Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: JSjFM6uvwyAS2Psg+E+xL0AOxDI2g7qkWC0ZguGWm0g=
Subject key identifier: E0:2A:1F:37:A2:17:9F:E9:F7:26:BF:EF:CB:8C:A8:E8:79:DD:6D:C2
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 01984A4120A74A261C09AE672963A3D91F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0CFF
Signing time: Sun 27 Jul 2025 05:00:38 +0000
Manifest this update: Sun 27 Jul 2025 05:00:38 +0000
Manifest next update: Mon 28 Jul 2025 05:00:38 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: lXVGZOSVVEFCz1NghJlglmlJPdBvzs+ajYBx+YcZei4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:20:a7:4a:26:1c:09:ae:67:29:63:a3:d9:1f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Jul 27 05:00:38 2025 GMT
Not After : Jul 28 05:00:38 2025 GMT
Subject: CN=e02a1f37a2179fe9f726bfefcb8ca8e879dd6dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:fb:58:b1:fb:a5:bd:89:34:c2:c3:e6:e2:
12:1d:75:95:08:a2:2a:84:34:aa:5d:2d:d0:60:28:
24:ad:f1:17:c5:f1:73:ef:a2:99:30:69:59:e1:82:
5a:3b:dd:ab:81:dc:f1:b4:3a:35:c6:a4:77:bd:08:
4b:18:d3:a1:c7:eb:44:90:af:96:da:cc:d1:97:74:
3c:85:42:7f:9a:66:57:0a:9e:ff:81:05:10:58:9b:
b1:b2:b7:94:de:fa:66:39:c2:22:bb:03:8d:8e:b2:
f3:dd:96:91:26:69:5c:0c:f0:ab:44:c7:af:3a:85:
f7:a1:93:c6:3b:39:ec:47:e5:a2:76:03:86:73:fe:
8f:49:5e:bc:54:c9:0b:5d:71:45:db:e7:3d:63:d4:
7e:08:71:32:84:12:95:78:29:1a:25:3a:d4:b8:f7:
13:25:f2:ea:8f:05:68:28:f1:b1:ad:08:8d:4e:e6:
1d:8a:7b:01:e4:e7:21:94:dc:f5:58:6b:ee:f9:28:
2c:93:4f:6a:e2:51:64:a3:3a:85:6a:1d:82:ab:f4:
71:dd:22:e4:1a:84:aa:1a:aa:04:a2:68:97:51:af:
84:61:ba:d7:2f:e4:b0:9d:9d:35:84:e8:c8:b0:99:
df:48:a9:9f:9e:7a:5a:e5:a9:70:c1:25:97:dc:3d:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2A:1F:37:A2:17:9F:E9:F7:26:BF:EF:CB:8C:A8:E8:79:DD:6D:C2
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fb:1e:72:3b:e5:cf:49:56:0f:e7:e8:71:08:31:e0:a1:3d:
73:5a:e2:26:93:dc:4d:70:a0:03:4c:7d:47:a7:8b:2c:e6:fd:
ba:84:27:a5:b9:f7:8a:ca:92:c4:f0:df:ce:08:97:ce:32:49:
ce:71:09:26:90:4e:56:4b:2a:74:1c:e1:5c:09:3a:d3:be:39:
49:59:18:46:98:25:50:5a:7e:77:1e:f1:a2:6d:9c:ca:4c:76:
c0:05:15:6a:ce:37:b8:af:f8:4c:24:60:9f:2b:d5:ae:5f:dc:
61:64:67:9b:cc:5c:43:53:bb:de:7d:16:34:5c:c2:00:d0:8f:
cb:24:14:c5:18:23:7d:59:37:e3:c0:03:cc:b2:27:80:9b:51:
61:2d:f0:ed:e3:17:c2:93:7b:17:2e:92:46:c2:be:79:02:ff:
17:30:ea:2e:1f:c8:05:57:30:0f:b3:ad:6a:05:e5:13:27:ce:
06:38:bd:36:9e:93:b7:05:e4:4d:17:03:6d:88:7e:da:3e:83:
6b:bb:25:c4:be:fd:af:58:d4:76:d7:9c:f3:d5:b5:33:4d:ae:
88:f5:0c:7d:1c:26:10:dc:c6:f4:49:73:8c:00:e0:d9:d8:77:
07:e9:fd:e6:d0:08:6e:6e:3a:5e:6e:d9:a3:a4:91:c6:89:df:
fd:6f:f7:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQSCnSiYcCa5nKWOj2R8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0
Y2IxNzEwHhcNMjUwNzI3MDUwMDM4WhcNMjUwNzI4MDUwMDM4WjAzMTEwLwYDVQQD
EyhlMDJhMWYzN2EyMTc5ZmU5ZjcyNmJmZWZjYjhjYThlODc5ZGQ2ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDn7WLH7pb2JNMLD5uISHXWVCKIq
hDSqXS3QYCgkrfEXxfFz76KZMGlZ4YJaO92rgdzxtDo1xqR3vQhLGNOhx+tEkK+W
2szRl3Q8hUJ/mmZXCp7/gQUQWJuxsreU3vpmOcIiuwONjrLz3ZaRJmlcDPCrRMev
OoX3oZPGOznsR+WidgOGc/6PSV68VMkLXXFF2+c9Y9R+CHEyhBKVeCkaJTrUuPcT
JfLqjwVoKPGxrQiNTuYdinsB5OchlNz1WGvu+Sgsk09q4lFkozqFah2Cq/Rx3SLk
GoSqGqoEomiXUa+EYbrXL+SwnZ01hOjIsJnfSKmfnnpa5alwwSWX3D2CgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAqHzeiF5/p9ya/78uMqOh53W3CMB8GA1UdIwQY
MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt
MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh
LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefsecjvl
z0lWD+focQgx4KE9c1riJpPcTXCgA0x9R6eLLOb9uoQnpbn3isqSxPDfzgiXzjJJ
znEJJpBOVksqdBzhXAk60745SVkYRpglUFp+dx7xom2cykx2wAUVas43uK/4TCRg
nyvVrl/cYWRnm8xcQ1O73n0WNFzCANCPyyQUxRgjfVk348ADzLIngJtRYS3w7eMX
wpN7Fy6SRsK+eQL/FzDqLh/IBVcwD7OtagXlEyfOBji9Np6TtwXkTRcDbYh+2j6D
a7slxL79r1jUdtec89W1M02uiPUMfRwmENzG9ElzjADg2dh3B+n95tAIbm46Xm7Z
o6SRxonf/W/3Ig==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:06:01 2025 by rpki-client