Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
File: ZjhRXzKUSWmuADG94C0fTL0NK5g.mft (raw, json)
Hash identifier: fT9TYbslSGR8bDg7+BncKDKKfDGEZtPDHKKCVdWL1OU=
Subject key identifier: 3F:70:A4:59:71:04:29:93:E2:8A:FE:76:51:69:95:C6:AE:48:20:03
Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Certificate serial: 019834959007A178517F1DC45D1895DA91E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
Manifest number: 0155
Signing time: Wed 23 Jul 2025 00:01:13 +0000
Manifest this update: Wed 23 Jul 2025 00:01:13 +0000
Manifest next update: Thu 24 Jul 2025 00:01:13 +0000
Files and hashes: 1: 3AM1kiBUlkIMgJlgAVSsRhHcsVE.roa (hash: JRZBzZPP/Qgtum5bkbDwOE4ahKynlQtqROTLxUhU7PU=)
2: ZjhRXzKUSWmuADG94C0fTL0NK5g.crl (hash: 8FKxrxcIpN6okOIO5y6UCVZxs3dm9vWI7yE+v0U+Wts=)
3: bXG0GOoD81HOxWPjM9UhIty_ee0.roa (hash: mmMBtet64hPrKMhcTVqesrRFLaGci6KJ3hFnS33cvrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:90:07:a1:78:51:7f:1d:c4:5d:18:95:da:91:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98
Validity
Not Before: Jul 23 00:01:13 2025 GMT
Not After : Jul 24 00:01:13 2025 GMT
Subject: CN=3f70a45971042993e28afe76516995c6ae482003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:93:ef:d0:2a:8e:fc:ff:29:b5:23:78:c3:
f1:7e:21:cc:99:2f:82:c1:d1:ee:97:b7:91:15:11:
a8:c0:5e:be:65:35:94:2f:81:f4:14:9a:d4:d8:fd:
bb:f2:5f:63:f1:d9:95:41:88:ca:2a:06:1d:21:ed:
54:15:99:d7:24:7f:ab:62:07:fe:79:54:3f:59:a4:
b4:04:2e:93:44:cf:6a:5a:ef:e7:4f:36:c4:5c:99:
74:bf:cd:a2:4d:aa:a8:4c:d4:89:25:5f:da:f5:ed:
e9:bf:62:dd:e5:b4:09:cd:db:5b:9f:1a:ca:a9:98:
24:d6:03:21:12:00:6a:96:b2:bc:81:85:0b:04:dd:
ba:18:d7:cd:93:09:0a:7b:d0:c5:76:c1:fd:16:a0:
fe:4c:36:e4:52:39:57:63:4b:e6:6c:c5:a4:08:77:
4f:10:3e:05:cd:58:76:bd:49:1d:e6:d3:f4:59:dd:
f3:f9:8e:80:af:dd:f6:c4:2c:a8:58:34:68:8d:0f:
c9:eb:10:7d:a0:85:d2:fc:f3:d5:9d:58:3e:5b:ac:
c8:12:7c:4d:2c:b6:97:00:c3:82:11:bf:6d:c2:ae:
af:07:d9:aa:c5:e1:dc:dc:59:83:27:79:18:37:5c:
72:ab:9f:6c:2e:d2:52:9b:de:21:d0:13:01:ab:7e:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:A4:59:71:04:29:93:E2:8A:FE:76:51:69:95:C6:AE:48:20:03
X509v3 Authority Key Identifier:
keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5c:cf:12:23:12:77:de:a7:a4:cc:65:bd:5d:b6:1b:27:17:
52:4a:0d:4e:70:24:ba:c0:d5:36:d3:24:f1:be:4a:b6:73:ff:
05:e8:a5:16:fa:db:fd:d2:55:ca:9b:54:a6:ef:8d:ae:e5:22:
57:8f:b7:49:15:72:83:85:85:1d:17:4f:de:de:46:7c:c7:24:
85:a8:7a:e1:6b:93:e7:7e:4e:77:90:5a:ed:a0:d2:2b:b6:21:
c6:6c:07:43:cd:5b:93:34:8e:33:60:ec:78:f4:4c:4f:ce:0e:
e6:16:35:a4:b2:e0:ea:ab:ea:f9:46:bf:ce:96:b4:de:a9:93:
18:10:22:a3:ed:56:12:f0:d3:a3:fc:d2:45:b6:ea:25:96:15:
2f:5f:0e:08:d9:42:00:d4:8e:03:00:ee:38:bd:f0:41:4a:13:
aa:fc:89:31:55:7f:da:e2:00:68:4f:55:16:a4:f5:8c:55:76:
a0:83:0b:d4:91:2b:16:8b:0b:c9:9b:6d:b7:61:26:fd:64:9c:
c3:3c:5d:0e:9b:4d:4e:6b:3c:c5:6f:6b:3f:5e:5e:40:6e:6f:
40:f3:77:df:97:dd:61:b7:e3:3e:d7:d5:ca:11:9c:47:9c:06:
17:73:ec:05:0a:77:db:ff:23:db:e2:dd:84:04:92:28:cc:6e:
d1:3e:84:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg0lZAHoXhRfx3EXRiV2pHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw
ZDJiOTgwHhcNMjUwNzIzMDAwMTEzWhcNMjUwNzI0MDAwMTEzWjAzMTEwLwYDVQQD
EygzZjcwYTQ1OTcxMDQyOTkzZTI4YWZlNzY1MTY5OTVjNmFlNDgyMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+T79Aqjvz/KbUjeMPxfiHMmS+C
wdHul7eRFRGowF6+ZTWUL4H0FJrU2P278l9j8dmVQYjKKgYdIe1UFZnXJH+rYgf+
eVQ/WaS0BC6TRM9qWu/nTzbEXJl0v82iTaqoTNSJJV/a9e3pv2Ld5bQJzdtbnxrK
qZgk1gMhEgBqlrK8gYULBN26GNfNkwkKe9DFdsH9FqD+TDbkUjlXY0vmbMWkCHdP
ED4FzVh2vUkd5tP0Wd3z+Y6Ar932xCyoWDRojQ/J6xB9oIXS/PPVnVg+W6zIEnxN
LLaXAMOCEb9twq6vB9mqxeHc3FmDJ3kYN1xyq59sLtJSm94h0BMBq36amQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9wpFlxBCmT4or+dlFplcauSCADMB8GA1UdIwQY
MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct
Yzk5NGZkMTc0ZTZlLzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl
LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVzPEiMS
d96npMxlvV22GycXUkoNTnAkusDVNtMk8b5KtnP/BeilFvrb/dJVyptUpu+NruUi
V4+3SRVyg4WFHRdP3t5GfMckhah64WuT535Od5Ba7aDSK7YhxmwHQ81bkzSOM2Ds
ePRMT84O5hY1pLLg6qvq+Ua/zpa03qmTGBAio+1WEvDTo/zSRbbqJZYVL18OCNlC
ANSOAwDuOL3wQUoTqvyJMVV/2uIAaE9VFqT1jFV2oIML1JErFosLyZttt2Em/WSc
wzxdDptNTms8xW9rP15eQG5vQPN335fdYbfjPtfVyhGcR5wGF3PsBQp32/8j2+Ld
hASSKMxu0T6ETg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:18 2025 by rpki-client