Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: 9bQksqOGeWjDIjGgwVqYTvevIqXo294SaPgiXIpKRJg=
Subject key identifier: 35:52:FF:39:D4:2A:E2:56:70:F5:35:66:C6:E0:8E:9F:15:92:42:72
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 01984776F35E203E51F51185C061B26022F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:00:34 +0000
Manifest this update: Sat 26 Jul 2025 16:00:34 +0000
Manifest next update: Sun 27 Jul 2025 16:00:34 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: obRrjPyn/dIQRVlfNgInTBbKonnCvs3O1cTV5JvjI8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f3:5e:20:3e:51:f5:11:85:c0:61:b2:60:22:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Jul 26 16:00:34 2025 GMT
Not After : Jul 27 16:00:34 2025 GMT
Subject: CN=3552ff39d42ae25670f53566c6e08e9f15924272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:89:3b:aa:13:89:b0:04:91:07:9b:18:7d:
6a:60:6a:61:13:fe:ca:f6:05:3c:20:d3:bc:40:36:
b7:32:4d:c1:89:6e:4b:37:d1:69:96:1c:95:2c:fe:
53:e3:6e:a6:fb:f2:a1:c1:e1:67:50:a1:0a:ae:0a:
f8:14:d5:03:c2:0c:7b:ae:5a:c3:ce:58:20:59:be:
c9:4a:c6:c6:ee:79:b0:c2:05:f1:d8:7a:59:3f:2f:
99:4c:6c:6d:32:e6:69:35:f2:9a:74:c9:4f:84:f6:
5b:57:20:7e:85:f3:2e:16:d5:c3:87:59:d0:a3:36:
34:17:c9:86:5f:9e:8c:05:a4:8c:8b:5e:da:8e:46:
3e:39:62:6f:dc:01:22:2c:ae:b0:7b:2b:7f:9b:f5:
24:53:09:78:35:68:2a:03:e3:07:bd:f5:c2:f7:0f:
9a:bd:02:a8:d0:41:90:63:e2:15:40:63:e7:82:b8:
8a:d7:0d:ef:e5:4b:dd:d8:77:68:03:6e:c1:94:d8:
d2:90:98:2c:f4:ce:9b:19:22:f3:27:59:9b:0f:41:
87:73:9a:f0:d2:e6:86:81:2b:e8:99:bb:0a:45:fc:
27:66:ca:b4:8f:fa:f2:73:5c:7b:bc:d7:35:30:12:
f7:79:ed:24:ef:39:54:6f:76:42:00:cc:cd:5e:0f:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:FF:39:D4:2A:E2:56:70:F5:35:66:C6:E0:8E:9F:15:92:42:72
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:58:57:eb:b8:2c:0e:4b:2d:90:9c:1d:72:00:36:28:ae:cb:
d3:de:a7:f7:19:f9:1b:80:df:7b:07:56:71:87:1d:66:ce:56:
41:c8:57:f4:7b:eb:e5:74:0c:53:34:70:a8:01:40:79:1f:0b:
f4:bb:c4:49:7a:af:eb:6b:ca:05:4c:45:45:54:69:6c:ae:49:
50:4b:de:cb:6a:8d:e9:66:b5:b8:dc:dd:e6:d8:83:53:34:89:
5b:a9:38:c6:8a:83:47:26:0f:91:26:2c:9c:49:46:86:6e:11:
38:58:1d:a4:06:bf:af:72:ee:5e:0c:82:47:7a:cb:74:e6:6f:
f1:fa:72:a6:32:2d:4e:cb:7a:be:2c:c3:f4:32:43:94:a1:6c:
53:8d:7e:0a:82:c6:82:13:ef:02:48:e9:5e:fa:16:9b:77:55:
94:ae:f8:ee:d8:2f:6c:c5:eb:f7:6e:36:ef:de:48:ac:e2:61:
78:b3:e6:ea:a2:8a:ac:b2:ac:f9:2d:73:ea:ee:84:35:f9:c0:
93:cf:7f:4d:10:c6:89:59:d5:6e:04:35:33:fc:d9:20:59:80:
18:9e:86:21:26:40:98:0c:5b:d6:e4:51:98:e6:1c:89:2b:17:
e4:d1:3b:3d:19:72:79:9f:b4:25:b7:4c:62:a6:2d:6b:38:75:
b0:b1:d9:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdvNeID5R9RGFwGGyYCLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjUwNzI2MTYwMDM0WhcNMjUwNzI3MTYwMDM0WjAzMTEwLwYDVQQD
EygzNTUyZmYzOWQ0MmFlMjU2NzBmNTM1NjZjNmUwOGU5ZjE1OTI0MjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlqJO6oTibAEkQebGH1qYGphE/7K
9gU8INO8QDa3Mk3BiW5LN9FplhyVLP5T426m+/KhweFnUKEKrgr4FNUDwgx7rlrD
zlggWb7JSsbG7nmwwgXx2HpZPy+ZTGxtMuZpNfKadMlPhPZbVyB+hfMuFtXDh1nQ
ozY0F8mGX56MBaSMi17ajkY+OWJv3AEiLK6weyt/m/UkUwl4NWgqA+MHvfXC9w+a
vQKo0EGQY+IVQGPngriK1w3v5Uvd2HdoA27BlNjSkJgs9M6bGSLzJ1mbD0GHc5rw
0uaGgSvombsKRfwnZsq0j/ryc1x7vNc1MBL3ee0k7zlUb3ZCAMzNXg/NzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVS/znUKuJWcPU1Zsbgjp8VkkJyMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVhX67gs
DkstkJwdcgA2KK7L096n9xn5G4DfewdWcYcdZs5WQchX9Hvr5XQMUzRwqAFAeR8L
9LvESXqv62vKBUxFRVRpbK5JUEvey2qN6Wa1uNzd5tiDUzSJW6k4xoqDRyYPkSYs
nElGhm4ROFgdpAa/r3LuXgyCR3rLdOZv8fpypjItTst6vizD9DJDlKFsU41+CoLG
ghPvAkjpXvoWm3dVlK747tgvbMXr9242795IrOJheLPm6qKKrLKs+S1z6u6ENfnA
k89/TRDGiVnVbgQ1M/zZIFmAGJ6GISZAmAxb1uRRmOYciSsX5NE7PRlyeZ+0JbdM
YqYtazh1sLHZ6Q==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:09:22 2025 by rpki-client