Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier: 4djXlZOgd9BoJwSk/9/uKSBhSrINRcjLZfk4qlvVAp0=
Subject key identifier: 5C:EC:07:E6:A8:B9:7D:DF:00:13:6D:D9:03:0E:5B:6D:F7:51:BF:E2
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer: /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial: 0198499C3ED41832ECB060D07FAE6F9053A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number: 0DC3
Signing time: Sun 27 Jul 2025 02:00:33 +0000
Manifest this update: Sun 27 Jul 2025 02:00:33 +0000
Manifest next update: Mon 28 Jul 2025 02:00:33 +0000
Files and hashes: 1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: JXRw15DdD+0CE0pWMtjg/danO3uKEaICUEau4KojV20=)
2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3e:d4:18:32:ec:b0:60:d0:7f:ae:6f:90:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Validity
Not Before: Jul 27 02:00:33 2025 GMT
Not After : Jul 28 02:00:33 2025 GMT
Subject: CN=5cec07e6a8b97ddf00136dd9030e5b6df751bfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:1a:e8:35:7f:37:cf:11:e6:74:11:a4:a9:
bd:d6:53:25:1f:11:1e:ac:80:94:c7:68:2e:dc:04:
c2:74:ff:78:a3:5a:84:7a:02:11:00:0b:86:48:cb:
e2:73:2b:30:66:b3:1c:82:24:db:de:d8:f6:2d:ae:
e4:75:75:ed:c2:21:17:ba:98:fc:25:02:72:81:6d:
6b:0a:51:54:54:19:59:84:40:bf:e3:88:5f:c7:88:
37:1c:56:17:d2:0d:7a:fd:9c:97:c5:3c:18:5a:eb:
e7:4a:57:1b:be:7f:a6:85:77:f4:eb:34:30:64:06:
7a:39:e5:0f:fc:a4:4a:e4:30:31:c3:5b:24:b3:83:
bb:10:3e:ad:ff:4b:d8:b1:21:67:4c:43:cf:75:66:
55:80:41:b3:39:eb:19:49:cf:2e:68:28:89:b3:12:
4d:1b:c4:dd:6a:f7:6a:83:d5:3e:61:bd:5c:e7:58:
2d:14:93:6e:54:b4:02:fa:b7:41:a3:51:80:b8:ea:
23:4d:f2:74:43:32:d3:3a:22:be:72:ff:62:ad:1e:
ad:58:18:43:24:2b:68:ce:48:36:a4:26:78:65:b5:
3e:20:ad:9a:89:81:9f:47:c5:75:80:c8:33:31:0e:
0c:dc:d6:8f:15:6e:d7:bc:79:af:7d:38:e6:da:57:
09:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EC:07:E6:A8:B9:7D:DF:00:13:6D:D9:03:0E:5B:6D:F7:51:BF:E2
X509v3 Authority Key Identifier:
keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:22:29:a0:ec:20:6b:04:71:2f:49:db:da:2f:8f:73:79:d7:
e4:d7:0c:a9:32:b3:da:b8:b1:15:7a:ea:ef:0f:b1:39:96:06:
21:95:5f:10:c3:49:1c:ab:45:c6:3a:78:fd:85:2f:48:bd:fe:
ec:99:f5:23:f8:e5:29:b4:ed:2c:45:a4:6a:cb:c2:2a:07:e6:
15:7f:e5:07:79:c3:e2:48:84:70:1c:66:b2:9e:4f:9d:6e:17:
6e:51:55:89:1b:33:24:95:9a:1f:aa:50:fb:97:77:9c:6a:84:
30:96:35:bc:2f:88:9a:42:62:be:e1:68:dc:2f:ca:e3:12:41:
c5:2d:35:21:41:06:74:c2:49:a1:85:af:77:2b:9d:70:ef:d5:
06:62:07:55:1e:a3:3d:2a:06:08:cc:67:72:08:74:38:92:0b:
7a:a0:4e:2f:5e:f3:df:8f:87:f8:b2:a4:a0:34:41:15:9b:69:
a0:87:2f:ec:d1:56:e7:2b:54:cc:ff:f9:b0:ed:9b:7a:d0:d8:
0c:5a:bb:81:2e:f0:02:82:15:e7:d9:f8:a5:92:00:82:a3:32:
80:8c:b5:54:1c:75:6e:32:f9:45:33:d5:39:e5:03:45:b9:c5:
fd:24:bb:f7:19:8e:e1:61:4c:61:8e:59:7b:0d:19:3b:ad:f6:
53:c7:01:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnD7UGDLssGDQf65vkFOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGM2ZWZhNmIxMzZiMWU0NWUyMWU0MzRlODU5YTI5MmQy
ZTVlMTQwHhcNMjUwNzI3MDIwMDMzWhcNMjUwNzI4MDIwMDMzWjAzMTEwLwYDVQQD
Eyg1Y2VjMDdlNmE4Yjk3ZGRmMDAxMzZkZDkwMzBlNWI2ZGY3NTFiZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCEa6DV/N88R5nQRpKm91lMlHxEe
rICUx2gu3ATCdP94o1qEegIRAAuGSMvicyswZrMcgiTb3tj2La7kdXXtwiEXupj8
JQJygW1rClFUVBlZhEC/44hfx4g3HFYX0g16/ZyXxTwYWuvnSlcbvn+mhXf06zQw
ZAZ6OeUP/KRK5DAxw1sks4O7ED6t/0vYsSFnTEPPdWZVgEGzOesZSc8uaCiJsxJN
G8Tdavdqg9U+Yb1c51gtFJNuVLQC+rdBo1GAuOojTfJ0QzLTOiK+cv9irR6tWBhD
JCtozkg2pCZ4ZbU+IK2aiYGfR8V1gMgzMQ4M3NaPFW7XvHmvfTjm2lcJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzsB+aouX3fABNt2QMOW233Ub/iMB8GA1UdIwQY
MBaAFGXcbvprE2seReIeQ06FmiktLl4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmR4dS1tc1RheDVGNGg1RFRvV2FLUzB1WGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YWZiM2QtMGYzNy00NGIxLTgxMWUt
NDY2MTBmYThkNTZlLzEvWmR4dS1tc1RheDVGNGg1RFRvV2FLUzB1WGhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81YWZiM2QtMGYzNy00NGIxLTgxMWUtNDY2MTBmYThkNTZl
LzEvWmR4dS1tc1RheDVGNGg1RFRvV2FLUzB1WGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiIpoOwg
awRxL0nb2i+Pc3nX5NcMqTKz2rixFXrq7w+xOZYGIZVfEMNJHKtFxjp4/YUvSL3+
7Jn1I/jlKbTtLEWkasvCKgfmFX/lB3nD4kiEcBxmsp5PnW4XblFViRszJJWaH6pQ
+5d3nGqEMJY1vC+ImkJivuFo3C/K4xJBxS01IUEGdMJJoYWvdyudcO/VBmIHVR6j
PSoGCMxncgh0OJILeqBOL17z34+H+LKkoDRBFZtpoIcv7NFW5ytUzP/5sO2betDY
DFq7gS7wAoIV59n4pZIAgqMygIy1VBx1bjL5RTPVOeUDRbnF/SS79xmO4WFMYY5Z
ew0ZO632U8cBIQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:38:13 2025 by rpki-client