Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
File: rzA4pxexVOHPpHEWgy2ibyiyowQ.mft (raw, json)
Hash identifier: dTgXJo52z07zbmZ4MUZ9q9txOR325SwiztmDKpJbAJ0=
Subject key identifier: 9D:92:DB:54:CD:5A:21:B1:AB:8E:A7:39:37:7F:69:A1:11:60:0C:CD
Authority key identifier: AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
Certificate issuer: /CN=af3038a717b154e1cfa47116832da26f28b2a304
Certificate serial: 019849D2CF34367FD85361ABAA2A929AC8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 03:00:08 +0000
Manifest this update: Sun 27 Jul 2025 03:00:08 +0000
Manifest next update: Mon 28 Jul 2025 03:00:08 +0000
Files and hashes: 1: 9-nqsKi4Ev5jKkuKWzG_WIBo83k.roa (hash: SHAm2ssxR7ZkFZ7Brw788jEHfHi8MZS6JxMLuTDqDJs=)
2: rzA4pxexVOHPpHEWgy2ibyiyowQ.crl (hash: 6xX1YwB+I048mIr5NyCUq6Lnp/VA2CQ7V7Eu1+u3NMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:cf:34:36:7f:d8:53:61:ab:aa:2a:92:9a:c8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3038a717b154e1cfa47116832da26f28b2a304
Validity
Not Before: Jul 27 03:00:08 2025 GMT
Not After : Jul 28 03:00:08 2025 GMT
Subject: CN=9d92db54cd5a21b1ab8ea739377f69a111600ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:81:78:53:8e:b9:01:cc:cd:81:3f:c5:70:
d9:b3:b5:f4:e5:2e:f7:7f:b9:06:2d:23:1b:ea:13:
e2:2f:45:92:94:fa:0b:dc:61:fe:e5:c7:30:8c:53:
0b:b5:64:26:1d:f0:37:45:eb:68:99:e3:71:5c:1c:
39:ac:30:0a:4f:05:18:b3:3e:bb:b2:2e:62:c0:ac:
a0:4a:94:46:6e:8f:bc:0c:c5:0c:da:10:ac:8e:ad:
64:e3:d8:55:b3:67:62:7a:a1:fa:90:37:ee:b2:31:
f5:5a:fe:dc:9c:1f:52:29:9d:d7:e7:bb:f7:26:d0:
6b:fc:9e:cc:e1:8b:ba:8c:d4:33:86:8a:f3:0a:1c:
35:4f:a1:34:32:8c:bb:2f:b7:85:66:1a:95:0a:fe:
05:f8:2d:63:99:95:1f:e2:dc:95:d7:9b:95:2c:7a:
f1:28:d7:59:ec:a7:42:50:fc:3f:93:cf:4f:c8:42:
21:80:68:84:74:8d:e6:51:64:29:34:2b:fd:f7:6f:
26:8e:e3:9d:52:bb:25:d3:03:a6:00:00:38:f3:07:
d9:a8:05:9c:e5:9b:7a:82:75:b3:78:5b:f9:7b:4d:
c6:a7:94:71:bb:7c:12:dc:2c:18:eb:b1:5e:b8:bd:
dc:df:6a:1b:a8:14:4c:f8:66:51:c0:1d:5a:77:e6:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:DB:54:CD:5A:21:B1:AB:8E:A7:39:37:7F:69:A1:11:60:0C:CD
X509v3 Authority Key Identifier:
keyid:AF:30:38:A7:17:B1:54:E1:CF:A4:71:16:83:2D:A2:6F:28:B2:A3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzA4pxexVOHPpHEWgy2ibyiyowQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6cfb78-63bc-4820-b903-860c49d0eb6a/1/rzA4pxexVOHPpHEWgy2ibyiyowQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fd:77:a0:a8:4e:10:99:48:b2:40:00:fb:03:09:be:cc:08:
96:02:d5:65:7a:a0:63:56:90:04:ad:d7:61:79:be:a2:ec:16:
22:21:e5:c5:db:0f:a1:bd:35:5d:2b:f3:a8:da:ec:68:35:1e:
59:42:c3:fc:c8:9c:50:d3:2d:6c:0d:0f:72:29:e0:2b:29:77:
20:49:64:8e:5c:14:8f:0c:0f:94:30:58:2c:8f:fc:88:7e:d6:
68:52:b3:e7:e0:f1:3c:45:5c:36:6e:04:68:d2:38:22:41:bc:
f0:7a:77:9a:cf:d6:cd:e6:24:07:0f:8d:b9:fd:b2:12:63:55:
2a:d6:0b:5b:fb:e9:d5:aa:1f:42:03:1c:4d:8b:b8:20:77:27:
6c:ba:01:2d:48:21:3a:99:82:df:1a:af:ea:af:e3:c3:fa:44:
35:4b:1a:ef:34:c3:83:33:20:da:da:a9:8a:82:0e:7b:6c:07:
73:b4:66:19:b8:13:5a:f7:11:6c:3e:8b:bc:20:e6:5e:05:8f:
ab:4d:52:b7:de:29:cd:c5:8d:16:56:56:0e:97:cb:36:fe:f6:
b3:8c:d0:d3:86:ce:16:9f:eb:45:41:87:bb:81:e7:47:fc:61:
dc:8a:7e:84:f5:ea:45:da:2d:b0:ff:6b:d4:38:bf:31:42:f9:
d6:16:74:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0s80Nn/YU2GrqiqSmsjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMzAzOGE3MTdiMTU0ZTFjZmE0NzExNjgzMmRhMjZmMjhi
MmEzMDQwHhcNMjUwNzI3MDMwMDA4WhcNMjUwNzI4MDMwMDA4WjAzMTEwLwYDVQQD
Eyg5ZDkyZGI1NGNkNWEyMWIxYWI4ZWE3MzkzNzdmNjlhMTExNjAwY2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZGBeFOOuQHMzYE/xXDZs7X05S73
f7kGLSMb6hPiL0WSlPoL3GH+5ccwjFMLtWQmHfA3RetomeNxXBw5rDAKTwUYsz67
si5iwKygSpRGbo+8DMUM2hCsjq1k49hVs2dieqH6kDfusjH1Wv7cnB9SKZ3X57v3
JtBr/J7M4Yu6jNQzhorzChw1T6E0Moy7L7eFZhqVCv4F+C1jmZUf4tyV15uVLHrx
KNdZ7KdCUPw/k89PyEIhgGiEdI3mUWQpNCv9928mjuOdUrsl0wOmAAA48wfZqAWc
5Zt6gnWzeFv5e03Gp5Rxu3wS3CwY67FeuL3c32obqBRM+GZRwB1ad+bI6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2S21TNWiGxq46nOTd/aaERYAzNMB8GA1UdIwQY
MBaAFK8wOKcXsVThz6RxFoMtom8osqMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnpBNHB4ZXhWT0hQcEhFV2d5MmlieWl5b3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82Y2ZiNzgtNjNiYy00ODIwLWI5MDMt
ODYwYzQ5ZDBlYjZhLzEvcnpBNHB4ZXhWT0hQcEhFV2d5MmlieWl5b3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82Y2ZiNzgtNjNiYy00ODIwLWI5MDMtODYwYzQ5ZDBlYjZh
LzEvcnpBNHB4ZXhWT0hQcEhFV2d5MmlieWl5b3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALP13oKhO
EJlIskAA+wMJvswIlgLVZXqgY1aQBK3XYXm+ouwWIiHlxdsPob01XSvzqNrsaDUe
WULD/MicUNMtbA0PcingKyl3IElkjlwUjwwPlDBYLI/8iH7WaFKz5+DxPEVcNm4E
aNI4IkG88Hp3ms/WzeYkBw+Nuf2yEmNVKtYLW/vp1aofQgMcTYu4IHcnbLoBLUgh
OpmC3xqv6q/jw/pENUsa7zTDgzMg2tqpioIOe2wHc7RmGbgTWvcRbD6LvCDmXgWP
q01St94pzcWNFlZWDpfLNv72s4zQ04bOFp/rRUGHu4HnR/xh3Ip+hPXqRdotsP9r
1Di/MUL51hZ0gA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:41 2025 by rpki-client