Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: IhsKTL+3OV0zCnkmtk09DM0jAJ77BdT3e5Pg0K6NJxk=
Subject key identifier: 2B:6F:97:1E:0D:7F:92:5E:E5:3A:10:74:86:5B:2C:02:BA:B1:35:B2
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 0198394D0601723FF4E82F20D06B750DAB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0594
Signing time: Wed 23 Jul 2025 22:00:05 +0000
Manifest this update: Wed 23 Jul 2025 22:00:05 +0000
Manifest next update: Thu 24 Jul 2025 22:00:05 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: dUDrKmGRBGEzvCCrs/aM03andAtvm69uLNZ2R/7sSng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:06:01:72:3f:f4:e8:2f:20:d0:6b:75:0d:ab:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Jul 23 22:00:05 2025 GMT
Not After : Jul 24 22:00:05 2025 GMT
Subject: CN=2b6f971e0d7f925ee53a1074865b2c02bab135b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:d9:12:be:a8:70:19:f7:1a:e1:d0:20:3a:
2d:d1:36:8a:22:be:1c:61:6a:e7:43:cc:99:a1:1e:
8f:64:2a:85:e8:e2:14:02:4b:62:7f:8c:3a:64:50:
5e:c7:a0:5d:ab:54:db:b7:67:1b:55:25:05:fe:ef:
1c:1d:b3:f7:88:ac:d7:4d:df:71:ce:11:44:83:2e:
58:22:d8:fe:25:0d:7d:d6:25:ff:d7:56:ef:2a:32:
06:05:5f:2a:89:d3:d2:fe:5e:c9:02:18:ca:75:21:
83:ba:10:f0:86:2a:85:f1:e3:8b:eb:55:5a:da:c2:
d7:bb:a8:4a:11:4a:3b:05:bd:79:eb:1a:c9:e2:d3:
02:e9:33:8c:c7:47:a6:51:e7:ab:d5:6c:de:b6:b1:
ab:37:b4:e4:78:49:8d:b6:ae:75:b8:62:ef:ef:cd:
aa:61:8c:1f:ff:77:02:0a:59:9e:71:7f:c5:ac:7f:
23:5a:9f:bb:46:35:c5:09:18:4b:ca:80:04:15:70:
6e:04:09:a3:a0:ca:74:57:20:68:22:1b:72:94:0c:
39:64:a9:40:91:4b:42:4c:80:1c:91:8b:bd:2a:a6:
37:46:49:42:47:2d:bc:9d:75:d9:f6:ae:6b:b7:d6:
c0:73:29:71:96:b3:75:79:5b:2e:fd:1e:90:07:41:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:97:1E:0D:7F:92:5E:E5:3A:10:74:86:5B:2C:02:BA:B1:35:B2
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:66:88:ee:34:e4:f6:1d:1e:ff:f0:c6:2e:cb:9a:9e:27:5f:
0a:b0:1a:a6:53:54:01:59:04:86:de:8f:65:d4:3e:a5:77:71:
b8:75:17:85:f0:af:6b:fe:b4:14:3f:d2:6b:6d:92:47:83:c2:
ff:2d:e7:82:d3:35:36:d9:b7:a2:c6:5c:f4:41:aa:7e:ba:87:
cd:e9:79:91:7f:02:0c:be:77:11:eb:9d:01:ef:65:f9:32:78:
e7:d2:9f:9a:11:74:27:d5:52:7e:63:6f:70:dc:dd:c1:5f:1f:
45:32:af:1f:58:0f:c3:69:2f:6e:49:a4:6d:43:c9:40:07:96:
14:78:bf:52:eb:45:50:5a:f5:52:4c:97:2d:1d:c9:85:dd:4e:
ae:bc:66:f5:32:9c:5c:01:84:73:28:14:c3:7c:b4:fc:b5:b2:
4a:33:b9:44:80:cf:49:71:01:0f:c8:cd:d0:3c:47:5d:c5:77:
04:9e:78:e2:2a:e1:fe:f7:7c:06:f1:04:fd:5d:bf:ef:da:81:
a8:a1:04:31:5e:2d:7a:a1:9f:bd:9c:04:09:af:51:03:e3:8c:
73:77:aa:91:b3:7c:4e:25:9a:24:f2:d8:1f:2c:47:75:04:ae:
cc:a2:8f:39:35:24:94:91:f7:65:83:fe:c4:1a:3f:bb:4e:97:
92:68:98:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg5TQYBcj/06C8g0Gt1Dat3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl
OGU5N2IwHhcNMjUwNzIzMjIwMDA1WhcNMjUwNzI0MjIwMDA1WjAzMTEwLwYDVQQD
EygyYjZmOTcxZTBkN2Y5MjVlZTUzYTEwNzQ4NjViMmMwMmJhYjEzNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymXZEr6ocBn3GuHQIDot0TaKIr4c
YWrnQ8yZoR6PZCqF6OIUAktif4w6ZFBex6Bdq1Tbt2cbVSUF/u8cHbP3iKzXTd9x
zhFEgy5YItj+JQ191iX/11bvKjIGBV8qidPS/l7JAhjKdSGDuhDwhiqF8eOL61Va
2sLXu6hKEUo7Bb156xrJ4tMC6TOMx0emUeer1WzetrGrN7TkeEmNtq51uGLv782q
YYwf/3cCClmecX/FrH8jWp+7RjXFCRhLyoAEFXBuBAmjoMp0VyBoIhtylAw5ZKlA
kUtCTIAckYu9KqY3RklCRy28nXXZ9q5rt9bAcylxlrN1eVsu/R6QB0H0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtvlx4Nf5Je5ToQdIZbLAK6sTWyMB8GA1UdIwQY
MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt
MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm
LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWaI7jTk
9h0e//DGLsuanidfCrAaplNUAVkEht6PZdQ+pXdxuHUXhfCva/60FD/Sa22SR4PC
/y3ngtM1Ntm3osZc9EGqfrqHzel5kX8CDL53EeudAe9l+TJ459KfmhF0J9VSfmNv
cNzdwV8fRTKvH1gPw2kvbkmkbUPJQAeWFHi/UutFUFr1UkyXLR3Jhd1Orrxm9TKc
XAGEcygUw3y0/LWySjO5RIDPSXEBD8jN0DxHXcV3BJ544irh/vd8BvEE/V2/79qB
qKEEMV4teqGfvZwECa9RA+OMc3eqkbN8TiWaJPLYHyxHdQSuzKKPOTUklJH3ZYP+
xBo/u06XkmiYcQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:16 2025 by rpki-client