Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: oUo06nDiVefBHej1DdRiwsHXp0qd37ci6DHCkjks2C4=
Subject key identifier: CC:7F:DE:99:B9:5E:6D:F8:C3:E0:0C:BE:6C:4B:27:CC:87:3E:24:4F
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 0199239F6677101D042DFF7C799FEF904415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 07E9
Signing time: Sun 07 Sep 2025 10:01:12 +0000
Manifest this update: Sun 07 Sep 2025 10:01:12 +0000
Manifest next update: Mon 08 Sep 2025 10:01:12 +0000
Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: yDfTl4pUICIOZ3EKl3PWf8L+qwdhHGydTS7Uo9BiFwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:66:77:10:1d:04:2d:ff:7c:79:9f:ef:90:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Sep 7 10:01:12 2025 GMT
Not After : Sep 8 10:01:12 2025 GMT
Subject: CN=cc7fde99b95e6df8c3e00cbe6c4b27cc873e244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:d5:82:23:86:15:d7:b5:1a:b0:ba:bd:c9:
36:9a:4e:ef:b8:69:ef:52:45:b8:a0:a1:73:af:73:
5c:a7:cc:59:3c:57:21:28:57:98:db:4a:8a:a9:9e:
86:63:ed:2e:b6:24:c5:e6:d4:e1:1b:b3:3f:55:16:
85:33:39:71:32:76:38:16:43:37:61:34:12:24:91:
03:54:7a:b5:28:26:91:fc:5e:b0:05:74:f8:dd:31:
fb:2a:79:b6:38:de:05:bf:c6:fe:87:7c:f2:be:af:
7f:2c:e6:4b:dd:82:11:e0:6c:63:1c:47:7c:b5:6f:
f2:6c:98:c9:4f:82:d4:2d:34:99:7b:1f:1a:e4:88:
c6:d3:c7:96:bf:29:d4:ce:eb:61:80:01:0b:76:14:
29:08:b4:4e:ca:9a:3e:5b:e0:30:00:7f:70:a9:02:
6c:9e:b7:41:e2:03:7a:68:61:a7:aa:a4:be:74:1a:
db:4e:09:d6:88:32:a2:66:fd:51:13:f1:41:2a:4f:
b1:aa:7e:64:6c:d0:78:95:c4:94:56:05:8d:d7:34:
5b:10:af:4f:3f:ee:88:35:f1:6f:10:4c:7d:cc:04:
97:9f:b9:62:c2:3c:d7:d4:89:4c:98:e1:71:5d:c9:
ea:d7:07:38:9c:72:99:55:96:f1:c2:c4:7d:c7:d0:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:DE:99:B9:5E:6D:F8:C3:E0:0C:BE:6C:4B:27:CC:87:3E:24:4F
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e4:c7:d7:39:d5:36:18:80:56:9b:fc:d0:cc:b7:d1:b4:a5:
84:e8:b0:3b:f6:6b:f6:43:dc:c6:1a:e4:75:2a:06:e4:a8:51:
e4:1f:3b:43:ee:04:88:da:d8:f2:05:54:70:b1:21:56:a7:41:
3e:6c:77:db:ea:81:10:6b:b6:e2:71:f6:19:67:4d:c7:6f:e0:
fa:fa:aa:b4:55:f9:ab:57:03:dd:57:a9:1f:02:d8:56:04:bf:
93:cb:70:f5:48:23:86:df:95:aa:77:ce:3c:0c:a3:3f:3d:99:
ee:7a:83:4c:f6:f2:42:bc:5c:f0:b1:fd:24:32:24:8d:ee:09:
2f:21:6a:e9:ee:5c:68:17:ef:f7:36:cc:56:01:9a:a9:f2:4e:
2f:4d:c4:97:0f:a5:f7:6f:8f:78:f4:40:0e:8c:90:69:41:00:
4a:bb:14:a5:6b:a5:1d:f2:70:77:be:92:3b:43:1b:a5:d7:59:
d3:53:87:be:3d:3a:fb:ac:b9:7d:40:21:cf:0b:f6:a2:1a:e5:
77:52:6c:30:d3:4b:25:fc:da:ef:55:8b:c7:f3:25:f7:c6:43:
e8:52:05:b8:6e:4d:f5:5d:35:5c:7a:15:59:02:0a:ca:57:a2:
8f:68:4f:f1:9e:3d:d2:f3:5f:6c:d2:b6:e5:3a:79:f2:b7:7a:
2e:07:b1:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn2Z3EB0ELf98eZ/vkEQVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTNmMmIwNGViODViNmEyYTZlMjFjMDNjZmJiNzcyODdh
NDVhZmYwHhcNMjUwOTA3MTAwMTEyWhcNMjUwOTA4MTAwMTEyWjAzMTEwLwYDVQQD
EyhjYzdmZGU5OWI5NWU2ZGY4YzNlMDBjYmU2YzRiMjdjYzg3M2UyNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdnVgiOGFde1GrC6vck2mk7vuGnv
UkW4oKFzr3Ncp8xZPFchKFeY20qKqZ6GY+0utiTF5tThG7M/VRaFMzlxMnY4FkM3
YTQSJJEDVHq1KCaR/F6wBXT43TH7Knm2ON4Fv8b+h3zyvq9/LOZL3YIR4GxjHEd8
tW/ybJjJT4LULTSZex8a5IjG08eWvynUzuthgAELdhQpCLROypo+W+AwAH9wqQJs
nrdB4gN6aGGnqqS+dBrbTgnWiDKiZv1RE/FBKk+xqn5kbNB4lcSUVgWN1zRbEK9P
P+6INfFvEEx9zASXn7liwjzX1IlMmOFxXcnq1wc4nHKZVZbxwsR9x9BXLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx/3pm5Xm34w+AMvmxLJ8yHPiRPMB8GA1UdIwQY
MBaAFGaT8rBOuFtqKm4hwDz7t3KHpFr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMt
M2E5YzBmYmM4YTBhLzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMtM2E5YzBmYmM4YTBh
LzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+TH1znV
NhiAVpv80My30bSlhOiwO/Zr9kPcxhrkdSoG5KhR5B87Q+4EiNrY8gVUcLEhVqdB
Pmx32+qBEGu24nH2GWdNx2/g+vqqtFX5q1cD3VepHwLYVgS/k8tw9Ugjht+VqnfO
PAyjPz2Z7nqDTPbyQrxc8LH9JDIkje4JLyFq6e5caBfv9zbMVgGaqfJOL03Elw+l
92+PePRADoyQaUEASrsUpWulHfJwd76SO0MbpddZ01OHvj06+6y5fUAhzwv2ohrl
d1JsMNNLJfza71WLx/Ml98ZD6FIFuG5N9V01XHoVWQIKyleij2hP8Z490vNfbNK2
5Tp58rd6LgexOQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:36 2025 by rpki-client