Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: z/CzYqQzvRlYbA6oLmT05dQa2FAMhkQiS9uPjOTq69A=
Subject key identifier: 13:23:19:17:36:74:2E:48:B0:F4:25:71:A8:EE:BD:7A:8B:F8:44:19
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 01984A77D4A595FC384D3D72B20EABA492A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 06:00:23 +0000
Manifest this update: Sun 27 Jul 2025 06:00:23 +0000
Manifest next update: Mon 28 Jul 2025 06:00:23 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: rF+3ueVwU7L/S2sEDAZEs3mHG3J6KdNrBO12my8AGRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d4:a5:95:fc:38:4d:3d:72:b2:0e:ab:a4:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Jul 27 06:00:23 2025 GMT
Not After : Jul 28 06:00:23 2025 GMT
Subject: CN=1323191736742e48b0f42571a8eebd7a8bf84419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:12:6d:be:00:1e:c7:8b:bb:7b:f3:7a:5f:
c8:25:17:7e:fc:3f:c4:28:d4:e7:f1:69:47:7e:00:
95:3b:d5:4c:8e:a7:10:8b:45:b2:96:4b:73:74:07:
51:42:3b:83:dc:c3:d2:10:e2:ed:0a:97:85:db:bd:
b3:27:bb:3f:16:b9:eb:90:07:20:ff:45:9b:ea:eb:
5c:7b:7d:07:8c:ce:cf:62:7b:06:43:eb:9e:f1:92:
36:94:e7:23:85:50:1c:af:cb:0e:c6:48:43:b6:ef:
5f:ba:23:0e:e0:c5:ff:dd:dc:93:cb:ef:ca:5e:09:
d1:34:69:60:05:bc:73:34:60:44:ac:c1:de:34:c7:
e2:b1:9a:7f:ab:42:f2:64:24:a2:f4:ef:18:37:ed:
2b:3e:6c:83:12:89:57:b9:cc:a3:f3:a0:f2:0a:8f:
2f:97:e3:e4:23:70:1d:ce:30:0b:93:e5:74:80:5b:
eb:ca:e1:a4:59:4c:d6:f7:8d:fa:bb:16:a6:d0:5e:
fe:e7:b9:71:fc:02:12:f8:eb:49:66:9f:c2:c0:9f:
b1:17:f6:19:8a:32:1e:28:41:f8:e6:e1:65:3a:6d:
ca:1f:4d:d6:e3:e1:a1:2e:b9:68:0d:41:df:dc:72:
79:b8:89:5a:b8:7c:b4:88:3e:fe:bd:a2:0d:dd:a4:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:19:17:36:74:2E:48:B0:F4:25:71:A8:EE:BD:7A:8B:F8:44:19
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4f:86:16:f9:07:24:6b:e2:bf:57:f6:18:35:a0:05:bd:3e:
d2:26:0d:0b:68:01:10:66:51:69:85:bc:ff:f2:0a:17:a4:a9:
19:24:c4:b2:11:e0:31:a3:78:33:af:f0:32:2c:99:fa:b8:46:
a7:cd:73:f7:e5:bf:cf:5c:ed:e4:4d:82:1f:37:a2:72:bc:8f:
29:ac:aa:0e:98:cb:00:03:46:55:66:a8:b2:d8:cf:ec:59:c9:
1b:a7:21:eb:d8:69:66:92:1f:e6:7e:8f:7b:13:df:f6:57:7e:
53:d6:b0:25:0d:86:cf:03:1e:9d:3a:d3:2e:4d:32:e5:f9:66:
cd:4c:ec:68:5f:df:bc:49:e5:38:71:5b:35:e0:03:17:66:aa:
76:d8:51:6e:12:6f:0f:eb:e3:07:86:5e:63:4f:7b:52:e5:19:
3a:43:f9:a5:e5:e2:5c:2e:98:4d:c4:86:8c:b6:ac:5e:2d:78:
19:95:4d:c2:00:65:3d:5f:7d:62:64:54:f9:c5:8e:c4:2a:46:
2a:0f:4f:7d:d5:2d:c3:75:a3:18:4b:2b:e9:90:1e:d1:3d:55:
b1:c8:69:d9:b7:69:0b:3c:73:2e:3e:3e:03:4b:de:78:84:ce:
a8:5e:b3:0d:cd:dc:ed:c9:e6:67:d8:63:ce:74:3c:ee:f5:7a:
2c:2b:01:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd9Sllfw4TT1ysg6rpJKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTE5ZWI1YzIxMDgzNjAxNTVkZTdmYjRmMjE2YTA1NWFl
MzFmMDkwHhcNMjUwNzI3MDYwMDIzWhcNMjUwNzI4MDYwMDIzWjAzMTEwLwYDVQQD
EygxMzIzMTkxNzM2NzQyZTQ4YjBmNDI1NzFhOGVlYmQ3YThiZjg0NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/0Sbb4AHseLu3vzel/IJRd+/D/E
KNTn8WlHfgCVO9VMjqcQi0WylktzdAdRQjuD3MPSEOLtCpeF272zJ7s/FrnrkAcg
/0Wb6utce30HjM7PYnsGQ+ue8ZI2lOcjhVAcr8sOxkhDtu9fuiMO4MX/3dyTy+/K
XgnRNGlgBbxzNGBErMHeNMfisZp/q0LyZCSi9O8YN+0rPmyDEolXucyj86DyCo8v
l+PkI3AdzjALk+V0gFvryuGkWUzW9436uxam0F7+57lx/AIS+OtJZp/CwJ+xF/YZ
ijIeKEH45uFlOm3KH03W4+GhLrloDUHf3HJ5uIlauHy0iD7+vaIN3aRViQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMjGRc2dC5IsPQlcajuvXqL+EQZMB8GA1UdIwQY
MBaAFM2RnrXCEINgFV3n+08hagVa4x8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgt
OWY4ZTZhMTg0Mzc0LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgtOWY4ZTZhMTg0Mzc0
LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIE+GFvkH
JGviv1f2GDWgBb0+0iYNC2gBEGZRaYW8//IKF6SpGSTEshHgMaN4M6/wMiyZ+rhG
p81z9+W/z1zt5E2CHzeicryPKayqDpjLAANGVWaostjP7FnJG6ch69hpZpIf5n6P
exPf9ld+U9awJQ2GzwMenTrTLk0y5flmzUzsaF/fvEnlOHFbNeADF2aqdthRbhJv
D+vjB4ZeY097UuUZOkP5peXiXC6YTcSGjLasXi14GZVNwgBlPV99YmRU+cWOxCpG
Kg9PfdUtw3WjGEsr6ZAe0T1Vschp2bdpCzxzLj4+A0veeITOqF6zDc3c7cnmZ9hj
znQ87vV6LCsBpg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:51 2025 by rpki-client