Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: IH6HqCTzsjoafADgAjGYJ8PhywgEeo/rUO3ujh399R0=
Subject key identifier: AB:42:55:12:A0:7C:AD:9B:F3:BF:F8:5A:CB:BE:5A:CA:5A:24:F3:61
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019845889E9424DA85D3902064C4F8321F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 0733
Signing time: Sat 26 Jul 2025 07:00:38 +0000
Manifest this update: Sat 26 Jul 2025 07:00:38 +0000
Manifest next update: Sun 27 Jul 2025 07:00:38 +0000
Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=)
2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: EYMlIsutVB6EBqWzLp4xVs5mKCkYgomjmKqAaKGDNsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:9e:94:24:da:85:d3:90:20:64:c4:f8:32:1f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Jul 26 07:00:38 2025 GMT
Not After : Jul 27 07:00:38 2025 GMT
Subject: CN=ab425512a07cad9bf3bff85acbbe5aca5a24f361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:e5:9a:6e:9f:7d:03:f2:a0:4a:86:70:5d:
65:6f:81:1e:1f:05:f1:01:06:a5:16:ca:6a:7a:9e:
5e:cf:d8:5a:4d:c4:b5:11:96:76:94:29:50:bc:4c:
1d:f3:a0:68:45:4c:78:53:53:50:c8:57:91:a7:13:
25:e9:f5:8a:44:0f:c7:a9:8c:fe:43:54:57:76:2a:
62:2b:09:e7:c2:ca:ab:1f:c2:2e:ba:74:18:c1:83:
30:ba:88:8d:3f:5d:95:49:60:ba:6e:73:0a:f7:73:
8b:5c:13:00:40:cd:93:0d:09:48:55:7b:6a:1f:7d:
60:86:67:42:f0:ed:95:97:85:e2:b4:8f:6c:c0:f8:
92:f6:ee:3b:a3:b3:a6:33:e3:94:67:f5:b0:6a:3d:
75:22:3a:1c:30:0b:2c:94:3c:b9:54:c6:a0:f6:0c:
9a:0f:bf:2d:69:ee:6b:d5:a2:2b:3a:48:df:dc:9c:
1f:86:9b:6c:e2:e5:93:f9:e1:c4:94:a4:4b:6c:1a:
9f:fa:0a:f9:9f:c3:0b:c3:9d:c3:b8:aa:02:e2:2d:
bc:76:ed:81:d5:7c:f7:6f:7f:97:6d:0b:5c:50:fd:
21:86:64:a4:5c:53:cd:96:a7:de:6d:39:37:23:f0:
66:b6:51:ba:9f:a7:97:ae:80:74:8f:3a:66:5b:68:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:55:12:A0:7C:AD:9B:F3:BF:F8:5A:CB:BE:5A:CA:5A:24:F3:61
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:3d:cb:ce:cb:76:9a:e8:72:a1:c2:28:29:47:39:d9:51:eb:
3f:9f:f5:4d:0f:3b:34:20:85:87:a8:e7:b7:40:8e:4c:80:6d:
3a:59:50:1c:af:a5:96:26:2d:7f:50:44:9d:88:62:1b:fa:b2:
95:0b:f9:11:c0:2a:5d:99:f1:f7:61:8e:85:56:02:90:d9:91:
e7:9a:7e:cc:45:f1:5d:05:f4:88:c9:cf:6b:4c:13:f2:b9:40:
44:82:2e:50:a6:27:4a:56:b9:19:44:06:de:ca:d9:3e:1d:0a:
ae:7b:fe:5b:da:31:8c:fa:cb:72:73:6f:72:fe:48:8b:f0:69:
b8:f4:e0:6d:d7:b2:a4:50:db:11:7a:06:6f:80:bd:19:9d:12:
35:ca:42:b7:bf:9f:ed:d4:16:10:cd:25:32:6e:10:b4:1a:8d:
6e:75:2e:4c:d7:51:b9:76:63:96:7d:f7:fc:2f:69:f3:e8:2d:
9d:ff:41:55:21:b0:7d:d8:1f:18:36:a3:72:63:b1:5c:c8:ec:
e3:02:d0:a3:5f:24:42:63:46:5e:a4:2b:62:d2:3f:17:af:08:
2d:a6:ff:7d:87:d3:cf:66:9b:cc:f2:6d:87:43:0e:6b:ac:dc:
45:c3:c5:2e:4e:d1:2c:c5:b9:76:04:81:af:cc:a9:fa:12:2b:
a1:33:78:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiJ6UJNqF05AgZMT4Mh88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4
NDc0NjAwHhcNMjUwNzI2MDcwMDM4WhcNMjUwNzI3MDcwMDM4WjAzMTEwLwYDVQQD
EyhhYjQyNTUxMmEwN2NhZDliZjNiZmY4NWFjYmJlNWFjYTVhMjRmMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvnlmm6ffQPyoEqGcF1lb4EeHwXx
AQalFspqep5ez9haTcS1EZZ2lClQvEwd86BoRUx4U1NQyFeRpxMl6fWKRA/HqYz+
Q1RXdipiKwnnwsqrH8IuunQYwYMwuoiNP12VSWC6bnMK93OLXBMAQM2TDQlIVXtq
H31ghmdC8O2Vl4XitI9swPiS9u47o7OmM+OUZ/Wwaj11IjocMAsslDy5VMag9gya
D78tae5r1aIrOkjf3Jwfhpts4uWT+eHElKRLbBqf+gr5n8MLw53DuKoC4i28du2B
1Xz3b3+XbQtcUP0hhmSkXFPNlqfebTk3I/BmtlG6n6eXroB0jzpmW2gSvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtCVRKgfK2b87/4Wsu+WspaJPNhMB8GA1UdIwQY
MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt
MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl
LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqj3Lzst2
muhyocIoKUc52VHrP5/1TQ87NCCFh6jnt0COTIBtOllQHK+lliYtf1BEnYhiG/qy
lQv5EcAqXZnx92GOhVYCkNmR55p+zEXxXQX0iMnPa0wT8rlARIIuUKYnSla5GUQG
3srZPh0Krnv+W9oxjPrLcnNvcv5Ii/BpuPTgbdeypFDbEXoGb4C9GZ0SNcpCt7+f
7dQWEM0lMm4QtBqNbnUuTNdRuXZjln33/C9p8+gtnf9BVSGwfdgfGDajcmOxXMjs
4wLQo18kQmNGXqQrYtI/F68ILab/fYfTz2abzPJth0MOa6zcRcPFLk7RLMW5dgSB
r8yp+hIroTN4qg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:27:35 2025 by rpki-client