Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: QgxdGZaXjEtfoN7mrtp5mmSj07u91g9KskpgRV8WOH0=
Subject key identifier: C8:AE:B9:C0:55:F1:29:17:B3:9F:6A:72:39:D9:B8:B0:07:62:27:D2
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 01984A4177D50A350C1FD7329178E19E7502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 0842
Signing time: Sun 27 Jul 2025 05:01:01 +0000
Manifest this update: Sun 27 Jul 2025 05:01:01 +0000
Manifest next update: Mon 28 Jul 2025 05:01:01 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: mNRb3BQK2KVm3+Tc4EIam2cuYFXQoYhUWACopxrXZUQ=)
2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:77:d5:0a:35:0c:1f:d7:32:91:78:e1:9e:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Jul 27 05:01:01 2025 GMT
Not After : Jul 28 05:01:01 2025 GMT
Subject: CN=c8aeb9c055f12917b39f6a7239d9b8b0076227d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:e9:9f:68:46:06:9e:c3:bb:79:f9:23:90:
70:e8:86:60:dc:f1:41:27:be:73:8c:e9:d1:f2:b4:
1e:18:88:cc:13:04:23:df:57:97:f0:f5:21:c5:44:
80:c3:55:bc:db:03:76:97:a8:de:b4:5b:e9:59:ca:
67:1f:84:c4:cd:53:65:c2:0d:77:97:af:43:e4:7d:
94:c9:ac:62:8d:9c:1f:b7:27:04:3c:e4:d1:09:16:
bd:26:37:fc:99:0f:37:fb:9b:91:c7:69:fd:98:b3:
14:ad:3b:43:88:bf:94:f8:d4:ed:78:ba:f2:84:70:
be:17:30:8f:f6:91:4a:91:30:f1:fd:a2:4f:64:05:
e7:4e:1f:56:c6:7e:a9:70:fc:c4:d6:a1:d9:a1:cc:
ab:4c:85:de:46:05:1c:ca:74:5f:ca:ea:c1:e3:a8:
d8:24:76:bc:27:71:3a:3f:f4:7d:23:6d:25:a9:e1:
86:f7:9b:75:e8:b2:69:39:4e:f1:af:9f:4d:8b:a9:
f2:67:9b:34:b6:20:cd:21:a0:f8:50:82:3a:b8:f4:
3f:3e:47:71:d2:ab:1d:d5:48:0d:7d:dc:6c:f7:0a:
a9:a4:14:04:ea:3d:a8:47:62:87:d6:e7:48:80:fc:
ec:cd:8a:1c:87:13:ec:78:18:db:88:3d:00:7b:02:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:B9:C0:55:F1:29:17:B3:9F:6A:72:39:D9:B8:B0:07:62:27:D2
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d7:b9:a5:ce:e2:08:4f:7b:02:f5:13:64:84:d5:71:e9:63:
fd:f1:7c:c4:06:e2:df:a3:42:8c:c1:96:fd:4a:ad:fe:ff:a4:
7b:f3:6f:8c:ec:07:63:c7:96:47:a2:af:1a:65:7e:0a:bd:3e:
74:83:eb:c3:14:3a:44:14:12:a1:a3:7c:4f:15:94:0a:a5:f2:
bd:6f:7e:0a:62:20:eb:24:95:cd:a9:04:df:c5:ad:87:9c:06:
b8:12:bf:f9:13:ff:35:7b:e9:21:dd:7a:8a:68:ea:74:4e:65:
42:e9:01:22:07:17:e5:f8:ba:64:47:20:d8:35:a1:8f:eb:f5:
f6:ea:f4:89:8e:5e:93:08:3b:17:63:c5:5b:c5:38:6b:57:e4:
ac:e2:ae:bb:a4:bf:f5:be:f1:2b:3e:43:02:bb:5b:d3:74:93:
8a:3c:89:60:67:b9:f3:97:22:81:5b:12:18:d8:c3:1b:4c:50:
25:73:01:31:9c:b3:d1:0a:cc:89:cb:41:c0:4c:1b:ed:c2:a5:
8b:de:80:5b:61:af:9e:13:f2:b7:a1:7b:95:e8:c3:a8:36:35:
2d:52:9e:1e:d9:21:76:e3:f0:5d:b7:a7:e1:dc:5b:9e:a7:2f:
3f:76:75:26:e6:47:3a:47:43:eb:d6:d0:0d:a6:49:50:21:11:
72:c0:d5:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQXfVCjUMH9cykXjhnnUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTUzMzYxZmY2YzAwODNmZDkzZDUyODY1MDMzMzE5ODYz
ZmJjNDYwHhcNMjUwNzI3MDUwMTAxWhcNMjUwNzI4MDUwMTAxWjAzMTEwLwYDVQQD
EyhjOGFlYjljMDU1ZjEyOTE3YjM5ZjZhNzIzOWQ5YjhiMDA3NjIyN2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxznpn2hGBp7Du3n5I5Bw6IZg3PFB
J75zjOnR8rQeGIjMEwQj31eX8PUhxUSAw1W82wN2l6jetFvpWcpnH4TEzVNlwg13
l69D5H2UyaxijZwftycEPOTRCRa9Jjf8mQ83+5uRx2n9mLMUrTtDiL+U+NTteLry
hHC+FzCP9pFKkTDx/aJPZAXnTh9Wxn6pcPzE1qHZocyrTIXeRgUcynRfyurB46jY
JHa8J3E6P/R9I20lqeGG95t16LJpOU7xr59Ni6nyZ5s0tiDNIaD4UII6uPQ/Pkdx
0qsd1UgNfdxs9wqppBQE6j2oR2KH1udIgPzszYochxPseBjbiD0AewJh2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiuucBV8SkXs59qcjnZuLAHYifSMB8GA1UdIwQY
MBaAFGaVM2H/bACD/ZPVKGUDMxmGP7xGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQt
ZmJiN2QzMGRjZTM4LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQtZmJiN2QzMGRjZTM4
LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNe5pc7i
CE97AvUTZITVcelj/fF8xAbi36NCjMGW/Uqt/v+ke/NvjOwHY8eWR6KvGmV+Cr0+
dIPrwxQ6RBQSoaN8TxWUCqXyvW9+CmIg6ySVzakE38Wth5wGuBK/+RP/NXvpId16
imjqdE5lQukBIgcX5fi6ZEcg2DWhj+v19ur0iY5ekwg7F2PFW8U4a1fkrOKuu6S/
9b7xKz5DArtb03STijyJYGe585cigVsSGNjDG0xQJXMBMZyz0QrMictBwEwb7cKl
i96AW2GvnhPyt6F7lejDqDY1LVKeHtkhduPwXben4dxbnqcvP3Z1JuZHOkdD69bQ
DaZJUCERcsDVsg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:49 2025 by rpki-client