Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
File: ZKPnXG0KuryTHChHzaqGX7jX-c8.mft (raw, json)
Hash identifier: VqvCK52a2IA214lXPhBFNdW2xCRcohAafntmBWOOZy0=
Subject key identifier: 4A:16:5F:57:9A:1B:76:12:A0:78:86:5B:39:A4:15:90:D5:C0:7C:67
Authority key identifier: 64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
Certificate issuer: /CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Certificate serial: 01984AE5771C99A7E5F0E1EAD1600CB720BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 08:00:08 +0000
Manifest this update: Sun 27 Jul 2025 08:00:08 +0000
Manifest next update: Mon 28 Jul 2025 08:00:08 +0000
Files and hashes: 1: ZKPnXG0KuryTHChHzaqGX7jX-c8.crl (hash: M97B5AiqKq7Mlc5scZ6wEMw26TQwcebZhWq82+CV9bA=)
2: y9vY7PQkblV9_5mGvnjpI_1sy2c.roa (hash: IUOwXFsA4FATdHPgwe2EY1C0pHGXri80WzQO/bHofMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:77:1c:99:a7:e5:f0:e1:ea:d1:60:0c:b7:20:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Validity
Not Before: Jul 27 08:00:08 2025 GMT
Not After : Jul 28 08:00:08 2025 GMT
Subject: CN=4a165f579a1b7612a078865b39a41590d5c07c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:d1:90:02:f9:0f:4f:5e:9f:a5:db:99:c8:
38:92:4c:37:8a:4c:c0:bf:2d:e4:e7:96:0f:84:f4:
98:50:3d:ab:15:de:5e:60:69:3d:c3:c0:1d:f5:8f:
7a:ed:86:22:a7:9f:18:65:15:84:33:cc:d1:9b:e9:
45:fc:e8:12:4e:f2:05:f9:25:2e:71:2a:a7:a5:89:
54:7a:4a:9f:78:67:8f:2a:3c:83:d1:31:e2:77:d1:
ba:f9:51:24:8c:3e:fe:ed:cf:1b:3e:90:01:3d:aa:
18:3b:1b:a0:ff:7f:f2:9c:7e:33:43:4c:bb:4e:32:
cd:9f:91:a6:7b:79:2c:14:de:09:37:fd:48:c2:f2:
b8:22:d2:61:aa:52:8f:22:ec:ce:6d:66:0b:c7:08:
77:4e:e2:7f:88:45:be:c6:7e:af:16:6b:92:bb:37:
5e:29:a8:14:58:a1:a8:ba:b9:73:44:41:b4:a5:ee:
c8:35:95:7e:32:28:76:d2:42:ac:5d:23:79:0f:52:
66:ba:6d:67:30:3b:ca:c4:8f:3d:87:bb:1d:3b:79:
8c:c4:30:e5:c3:f5:2d:1e:89:ee:ea:9d:53:e6:ae:
04:25:0e:c7:00:28:f2:1e:1e:c1:77:75:32:d0:8f:
e4:03:eb:96:f9:65:1e:40:a8:46:c4:54:94:ad:e2:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:5F:57:9A:1B:76:12:A0:78:86:5B:39:A4:15:90:D5:C0:7C:67
X509v3 Authority Key Identifier:
keyid:64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6b:96:46:c9:36:c7:0f:8e:cd:33:b6:d7:d4:c7:6b:fe:3c:
9f:fa:a1:69:6d:e3:5d:56:80:8d:d5:98:28:7d:d5:15:37:a6:
ac:1b:49:07:a9:94:af:96:fe:0a:12:60:e4:9e:b6:9d:8b:4a:
29:95:58:70:30:f6:24:9c:36:5e:b5:1f:f3:2c:67:8e:62:60:
b9:64:50:73:3d:fb:03:42:cd:0a:68:c5:e8:24:f3:b8:3e:0d:
f1:83:8a:41:3f:7d:24:c3:a3:75:1a:de:cc:fd:c7:ab:5d:77:
bc:7a:8a:99:ea:32:49:f2:73:48:a5:2b:f7:c7:c4:4b:2d:65:
bf:de:7e:a3:6f:6f:4e:e0:c4:aa:ab:3a:30:03:dc:e3:be:97:
5f:e8:25:8b:f8:61:59:67:33:d5:02:a9:b7:c0:3f:40:7c:3f:
51:47:f4:88:c9:db:ce:86:e4:69:b7:f1:82:29:83:af:19:1d:
a7:16:a7:ad:db:2c:b8:a6:22:70:ce:a0:ef:cd:ff:1c:63:13:
16:f5:7e:13:8f:cb:80:45:d6:5a:e0:79:e9:d5:e5:09:bd:4e:
82:fd:cf:97:9c:b9:23:74:08:18:43:7f:e7:f7:78:4f:b7:d4:
e9:ec:9c:7b:31:7a:b6:ca:99:3e:0f:1f:f0:32:95:a5:b9:3b:
b6:9b:a9:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5Xccmafl8OHq0WAMtyC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTNlNzVjNmQwYWJhYmM5MzFjMjg0N2NkYWE4NjVmYjhk
N2Y5Y2YwHhcNMjUwNzI3MDgwMDA4WhcNMjUwNzI4MDgwMDA4WjAzMTEwLwYDVQQD
Eyg0YTE2NWY1NzlhMWI3NjEyYTA3ODg2NWIzOWE0MTU5MGQ1YzA3YzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVvRkAL5D09en6Xbmcg4kkw3ikzA
vy3k55YPhPSYUD2rFd5eYGk9w8Ad9Y967YYip58YZRWEM8zRm+lF/OgSTvIF+SUu
cSqnpYlUekqfeGePKjyD0THid9G6+VEkjD7+7c8bPpABPaoYOxug/3/ynH4zQ0y7
TjLNn5Gme3ksFN4JN/1IwvK4ItJhqlKPIuzObWYLxwh3TuJ/iEW+xn6vFmuSuzde
KagUWKGourlzREG0pe7INZV+Mih20kKsXSN5D1Jmum1nMDvKxI89h7sdO3mMxDDl
w/UtHonu6p1T5q4EJQ7HACjyHh7Bd3Uy0I/kA+uW+WUeQKhGxFSUreLpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoWX1eaG3YSoHiGWzmkFZDVwHxnMB8GA1UdIwQY
MBaAFGSj51xtCrq8kxwoR82qhl+41/nPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MGMwN2EtMDMyMy00NDI0LWFlYjMt
ZjY1ODI2ZmZjYmY4LzEvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MGMwN2EtMDMyMy00NDI0LWFlYjMtZjY1ODI2ZmZjYmY4
LzEvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWuWRsk2
xw+OzTO219THa/48n/qhaW3jXVaAjdWYKH3VFTemrBtJB6mUr5b+ChJg5J62nYtK
KZVYcDD2JJw2XrUf8yxnjmJguWRQcz37A0LNCmjF6CTzuD4N8YOKQT99JMOjdRre
zP3Hq113vHqKmeoySfJzSKUr98fESy1lv95+o29vTuDEqqs6MAPc476XX+gli/hh
WWcz1QKpt8A/QHw/UUf0iMnbzobkabfxgimDrxkdpxanrdssuKYicM6g783/HGMT
FvV+E4/LgEXWWuB56dXlCb1Ogv3Pl5y5I3QIGEN/5/d4T7fU6eycezF6tsqZPg8f
8DKVpbk7tpupdg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:32 2025 by rpki-client