Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: t490kZqn6o2DC9xJGDonKYeP8mInfl779KgwbnEp4u4=
Subject key identifier: B9:DF:47:7E:91:CC:2A:80:C0:F6:5E:5B:B4:96:3D:C2:AA:DB:39:78
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 0198665F670A8B17E787A34F22B11E712450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 0CB6
Signing time: Fri 01 Aug 2025 16:03:05 +0000
Manifest this update: Fri 01 Aug 2025 16:03:05 +0000
Manifest next update: Sat 02 Aug 2025 16:03:05 +0000
Files and hashes: 1: FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa (hash: 7pDJDV3PAprmagYY0WEztJ7b9H5DGoPcWbYIPWhc9l8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: M79DBUiR9O+xVAbJH0x+VTvjsO7WSF0JnylZ1aOmX2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5f:67:0a:8b:17:e7:87:a3:4f:22:b1:1e:71:24:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Aug 1 16:03:05 2025 GMT
Not After : Aug 2 16:03:05 2025 GMT
Subject: CN=b9df477e91cc2a80c0f65e5bb4963dc2aadb3978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:e6:15:8b:fd:3c:a2:f2:30:d1:a3:26:93:
c7:8b:1f:d8:16:17:6e:9c:05:8e:39:04:8b:52:ac:
8e:58:f9:83:70:06:5c:7c:7c:ce:54:ee:e0:29:69:
71:09:96:1a:6d:19:48:63:d6:fb:e6:13:88:c1:2c:
71:3b:5d:2f:48:d6:d2:c9:ff:8d:d4:77:12:05:50:
28:2c:a6:27:9e:3b:9f:20:8e:9f:b6:f5:fa:b7:ca:
2b:ad:6b:96:fa:a3:92:71:35:e9:96:72:80:d8:b0:
d4:ae:8c:c0:23:50:72:c5:04:b3:14:48:fc:aa:88:
e8:d9:42:ff:da:72:3a:79:0e:3f:8c:21:bb:32:fd:
13:85:65:fc:f2:ba:d6:59:d2:e0:00:6d:9f:48:4e:
d6:5a:8a:b3:2c:bc:66:a9:53:c9:db:21:35:92:d3:
93:88:9a:6e:8f:8c:78:ba:04:eb:58:1b:e5:60:80:
76:8a:f7:66:c3:a1:f8:fc:9c:32:02:c4:3a:c7:6a:
11:1d:8c:fc:f3:4b:df:ee:13:9d:a7:9a:62:b4:54:
28:fb:4f:2d:f0:4e:f3:ec:ca:89:59:49:f7:23:12:
7e:2a:98:07:fb:c9:b1:40:c7:e8:7e:57:27:79:3a:
08:8f:49:33:2b:d9:0d:ff:54:a7:a6:08:7a:43:f5:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:47:7E:91:CC:2A:80:C0:F6:5E:5B:B4:96:3D:C2:AA:DB:39:78
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5a:2c:8d:bf:82:bd:8d:c9:d9:64:6a:ac:79:6b:82:54:14:
2e:46:62:b9:73:80:a3:03:6d:7b:ea:37:04:a5:42:89:a8:f9:
89:50:ba:88:d3:3c:da:d2:a4:75:23:43:a1:05:46:a4:3e:8d:
a9:8d:6c:50:cb:c0:37:3a:e7:4b:25:12:a2:56:d7:1c:c0:18:
b6:57:f4:42:f2:4f:23:07:d9:b6:83:90:b6:fe:37:da:75:2d:
e1:03:27:fc:96:34:56:07:67:89:7b:69:8d:74:dc:a5:41:eb:
b8:7d:7c:8d:a8:48:5d:a6:23:92:27:66:b6:84:f0:fe:18:da:
d2:a9:b2:d6:4b:dc:7a:d2:b2:be:a4:2a:5b:2a:35:e9:a2:74:
27:fe:5a:e2:ad:77:40:f6:a0:24:47:85:07:6f:8f:9f:75:3c:
df:3d:e0:16:d2:06:58:2a:27:48:78:d2:7b:61:9d:ea:72:df:
a3:a0:53:04:eb:46:67:4c:28:1a:39:49:ca:13:5e:f7:80:0b:
da:77:f4:61:9d:17:44:d4:11:52:e2:72:81:06:39:df:06:f6:
f2:96:e3:60:58:4d:2f:bb:ef:af:8d:de:6a:6b:90:b6:55:62:
ed:a7:c5:13:0f:75:dd:b4:d3:2b:af:7e:7b:63:0d:1a:8b:ca:
93:9d:8f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhmX2cKixfnh6NPIrEecSRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2
NGQxOTYwHhcNMjUwODAxMTYwMzA1WhcNMjUwODAyMTYwMzA1WjAzMTEwLwYDVQQD
EyhiOWRmNDc3ZTkxY2MyYTgwYzBmNjVlNWJiNDk2M2RjMmFhZGIzOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEHmFYv9PKLyMNGjJpPHix/YFhdu
nAWOOQSLUqyOWPmDcAZcfHzOVO7gKWlxCZYabRlIY9b75hOIwSxxO10vSNbSyf+N
1HcSBVAoLKYnnjufII6ftvX6t8orrWuW+qOScTXplnKA2LDUrozAI1ByxQSzFEj8
qojo2UL/2nI6eQ4/jCG7Mv0ThWX88rrWWdLgAG2fSE7WWoqzLLxmqVPJ2yE1ktOT
iJpuj4x4ugTrWBvlYIB2ivdmw6H4/JwyAsQ6x2oRHYz880vf7hOdp5pitFQo+08t
8E7z7MqJWUn3IxJ+KpgH+8mxQMfoflcneToIj0kzK9kN/1Snpgh6Q/WrZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnfR36RzCqAwPZeW7SWPcKq2zl4MB8GA1UdIwQY
MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt
YTQ2MTE2OWYxZGMyLzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy
LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1osjb+C
vY3J2WRqrHlrglQULkZiuXOAowNte+o3BKVCiaj5iVC6iNM82tKkdSNDoQVGpD6N
qY1sUMvANzrnSyUSolbXHMAYtlf0QvJPIwfZtoOQtv432nUt4QMn/JY0VgdniXtp
jXTcpUHruH18jahIXaYjkidmtoTw/hja0qmy1kvcetKyvqQqWyo16aJ0J/5a4q13
QPagJEeFB2+Pn3U83z3gFtIGWConSHjSe2Gd6nLfo6BTBOtGZ0woGjlJyhNe94AL
2nf0YZ0XRNQRUuJygQY53wb28pbjYFhNL7vvr43eamuQtlVi7afFEw913bTTK69+
e2MNGovKk52Phg==
-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:18 2025 by rpki-client