
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: HvaQhlPty3woyQ09T4ewNHo7ochNKuujfTJhEacwTkE=
Subject key identifier: 99:C9:4B:A0:91:23:F9:36:2E:30:8C:C4:FF:AA:48:FA:74:35:EF:B8
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 0198488994C89840F54590716AFB10BBAE3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1349
Signing time: Sat 26 Jul 2025 21:00:32 +0000
Manifest this update: Sat 26 Jul 2025 21:00:32 +0000
Manifest next update: Sun 27 Jul 2025 21:00:32 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: Xk+48CNy+JBT35cOZng8TFvLojaolh/zT8ZVefAn0v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:94:c8:98:40:f5:45:90:71:6a:fb:10:bb:ae:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Jul 26 21:00:32 2025 GMT
Not After : Jul 27 21:00:32 2025 GMT
Subject: CN=99c94ba09123f9362e308cc4ffaa48fa7435efb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:57:a3:86:7d:dd:46:2a:d1:87:41:ed:01:
ea:4b:7c:34:9d:0e:49:96:e3:00:fa:a7:53:31:02:
f8:13:1b:a0:13:85:b7:63:65:77:47:de:9b:0f:41:
e8:96:f3:5c:d1:91:60:9d:1c:75:75:3d:98:eb:d2:
e9:6e:f2:96:8f:5a:05:14:08:46:d1:f8:1e:50:0e:
2a:1b:42:44:1b:5f:a7:1d:2b:e5:c7:ec:43:0b:f3:
c6:07:b0:cf:ab:26:79:be:25:f1:55:27:b6:00:ae:
02:d6:c2:d9:b1:5d:45:4d:33:ee:82:ea:d9:d8:00:
16:60:11:64:d1:8a:10:d5:50:9b:2b:9f:1b:4d:70:
8a:c2:bd:16:43:90:a3:30:09:51:f4:99:5c:20:37:
28:81:c7:a1:ae:9c:61:2e:41:57:34:eb:b7:3f:a7:
9d:dc:29:07:fb:20:4b:15:15:a7:24:9f:a6:d6:9b:
9c:76:ce:b2:4d:94:b4:c9:93:3b:1f:45:cd:fe:65:
7d:20:65:f6:70:0a:d9:64:f2:41:38:d5:84:f7:44:
0c:5f:c7:fe:16:a0:50:35:ff:07:38:4b:54:96:b7:
be:96:a4:70:fd:43:48:da:7d:b9:e9:f4:12:9b:cb:
da:1e:36:f8:1e:9a:3d:07:e9:d2:34:5d:03:a2:15:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C9:4B:A0:91:23:F9:36:2E:30:8C:C4:FF:AA:48:FA:74:35:EF:B8
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:30:b3:5c:69:29:5e:df:34:a5:3b:b3:bb:81:78:6c:dd:f1:
a3:8b:18:66:4a:8b:a0:81:ff:fa:ff:20:b1:84:1c:ee:97:6f:
7d:8b:f2:dc:82:75:3b:7a:59:e8:f9:97:36:83:ad:c1:87:40:
dd:f0:0c:e9:66:80:08:23:82:37:58:60:92:cf:b5:9d:7d:73:
a5:4e:a8:72:ee:97:49:b5:70:97:63:6d:d9:ce:31:1c:bf:40:
cc:bd:44:ef:b7:7f:f0:1f:30:33:6b:a0:d4:01:a2:47:3f:51:
fc:53:07:a2:92:53:81:ad:21:56:72:05:06:60:04:e1:31:cf:
06:76:13:57:bf:90:b5:3a:d9:7f:24:fa:cd:06:95:8d:8f:68:
e0:be:b0:15:07:c3:92:3f:45:02:01:05:04:d0:d7:ee:4c:74:
5a:46:01:bd:8d:07:4d:17:4f:e3:3f:0b:31:d6:3c:ef:5d:c3:
e5:53:ab:1b:93:e5:a2:64:ad:e6:10:66:d7:ab:2c:ac:ed:01:
0f:bd:82:c9:ef:89:77:62:3c:5a:79:a4:4f:5d:db:d4:a8:7b:
a7:a3:58:d8:06:ba:66:0d:83:c7:c4:4f:22:9c:e9:90:70:13:
2a:af:15:0b:6f:a4:b8:d4:7b:a9:f7:c6:2f:ec:36:15:b4:48:
c0:3a:15:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIiZTImED1RZBxavsQu64/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjUwNzI2MjEwMDMyWhcNMjUwNzI3MjEwMDMyWjAzMTEwLwYDVQQD
Eyg5OWM5NGJhMDkxMjNmOTM2MmUzMDhjYzRmZmFhNDhmYTc0MzVlZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkhXo4Z93UYq0YdB7QHqS3w0nQ5J
luMA+qdTMQL4ExugE4W3Y2V3R96bD0HolvNc0ZFgnRx1dT2Y69LpbvKWj1oFFAhG
0fgeUA4qG0JEG1+nHSvlx+xDC/PGB7DPqyZ5viXxVSe2AK4C1sLZsV1FTTPugurZ
2AAWYBFk0YoQ1VCbK58bTXCKwr0WQ5CjMAlR9JlcIDcogcehrpxhLkFXNOu3P6ed
3CkH+yBLFRWnJJ+m1pucds6yTZS0yZM7H0XN/mV9IGX2cArZZPJBONWE90QMX8f+
FqBQNf8HOEtUlre+lqRw/UNI2n256fQSm8vaHjb4Hpo9B+nSNF0DohWb2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnJS6CRI/k2LjCMxP+qSPp0Ne+4MB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDCzXGkp
Xt80pTuzu4F4bN3xo4sYZkqLoIH/+v8gsYQc7pdvfYvy3IJ1O3pZ6PmXNoOtwYdA
3fAM6WaACCOCN1hgks+1nX1zpU6ocu6XSbVwl2Nt2c4xHL9AzL1E77d/8B8wM2ug
1AGiRz9R/FMHopJTga0hVnIFBmAE4THPBnYTV7+QtTrZfyT6zQaVjY9o4L6wFQfD
kj9FAgEFBNDX7kx0WkYBvY0HTRdP4z8LMdY8713D5VOrG5PlomSt5hBm16ssrO0B
D72Cye+Jd2I8WnmkT13b1Kh7p6NY2Aa6Zg2Dx8RPIpzpkHATKq8VC2+kuNR7qffG
L+w2FbRIwDoV5w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:34 2025 by rpki-client