Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File: zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier: IlXbS1A6NQgvyIS/4u6c6lBkTMazafuEuaemnl4L+yU=
Subject key identifier: 3C:15:C6:99:0E:7D:BF:F4:8D:49:D3:FF:B9:13:54:29:05:41:8A:6F
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer: /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial: 01984AE5EBB912A4EBC6301AB06762F5C99D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number: 0CE9
Signing time: Sun 27 Jul 2025 08:00:38 +0000
Manifest this update: Sun 27 Jul 2025 08:00:38 +0000
Manifest next update: Mon 28 Jul 2025 08:00:38 +0000
Files and hashes: 1: 2DOh93abUDEP7iIvARNzO8Baro0.roa (hash: Z/CdPO3BFU4U75w3sjAjZS7oL1oIaDik0hINZ7FE5ak=)
2: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
3: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: 9DNxk3eKHoln8Pvtx39j+QKEh+BT0aHOn64OS/JchKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:eb:b9:12:a4:eb:c6:30:1a:b0:67:62:f5:c9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Validity
Not Before: Jul 27 08:00:38 2025 GMT
Not After : Jul 28 08:00:38 2025 GMT
Subject: CN=3c15c6990e7dbff48d49d3ffb913542905418a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:31:38:62:31:a1:61:1d:07:b4:35:1f:d0:
d7:ec:5f:f1:75:15:3b:d3:2c:01:0e:c5:e3:b1:de:
0f:2c:6f:de:b5:83:8a:f9:92:8a:c5:3c:71:4c:16:
e6:02:51:19:6c:0b:5e:b9:74:1f:a9:4c:c6:21:fe:
d1:3b:e2:9e:9b:1a:46:22:88:77:6d:31:1f:d2:8d:
13:4c:7b:c1:73:51:ed:91:57:9e:ca:70:56:07:21:
ce:5b:8d:6b:cb:6f:76:c1:f9:c5:ed:98:1a:da:b1:
1f:ee:43:0b:88:12:4c:bb:56:52:9d:d3:03:97:b1:
1a:de:e1:df:c0:e9:77:63:f8:22:79:90:f2:9e:0b:
41:62:66:ee:7c:98:99:b8:b4:55:26:59:0f:04:89:
dd:0a:91:af:9c:8c:d4:e2:ba:32:b2:90:08:54:7e:
f1:21:97:f2:cb:59:87:6f:b5:29:3a:80:d3:41:a4:
ef:56:fb:b7:43:96:df:7b:6a:24:fd:08:51:4d:6f:
86:8a:92:12:ac:be:f5:b0:3e:e4:c0:d5:cc:74:6d:
2b:a0:2f:0b:45:db:16:ac:e5:05:a6:84:c4:73:8a:
e6:f9:6a:19:6b:32:0e:a9:bf:15:be:64:ef:9e:03:
a9:04:0d:05:f3:58:80:bb:de:b7:75:e0:75:2a:5b:
f5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:15:C6:99:0E:7D:BF:F4:8D:49:D3:FF:B9:13:54:29:05:41:8A:6F
X509v3 Authority Key Identifier:
keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7c:fe:31:00:d6:90:8a:80:ce:4d:82:4e:b8:80:1c:56:be:
f8:40:21:4f:2e:dd:ef:45:44:7a:0c:a6:f9:6a:3a:a4:fa:f5:
8b:5d:ba:6f:07:cf:b0:fe:1a:06:f0:05:6f:df:fd:f2:59:7a:
de:16:9f:8c:7e:6d:36:45:1c:d7:ce:b7:06:2c:46:32:c3:de:
0a:cf:98:2a:27:d1:ac:c6:55:0f:43:0f:91:36:50:74:72:41:
94:14:f7:22:13:92:26:51:50:bd:e0:bd:f5:3a:dc:6d:f5:19:
75:e7:70:e7:bb:7e:d2:b3:4e:0d:6f:f7:4b:d1:0b:ce:e3:23:
5b:e3:15:aa:89:75:81:d1:5b:77:cb:7f:e0:40:46:55:08:8f:
3f:ba:dd:33:b3:1c:27:0c:a1:f8:a8:0d:34:e8:d4:50:d3:e6:
22:d6:53:19:e2:30:0b:91:c6:4c:71:4c:75:30:f4:53:d6:d5:
8f:52:8f:5d:83:9b:f9:68:f9:27:cc:78:82:4f:f6:81:c5:dd:
eb:a4:9d:57:5c:7a:7a:cd:b5:7e:e9:53:b6:1d:f0:bf:0e:7b:
b8:e4:6b:59:c2:e2:d8:a8:0f:e1:79:47:d5:dd:dc:5c:10:1c:
97:1f:de:02:bc:40:8d:2d:81:68:c9:26:2c:df:fc:e1:b5:71:
5d:74:b9:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5eu5EqTrxjAasGdi9cmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU1N2IyYzNhZGZiYjI1ZDM3ZWEyYTJkZmQxOWIyZDRl
YTUxMGUwHhcNMjUwNzI3MDgwMDM4WhcNMjUwNzI4MDgwMDM4WjAzMTEwLwYDVQQD
EygzYzE1YzY5OTBlN2RiZmY0OGQ0OWQzZmZiOTEzNTQyOTA1NDE4YTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuewxOGIxoWEdB7Q1H9DX7F/xdRU7
0ywBDsXjsd4PLG/etYOK+ZKKxTxxTBbmAlEZbAteuXQfqUzGIf7RO+KemxpGIoh3
bTEf0o0TTHvBc1HtkVeeynBWByHOW41ry292wfnF7Zga2rEf7kMLiBJMu1ZSndMD
l7Ea3uHfwOl3Y/gieZDyngtBYmbufJiZuLRVJlkPBIndCpGvnIzU4royspAIVH7x
IZfyy1mHb7UpOoDTQaTvVvu3Q5bfe2ok/QhRTW+GipISrL71sD7kwNXMdG0roC8L
RdsWrOUFpoTEc4rm+WoZazIOqb8VvmTvngOpBA0F81iAu963deB1Klv1jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwVxpkOfb/0jUnT/7kTVCkFQYpvMB8GA1UdIwQY
MBaAFMwVV7LDrfuyXTfqKi39GbLU6lEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGIt
YTU2ZGM1MDEyMWRkLzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGItYTU2ZGM1MDEyMWRk
LzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3z+MQDW
kIqAzk2CTriAHFa++EAhTy7d70VEegym+Wo6pPr1i126bwfPsP4aBvAFb9/98ll6
3hafjH5tNkUc1863BixGMsPeCs+YKifRrMZVD0MPkTZQdHJBlBT3IhOSJlFQveC9
9TrcbfUZdedw57t+0rNODW/3S9ELzuMjW+MVqol1gdFbd8t/4EBGVQiPP7rdM7Mc
Jwyh+KgNNOjUUNPmItZTGeIwC5HGTHFMdTD0U9bVj1KPXYOb+Wj5J8x4gk/2gcXd
66SdV1x6es21fulTth3wvw57uORrWcLi2KgP4XlH1d3cXBAclx/eArxAjS2BaMkm
LN/84bVxXXS5oQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:27:27 2025 by rpki-client