
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: aS9EHKnJhivXdl0d2Oy7I3E3SYGu0zAsoBOOhS0ufcU=
Subject key identifier: 66:FA:DC:E8:73:74:30:99:E6:E4:F6:12:CB:AD:16:16:84:E5:0F:E6
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 019848C02E1EC3577CE797EC73F80A847E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0EFD
Signing time: Sat 26 Jul 2025 22:00:10 +0000
Manifest this update: Sat 26 Jul 2025 22:00:10 +0000
Manifest next update: Sun 27 Jul 2025 22:00:10 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: pivqwasL1Z2Egd/b+N17DCmTmAdGhplcfqcNGUak6KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2e:1e:c3:57:7c:e7:97:ec:73:f8:0a:84:7e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Jul 26 22:00:10 2025 GMT
Not After : Jul 27 22:00:10 2025 GMT
Subject: CN=66fadce873743099e6e4f612cbad161684e50fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:07:c9:46:08:71:e7:9d:fb:f7:06:46:40:
2d:3b:a8:1a:12:5e:bd:24:14:ba:a9:63:7d:fc:91:
14:4b:b6:17:38:db:e5:35:fb:9f:e2:ef:99:1a:76:
60:64:67:70:5e:d6:5e:83:e6:40:d6:13:35:09:b3:
1a:b1:1f:e5:ec:45:59:a8:ce:5d:ed:98:ac:9c:07:
91:98:84:78:a7:4d:5b:1f:53:c1:06:b2:d8:78:71:
32:1b:39:93:91:bd:0b:0c:a2:a3:30:e2:0b:fe:b0:
04:4c:b0:10:85:ad:dc:23:a7:13:14:45:b2:dc:d3:
c7:b9:4f:f9:e7:18:f0:07:e9:c5:97:74:1c:d2:dd:
e7:00:12:27:21:91:9a:81:d3:f9:02:6f:55:d9:f6:
30:52:84:61:79:2c:8b:6e:a3:9b:c7:80:78:7f:cc:
4f:17:fb:1f:67:10:45:c2:6e:a4:82:f6:04:8b:f4:
e4:24:f1:b3:3e:12:dc:b2:fc:ee:51:bb:3e:f1:e3:
ae:bc:00:93:54:85:37:d4:59:d8:f9:4b:7a:40:ea:
d6:31:1b:04:a5:ed:81:60:38:09:2c:f1:6e:8a:7e:
26:ef:d1:3f:2c:bc:c8:59:d0:3d:b2:f7:2b:f4:88:
07:f5:70:b7:ed:16:32:a4:28:0b:57:f2:a7:29:ce:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FA:DC:E8:73:74:30:99:E6:E4:F6:12:CB:AD:16:16:84:E5:0F:E6
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:b1:e2:3a:9f:c3:02:eb:85:be:0b:df:b2:a6:a3:c2:e2:
75:4f:81:fb:5e:d0:13:46:39:41:f4:76:bf:40:f9:60:20:ab:
d5:65:de:4c:f0:02:47:e2:ad:16:00:d9:64:d1:3d:e5:d8:63:
74:5b:93:18:14:a7:65:b4:bc:3b:92:d6:a5:a9:98:0d:07:5b:
50:50:a0:56:f9:85:79:8b:58:c1:b1:36:c1:41:5b:db:a4:94:
27:73:60:ac:8c:56:9e:e1:d2:e9:18:06:45:6e:c9:20:94:87:
ed:85:49:9f:94:0b:eb:17:e5:f9:06:26:c6:26:ca:9e:a7:e5:
f8:ea:e2:ad:bd:33:b1:ea:3f:ca:ad:c6:4e:38:50:7d:f2:7f:
1e:d5:70:81:38:07:65:ed:51:4c:52:58:82:6d:16:91:4e:d4:
de:ff:aa:01:92:71:84:fc:56:9c:65:5b:45:ec:fb:fa:54:bd:
86:f2:d9:fb:13:5b:58:4f:99:6a:0c:e6:cc:f8:aa:fa:05:d3:
2a:79:d3:ae:0f:89:be:b0:75:91:37:3a:6d:c9:94:52:05:54:
9e:7f:ee:2d:15:9c:4e:22:c9:0a:84:6c:9c:de:b4:c0:03:55:
cd:3f:34:88:c7:25:1f:d2:0f:e9:a0:35:60:de:6c:1e:cc:e5:
ad:82:1e:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwC4ew1d855fsc/gKhH4BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjUwNzI2MjIwMDEwWhcNMjUwNzI3MjIwMDEwWjAzMTEwLwYDVQQD
Eyg2NmZhZGNlODczNzQzMDk5ZTZlNGY2MTJjYmFkMTYxNjg0ZTUwZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+YHyUYIceed+/cGRkAtO6gaEl69
JBS6qWN9/JEUS7YXONvlNfuf4u+ZGnZgZGdwXtZeg+ZA1hM1CbMasR/l7EVZqM5d
7ZisnAeRmIR4p01bH1PBBrLYeHEyGzmTkb0LDKKjMOIL/rAETLAQha3cI6cTFEWy
3NPHuU/55xjwB+nFl3Qc0t3nABInIZGagdP5Am9V2fYwUoRheSyLbqObx4B4f8xP
F/sfZxBFwm6kgvYEi/TkJPGzPhLcsvzuUbs+8eOuvACTVIU31FnY+Ut6QOrWMRsE
pe2BYDgJLPFuin4m79E/LLzIWdA9svcr9IgH9XC37RYypCgLV/KnKc4m7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb63OhzdDCZ5uT2EsutFhaE5Q/mMB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqWx4jqf
wwLrhb4L37Kmo8LidU+B+17QE0Y5QfR2v0D5YCCr1WXeTPACR+KtFgDZZNE95dhj
dFuTGBSnZbS8O5LWpamYDQdbUFCgVvmFeYtYwbE2wUFb26SUJ3NgrIxWnuHS6RgG
RW7JIJSH7YVJn5QL6xfl+QYmxibKnqfl+Orirb0zseo/yq3GTjhQffJ/HtVwgTgH
Ze1RTFJYgm0WkU7U3v+qAZJxhPxWnGVbRez7+lS9hvLZ+xNbWE+ZagzmzPiq+gXT
KnnTrg+JvrB1kTc6bcmUUgVUnn/uLRWcTiLJCoRsnN60wANVzT80iMclH9IP6aA1
YN5sHszlrYIebg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:15:00 2025 by rpki-client