Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: pB2OatxI+pAvifNznewjrFLgX/nt18p2kdy0Q1APQsc=
Subject key identifier: 45:01:70:86:C5:55:E5:C4:42:A5:15:1F:35:02:FC:A1:60:D5:A6:FA
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 0198541FDB9F7C4F1DFDD24D6C70916B2BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 038F
Signing time: Tue 29 Jul 2025 03:00:30 +0000
Manifest this update: Tue 29 Jul 2025 03:00:30 +0000
Manifest next update: Wed 30 Jul 2025 03:00:30 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: RIaKzMM/uFuZ3RMERApYDEPe7T5QVSbe2UzNv1nHuCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:db:9f:7c:4f:1d:fd:d2:4d:6c:70:91:6b:2b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Jul 29 03:00:30 2025 GMT
Not After : Jul 30 03:00:30 2025 GMT
Subject: CN=45017086c555e5c442a5151f3502fca160d5a6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:bd:4b:18:87:68:52:87:61:09:14:81:db:
e1:c7:bd:6a:5c:00:b8:c6:4d:0c:6c:15:4c:f7:b9:
cd:b0:c9:89:b9:81:eb:0e:14:4f:03:ae:a8:72:39:
cb:ff:5d:ba:63:e2:ee:82:45:56:26:c1:c5:a6:40:
e0:35:5e:0a:68:e6:a7:18:7e:c9:08:ca:18:83:b2:
27:7c:07:f5:2c:f8:3b:9e:d5:fb:56:3f:40:54:8a:
b7:a7:c5:c9:4f:69:b3:95:de:f5:e7:ad:c2:d0:ed:
42:05:2a:ab:67:86:76:82:dc:1a:f8:2b:9c:60:ac:
94:39:85:ef:02:dd:2f:e8:42:4e:a6:d0:a4:52:52:
dc:a4:c6:f3:7a:53:9b:4f:f5:b1:31:d0:86:b2:20:
05:dc:48:ec:0b:51:61:ca:10:85:50:81:6f:61:d3:
8f:72:8d:cb:52:fb:87:18:67:80:7f:47:84:12:da:
57:9a:cb:87:93:16:ea:08:97:69:6d:f6:f3:51:43:
3e:4e:8e:95:88:81:41:ef:d9:8e:b1:b9:3b:c8:d1:
89:12:03:4a:58:1e:30:15:11:41:61:b9:b6:a4:fb:
bf:00:f6:75:26:63:28:3d:cc:a2:44:b5:b6:ac:df:
5b:82:b4:80:e3:c6:78:e4:30:64:a7:a8:b3:0c:1d:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:70:86:C5:55:E5:C4:42:A5:15:1F:35:02:FC:A1:60:D5:A6:FA
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:af:a8:fc:10:17:26:44:e4:67:51:4a:04:00:e2:24:d1:25:
65:a9:6f:4d:eb:18:5c:63:c1:b5:80:20:d6:37:93:93:8b:d7:
3a:f7:09:97:e6:2b:61:0c:4b:f3:c2:52:bd:49:9e:ef:fc:40:
ea:0f:8e:32:ea:15:9a:c0:f6:37:01:c4:62:29:c9:55:d8:51:
6a:9e:ce:38:4d:88:2f:35:1b:fb:40:e5:bf:44:cf:b1:56:75:
61:88:f0:7a:c1:f8:83:9f:91:2b:fc:5a:f9:e5:6b:ba:80:bd:
2c:41:6c:3d:a1:29:10:de:47:4f:95:40:08:65:60:2e:c8:80:
6c:6f:5e:03:ae:12:ac:fb:29:0f:ab:e9:d0:f7:94:15:9a:7b:
cc:ba:64:5b:86:ff:98:a4:96:e6:ea:4d:c8:71:76:b9:fa:a5:
8c:f2:37:11:c2:a5:ed:05:fc:14:17:d5:b7:41:9c:43:b4:e7:
4a:58:23:ea:9b:87:7c:a4:28:75:b5:8b:ba:c6:1f:16:2a:bd:
13:f5:1c:9b:99:85:da:60:b4:e5:22:5d:01:17:28:7a:4a:76:
0b:d0:8d:df:34:1a:ef:06:94:2f:b9:bf:c2:ac:a8:bf:a7:71:
26:2b:af:42:95:ae:4e:c0:0c:ca:f5:c9:7d:12:a4:14:94:a1:
94:c6:c3:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUH9uffE8d/dJNbHCRayuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOWRlMDhiMzA1M2JhYzYxNzEzYzQ2YjQzZDQwOTM4MThj
MjA0NmYwHhcNMjUwNzI5MDMwMDMwWhcNMjUwNzMwMDMwMDMwWjAzMTEwLwYDVQQD
Eyg0NTAxNzA4NmM1NTVlNWM0NDJhNTE1MWYzNTAyZmNhMTYwZDVhNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0y9SxiHaFKHYQkUgdvhx71qXAC4
xk0MbBVM97nNsMmJuYHrDhRPA66ocjnL/126Y+LugkVWJsHFpkDgNV4KaOanGH7J
CMoYg7InfAf1LPg7ntX7Vj9AVIq3p8XJT2mzld71563C0O1CBSqrZ4Z2gtwa+Cuc
YKyUOYXvAt0v6EJOptCkUlLcpMbzelObT/WxMdCGsiAF3EjsC1FhyhCFUIFvYdOP
co3LUvuHGGeAf0eEEtpXmsuHkxbqCJdpbfbzUUM+To6ViIFB79mOsbk7yNGJEgNK
WB4wFRFBYbm2pPu/APZ1JmMoPcyiRLW2rN9bgrSA48Z45DBkp6izDB1WEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUBcIbFVeXEQqUVHzUC/KFg1ab6MB8GA1UdIwQY
MBaAFM2d4IswU7rGFxPEa0PUCTgYwgRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMt
NTAxNmNlOTJmMTIyLzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMtNTAxNmNlOTJmMTIy
LzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADK+o/BAX
JkTkZ1FKBADiJNElZalvTesYXGPBtYAg1jeTk4vXOvcJl+YrYQxL88JSvUme7/xA
6g+OMuoVmsD2NwHEYinJVdhRap7OOE2ILzUb+0Dlv0TPsVZ1YYjwesH4g5+RK/xa
+eVruoC9LEFsPaEpEN5HT5VACGVgLsiAbG9eA64SrPspD6vp0PeUFZp7zLpkW4b/
mKSW5upNyHF2ufqljPI3EcKl7QX8FBfVt0GcQ7TnSlgj6puHfKQodbWLusYfFiq9
E/Ucm5mF2mC05SJdARcoekp2C9CN3zQa7waUL7m/wqyov6dxJiuvQpWuTsAMyvXJ
fRKkFJShlMbDaw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:39:57 2025 by rpki-client