Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
File: Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft (raw, json)
Hash identifier: eoxaOCbgLiUA90vLDtEXU3lENgxfj2c5R0QrNb60jFY=
Subject key identifier: 4C:19:45:96:20:88:3D:A2:DB:8D:D9:CE:72:2F:F1:11:C7:AC:8B:87
Authority key identifier: 67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
Certificate issuer: /CN=67d410e707b57971b14a54309f020bacbb4d21b1
Certificate serial: 01985CEC1C7D0DA83CA12B213304B96DB3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
Manifest number: 01D6
Signing time: Wed 30 Jul 2025 20:00:34 +0000
Manifest this update: Wed 30 Jul 2025 20:00:34 +0000
Manifest next update: Thu 31 Jul 2025 20:00:34 +0000
Files and hashes: 1: MGVqJJOFzu2un2swGTuXTTEGsNg.roa (hash: gTMkvTBOmf7oEcLgyb6M80tZ/0OamavqqMR1gZp8YYk=)
2: Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl (hash: UiJxFOk53utQ7HUrjadXOw5BFV/yTofBFC+lZ63IFnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:ec:1c:7d:0d:a8:3c:a1:2b:21:33:04:b9:6d:b3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d410e707b57971b14a54309f020bacbb4d21b1
Validity
Not Before: Jul 30 20:00:34 2025 GMT
Not After : Jul 31 20:00:34 2025 GMT
Subject: CN=4c19459620883da2db8dd9ce722ff111c7ac8b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:ae:bb:fd:03:64:84:32:30:7a:76:5c:c0:
f9:6d:49:a9:73:ca:fa:5a:40:a0:ae:97:8b:b2:e5:
3e:fc:2b:1d:69:d2:35:23:ec:37:07:97:ed:ff:4c:
6f:db:57:24:be:4f:62:ef:66:85:6d:3d:31:3b:fa:
7d:6b:c1:20:f3:14:0e:fe:3f:42:59:c3:2f:eb:76:
8e:40:46:a0:91:50:c9:f0:f1:c3:16:56:f8:c9:70:
3c:8c:92:97:f6:09:07:2a:de:31:d6:42:5e:64:e0:
7b:78:bf:dc:c2:14:88:e2:58:1a:06:a0:b5:62:37:
82:fe:c1:15:64:b8:1d:a2:d3:67:d3:b2:b9:b1:0d:
fc:43:d6:0c:36:7e:1f:c3:3c:04:29:6d:91:6b:00:
f7:da:31:8a:48:54:c8:55:dd:de:f0:9c:d9:02:8e:
ca:f9:59:92:e2:d5:82:18:d7:bc:d2:e8:ba:33:53:
4b:99:26:e1:30:98:b6:1f:7b:d7:74:9c:1d:53:79:
ce:e0:27:2d:11:f8:8d:f5:55:3d:4f:e4:d0:9f:aa:
95:60:86:fa:52:fa:34:5c:cd:f0:08:6c:50:32:9f:
68:8f:99:4e:81:13:f8:28:02:dd:9d:5e:b4:3a:17:
eb:c6:00:a6:79:65:9f:f2:1c:4d:55:fe:74:42:dd:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:45:96:20:88:3D:A2:DB:8D:D9:CE:72:2F:F1:11:C7:AC:8B:87
X509v3 Authority Key Identifier:
keyid:67:D4:10:E7:07:B5:79:71:B1:4A:54:30:9F:02:0B:AC:BB:4D:21:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9QQ5we1eXGxSlQwnwILrLtNIbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/486e7a-188d-44ad-b737-b09e76553852/1/Z9QQ5we1eXGxSlQwnwILrLtNIbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e9:25:b4:1e:d3:d6:72:6c:52:99:13:54:75:14:af:c3:3c:
4a:41:7f:2f:01:c3:80:95:92:e5:2e:cd:e2:fc:10:81:c0:18:
c3:34:73:fc:de:67:d4:8a:08:f5:a7:a0:f0:6b:e6:50:a5:fc:
c9:a0:d9:fe:65:b8:86:e5:19:22:9b:4e:4d:19:a7:20:12:d0:
f0:87:ea:1c:6c:3c:a0:c9:0a:3a:0c:f5:19:5c:b0:90:25:e8:
cc:47:c7:06:e8:e7:7e:a6:39:c7:e5:19:f5:ff:2d:08:bb:e9:
c3:9d:91:16:f5:21:d7:9a:29:c3:a6:22:2b:99:29:41:6e:df:
bd:7f:3a:ea:26:16:7a:1e:0d:ab:bf:93:44:94:47:31:86:4a:
79:bd:35:1a:e2:fc:98:2d:3c:ce:60:6d:7e:0f:46:9e:87:80:
09:e2:ed:12:13:15:67:66:01:fd:ed:a8:2a:7b:66:f6:5f:48:
be:13:1b:02:c0:42:cc:92:63:06:ce:64:6e:85:7d:87:ea:40:
87:c7:38:ad:a9:c2:21:f3:50:10:e9:de:a9:49:4c:5f:e7:c2:
96:49:85:5a:89:94:86:d0:f4:0d:4d:49:bf:67:72:d9:b9:6c:
ea:57:b8:5b:d7:87:c4:7b:8d:57:d2:03:78:aa:79:75:dd:ec:
b7:a7:d9:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhc7Bx9Dag8oSshMwS5bbPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDQxMGU3MDdiNTc5NzFiMTRhNTQzMDlmMDIwYmFjYmI0
ZDIxYjEwHhcNMjUwNzMwMjAwMDM0WhcNMjUwNzMxMjAwMDM0WjAzMTEwLwYDVQQD
Eyg0YzE5NDU5NjIwODgzZGEyZGI4ZGQ5Y2U3MjJmZjExMWM3YWM4Yjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1riuu/0DZIQyMHp2XMD5bUmpc8r6
WkCgrpeLsuU+/CsdadI1I+w3B5ft/0xv21ckvk9i72aFbT0xO/p9a8Eg8xQO/j9C
WcMv63aOQEagkVDJ8PHDFlb4yXA8jJKX9gkHKt4x1kJeZOB7eL/cwhSI4lgaBqC1
YjeC/sEVZLgdotNn07K5sQ38Q9YMNn4fwzwEKW2RawD32jGKSFTIVd3e8JzZAo7K
+VmS4tWCGNe80ui6M1NLmSbhMJi2H3vXdJwdU3nO4CctEfiN9VU9T+TQn6qVYIb6
Uvo0XM3wCGxQMp9oj5lOgRP4KALdnV60OhfrxgCmeWWf8hxNVf50Qt20GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwZRZYgiD2i243ZznIv8RHHrIuHMB8GA1UdIwQY
MBaAFGfUEOcHtXlxsUpUMJ8CC6y7TSGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3Mzct
YjA5ZTc2NTUzODUyLzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80ODZlN2EtMTg4ZC00NGFkLWI3MzctYjA5ZTc2NTUzODUy
LzEvWjlRUTV3ZTFlWEd4U2xRd253SUxyTHROSWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANukltB7T
1nJsUpkTVHUUr8M8SkF/LwHDgJWS5S7N4vwQgcAYwzRz/N5n1IoI9aeg8GvmUKX8
yaDZ/mW4huUZIptOTRmnIBLQ8IfqHGw8oMkKOgz1GVywkCXozEfHBujnfqY5x+UZ
9f8tCLvpw52RFvUh15opw6YiK5kpQW7fvX866iYWeh4Nq7+TRJRHMYZKeb01GuL8
mC08zmBtfg9GnoeACeLtEhMVZ2YB/e2oKntm9l9IvhMbAsBCzJJjBs5kboV9h+pA
h8c4ranCIfNQEOneqUlMX+fClkmFWomUhtD0DU1Jv2dy2bls6le4W9eHxHuNV9ID
eKp5dd3st6fZrg==
-----END CERTIFICATE-----
Generated at Thu Jul 31 03:53:09 2025 by rpki-client