Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: zlRfs5LLV04kjZEMDCQdc0fpZ/OWoQ8n4ZWKPx06VQ4=
Subject key identifier: AE:F1:30:54:60:46:CD:F0:1A:29:14:4C:FC:E6:C9:7E:AE:7B:33:69
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 019847E55B0FAB7070816D445A05918C10F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 0319
Signing time: Sat 26 Jul 2025 18:01:10 +0000
Manifest this update: Sat 26 Jul 2025 18:01:10 +0000
Manifest next update: Sun 27 Jul 2025 18:01:10 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: +QrLZXvymjIz/hKlOw/58WenUuK6mhOPkGFF7aMJIAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:5b:0f:ab:70:70:81:6d:44:5a:05:91:8c:10:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Jul 26 18:01:10 2025 GMT
Not After : Jul 27 18:01:10 2025 GMT
Subject: CN=aef130546046cdf01a29144cfce6c97eae7b3369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:5e:19:4b:b6:bc:7b:f5:96:cf:cf:0d:2e:
5b:a9:b9:c2:63:f8:22:66:d1:b9:dc:38:90:9e:af:
eb:9a:cb:6f:ba:df:25:24:ca:1f:05:7e:be:7b:2e:
6c:5d:e8:6c:0e:e1:9d:c0:a1:07:ee:0c:51:a3:d8:
a2:3d:4d:4c:26:48:4b:b4:ab:cb:da:4d:51:8b:a0:
62:07:71:39:3e:70:fb:1f:47:19:56:ce:34:64:55:
7f:72:77:84:cc:45:b9:40:59:26:a2:1e:a1:fe:7d:
1c:6f:06:7a:b5:f0:10:12:1b:83:ce:ca:38:a3:a3:
0a:9d:44:dd:a8:5b:b4:00:e1:4f:40:a6:78:8e:74:
90:00:7a:eb:c2:12:30:3f:9e:c8:c0:05:f9:d4:52:
ca:ad:1b:4f:f0:60:b3:75:4e:a4:3c:2f:51:2f:78:
2a:ea:fd:ca:71:ff:39:4b:d1:0b:70:05:8e:b7:c3:
d7:5e:13:be:64:d7:59:4f:28:b4:8b:39:61:0e:c2:
82:f0:96:43:3c:02:6d:f6:a8:18:fb:05:3d:e5:41:
dd:f8:5d:ae:59:7d:7c:68:7d:3e:57:dd:98:0b:68:
b6:11:7f:67:b8:4c:53:05:3d:84:16:a5:7a:89:e1:
40:cc:d9:e6:fd:2b:be:33:9c:71:60:99:ec:66:61:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F1:30:54:60:46:CD:F0:1A:29:14:4C:FC:E6:C9:7E:AE:7B:33:69
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:99:22:1b:f0:23:54:20:ae:4f:03:71:29:74:26:0b:d2:8f:
24:1a:fa:a1:e2:9c:f9:44:de:d6:c7:76:30:ba:87:ec:56:6b:
26:7e:d7:c4:e4:2a:fa:ba:00:5b:0c:d5:36:a1:b9:85:2e:58:
f2:8c:4d:ee:7c:9c:90:86:db:3b:16:fc:33:73:43:1b:ed:1c:
14:9e:3a:12:c2:5e:79:b5:e4:4b:23:99:f5:97:13:59:39:f2:
3b:50:5e:8c:17:3d:b3:19:e4:37:26:e2:e4:08:8d:bd:94:a7:
99:94:f9:a8:47:aa:14:54:7c:86:76:d4:55:b8:cb:93:19:73:
43:29:e3:e2:58:f3:64:2e:79:58:f3:12:44:b3:b6:34:ef:f5:
c0:6c:dc:8e:e3:a9:1f:b5:c0:01:f3:63:cc:1d:cb:26:1d:7f:
66:a0:ba:4b:c3:0e:85:fb:83:55:19:7a:5b:7e:3c:b1:54:77:
c2:f2:ec:1d:97:25:a6:c0:5d:17:ad:71:55:2d:38:d2:f5:56:
1e:e6:d3:86:fe:1b:b6:1f:ee:e3:76:c5:f7:1a:a2:b0:1b:70:
bf:8a:58:4e:d2:fc:ad:0e:13:6c:8e:7d:00:4e:c8:eb:a8:d7:
8d:ca:61:d5:6e:19:97:66:c4:87:79:a4:da:71:ae:de:ae:15:
0e:08:77:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5VsPq3BwgW1EWgWRjBDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYWU0NjExODhmZmMxZWYyZjNhMTQ3NDU3MWE5NDM5YTU1
Mzc0YWMwHhcNMjUwNzI2MTgwMTEwWhcNMjUwNzI3MTgwMTEwWjAzMTEwLwYDVQQD
EyhhZWYxMzA1NDYwNDZjZGYwMWEyOTE0NGNmY2U2Yzk3ZWFlN2IzMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc9eGUu2vHv1ls/PDS5bqbnCY/gi
ZtG53DiQnq/rmstvut8lJMofBX6+ey5sXehsDuGdwKEH7gxRo9iiPU1MJkhLtKvL
2k1Ri6BiB3E5PnD7H0cZVs40ZFV/cneEzEW5QFkmoh6h/n0cbwZ6tfAQEhuDzso4
o6MKnUTdqFu0AOFPQKZ4jnSQAHrrwhIwP57IwAX51FLKrRtP8GCzdU6kPC9RL3gq
6v3Kcf85S9ELcAWOt8PXXhO+ZNdZTyi0izlhDsKC8JZDPAJt9qgY+wU95UHd+F2u
WX18aH0+V92YC2i2EX9nuExTBT2EFqV6ieFAzNnm/Su+M5xxYJnsZmG/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7xMFRgRs3wGikUTPzmyX6uezNpMB8GA1UdIwQY
MBaAFM+uRhGI/8HvLzoUdFcalDmlU3SsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMt
NTVmMDZmMDYyY2UwLzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMtNTVmMDZmMDYyY2Uw
LzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJkiG/Aj
VCCuTwNxKXQmC9KPJBr6oeKc+UTe1sd2MLqH7FZrJn7XxOQq+roAWwzVNqG5hS5Y
8oxN7nyckIbbOxb8M3NDG+0cFJ46EsJeebXkSyOZ9ZcTWTnyO1BejBc9sxnkNybi
5AiNvZSnmZT5qEeqFFR8hnbUVbjLkxlzQynj4ljzZC55WPMSRLO2NO/1wGzcjuOp
H7XAAfNjzB3LJh1/ZqC6S8MOhfuDVRl6W348sVR3wvLsHZclpsBdF61xVS040vVW
HubThv4bth/u43bF9xqisBtwv4pYTtL8rQ4TbI59AE7I66jXjcph1W4Zl2bEh3mk
2nGu3q4VDgh3cg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:44 2025 by rpki-client