Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: RivP625/5gAMsAZKDSK4bSu0P2t1rBJdrWptW7ZAd50=
Subject key identifier: C5:1F:96:7B:D5:84:D4:C6:5F:AF:64:46:CC:39:DB:F9:2F:E6:CD:82
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 0198500C0E0304B6A8E7F6AEBC5713294A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 035B
Signing time: Mon 28 Jul 2025 08:00:23 +0000
Manifest this update: Mon 28 Jul 2025 08:00:23 +0000
Manifest next update: Tue 29 Jul 2025 08:00:23 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: 1zpH/hZvImLhoJL4qPzDXaoIhbKYnrcKT/gAOa2BsEc=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:0c:0e:03:04:b6:a8:e7:f6:ae:bc:57:13:29:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Jul 28 08:00:23 2025 GMT
Not After : Jul 29 08:00:23 2025 GMT
Subject: CN=c51f967bd584d4c65faf6446cc39dbf92fe6cd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:e2:63:68:4f:c8:44:4d:15:ec:c9:16:0a:
c1:9a:a4:00:f2:21:ec:5f:cf:89:07:f4:52:04:fb:
7c:c6:cc:aa:17:42:41:96:97:4d:0f:14:b1:e8:24:
44:b2:e2:26:81:d2:d4:72:67:08:9e:6e:90:85:8b:
e1:c1:c9:a6:19:16:5d:1c:b8:8a:18:59:e2:a5:66:
fa:8c:c0:5c:e9:3b:2b:f6:e0:5e:40:7c:07:2b:be:
9b:af:04:6c:e6:cf:49:60:d5:1b:fe:e4:84:5a:87:
02:99:99:05:97:86:be:5e:63:92:31:6e:5c:98:23:
ad:62:1c:2e:67:0a:bc:31:68:3f:12:e2:52:54:09:
36:da:ab:14:13:c2:05:e7:c9:91:32:bc:b7:bb:ad:
2f:fe:90:85:fa:b9:a7:03:8e:1a:42:5e:4f:16:80:
0c:6c:ab:d5:ab:48:29:b2:96:58:48:ab:63:98:cd:
f0:64:96:15:1b:13:7d:1f:f4:a4:67:71:01:85:42:
5d:57:3e:96:b2:f4:f9:7c:c8:19:a2:ed:ac:68:6c:
72:1f:57:7f:65:03:26:0f:40:5a:ed:de:66:33:34:
ab:ff:2c:9c:a1:13:7d:00:cd:c7:98:d9:97:98:8b:
bb:3c:5f:7f:3b:b6:87:f7:5a:48:cb:7a:90:55:26:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1F:96:7B:D5:84:D4:C6:5F:AF:64:46:CC:39:DB:F9:2F:E6:CD:82
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:aa:22:a3:b0:0c:a3:c5:40:8b:8f:f4:ab:90:25:2b:0e:68:
c5:a0:65:e1:ca:c0:41:88:9f:5a:66:0e:dd:e6:e1:22:fb:54:
72:71:5b:05:20:90:87:d3:a4:23:6d:70:cf:0a:0a:b7:08:ef:
15:ad:7e:d0:64:12:8a:64:dd:32:04:c4:79:d0:a4:48:7e:4b:
30:d5:05:83:80:12:97:f6:29:f9:f0:a2:3e:ee:6f:e8:d8:a1:
16:c8:99:dc:d5:1c:31:0d:5c:90:d3:58:a1:3d:38:e6:79:16:
c0:da:60:d3:72:6d:a6:9d:8c:93:32:98:be:24:52:b6:d3:22:
57:2d:1d:69:c8:3a:6a:70:c1:62:53:05:8b:85:09:95:33:d1:
47:01:fa:98:34:3f:74:07:a7:d4:19:d8:a1:c4:9a:f3:75:b1:
69:2f:ed:07:cb:be:32:dd:cb:cb:74:ff:d1:73:02:3c:09:41:
82:0d:45:af:3f:d2:df:96:a1:a1:80:d6:78:bf:a4:ae:d4:67:
63:e8:18:4c:4c:99:27:43:0f:e2:e3:5a:46:89:27:8f:6c:1a:
0e:bc:ab:cb:b6:0f:b4:13:44:b1:e8:fa:31:6f:9a:7d:4a:e2:
b4:35:2f:c3:2e:1e:c7:99:7a:6a:ab:f0:6a:86:1c:28:30:ca:
e7:4b:eb:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhQDA4DBLao5/auvFcTKUp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NTljZjM0ZDRjZmM1OTY0MDg2MmQxZTRiNzlkNDhkOWU0
ZDhlN2IwHhcNMjUwNzI4MDgwMDIzWhcNMjUwNzI5MDgwMDIzWjAzMTEwLwYDVQQD
EyhjNTFmOTY3YmQ1ODRkNGM2NWZhZjY0NDZjYzM5ZGJmOTJmZTZjZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MXiY2hPyERNFezJFgrBmqQA8iHs
X8+JB/RSBPt8xsyqF0JBlpdNDxSx6CREsuImgdLUcmcInm6QhYvhwcmmGRZdHLiK
GFnipWb6jMBc6Tsr9uBeQHwHK76brwRs5s9JYNUb/uSEWocCmZkFl4a+XmOSMW5c
mCOtYhwuZwq8MWg/EuJSVAk22qsUE8IF58mRMry3u60v/pCF+rmnA44aQl5PFoAM
bKvVq0gpspZYSKtjmM3wZJYVGxN9H/SkZ3EBhUJdVz6WsvT5fMgZou2saGxyH1d/
ZQMmD0Ba7d5mMzSr/yycoRN9AM3HmNmXmIu7PF9/O7aH91pIy3qQVSZmZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUflnvVhNTGX69kRsw52/kv5s2CMB8GA1UdIwQY
MBaAFGVZzzTUz8WWQIYtHkt51I2eTY57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAt
MTM0MWRlOGFiZTUxLzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YTg2MDctYTMzYS00NGFmLWIyYzAtMTM0MWRlOGFiZTUx
LzEvWlZuUE5OVFB4WlpBaGkwZVMzblVqWjVOam5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6oio7AM
o8VAi4/0q5AlKw5oxaBl4crAQYifWmYO3ebhIvtUcnFbBSCQh9OkI21wzwoKtwjv
Fa1+0GQSimTdMgTEedCkSH5LMNUFg4ASl/Yp+fCiPu5v6NihFsiZ3NUcMQ1ckNNY
oT045nkWwNpg03Jtpp2MkzKYviRSttMiVy0dacg6anDBYlMFi4UJlTPRRwH6mDQ/
dAen1BnYocSa83WxaS/tB8u+Mt3Ly3T/0XMCPAlBgg1Frz/S35ahoYDWeL+krtRn
Y+gYTEyZJ0MP4uNaRoknj2waDryry7YPtBNEsej6MW+afUritDUvwy4ex5l6aqvw
aoYcKDDK50vrdg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 11:16:56 2025 by rpki-client