Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: Bw4odWIJk+I+rVRttcb4oX8MpKfKBP93wHBpzWW6OA0=
Subject key identifier: A7:01:92:EC:CF:83:E0:6F:A0:1E:3C:88:E7:54:C8:2B:B2:81:16:0C
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 0198469AD9A59EAD54E7D0A8763376804241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 05B8
Signing time: Sat 26 Jul 2025 12:00:10 +0000
Manifest this update: Sat 26 Jul 2025 12:00:10 +0000
Manifest next update: Sun 27 Jul 2025 12:00:10 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: d2YFqI0ZcB0vHJ3XYebXjhcKJDdw5FmJCpxqSrO/eAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:d9:a5:9e:ad:54:e7:d0:a8:76:33:76:80:42:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Jul 26 12:00:10 2025 GMT
Not After : Jul 27 12:00:10 2025 GMT
Subject: CN=a70192eccf83e06fa01e3c88e754c82bb281160c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:91:09:10:b8:4a:b3:6a:1d:cd:1f:93:6d:
4f:14:9d:be:8e:03:4f:e7:06:25:26:09:c0:23:10:
97:4e:45:b7:be:8a:bc:40:96:f6:2e:92:ae:3d:6f:
fd:1c:00:4c:35:1e:ee:30:a6:06:05:96:fb:9c:f4:
1c:96:c7:f8:3f:4c:2e:51:7b:4d:f7:90:6d:7a:4c:
35:c7:be:37:7f:7f:e2:64:fd:84:a9:7e:f0:4b:d5:
ac:3c:7b:41:84:d6:15:ad:0b:3f:2c:e5:6e:48:5c:
c4:25:91:00:ac:87:0c:9b:9a:20:c6:28:22:4d:dc:
ab:c2:a8:69:34:4d:46:c5:78:dd:f5:11:c5:ba:e6:
ee:02:bd:4a:bd:f8:37:e5:28:88:03:94:5f:5b:9f:
dd:2a:20:a0:94:2a:5b:43:eb:8a:0b:86:09:24:7a:
55:a6:20:a2:8d:49:1f:2c:53:be:69:09:2a:4e:d2:
f7:23:d9:ad:f1:46:9b:82:5b:87:2e:13:cb:c5:55:
62:36:ee:b8:b7:0e:87:48:ad:0f:2b:ce:d3:32:05:
17:24:96:6d:a9:48:e6:26:74:14:94:3e:a1:45:02:
6d:20:6b:59:c6:95:9b:f9:c8:0b:30:f9:1a:5c:80:
3a:fa:69:d8:78:0c:fb:c4:d4:31:4a:b6:52:1b:6e:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:01:92:EC:CF:83:E0:6F:A0:1E:3C:88:E7:54:C8:2B:B2:81:16:0C
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:9e:5b:89:1a:f6:37:84:d5:10:d0:e4:77:a3:ae:0f:8c:
a6:14:4a:e7:e6:7d:b4:31:dd:79:09:a3:fa:42:ad:31:aa:77:
bc:f4:fe:df:fe:10:08:35:36:53:cd:82:80:59:9b:36:95:c1:
e8:e4:e3:94:6d:31:9e:d3:a0:fc:ea:f1:8c:59:f7:89:99:69:
4e:5b:ec:97:bf:60:76:43:2f:2b:bc:73:f5:3c:77:6a:7e:86:
c5:f4:04:8a:e6:4b:cb:14:87:be:e0:b3:5f:e4:dd:a7:49:e3:
f9:42:d4:fd:af:75:1e:a9:da:1a:f2:ea:bd:cf:f7:f5:83:5b:
5e:8f:70:6c:74:da:d9:e8:9a:45:ab:8b:6c:63:e0:58:b9:42:
ad:7f:ca:0d:82:c7:e4:2b:d6:2f:e9:26:fb:57:84:31:1f:7c:
9b:31:2b:6c:1a:b8:db:8c:8b:c8:5e:f4:70:f0:1f:9b:4f:9f:
5d:a1:67:5d:ad:90:b5:0e:df:b9:b0:45:4a:72:31:fa:53:ac:
4d:67:c2:28:71:3b:5a:c5:45:ae:43:e0:ce:17:9c:47:45:9c:
b9:db:ff:68:ac:e0:df:85:d8:fd:59:ef:47:25:d7:fa:36:e5:
4f:36:b7:be:45:20:95:26:ee:a6:08:cc:9b:ca:16:e9:09:b0:
66:73:1b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGmtmlnq1U59CodjN2gEJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm
NDI3NzUwHhcNMjUwNzI2MTIwMDEwWhcNMjUwNzI3MTIwMDEwWjAzMTEwLwYDVQQD
EyhhNzAxOTJlY2NmODNlMDZmYTAxZTNjODhlNzU0YzgyYmIyODExNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SSRCRC4SrNqHc0fk21PFJ2+jgNP
5wYlJgnAIxCXTkW3voq8QJb2LpKuPW/9HABMNR7uMKYGBZb7nPQclsf4P0wuUXtN
95Btekw1x743f3/iZP2EqX7wS9WsPHtBhNYVrQs/LOVuSFzEJZEArIcMm5ogxigi
TdyrwqhpNE1GxXjd9RHFuubuAr1Kvfg35SiIA5RfW5/dKiCglCpbQ+uKC4YJJHpV
piCijUkfLFO+aQkqTtL3I9mt8UabgluHLhPLxVViNu64tw6HSK0PK87TMgUXJJZt
qUjmJnQUlD6hRQJtIGtZxpWb+cgLMPkaXIA6+mnYeAz7xNQxSrZSG24N+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcBkuzPg+BvoB48iOdUyCuygRYMMB8GA1UdIwQY
MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt
YTRkMzU5ZDkxMjUxLzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx
LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFX6eW4ka
9jeE1RDQ5Hejrg+MphRK5+Z9tDHdeQmj+kKtMap3vPT+3/4QCDU2U82CgFmbNpXB
6OTjlG0xntOg/OrxjFn3iZlpTlvsl79gdkMvK7xz9Tx3an6GxfQEiuZLyxSHvuCz
X+Tdp0nj+ULU/a91HqnaGvLqvc/39YNbXo9wbHTa2eiaRauLbGPgWLlCrX/KDYLH
5CvWL+km+1eEMR98mzErbBq424yLyF70cPAfm0+fXaFnXa2QtQ7fubBFSnIx+lOs
TWfCKHE7WsVFrkPgzhecR0Wcudv/aKzg34XY/VnvRyXX+jblTza3vkUglSbupgjM
m8oW6QmwZnMbow==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:19 2025 by rpki-client