Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: OXgwr9lQdy/MfFzgUyizhy1ZVfdW/2a/9pYiNgVwM1A=
Subject key identifier: 73:70:DA:7E:56:B1:52:3F:CC:DE:1D:3A:F9:10:A9:54:67:0E:37:9C
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 01993124451A0B1240CDF1D3BA765A069E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:01:24 +0000
Manifest this update: Wed 10 Sep 2025 01:01:24 +0000
Manifest next update: Thu 11 Sep 2025 01:01:24 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: jvABpHNPN3sFwfIsukSObh0suUXPEpC5WzBJ5GkXdz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:45:1a:0b:12:40:cd:f1:d3:ba:76:5a:06:9e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Sep 10 01:01:24 2025 GMT
Not After : Sep 11 01:01:24 2025 GMT
Subject: CN=7370da7e56b1523fccde1d3af910a954670e379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:3e:b8:49:19:17:cd:e5:1e:f9:c7:68:48:
ce:71:cf:5d:9d:35:7c:3a:9a:98:44:db:c3:91:01:
37:85:2c:6c:33:3d:39:01:76:76:23:8a:33:c5:e1:
7e:8c:b2:1f:54:5c:b8:1e:71:c6:2e:05:03:a1:39:
ba:c0:30:58:c5:ae:a5:59:ce:a0:19:bf:1a:89:01:
30:6a:2d:25:6d:59:06:57:3f:55:44:83:bd:92:e1:
62:d0:6b:42:ff:ae:e0:5a:1d:9f:72:c5:9b:d7:ae:
41:e1:68:65:2d:5b:a1:fc:01:c3:7b:47:01:39:06:
3b:59:c7:06:85:af:05:67:9d:56:b6:d5:37:03:8c:
c2:14:78:0a:9d:d7:47:66:df:74:e8:40:0e:9e:34:
88:c3:da:13:56:b8:f0:eb:26:10:5a:97:53:0a:02:
f7:93:94:82:fa:de:b0:f1:0b:f0:ba:69:65:d3:2a:
1a:6d:56:51:1d:be:3c:86:86:32:55:f8:26:a3:6c:
06:ef:26:59:da:00:06:1b:cc:35:73:ce:03:93:02:
eb:fc:83:fc:3e:94:77:0b:6d:31:b4:65:bb:ed:0d:
ce:9f:d8:b5:9f:03:77:53:d9:52:46:15:df:88:aa:
3c:cf:ec:cb:03:89:cf:58:2d:16:f6:4f:05:60:43:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:70:DA:7E:56:B1:52:3F:CC:DE:1D:3A:F9:10:A9:54:67:0E:37:9C
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bc:5d:07:1e:9e:12:dd:08:83:53:6d:be:53:c4:59:99:31:
b0:d1:48:1c:07:0e:0c:ba:56:f4:ed:b7:49:fc:3c:4e:d1:48:
5e:46:95:0a:a9:4f:d5:f3:37:34:1e:66:5b:99:39:60:4e:8b:
91:cc:39:b0:03:d0:58:a8:12:16:2a:4e:e9:12:6e:a4:d6:39:
fe:91:77:93:33:a0:76:93:38:f9:ab:ad:97:7c:82:c8:ae:40:
7b:06:bd:e6:cb:d7:1c:10:ce:14:3d:8a:0a:dd:b8:1a:38:fb:
45:76:14:3d:31:2c:ae:7c:5e:5f:1f:fc:1c:26:66:bc:72:64:
f4:19:85:7e:3e:c1:70:4a:aa:3c:05:fc:5b:92:12:3c:ee:a0:
63:a3:12:84:4e:df:a4:e1:0a:39:73:21:e1:89:2e:90:f6:7f:
08:f2:99:8d:f8:0f:e0:ed:e0:9a:c2:9a:6a:3a:79:30:3c:c7:
79:0f:17:fa:89:82:21:4d:2b:2f:bd:b7:ec:8b:16:73:6a:fa:
af:17:08:e0:af:21:00:8d:7c:47:0b:d2:da:ff:3c:ff:36:34:
8b:46:08:be:6c:14:1b:ae:70:c2:91:45:a4:51:b5:41:91:f4:
2a:e9:3b:6a:17:54:55:6f:0f:23:f6:45:7b:c2:4e:9e:26:e4:
a0:cd:a9:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxJEUaCxJAzfHTunZaBp4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjlhNmQyZjZjZDU4OGE3N2Y0MjM2MjJlNmI4ZDFjNjU0
YmNkZjIwHhcNMjUwOTEwMDEwMTI0WhcNMjUwOTExMDEwMTI0WjAzMTEwLwYDVQQD
Eyg3MzcwZGE3ZTU2YjE1MjNmY2NkZTFkM2FmOTEwYTk1NDY3MGUzNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eM+uEkZF83lHvnHaEjOcc9dnTV8
OpqYRNvDkQE3hSxsMz05AXZ2I4ozxeF+jLIfVFy4HnHGLgUDoTm6wDBYxa6lWc6g
Gb8aiQEwai0lbVkGVz9VRIO9kuFi0GtC/67gWh2fcsWb165B4WhlLVuh/AHDe0cB
OQY7WccGha8FZ51WttU3A4zCFHgKnddHZt906EAOnjSIw9oTVrjw6yYQWpdTCgL3
k5SC+t6w8Qvwumll0yoabVZRHb48hoYyVfgmo2wG7yZZ2gAGG8w1c84DkwLr/IP8
PpR3C20xtGW77Q3On9i1nwN3U9lSRhXfiKo8z+zLA4nPWC0W9k8FYEP58QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNw2n5WsVI/zN4dOvkQqVRnDjecMB8GA1UdIwQY
MBaAFMz5ptL2zViKd/QjYi5rjRxlS83yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUt
MWIwZjI1NGRlNjE5LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS80MjFlNDAtZWRmNi00N2FhLTlhYmUtMWIwZjI1NGRlNjE5
LzEvelBtbTB2Yk5XSXAzOUNOaUxtdU5IR1ZMemZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbxdBx6e
Et0Ig1NtvlPEWZkxsNFIHAcODLpW9O23Sfw8TtFIXkaVCqlP1fM3NB5mW5k5YE6L
kcw5sAPQWKgSFipO6RJupNY5/pF3kzOgdpM4+autl3yCyK5Aewa95svXHBDOFD2K
Ct24Gjj7RXYUPTEsrnxeXx/8HCZmvHJk9BmFfj7BcEqqPAX8W5ISPO6gY6MShE7f
pOEKOXMh4YkukPZ/CPKZjfgP4O3gmsKaajp5MDzHeQ8X+omCIU0rL7237IsWc2r6
rxcI4K8hAI18RwvS2v88/zY0i0YIvmwUG65wwpFFpFG1QZH0Kuk7ahdUVW8PI/ZF
e8JOnibkoM2pOg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:55:07 2025 by rpki-client