Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: 6g5UzB0sa0zdQTHb1+Y26BJRP6/Gi0J96cplkkOkyQM=
Subject key identifier: F4:5E:D7:05:0F:4C:18:06:23:74:1C:3F:46:F1:4F:D6:2A:A2:37:B7
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 01984A0A4309C0CBC32D37D9525BCD4F4F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: RsUP+AMV6IxHT8tThWs3Sv8UPwzSzEVYAVr35ET8o4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:43:09:c0:cb:c3:2d:37:d9:52:5b:cd:4f:4f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=f45ed7050f4c180623741c3f46f14fd62aa237b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:40:b0:39:54:5f:7b:96:1b:56:db:b7:6a:
63:65:6b:33:f3:98:c8:d5:aa:88:13:f9:a2:c3:f5:
7a:2a:96:2c:d5:f9:ae:08:74:67:05:37:7d:4d:03:
e0:f3:55:ae:89:bb:dc:8d:91:36:00:d9:17:1a:7a:
6e:4d:85:85:35:c3:d7:0d:dc:c1:a8:38:03:70:c3:
60:54:fb:30:60:11:99:12:57:08:49:15:fa:f3:6c:
1b:31:df:f6:34:e2:53:d1:72:d5:aa:96:6c:fd:67:
f4:7a:65:e6:5b:1a:f8:e5:c6:85:67:74:9c:bc:25:
60:81:5b:81:9b:ad:1b:ae:d7:75:ca:3f:6b:b1:55:
60:a0:6d:4d:f6:40:c4:a3:ed:c5:58:98:7e:6d:6c:
7a:36:f7:2e:43:9f:5e:b7:ca:57:04:5c:c1:27:33:
5f:0a:61:48:8e:e5:95:d1:e6:b2:19:fb:9c:e0:08:
68:d3:36:2f:ab:b1:fe:47:fe:0d:51:ee:86:ee:59:
8f:18:5f:a4:20:98:83:39:d9:c6:d5:76:7e:02:e9:
45:ca:27:11:35:fb:69:fb:b2:ab:fb:65:e9:12:54:
b7:ee:79:84:be:8a:55:98:24:a3:0d:6e:2a:12:bb:
3c:bb:68:c6:d6:bf:90:0f:83:ec:de:88:2c:28:05:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5E:D7:05:0F:4C:18:06:23:74:1C:3F:46:F1:4F:D6:2A:A2:37:B7
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:65:a0:1b:ac:b7:98:a3:cd:7a:10:b3:c3:ec:7a:3a:e1:
9a:2a:43:30:bb:6f:e6:00:ef:60:44:42:50:aa:36:de:69:fc:
49:82:00:60:64:cb:fd:7a:fa:f1:d7:ba:99:fd:f9:30:27:4a:
00:60:1f:2b:67:21:59:50:12:8d:4b:c0:77:d5:59:79:4c:8a:
97:0a:a9:52:fe:67:4b:24:64:a5:0b:1b:12:ec:71:c8:3f:23:
7e:ac:55:e0:19:22:6c:6b:9c:91:de:7c:db:82:d8:d3:77:cf:
e8:b6:2c:88:77:0b:5b:2d:61:2c:70:96:56:28:8f:92:1a:ea:
f1:24:3e:09:44:d0:d7:1e:b9:90:96:34:05:d3:ef:86:dd:c6:
4d:de:05:13:0d:83:07:89:75:c9:e6:ff:68:d1:3d:2d:df:bd:
0d:d7:d7:01:a3:e0:5e:a0:a2:dc:e8:1a:fc:62:57:7e:b1:82:
d9:4c:ac:59:e9:37:78:d2:3d:7a:ff:7e:3c:11:24:19:1d:9a:
85:81:8f:30:fe:ca:08:90:c7:39:4a:31:98:aa:a9:02:47:6e:
38:5a:1f:d5:2c:b9:a0:f7:4c:a0:52:61:11:84:c0:2b:09:7c:
b4:2b:a9:5c:02:ee:ff:8f:dc:93:df:b1:a6:6b:6e:c5:71:ed:
0c:f4:b2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCkMJwMvDLTfZUlvNT082MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh
YTMwNDQwHhcNMjUwNzI3MDQwMDQyWhcNMjUwNzI4MDQwMDQyWjAzMTEwLwYDVQQD
EyhmNDVlZDcwNTBmNGMxODA2MjM3NDFjM2Y0NmYxNGZkNjJhYTIzN2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H9AsDlUX3uWG1bbt2pjZWsz85jI
1aqIE/miw/V6KpYs1fmuCHRnBTd9TQPg81WuibvcjZE2ANkXGnpuTYWFNcPXDdzB
qDgDcMNgVPswYBGZElcISRX682wbMd/2NOJT0XLVqpZs/Wf0emXmWxr45caFZ3Sc
vCVggVuBm60brtd1yj9rsVVgoG1N9kDEo+3FWJh+bWx6NvcuQ59et8pXBFzBJzNf
CmFIjuWV0eayGfuc4Aho0zYvq7H+R/4NUe6G7lmPGF+kIJiDOdnG1XZ+AulFyicR
Nftp+7Kr+2XpElS37nmEvopVmCSjDW4qErs8u2jG1r+QD4Ps3ogsKAX1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRe1wUPTBgGI3QcP0bxT9Yqoje3MB8GA1UdIwQY
MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt
YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1
LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRlloBus
t5ijzXoQs8PsejrhmipDMLtv5gDvYERCUKo23mn8SYIAYGTL/Xr68de6mf35MCdK
AGAfK2chWVASjUvAd9VZeUyKlwqpUv5nSyRkpQsbEuxxyD8jfqxV4BkibGuckd58
24LY03fP6LYsiHcLWy1hLHCWViiPkhrq8SQ+CUTQ1x65kJY0BdPvht3GTd4FEw2D
B4l1yeb/aNE9Ld+9DdfXAaPgXqCi3Oga/GJXfrGC2UysWek3eNI9ev9+PBEkGR2a
hYGPMP7KCJDHOUoxmKqpAkduOFof1Sy5oPdMoFJhEYTAKwl8tCupXALu/4/ck9+x
pmtuxXHtDPSypw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:06 2025 by rpki-client