Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: m8faik9vEzF7hGUyCNwF2Y7y0+HWRBIeag7dKAA1zjI=
Subject key identifier: 8B:D4:F9:35:10:DB:E3:25:9F:76:DC:C5:6A:FD:8C:D8:7B:B8:BE:96
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01984B54ADF10151176DA23BA947CDECE0DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 1000
Signing time: Sun 27 Jul 2025 10:01:37 +0000
Manifest this update: Sun 27 Jul 2025 10:01:37 +0000
Manifest next update: Mon 28 Jul 2025 10:01:37 +0000
Files and hashes: 1: V2EVjCh2XvTTuPUY0Ak-ADU0N0o.roa (hash: VWCe010VtFOUbqTmIo3pVm3sseFcd/9FPMczSAveexo=)
2: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
3: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
4: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
5: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
6: zVdth24X5nqjsfHBDas52yk14is.crl (hash: mDZ5qW+VVVp59IIyvif4v+2iWcUuX7FAp/0Qz++fJJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:ad:f1:01:51:17:6d:a2:3b:a9:47:cd:ec:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Jul 27 10:01:37 2025 GMT
Not After : Jul 28 10:01:37 2025 GMT
Subject: CN=8bd4f93510dbe3259f76dcc56afd8cd87bb8be96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:91:96:03:3c:d9:13:30:7f:90:2f:9d:11:
c7:9b:4f:d3:4a:4d:a3:b5:90:2a:6a:ce:2f:53:60:
c0:56:14:26:44:07:86:5a:c2:ea:af:1d:65:14:2e:
40:58:38:db:b3:18:a7:a2:53:48:88:c5:ee:f0:27:
c6:4f:91:e7:50:c6:f8:4a:ab:a1:2a:d6:cf:f9:3d:
2b:e9:de:c8:1e:49:37:7e:50:f9:17:c0:53:83:dc:
eb:bc:c5:53:35:25:2e:c9:86:3c:44:e9:62:9f:09:
56:82:d6:cd:63:f9:61:6c:da:8d:1f:65:96:0a:96:
f1:17:52:58:dc:7b:29:06:b2:22:13:40:d4:4f:12:
96:ae:85:83:a0:b5:cb:b4:76:69:83:b3:a5:9c:ec:
f1:2d:35:01:e0:4f:65:dd:9c:61:6a:26:87:4f:c5:
19:ad:b5:1b:c9:0a:4c:37:56:7f:f0:d8:52:eb:96:
00:0c:04:10:7b:b3:94:aa:31:74:39:6f:11:e0:79:
9c:2c:c6:4f:a7:c3:97:d8:da:43:d6:1a:44:c1:79:
1f:ad:2d:0f:ca:91:6d:79:dd:24:a6:7f:49:4a:75:
f7:4e:10:61:08:2e:c4:ce:29:da:9e:48:8d:b1:41:
6f:a5:08:da:03:48:4d:0d:d5:9c:c9:d6:4d:3c:fb:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:F9:35:10:DB:E3:25:9F:76:DC:C5:6A:FD:8C:D8:7B:B8:BE:96
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8b:0a:a9:5d:8f:da:94:23:17:16:69:74:fa:cf:8d:9f:16:
10:12:77:f4:92:cb:8b:6a:53:6c:44:1c:aa:ad:ba:75:76:6b:
79:d6:af:db:38:88:7c:44:e9:28:31:f3:01:f8:80:54:cf:5c:
59:1e:ac:aa:5d:1a:dd:98:84:d4:84:9b:91:22:0b:44:d2:f3:
b1:a1:c0:fc:a8:81:ba:16:d4:0f:c9:bb:c6:d4:8e:a8:ef:7d:
88:27:35:14:57:1d:b7:04:6d:bd:33:99:27:86:57:99:38:44:
3d:ee:7f:9e:3c:5e:a7:8f:ca:3a:a3:ba:8f:cc:e5:74:47:50:
a9:fa:c7:91:d6:19:49:45:12:df:ba:bf:7c:25:9b:dd:07:1e:
0b:0d:e8:77:6e:42:7e:47:fb:35:0a:42:c3:57:38:9e:57:55:
fb:04:06:23:82:55:fa:9c:83:1d:f5:c1:57:ca:46:c0:ea:88:
fd:82:bf:fb:21:31:a4:dd:6b:89:c4:e8:df:42:53:85:fe:15:
3f:ed:09:bd:38:ab:47:23:71:b7:a8:c1:eb:cb:30:0e:b0:11:
94:8f:1f:c6:bd:88:6d:c0:97:62:6a:12:95:c1:51:ab:1f:21:
0e:b8:03:fe:4c:c5:6f:10:e1:d3:df:5f:d2:5d:c8:48:f1:2d:
73:92:11:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLVK3xAVEXbaI7qUfN7ODaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz
NWUyMmIwHhcNMjUwNzI3MTAwMTM3WhcNMjUwNzI4MTAwMTM3WjAzMTEwLwYDVQQD
Eyg4YmQ0ZjkzNTEwZGJlMzI1OWY3NmRjYzU2YWZkOGNkODdiYjhiZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3GRlgM82RMwf5AvnRHHm0/TSk2j
tZAqas4vU2DAVhQmRAeGWsLqrx1lFC5AWDjbsxinolNIiMXu8CfGT5HnUMb4Squh
KtbP+T0r6d7IHkk3flD5F8BTg9zrvMVTNSUuyYY8ROlinwlWgtbNY/lhbNqNH2WW
CpbxF1JY3HspBrIiE0DUTxKWroWDoLXLtHZpg7OlnOzxLTUB4E9l3ZxhaiaHT8UZ
rbUbyQpMN1Z/8NhS65YADAQQe7OUqjF0OW8R4HmcLMZPp8OX2NpD1hpEwXkfrS0P
ypFted0kpn9JSnX3ThBhCC7EzinankiNsUFvpQjaA0hNDdWcydZNPPsIuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvU+TUQ2+Mln3bcxWr9jNh7uL6WMB8GA1UdIwQY
MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt
MWE4MGEyZjdkN2VhLzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh
LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkosKqV2P
2pQjFxZpdPrPjZ8WEBJ39JLLi2pTbEQcqq26dXZredav2ziIfETpKDHzAfiAVM9c
WR6sql0a3ZiE1ISbkSILRNLzsaHA/KiBuhbUD8m7xtSOqO99iCc1FFcdtwRtvTOZ
J4ZXmThEPe5/njxep4/KOqO6j8zldEdQqfrHkdYZSUUS37q/fCWb3QceCw3od25C
fkf7NQpCw1c4nldV+wQGI4JV+pyDHfXBV8pGwOqI/YK/+yExpN1ricTo30JThf4V
P+0JvTirRyNxt6jB68swDrARlI8fxr2IbcCXYmoSlcFRqx8hDrgD/kzFbxDh099f
0l3ISPEtc5IRVw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:56 2025 by rpki-client