Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: 2l4LhAv07vpooikwHRzDbpKijAOfbSczUUHDqYe5IMM=
Subject key identifier: 98:E4:B0:D2:69:30:6B:64:F7:21:10:8F:2A:67:24:CE:10:16:72:C9
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 01984A417F9CC49BAC0379BF3BDEEB6392A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 030F
Signing time: Sun 27 Jul 2025 05:01:03 +0000
Manifest this update: Sun 27 Jul 2025 05:01:03 +0000
Manifest next update: Mon 28 Jul 2025 05:01:03 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: CuV8GwpTTVSc/X9PEXSILj2cVJxT6WyDLJCPyz0SFSk=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:7f:9c:c4:9b:ac:03:79:bf:3b:de:eb:63:92:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Jul 27 05:01:03 2025 GMT
Not After : Jul 28 05:01:03 2025 GMT
Subject: CN=98e4b0d269306b64f721108f2a6724ce101672c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fc:22:97:27:70:a6:d2:d8:e3:81:2a:35:2e:
f8:2c:95:e3:b3:e9:41:9f:a9:2d:2d:88:01:02:48:
d6:50:69:85:bd:b7:ae:e4:68:45:a2:68:9e:a0:74:
9d:21:da:28:83:de:53:e1:ba:5d:41:88:95:b3:85:
28:1e:de:da:1f:d9:1d:fd:e4:dd:41:74:05:4a:ae:
bb:34:e3:d1:d5:4a:66:ae:9b:5b:90:19:97:68:44:
4c:6c:2b:7c:5b:27:09:1a:cd:fc:19:0a:3a:ca:d0:
74:f8:6f:5a:56:26:ea:93:aa:ac:4c:b1:03:3d:9f:
4f:24:f2:d1:7f:3f:d0:b6:79:97:7b:28:99:da:1f:
3d:1d:a7:4c:34:ef:5c:36:52:5e:60:57:65:37:45:
91:64:ab:86:1f:a1:e5:39:50:ce:07:28:98:f6:a9:
95:01:26:fd:57:d4:78:57:06:6d:97:b9:5b:8e:c0:
fa:4c:69:81:64:03:2f:2a:e7:ea:ae:a3:36:f2:ce:
fe:fd:54:cc:05:ab:29:74:c3:33:eb:e3:da:d5:35:
b2:62:99:40:41:c4:14:f5:4d:47:e3:73:b2:19:02:
5d:fb:36:b7:a5:6e:e6:ce:db:bb:d0:0d:db:fa:27:
6b:06:e1:10:6e:66:92:73:88:15:2a:d5:cc:7f:68:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:B0:D2:69:30:6B:64:F7:21:10:8F:2A:67:24:CE:10:16:72:C9
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cb:14:95:f5:a3:23:97:a2:82:81:ac:d7:84:5a:76:b2:eb:
82:13:ab:45:ef:b4:15:f9:26:6e:a2:75:f8:f1:71:20:69:6f:
00:6b:36:d5:90:39:48:88:1d:4a:e4:2a:ab:15:36:91:ab:9b:
55:dc:7a:2c:25:84:7a:fb:c6:5b:0f:77:3d:8c:ca:3f:be:30:
f8:56:f9:79:e9:41:50:e2:df:81:bc:36:0c:5a:19:a2:4b:10:
f3:e0:d9:80:ab:96:1f:cd:d1:a2:f3:e6:2a:80:b1:13:ce:8e:
20:4b:df:14:09:df:35:95:1a:bf:c1:02:9f:42:57:71:8d:9f:
1d:3a:0c:b6:d6:4f:a7:ff:4b:46:ac:25:2a:a2:f6:e9:49:ce:
e3:59:5e:5f:9d:4a:80:2b:11:5a:3b:71:bf:56:47:f5:13:fc:
d6:2f:22:0c:49:8b:8c:b4:44:cc:c5:92:96:61:06:49:dc:4c:
9a:e9:9c:c4:68:c1:7c:7e:59:a8:a0:b6:c6:c4:b3:e8:a6:f2:
33:e1:7e:fb:03:be:75:d7:37:68:2a:96:be:bc:d3:ec:6c:7c:
c5:d5:bf:3f:c3:6d:bc:ff:7c:d4:94:2b:e8:56:e3:40:f2:18:
89:eb:53:c5:f6:3b:f7:d8:5e:3e:6b:3f:a5:4e:76:b8:35:f5:
40:35:fa:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQX+cxJusA3m/O97rY5KnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2
N2VlZmEwHhcNMjUwNzI3MDUwMTAzWhcNMjUwNzI4MDUwMTAzWjAzMTEwLwYDVQQD
Eyg5OGU0YjBkMjY5MzA2YjY0ZjcyMTEwOGYyYTY3MjRjZTEwMTY3MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPwilydwptLY44EqNS74LJXjs+lB
n6ktLYgBAkjWUGmFvbeu5GhFomieoHSdIdoog95T4bpdQYiVs4UoHt7aH9kd/eTd
QXQFSq67NOPR1UpmrptbkBmXaERMbCt8WycJGs38GQo6ytB0+G9aVibqk6qsTLED
PZ9PJPLRfz/QtnmXeyiZ2h89HadMNO9cNlJeYFdlN0WRZKuGH6HlOVDOByiY9qmV
ASb9V9R4VwZtl7lbjsD6TGmBZAMvKufqrqM28s7+/VTMBaspdMMz6+Pa1TWyYplA
QcQU9U1H43OyGQJd+za3pW7mztu70A3b+idrBuEQbmaSc4gVKtXMf2iuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjksNJpMGtk9yEQjypnJM4QFnLJMB8GA1UdIwQY
MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt
YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4
LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8sUlfWj
I5eigoGs14RadrLrghOrRe+0FfkmbqJ1+PFxIGlvAGs21ZA5SIgdSuQqqxU2kaub
Vdx6LCWEevvGWw93PYzKP74w+Fb5eelBUOLfgbw2DFoZoksQ8+DZgKuWH83RovPm
KoCxE86OIEvfFAnfNZUav8ECn0JXcY2fHToMttZPp/9LRqwlKqL26UnO41leX51K
gCsRWjtxv1ZH9RP81i8iDEmLjLREzMWSlmEGSdxMmumcxGjBfH5ZqKC2xsSz6Kby
M+F++wO+ddc3aCqWvrzT7Gx8xdW/P8NtvP981JQr6FbjQPIYietTxfY799hePms/
pU52uDX1QDX6pQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:51 2025 by rpki-client