Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: L4J4bkbtCT4qLM4onTxZSIibrPghOuNpE4OwN9x442Y=
Subject key identifier: 31:9C:00:94:FC:8F:6A:6E:B0:46:B9:47:B0:F7:73:9B:37:0D:3D:76
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 019847AD8554217582789B2EAC68C34BB335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 17:00:10 +0000
Manifest this update: Sat 26 Jul 2025 17:00:10 +0000
Manifest next update: Sun 27 Jul 2025 17:00:10 +0000
Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=)
2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=)
3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: vKEjoQQAmWlax5+ZM/EOJps7wmP9/2B88CpWmqodK1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:85:54:21:75:82:78:9b:2e:ac:68:c3:4b:b3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Jul 26 17:00:10 2025 GMT
Not After : Jul 27 17:00:10 2025 GMT
Subject: CN=319c0094fc8f6a6eb046b947b0f7739b370d3d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:b7:96:6f:8c:ce:03:d9:22:d2:e7:ff:90:
4a:00:0a:16:2d:03:7c:8a:4f:1a:92:b0:8a:42:ab:
ae:21:f6:1d:93:a8:b5:ab:8e:a9:e7:d3:ea:25:be:
59:10:13:f8:00:e2:72:92:52:25:83:fb:cb:14:a6:
95:d6:ea:27:99:d8:e3:f9:2a:d2:ca:d6:90:47:8d:
a2:63:e9:51:13:ae:bc:4a:5b:64:ca:60:f1:66:50:
d2:4e:43:ac:45:21:ad:50:1e:af:42:32:72:30:1f:
29:13:7f:06:5c:cd:36:00:7c:fe:7e:80:a6:92:ec:
7a:34:a6:6f:c8:d0:b1:00:41:1e:41:de:6d:42:c1:
0c:8b:50:9a:34:e3:92:82:78:5b:62:11:a4:61:ae:
17:4c:72:04:ba:d0:1d:c0:b8:1a:d4:52:e7:32:fe:
f5:70:f6:f8:f9:bd:11:c2:ec:91:a3:25:f3:3a:4c:
21:76:a3:c6:f1:c0:c3:41:3e:d1:59:87:de:98:fd:
1b:07:f9:89:d6:99:e2:63:bd:63:39:5e:63:8b:f2:
99:f9:a9:70:57:ee:83:86:82:16:dc:68:7c:b4:7e:
68:86:8d:83:06:51:88:97:2f:b4:89:72:92:1f:e8:
58:cd:e4:63:39:64:8b:cf:84:16:b2:80:c2:80:c7:
c5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9C:00:94:FC:8F:6A:6E:B0:46:B9:47:B0:F7:73:9B:37:0D:3D:76
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:75:8e:a9:f6:ab:a5:2a:cb:89:3c:2d:65:75:0e:a6:36:
55:a8:f5:bc:30:3b:25:23:02:b3:ec:1b:a6:8b:34:e4:8b:f3:
8d:07:51:8e:82:3d:da:b6:b9:a5:76:bc:92:b7:30:7b:38:18:
a2:70:fe:5f:a9:0e:95:a9:57:d7:d0:6f:7a:a8:7e:6a:3b:b4:
a4:91:2d:73:6a:bd:8d:66:8e:d2:f2:94:db:75:c3:ac:ba:78:
32:92:d4:5c:f5:dd:bf:70:16:be:29:ba:15:ee:67:d1:f0:72:
5b:61:a9:c3:60:3c:b6:a5:d5:ad:d0:b6:01:c0:cf:3e:ba:8f:
62:7c:64:ee:76:00:ff:8d:65:77:0b:ad:1e:6c:45:d9:04:9b:
73:06:c5:c9:75:46:56:75:5a:3a:53:3d:aa:55:23:73:ce:c7:
b8:99:d9:89:1c:a3:de:ef:cf:ac:2d:26:31:c8:a8:ae:da:8d:
d4:6d:82:0c:5f:89:d7:33:55:85:37:f4:66:0c:67:e9:8f:ba:
d8:ae:e8:f0:24:46:db:20:0a:8f:32:50:3f:c1:79:00:11:94:
95:eb:84:cc:18:5c:c0:43:79:8d:a4:db:83:5b:f8:a1:d9:4d:
e3:c0:f7:9a:14:c6:2c:16:19:1c:b2:59:3d:22:cb:e0:17:08:
21:d7:3a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrYVUIXWCeJsurGjDS7M1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDZiZmZmOGI5MGUzNzQ4NTU1YmExNDQ3ZmQ0ZWRlY2Mz
NDBhMTMwHhcNMjUwNzI2MTcwMDEwWhcNMjUwNzI3MTcwMDEwWjAzMTEwLwYDVQQD
EygzMTljMDA5NGZjOGY2YTZlYjA0NmI5NDdiMGY3NzM5YjM3MGQzZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Du3lm+MzgPZItLn/5BKAAoWLQN8
ik8akrCKQquuIfYdk6i1q46p59PqJb5ZEBP4AOJyklIlg/vLFKaV1uonmdjj+SrS
ytaQR42iY+lRE668SltkymDxZlDSTkOsRSGtUB6vQjJyMB8pE38GXM02AHz+foCm
kux6NKZvyNCxAEEeQd5tQsEMi1CaNOOSgnhbYhGkYa4XTHIEutAdwLga1FLnMv71
cPb4+b0RwuyRoyXzOkwhdqPG8cDDQT7RWYfemP0bB/mJ1pniY71jOV5ji/KZ+alw
V+6DhoIW3Gh8tH5oho2DBlGIly+0iXKSH+hYzeRjOWSLz4QWsoDCgMfFoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGcAJT8j2pusEa5R7D3c5s3DT12MB8GA1UdIwQY
MBaAFMxGv/+LkON0hVW6FEf9Tt7MNAoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAt
NGRjOWJmNjQyZGQyLzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS84NGQ0OWMtMGM4NC00NTZhLWI2NDAtNGRjOWJmNjQyZGQy
LzEvekVhX180dVE0M1NGVmJvVVJfMU8zc3cwQ2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQR1jqn2
q6Uqy4k8LWV1DqY2Vaj1vDA7JSMCs+wbpos05IvzjQdRjoI92ra5pXa8krcwezgY
onD+X6kOlalX19Bveqh+aju0pJEtc2q9jWaO0vKU23XDrLp4MpLUXPXdv3AWvim6
Fe5n0fByW2Gpw2A8tqXVrdC2AcDPPrqPYnxk7nYA/41ldwutHmxF2QSbcwbFyXVG
VnVaOlM9qlUjc87HuJnZiRyj3u/PrC0mMciortqN1G2CDF+J1zNVhTf0Zgxn6Y+6
2K7o8CRG2yAKjzJQP8F5ABGUleuEzBhcwEN5jaTbg1v4odlN48D3mhTGLBYZHLJZ
PSLL4BcIIdc6RQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:26:41 2025 by rpki-client