Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
File: ZKDbECcDCCx8pVSrtbInYAGNVj8.mft (raw, json)
Hash identifier: jVCDnti2uxqO0eXa0Gh3AfJ7WNwv0xNOJVfrHw5c7r0=
Subject key identifier: AC:9F:F5:82:F9:17:E0:8C:72:88:16:C2:79:F7:20:8D:23:33:CA:15
Authority key identifier: 64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
Certificate issuer: /CN=64a0db102703082c7ca554abb5b22760018d563f
Certificate serial: 0198534452C9D020119DEEA38FD692CBD513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 23:00:43 +0000
Manifest this update: Mon 28 Jul 2025 23:00:43 +0000
Manifest next update: Tue 29 Jul 2025 23:00:43 +0000
Files and hashes: 1: ZKDbECcDCCx8pVSrtbInYAGNVj8.crl (hash: T33leMIXQov3esE8KSh5eoxEgTjylFA/W8xvdIGZ3G4=)
2: tClIzpB8AXYvJfeCisA8HxpOd74.roa (hash: sXbqNinLjTETFbK42QOaktsLVCyYHDlotZvPtCRaxBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:52:c9:d0:20:11:9d:ee:a3:8f:d6:92:cb:d5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a0db102703082c7ca554abb5b22760018d563f
Validity
Not Before: Jul 28 23:00:43 2025 GMT
Not After : Jul 29 23:00:43 2025 GMT
Subject: CN=ac9ff582f917e08c728816c279f7208d2333ca15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:3e:b7:0b:24:57:b8:08:f5:63:e5:b1:6b:
ee:cc:b2:82:1c:30:be:fa:44:96:88:25:70:a4:e2:
ec:b7:d1:3b:ee:ef:66:88:69:25:89:03:64:7a:53:
f4:cf:fb:c6:5a:25:27:1d:5b:38:a5:0d:6a:41:9f:
4c:c4:1b:32:c3:bf:94:72:ec:79:15:bc:ba:e3:fc:
a8:23:9e:78:06:87:50:73:1a:c5:41:43:98:91:d5:
33:9f:8b:36:63:f6:f1:1c:56:5c:d2:20:e5:1f:fd:
91:9f:a9:73:70:ce:b0:4c:46:b2:ae:5b:2f:b0:6c:
c9:51:17:75:d8:e7:6b:01:39:76:6d:f5:05:13:f8:
f6:63:23:d3:7a:4f:7d:80:fc:96:19:69:40:ee:7c:
a0:95:95:b6:cf:39:2b:54:9d:5b:9e:57:16:47:2a:
7a:17:62:00:f9:02:af:11:13:6e:e9:c7:82:6d:90:
c8:67:3f:fa:69:b2:8f:0a:a1:30:a7:ea:98:07:7c:
ff:d7:9e:bd:d4:0a:09:8b:91:7d:d2:ec:d5:20:48:
1c:7a:e7:a7:17:73:e4:b3:68:08:e5:c8:a7:26:95:
60:8f:5c:c4:61:a7:b9:14:6b:81:58:8f:b7:be:4a:
29:9a:da:dd:b2:16:e4:90:b2:f5:a1:10:9b:e6:8c:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:F5:82:F9:17:E0:8C:72:88:16:C2:79:F7:20:8D:23:33:CA:15
X509v3 Authority Key Identifier:
keyid:64:A0:DB:10:27:03:08:2C:7C:A5:54:AB:B5:B2:27:60:01:8D:56:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKDbECcDCCx8pVSrtbInYAGNVj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f9a00a-84ee-47a0-9ea1-f179db5f04b6/1/ZKDbECcDCCx8pVSrtbInYAGNVj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:ae:d2:7e:23:c6:95:24:06:fc:c1:f6:59:f0:2c:a0:e6:
77:28:0a:b0:e4:55:a7:54:cd:11:51:69:e0:b2:ec:1b:c4:02:
a2:62:2d:69:bf:7c:ad:e4:a9:c0:77:44:b7:ca:f9:b0:d9:55:
5b:d6:55:b2:aa:0e:a8:46:3e:1a:40:93:3c:27:46:8c:8f:d9:
fd:a0:d3:6c:68:db:54:1f:cf:8d:88:42:99:f3:83:c0:ad:f1:
ee:02:f4:5f:b9:4c:00:81:7d:a7:ff:f2:ac:25:a1:27:c2:93:
f5:d8:c2:69:fe:d8:00:67:ea:27:2d:f8:e1:d8:04:9d:c9:8e:
68:80:58:09:c7:83:ec:69:80:4a:ae:9d:6e:bf:a1:15:13:0b:
38:a3:e7:1f:a2:6b:21:76:36:10:fd:64:2d:a0:50:7b:34:9d:
fc:c2:cc:c7:15:62:a7:5a:9d:c1:01:49:2e:fc:29:ff:64:ab:
32:f3:f2:01:5c:a5:8e:79:98:a6:61:40:ef:e8:19:29:2f:e0:
65:58:17:17:ec:92:1f:d5:bd:26:80:fb:71:59:3f:f5:39:d9:
e4:49:8e:6d:ef:c7:3c:03:0d:4f:cd:4f:fc:fe:1d:14:65:5c:
ab:dc:50:8f:a3:08:4a:86:a1:02:3e:c3:d1:24:ca:28:2a:de:
e7:b5:33:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRFLJ0CARne6jj9aSy9UTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTBkYjEwMjcwMzA4MmM3Y2E1NTRhYmI1YjIyNzYwMDE4
ZDU2M2YwHhcNMjUwNzI4MjMwMDQzWhcNMjUwNzI5MjMwMDQzWjAzMTEwLwYDVQQD
EyhhYzlmZjU4MmY5MTdlMDhjNzI4ODE2YzI3OWY3MjA4ZDIzMzNjYTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgs+twskV7gI9WPlsWvuzLKCHDC+
+kSWiCVwpOLst9E77u9miGkliQNkelP0z/vGWiUnHVs4pQ1qQZ9MxBsyw7+Ucux5
Fby64/yoI554BodQcxrFQUOYkdUzn4s2Y/bxHFZc0iDlH/2Rn6lzcM6wTEayrlsv
sGzJURd12OdrATl2bfUFE/j2YyPTek99gPyWGWlA7nyglZW2zzkrVJ1bnlcWRyp6
F2IA+QKvERNu6ceCbZDIZz/6abKPCqEwp+qYB3z/15691AoJi5F90uzVIEgceuen
F3Pks2gI5cinJpVgj1zEYae5FGuBWI+3vkopmtrdshbkkLL1oRCb5oyUKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyf9YL5F+CMcogWwnn3II0jM8oVMB8GA1UdIwQY
MBaAFGSg2xAnAwgsfKVUq7WyJ2ABjVY/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEt
ZjE3OWRiNWYwNGI2LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9mOWEwMGEtODRlZS00N2EwLTllYTEtZjE3OWRiNWYwNGI2
LzEvWktEYkVDY0RDQ3g4cFZTcnRiSW5ZQUdOVmo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADCSu0n4j
xpUkBvzB9lnwLKDmdygKsORVp1TNEVFp4LLsG8QComItab98reSpwHdEt8r5sNlV
W9ZVsqoOqEY+GkCTPCdGjI/Z/aDTbGjbVB/PjYhCmfODwK3x7gL0X7lMAIF9p//y
rCWhJ8KT9djCaf7YAGfqJy344dgEncmOaIBYCceD7GmASq6dbr+hFRMLOKPnH6Jr
IXY2EP1kLaBQezSd/MLMxxVip1qdwQFJLvwp/2SrMvPyAVyljnmYpmFA7+gZKS/g
ZVgXF+ySH9W9JoD7cVk/9TnZ5EmObe/HPAMNT81P/P4dFGVcq9xQj6MISoahAj7D
0STKKCre57UzFg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:25:54 2025 by rpki-client