Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: Vp0Q545SwD9q3AOXBNR/d/R97o7LT6RWSjdYfDaQxAw=
Subject key identifier: 6A:CD:43:E8:1D:6E:83:7E:D7:D9:CC:E9:81:57:6E:6F:62:2F:1B:B7
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 0198C7928B8FCB173DD1EC6F9BB5903F4029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 0EEC
Signing time: Wed 20 Aug 2025 13:02:06 +0000
Manifest this update: Wed 20 Aug 2025 13:02:06 +0000
Manifest next update: Thu 21 Aug 2025 13:02:06 +0000
Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: C2WL9bWWsXspdSy4CxJSQQS2Nk/thzjthS4WmBiNgOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:92:8b:8f:cb:17:3d:d1:ec:6f:9b:b5:90:3f:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Aug 20 13:02:06 2025 GMT
Not After : Aug 21 13:02:06 2025 GMT
Subject: CN=6acd43e81d6e837ed7d9cce981576e6f622f1bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:b7:97:c0:1f:bf:8d:00:94:81:c1:2d:94:
2c:a4:ed:f4:ae:46:a2:8a:af:70:79:d1:01:7f:57:
e3:1a:85:e3:95:5f:f8:f8:fa:07:c8:e4:87:03:fb:
a0:71:0a:ac:7c:8d:1e:b6:33:37:a6:82:21:f1:8a:
fd:54:1f:79:26:e0:03:10:8b:7a:a8:b2:f7:b7:32:
7f:f1:49:51:fa:49:0b:56:b3:27:67:70:93:94:8f:
5b:c9:77:69:b7:ec:db:f5:67:3c:87:37:e7:ef:61:
ec:3b:46:b6:b5:39:f8:8a:63:54:46:28:ba:ce:16:
c3:1c:27:ea:54:5f:af:25:11:76:60:78:7e:9d:b5:
34:77:41:e6:67:ea:d3:79:7b:70:14:b4:d6:4f:b7:
9d:a8:e8:38:cb:10:28:cc:fd:f1:fe:f0:d6:06:3a:
e2:f9:be:c2:8a:f3:95:ca:b6:78:78:e0:d8:ca:d7:
87:8b:98:89:c5:33:4c:e4:d5:4e:df:7d:6d:db:1e:
39:96:3c:04:49:a9:51:99:05:76:32:45:a6:75:95:
ac:c5:7e:f3:21:20:96:c7:58:76:0c:17:39:f6:81:
fc:fb:3c:5b:52:24:02:1a:19:c5:66:fc:c3:20:b8:
5a:d1:04:ce:03:51:d6:f8:69:a4:67:ad:88:07:59:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CD:43:E8:1D:6E:83:7E:D7:D9:CC:E9:81:57:6E:6F:62:2F:1B:B7
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:26:30:8e:b4:10:48:da:e5:d3:e3:5f:04:46:27:1a:8b:cd:
b8:79:3c:7f:8c:ce:b7:e0:e0:b7:d3:fe:34:9b:76:29:d6:b9:
51:6a:c3:37:38:6c:7b:15:05:e8:fa:34:c2:2b:aa:75:31:cb:
16:a7:a2:40:00:fd:9b:06:a7:b4:87:b9:79:f9:40:02:0a:8c:
41:90:74:39:50:a4:0b:aa:7c:5c:a2:66:7c:58:ae:36:a4:b2:
3f:87:89:b7:82:84:df:67:99:34:5b:a6:4a:23:92:1b:d2:e0:
fb:79:bf:05:be:0a:9c:f0:5a:eb:b3:ff:2b:dc:ba:9b:1c:00:
db:ab:76:82:e5:86:af:fa:e5:2b:90:a7:6f:78:02:6f:f0:dd:
24:0b:0f:fb:1c:2f:ce:2c:66:27:ec:62:c2:73:56:d9:57:ec:
4f:cc:fe:f6:d6:c5:58:04:74:b7:b9:fb:18:76:3c:44:07:cb:
18:8e:f4:6a:5f:22:ce:0f:dc:33:5d:63:56:c4:03:8b:17:86:
a5:be:49:85:48:24:eb:4b:5a:58:ac:b4:53:57:9f:64:73:f4:
e7:66:c2:39:02:c9:6c:61:91:c2:b1:09:a8:85:08:08:51:fd:
5c:72:62:ad:65:4f:5e:24:4d:24:13:20:5b:1e:cf:14:59:8a:
31:de:c1:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHkouPyxc90exvm7WQP0ApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1
ODUyMGMwHhcNMjUwODIwMTMwMjA2WhcNMjUwODIxMTMwMjA2WjAzMTEwLwYDVQQD
Eyg2YWNkNDNlODFkNmU4MzdlZDdkOWNjZTk4MTU3NmU2ZjYyMmYxYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5u3l8Afv40AlIHBLZQspO30rkai
iq9wedEBf1fjGoXjlV/4+PoHyOSHA/ugcQqsfI0etjM3poIh8Yr9VB95JuADEIt6
qLL3tzJ/8UlR+kkLVrMnZ3CTlI9byXdpt+zb9Wc8hzfn72HsO0a2tTn4imNURii6
zhbDHCfqVF+vJRF2YHh+nbU0d0HmZ+rTeXtwFLTWT7edqOg4yxAozP3x/vDWBjri
+b7CivOVyrZ4eODYyteHi5iJxTNM5NVO331t2x45ljwESalRmQV2MkWmdZWsxX7z
ISCWx1h2DBc59oH8+zxbUiQCGhnFZvzDILha0QTOA1HW+GmkZ62IB1lsGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrNQ+gdboN+19nM6YFXbm9iLxu3MB8GA1UdIwQY
MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt
MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4
LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciYwjrQQ
SNrl0+NfBEYnGovNuHk8f4zOt+Dgt9P+NJt2Kda5UWrDNzhsexUF6Po0wiuqdTHL
FqeiQAD9mwantIe5eflAAgqMQZB0OVCkC6p8XKJmfFiuNqSyP4eJt4KE32eZNFum
SiOSG9Lg+3m/Bb4KnPBa67P/K9y6mxwA26t2guWGr/rlK5Cnb3gCb/DdJAsP+xwv
zixmJ+xiwnNW2VfsT8z+9tbFWAR0t7n7GHY8RAfLGI70al8izg/cM11jVsQDixeG
pb5JhUgk60taWKy0U1efZHP052bCOQLJbGGRwrEJqIUICFH9XHJirWVPXiRNJBMg
Wx7PFFmKMd7BMg==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:35:23 2025 by rpki-client