s0BT9geuwCzEyWM/g
8U+zQxPfzYn9DDVo59a4D3dyo21HlreRjUiDG9wW0NJ2sQpnU8+vK9zgQS9kKf3d
UzpoTHVtlINiWg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:32 2025 by rpki-client