Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json)
Hash identifier: /dqhSt9NUm9AJnSlE0sX19FeqgSsXvFT28k00CtHY0E=
Subject key identifier: 63:9F:B4:07:9B:1A:01:E3:49:1E:12:48:55:F8:43:CA:A4:BB:F1:36
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial: 019845BF30CC1B5E7F4EB275F622FFFE2CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
Manifest number: 047A
Signing time: Sat 26 Jul 2025 08:00:14 +0000
Manifest this update: Sat 26 Jul 2025 08:00:14 +0000
Manifest next update: Sun 27 Jul 2025 08:00:14 +0000
Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: BwBSHCZl948JGUdVsIBd10ANsUIfnZA5jKRFnul24AQ=)
2: p-RJNh9JzuTGAbonv6SiHIGo-Zs.roa (hash: CnUaaNmND1hlUYpUdj93kk7BQgZTe17usUCZnw2w4sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:30:cc:1b:5e:7f:4e:b2:75:f6:22:ff:fe:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Validity
Not Before: Jul 26 08:00:14 2025 GMT
Not After : Jul 27 08:00:14 2025 GMT
Subject: CN=639fb4079b1a01e3491e124855f843caa4bbf136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1e:0b:79:2d:93:e2:ad:7f:50:07:a7:1d:35:
4d:5f:e0:06:02:1c:67:fe:8c:e6:65:af:fa:7f:43:
03:a6:4d:17:fd:9e:7c:02:0b:8a:97:2d:a2:7e:66:
36:72:ae:5e:42:ec:65:a7:63:2a:1f:87:aa:4b:41:
c1:89:4a:b1:ba:75:82:45:82:05:46:40:03:84:4e:
57:0b:e0:59:c6:1d:e9:c9:ce:3f:a9:5d:15:b7:16:
7b:ba:42:cf:31:43:83:20:6c:bd:92:6e:07:4c:f0:
d9:4c:a2:2e:a7:d6:07:82:2c:84:3f:a2:2c:bc:ef:
49:ce:c4:5b:81:17:14:dd:b5:21:a3:21:b2:45:b4:
9e:40:17:e9:02:d6:8a:04:b0:39:72:b4:c2:c9:07:
ae:c2:c2:9c:56:b5:80:ec:c5:fd:a0:f0:0d:05:b7:
8d:75:74:ea:18:9e:e8:dc:52:b4:7c:70:9a:9a:72:
d0:58:36:9d:bd:34:29:b3:ff:b2:b2:95:7b:3e:0e:
7f:6f:d0:42:cb:80:b8:a5:18:83:d5:e2:df:91:ec:
5f:d8:f0:15:b8:6f:6f:89:ce:d8:5c:75:b4:3a:01:
1e:49:7f:0f:6d:9a:06:fc:55:1d:52:2c:a7:e2:b1:
d8:e3:65:d5:ec:68:7e:a6:0e:e0:74:75:80:f7:84:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9F:B4:07:9B:1A:01:E3:49:1E:12:48:55:F8:43:CA:A4:BB:F1:36
X509v3 Authority Key Identifier:
keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:81:3a:16:22:fb:c9:fc:82:05:7f:de:72:fb:b6:29:ae:60:
52:b1:32:1e:49:30:f7:a9:32:14:64:6a:ad:ac:03:46:18:99:
42:5e:ec:03:47:2b:60:32:27:8b:7d:3d:f4:68:7d:c1:4d:0a:
a2:7d:2c:11:f7:06:6f:d1:7a:52:f9:bb:b9:28:b8:c6:b2:76:
d2:e9:11:8a:a5:d6:3b:46:ec:e9:6e:1a:f8:fc:2c:9f:44:fc:
12:9a:2e:2f:8a:e7:e4:cd:6f:13:37:52:da:18:c0:5b:01:25:
e2:da:48:b8:28:7c:52:92:81:22:7a:a7:da:94:c6:93:47:f7:
be:0f:cf:7d:f2:f9:5f:b6:7c:2a:7b:8b:89:b2:83:d7:f3:0c:
cb:d8:0d:ff:77:f6:44:95:93:51:f2:ad:44:df:fe:7b:bc:55:
c9:fc:e7:02:ba:58:e9:98:b8:a4:82:99:96:f3:7c:e8:2d:39:
48:b5:00:e0:e3:66:59:1a:b9:3d:98:9e:ab:cb:90:c8:3e:61:
1d:e1:33:e2:fd:f1:2c:ff:a3:c0:c3:bd:02:ec:16:d4:65:b1:
6e:a2:67:4d:81:8b:a5:97:93:30:39:c6:1b:4c:35:3a:0a:4c:
9e:aa:6e:2c:0a:7d:e0:40:79:d6:70:25:99:79:bc:94:62:d5:
61:ed:8a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFvzDMG15/TrJ19iL//izAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTdhNGU2YWNmYjcyZDUxZDI5ZWU2MWE2MjgzNmY2NjA2
MDk3YTYwHhcNMjUwNzI2MDgwMDE0WhcNMjUwNzI3MDgwMDE0WjAzMTEwLwYDVQQD
Eyg2MzlmYjQwNzliMWEwMWUzNDkxZTEyNDg1NWY4NDNjYWE0YmJmMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR4LeS2T4q1/UAenHTVNX+AGAhxn
/ozmZa/6f0MDpk0X/Z58AguKly2ifmY2cq5eQuxlp2MqH4eqS0HBiUqxunWCRYIF
RkADhE5XC+BZxh3pyc4/qV0VtxZ7ukLPMUODIGy9km4HTPDZTKIup9YHgiyEP6Is
vO9JzsRbgRcU3bUhoyGyRbSeQBfpAtaKBLA5crTCyQeuwsKcVrWA7MX9oPANBbeN
dXTqGJ7o3FK0fHCamnLQWDadvTQps/+yspV7Pg5/b9BCy4C4pRiD1eLfkexf2PAV
uG9vic7YXHW0OgEeSX8PbZoG/FUdUiyn4rHY42XV7Gh+pg7gdHWA94SL/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOftAebGgHjSR4SSFX4Q8qku/E2MB8GA1UdIwQY
MBaAFGSXpOas+3LVHSnuYaYoNvZgYJemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYt
MDFjZDQ3YjZjYTBkLzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYtMDFjZDQ3YjZjYTBk
LzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwYE6FiL7
yfyCBX/ecvu2Ka5gUrEyHkkw96kyFGRqrawDRhiZQl7sA0crYDIni3099Gh9wU0K
on0sEfcGb9F6Uvm7uSi4xrJ20ukRiqXWO0bs6W4a+Pwsn0T8EpouL4rn5M1vEzdS
2hjAWwEl4tpIuCh8UpKBInqn2pTGk0f3vg/PffL5X7Z8KnuLibKD1/MMy9gN/3f2
RJWTUfKtRN/+e7xVyfznArpY6Zi4pIKZlvN86C05SLUA4ONmWRq5PZieq8uQyD5h
HeEz4v3xLP+jwMO9AuwW1GWxbqJnTYGLpZeTMDnGG0w1OgpMnqpuLAp94EB51nAl
mXm8lGLVYe2KIA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:52:54 2025 by rpki-client