Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: 8i+DOaO31SeM38bAJt3QZG+pM3u2LyFBT+NHwwGSsIM=
Subject key identifier: 9D:55:34:99:74:F5:31:C3:58:19:44:FB:38:F8:4A:84:B5:C1:F1:96
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 01984708D7070A49F390F6EFEB2452EF69AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 0BED
Signing time: Sat 26 Jul 2025 14:00:18 +0000
Manifest this update: Sat 26 Jul 2025 14:00:18 +0000
Manifest next update: Sun 27 Jul 2025 14:00:18 +0000
Files and hashes: 1: pZ2-rl1wvNOlZXWq6r9tiMcpCLE.roa (hash: UTgRZg+3/3Y1WSaSgU/Ax1MIkqu5a18zaZd2IsaahgY=)
2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: Wi2+BoKDLQaEeYQfdEGQQIZj0RdZ/zxr1+OgeNdcljk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:d7:07:0a:49:f3:90:f6:ef:eb:24:52:ef:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: Jul 26 14:00:18 2025 GMT
Not After : Jul 27 14:00:18 2025 GMT
Subject: CN=9d55349974f531c3581944fb38f84a84b5c1f196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:bd:b7:3f:a3:ce:a1:5c:2f:68:60:0c:5c:
eb:d7:93:46:0e:e5:7a:c8:2d:5d:6f:c2:4c:97:03:
29:6a:b2:26:8a:09:8e:6a:6f:69:9e:63:3e:c8:9e:
64:d5:cb:12:61:c8:dc:e2:91:80:78:47:d6:97:d2:
85:d7:d4:d5:a1:f0:a6:96:94:cd:35:54:ec:5e:b6:
b7:ff:ff:4c:7a:67:73:c7:6b:c0:03:a4:68:17:7f:
37:3d:0b:fe:b7:47:f3:ec:b7:8c:39:31:16:a8:90:
ff:67:d7:2e:34:74:74:91:89:94:95:23:8f:2c:81:
2b:53:41:3a:2b:81:78:12:10:66:d2:f3:fe:df:7d:
49:a7:89:86:82:5a:cf:be:49:81:b4:28:47:99:cd:
af:78:d7:e1:13:da:49:90:8d:56:23:b0:c1:1d:c0:
7d:98:68:a0:9a:63:6a:a7:5c:bd:f8:99:79:31:f0:
73:0c:bb:76:f9:dd:18:20:cc:46:25:f6:49:fa:33:
78:eb:f5:81:df:33:46:0b:3a:83:75:6c:4c:5b:08:
1c:a0:05:f0:12:87:12:7b:0c:87:5e:b5:04:60:58:
34:8d:6e:7a:31:05:da:a2:91:37:0a:d4:1f:ef:9c:
6b:ec:7d:68:e8:39:c7:2d:13:02:a5:f7:bb:6c:a6:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:55:34:99:74:F5:31:C3:58:19:44:FB:38:F8:4A:84:B5:C1:F1:96
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:77:3a:7e:52:fa:3b:17:21:94:d3:d0:2b:f1:1a:2b:81:cb:
47:fc:f7:a0:1a:e8:ef:74:7e:e1:34:75:ab:ae:f6:55:78:fc:
2d:eb:2e:1a:4d:86:f7:cc:51:46:2c:98:ef:d5:98:31:7c:32:
db:f9:0b:1f:00:b9:63:1b:ab:24:2e:fa:38:5f:85:c0:ae:fe:
d3:a9:90:46:cd:39:1a:a8:da:bb:0a:0c:74:1e:fd:90:f9:2d:
5d:56:e4:98:49:a1:ff:5e:0c:56:4c:0f:25:cb:90:c6:83:69:
5f:ed:0c:1a:07:70:e0:c9:61:1d:51:15:96:05:9d:8e:ba:db:
d1:31:a9:16:4e:68:a5:51:7a:5d:a9:2f:04:29:c3:6b:d1:4d:
67:ca:90:9f:7d:80:33:12:41:19:27:3c:1f:1f:a6:58:04:40:
e0:59:ac:d6:19:be:a9:ab:99:20:4d:61:b5:b4:ec:3d:72:5a:
98:ac:aa:2e:79:cb:c6:1f:1a:7e:64:bb:a8:02:72:46:f3:33:
99:6a:70:2e:08:3b:d2:21:d1:20:db:e6:30:44:45:f5:c2:f2:
02:dd:36:27:65:46:c9:be:e0:aa:ea:92:ca:ce:92:74:62:39:
ab:19:c9:f7:70:d6:9c:5a:92:9d:fb:31:0e:43:dd:4b:3a:8e:
90:2c:33:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCNcHCknzkPbv6yRS72muMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjg0M2NlMTUyMjlhODAyM2Q5N2ZhMjdhMzdlNTkyNzhi
MmJmZDcwHhcNMjUwNzI2MTQwMDE4WhcNMjUwNzI3MTQwMDE4WjAzMTEwLwYDVQQD
Eyg5ZDU1MzQ5OTc0ZjUzMWMzNTgxOTQ0ZmIzOGY4NGE4NGI1YzFmMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl29tz+jzqFcL2hgDFzr15NGDuV6
yC1db8JMlwMparImigmOam9pnmM+yJ5k1csSYcjc4pGAeEfWl9KF19TVofCmlpTN
NVTsXra3//9Memdzx2vAA6RoF383PQv+t0fz7LeMOTEWqJD/Z9cuNHR0kYmUlSOP
LIErU0E6K4F4EhBm0vP+331Jp4mGglrPvkmBtChHmc2veNfhE9pJkI1WI7DBHcB9
mGigmmNqp1y9+Jl5MfBzDLt2+d0YIMxGJfZJ+jN46/WB3zNGCzqDdWxMWwgcoAXw
EocSewyHXrUEYFg0jW56MQXaopE3CtQf75xr7H1o6DnHLRMCpfe7bKbKXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1VNJl09THDWBlE+zj4SoS1wfGWMB8GA1UdIwQY
MBaAFM9oQ84VIpqAI9l/ono35ZJ4sr/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2Mt
NjRjZDE5NGY3ZjRmLzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2MtNjRjZDE5NGY3ZjRm
LzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnc6flL6
OxchlNPQK/EaK4HLR/z3oBro73R+4TR1q672VXj8LesuGk2G98xRRiyY79WYMXwy
2/kLHwC5YxurJC76OF+FwK7+06mQRs05GqjauwoMdB79kPktXVbkmEmh/14MVkwP
JcuQxoNpX+0MGgdw4MlhHVEVlgWdjrrb0TGpFk5opVF6XakvBCnDa9FNZ8qQn32A
MxJBGSc8Hx+mWARA4Fms1hm+qauZIE1htbTsPXJamKyqLnnLxh8afmS7qAJyRvMz
mWpwLgg70iHRINvmMERF9cLyAt02J2VGyb7gquqSys6SdGI5qxnJ93DWnFqSnfsx
DkPdSzqOkCwzfQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:37 2025 by rpki-client