Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: ZQUdV2azo8rdiboJRUYBsfHGH+vsOn2SAkWLNKwHyeg=
Subject key identifier: 63:05:85:73:E3:E7:26:5C:09:53:DB:A6:9E:49:60:52:A8:C9:12:6E
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01984588515E09A3D8D83B0B07CFD4CEB457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 07:00:18 +0000
Manifest this update: Sat 26 Jul 2025 07:00:18 +0000
Manifest next update: Sun 27 Jul 2025 07:00:18 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: wDZZ8ETUjKOdWIksFp2MhbOWkbBaRmSRgf6GS8Lq6oQ=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:51:5e:09:a3:d8:d8:3b:0b:07:cf:d4:ce:b4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jul 26 07:00:18 2025 GMT
Not After : Jul 27 07:00:18 2025 GMT
Subject: CN=63058573e3e7265c0953dba69e496052a8c9126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5a:a7:63:b2:dd:f8:2d:33:03:b5:ca:19:b4:
71:30:d0:af:c9:c6:53:a3:11:c9:ed:d1:d7:d4:01:
2d:7d:81:cf:90:a5:6e:39:39:20:10:8a:67:37:77:
8b:ca:de:ea:cf:99:69:36:ee:4e:f5:3b:78:32:55:
c2:98:21:40:3a:7a:d4:f6:d3:70:75:cb:8d:de:76:
97:0b:bf:a5:5a:b0:e8:6c:d7:be:f4:98:a1:18:02:
7f:95:94:fb:bf:45:d9:a3:d8:7e:95:69:b2:fb:ef:
78:fb:45:db:30:a4:78:2b:c9:0e:d5:4a:69:ab:20:
f6:55:49:90:b8:53:55:5e:63:d8:15:1b:40:d3:20:
1d:b7:a1:32:49:f6:bc:b0:b3:50:61:19:df:61:0c:
40:fc:1e:60:3e:82:9f:66:51:ca:38:b8:70:af:ef:
58:2d:e0:1a:10:01:d6:13:f5:d1:93:b5:7c:cc:34:
5d:1b:58:c3:14:f1:21:5a:1c:5e:ae:d9:85:28:13:
80:71:cb:ee:5a:ed:b2:87:f1:bd:7d:2a:8a:75:e5:
e5:4d:cc:0d:d7:ee:42:5d:95:c7:6c:1d:31:ee:40:
f0:4a:33:8b:58:c8:aa:e3:c2:05:c9:98:58:44:33:
64:91:77:ea:bd:bb:f6:cb:3f:02:58:b7:e1:c9:ba:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:85:73:E3:E7:26:5C:09:53:DB:A6:9E:49:60:52:A8:C9:12:6E
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:a1:9d:b2:67:a7:b5:56:4b:a1:e9:ca:7b:ca:00:52:e0:
58:33:14:af:c4:8d:18:38:f3:4e:14:32:54:5d:4c:df:2b:dd:
49:1f:a0:ff:34:3c:96:6d:4e:b5:a9:91:f8:0f:a9:f4:b0:55:
04:5e:ae:09:4c:08:14:ed:16:4a:5d:1c:e2:b7:b7:03:97:47:
e6:c4:1b:a3:c1:04:ec:61:20:6e:ec:f0:fd:fd:58:01:36:03:
f5:80:f7:a6:15:89:66:1f:f0:7e:89:47:ab:a1:d1:50:06:4b:
83:66:92:37:4a:dd:2a:bb:96:cb:2c:9b:cf:0b:5d:97:28:42:
10:10:2a:a4:de:16:a7:7a:39:dd:a3:10:92:b0:24:4a:28:d7:
5a:63:14:a5:75:65:b1:98:c9:44:83:46:d6:e4:2c:8a:bf:47:
2e:dd:d8:c3:bb:f1:ea:74:ba:00:84:19:33:a5:30:81:ac:01:
9b:2b:f4:60:c1:b4:10:c8:cf:7a:0d:39:c8:bf:53:cd:2d:70:
6f:79:41:69:2e:90:77:38:a1:b4:51:ff:ed:84:da:45:cc:4d:
91:de:1b:97:cc:d0:0d:63:fb:0d:90:f4:26:c0:a1:69:30:29:
38:30:eb:26:26:89:50:ac:fc:3d:65:ef:4b:cd:05:61:4d:f0:
6c:8e:61:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiFFeCaPY2DsLB8/UzrRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjUwNzI2MDcwMDE4WhcNMjUwNzI3MDcwMDE4WjAzMTEwLwYDVQQD
Eyg2MzA1ODU3M2UzZTcyNjVjMDk1M2RiYTY5ZTQ5NjA1MmE4YzkxMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlqnY7Ld+C0zA7XKGbRxMNCvycZT
oxHJ7dHX1AEtfYHPkKVuOTkgEIpnN3eLyt7qz5lpNu5O9Tt4MlXCmCFAOnrU9tNw
dcuN3naXC7+lWrDobNe+9JihGAJ/lZT7v0XZo9h+lWmy++94+0XbMKR4K8kO1Upp
qyD2VUmQuFNVXmPYFRtA0yAdt6EySfa8sLNQYRnfYQxA/B5gPoKfZlHKOLhwr+9Y
LeAaEAHWE/XRk7V8zDRdG1jDFPEhWhxertmFKBOAccvuWu2yh/G9fSqKdeXlTcwN
1+5CXZXHbB0x7kDwSjOLWMiq48IFyZhYRDNkkXfqvbv2yz8CWLfhybpbfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMFhXPj5yZcCVPbpp5JYFKoyRJuMB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFOhnbJn
p7VWS6HpynvKAFLgWDMUr8SNGDjzThQyVF1M3yvdSR+g/zQ8lm1OtamR+A+p9LBV
BF6uCUwIFO0WSl0c4re3A5dH5sQbo8EE7GEgbuzw/f1YATYD9YD3phWJZh/wfolH
q6HRUAZLg2aSN0rdKruWyyybzwtdlyhCEBAqpN4Wp3o53aMQkrAkSijXWmMUpXVl
sZjJRING1uQsir9HLt3Yw7vx6nS6AIQZM6UwgawBmyv0YMG0EMjPeg05yL9TzS1w
b3lBaS6QdzihtFH/7YTaRcxNkd4bl8zQDWP7DZD0JsChaTApODDrJiaJUKz8PWXv
S80FYU3wbI5hLg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:51:14 2025 by rpki-client