Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: iTGgKhmoiteS3ktIt9kqp6qjNxcWEm7VdP/e98jc08w=
Subject key identifier: 99:D0:65:DD:49:26:C6:DF:76:68:8B:D0:F6:D2:FB:5A:FF:29:C8:32
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 019849D354ED0BE9FE2CD841DE6DE9DF3981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:43 +0000
Manifest this update: Sun 27 Jul 2025 03:00:43 +0000
Manifest next update: Mon 28 Jul 2025 03:00:43 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: EQvPXHz7O1vjW1VoNfMLtPTePVGDLI1jNHJjDoCZlpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:54:ed:0b:e9:fe:2c:d8:41:de:6d:e9:df:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Jul 27 03:00:43 2025 GMT
Not After : Jul 28 03:00:43 2025 GMT
Subject: CN=99d065dd4926c6df76688bd0f6d2fb5aff29c832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:66:df:25:d8:6c:b6:2b:4c:44:73:d5:60:
49:53:e1:b9:48:a3:62:3c:f2:2f:72:00:be:a4:1d:
85:71:18:df:3e:a3:41:3b:f3:77:06:ca:45:89:3d:
dc:c9:ad:b9:08:ed:c5:b0:06:34:4d:bb:26:03:24:
e1:e0:75:3a:5e:26:d3:44:61:59:38:15:64:f8:62:
9d:06:5c:58:47:16:4f:b6:7f:b0:9c:46:bd:83:61:
be:df:e3:7c:00:66:94:51:49:0a:a0:06:07:f0:52:
f9:40:58:dc:89:55:03:ec:71:a5:69:bb:f3:46:42:
5d:7e:8f:32:c4:19:66:9d:72:ee:1d:f2:63:f3:43:
39:aa:63:e8:fa:ea:81:58:1c:33:ef:a2:2a:1a:62:
df:ff:fc:38:e8:6e:84:57:33:73:dd:07:ae:66:14:
ce:bc:a8:ee:be:37:dc:e2:10:ce:9f:b4:7b:0b:9a:
cf:74:c7:ff:7e:a3:7c:8c:ac:ce:b2:d4:7e:d7:57:
e1:db:2d:42:aa:b6:84:5d:e8:3c:43:a0:94:e9:a0:
15:59:a4:34:c8:af:2a:e5:0c:27:99:3e:08:f0:45:
ec:e9:c5:6f:41:96:c5:82:f0:7c:2d:70:42:e1:e4:
1d:8d:02:60:3b:0b:b2:b2:39:64:c2:1d:c3:c9:1f:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D0:65:DD:49:26:C6:DF:76:68:8B:D0:F6:D2:FB:5A:FF:29:C8:32
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:21:c5:58:2b:64:a1:ba:8d:92:06:2f:00:75:43:88:22:68:
09:21:3f:70:f6:f2:ee:49:3a:72:aa:a0:0f:33:27:de:23:99:
9b:24:22:ab:10:24:35:f1:d5:12:7e:07:cf:fc:c7:ff:0d:03:
c4:db:91:23:09:ff:0e:5c:f5:75:5c:43:08:7b:f0:63:9e:74:
77:6f:43:7f:be:fb:d4:b7:63:38:69:35:09:c7:d5:17:2c:df:
bb:4c:6e:82:7d:c4:3f:02:f5:88:f2:c2:16:de:57:24:25:9a:
bf:5e:89:78:16:2a:3d:9f:be:8e:8d:bc:cf:9d:d9:de:61:58:
7a:05:f8:98:a6:62:53:60:8a:41:a1:0d:77:ef:c2:ab:e6:97:
d9:f0:48:41:fb:a0:57:e0:da:dc:73:e4:e8:ea:e8:59:2b:fb:
d7:56:6c:1c:d7:96:80:e3:c9:00:0b:14:36:99:93:1c:51:c9:
0a:6e:6a:dd:38:c7:c9:9d:0b:f5:55:81:6d:2f:22:70:7a:8d:
47:57:af:f1:21:7b:b9:13:f0:d6:36:db:7c:df:fc:3c:00:2b:
60:b3:66:23:5d:22:e8:12:ff:f0:f2:e5:cd:72:5d:1c:79:67:
b0:85:ce:06:00:e6:72:0e:cb:de:bf:1c:87:45:81:7f:2f:41:
cf:46:ed:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ01TtC+n+LNhB3m3p3zmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzllNmJlNDBkODAxMjg4OTZjY2QxMzFmNjVhNTVhZDk4
YTQwYWYwHhcNMjUwNzI3MDMwMDQzWhcNMjUwNzI4MDMwMDQzWjAzMTEwLwYDVQQD
Eyg5OWQwNjVkZDQ5MjZjNmRmNzY2ODhiZDBmNmQyZmI1YWZmMjljODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPpm3yXYbLYrTERz1WBJU+G5SKNi
PPIvcgC+pB2FcRjfPqNBO/N3BspFiT3cya25CO3FsAY0TbsmAyTh4HU6XibTRGFZ
OBVk+GKdBlxYRxZPtn+wnEa9g2G+3+N8AGaUUUkKoAYH8FL5QFjciVUD7HGlabvz
RkJdfo8yxBlmnXLuHfJj80M5qmPo+uqBWBwz76IqGmLf//w46G6EVzNz3QeuZhTO
vKjuvjfc4hDOn7R7C5rPdMf/fqN8jKzOstR+11fh2y1CqraEXeg8Q6CU6aAVWaQ0
yK8q5QwnmT4I8EXs6cVvQZbFgvB8LXBC4eQdjQJgOwuysjlkwh3DyR/CVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnQZd1JJsbfdmiL0PbS+1r/KcgyMB8GA1UdIwQY
MBaAFMw55r5A2AEoiWzNEx9lpVrZikCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYt
NjA5ZDhmNTY1ZmZjLzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iMmZmOTEtZDRjZS00MDViLWJlYmYtNjA5ZDhmNTY1ZmZj
LzEvekRubXZrRFlBU2lKYk0wVEgyV2xXdG1LUUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSHFWCtk
obqNkgYvAHVDiCJoCSE/cPby7kk6cqqgDzMn3iOZmyQiqxAkNfHVEn4Hz/zH/w0D
xNuRIwn/Dlz1dVxDCHvwY550d29Df7771LdjOGk1CcfVFyzfu0xugn3EPwL1iPLC
Ft5XJCWav16JeBYqPZ++jo28z53Z3mFYegX4mKZiU2CKQaENd+/Cq+aX2fBIQfug
V+Da3HPk6OroWSv711ZsHNeWgOPJAAsUNpmTHFHJCm5q3TjHyZ0L9VWBbS8icHqN
R1ev8SF7uRPw1jbbfN/8PAArYLNmI10i6BL/8PLlzXJdHHlnsIXOBgDmcg7L3r8c
h0WBfy9Bz0bt2A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:31:12 2025 by rpki-client