Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: EfA7z7ezkpOH2vfnKhikn95bsibgIq9n0g8v1LuT8P0=
Subject key identifier: 9A:09:54:18:26:39:92:B9:C8:66:B5:CC:EC:CD:CE:EB:A0:D4:A8:4C
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 019923315EF408BB7769318F1A36C1B83986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0B67
Signing time: Sun 07 Sep 2025 08:01:01 +0000
Manifest this update: Sun 07 Sep 2025 08:01:01 +0000
Manifest next update: Mon 08 Sep 2025 08:01:01 +0000
Files and hashes: 1: VEgZIBYWjoldzkGuakwy0OuiD_g.roa (hash: /UHAw/sksRIzZ9d6cBH90oCHv9WV9PgycAVZrQjs45g=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: 1zBO407+rSRE9IQLFz1WNdxj70trHouFcjfaWb6nclg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:5e:f4:08:bb:77:69:31:8f:1a:36:c1:b8:39:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Sep 7 08:01:01 2025 GMT
Not After : Sep 8 08:01:01 2025 GMT
Subject: CN=9a095418263992b9c866b5cceccdceeba0d4a84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:b9:11:41:88:ab:ed:89:13:79:d1:4c:4d:
5b:19:b0:f3:a3:64:7d:8c:91:52:a9:71:33:31:d0:
dc:ff:d6:f3:de:af:83:76:cd:b0:ea:54:4c:e9:b6:
5d:65:84:7f:8f:c7:04:7a:e4:5f:d0:40:87:e6:fb:
4a:4f:3c:0c:b1:86:79:a1:e9:93:ba:44:45:66:fb:
5a:29:4f:01:3f:e7:ad:a2:8d:78:dc:66:04:b8:cf:
42:83:37:4d:29:38:6c:98:91:88:e9:7a:4c:ad:07:
31:4c:41:ee:b5:91:e3:24:27:4f:2c:1c:e2:fa:6a:
bf:84:24:2b:99:70:7e:23:2b:c6:fd:2c:1a:72:79:
8f:9f:46:21:29:3e:8a:5c:ae:73:b7:7b:c8:a0:28:
02:03:71:a1:48:4e:1f:14:b4:90:be:fd:76:ec:a9:
17:af:e8:e0:e8:70:36:54:79:36:3d:0b:e1:5d:2d:
fb:d3:68:e3:10:a2:a0:fb:92:da:2c:6e:5e:0b:89:
3a:87:71:87:74:25:0c:3e:b9:a7:df:55:5b:6a:56:
cd:ad:00:a6:b0:ac:b6:70:2e:ea:2c:c2:ba:7e:ee:
3d:8e:b3:11:6b:4d:7c:8e:1e:12:6e:90:e2:fe:bd:
a2:6b:ad:a4:e1:ab:1b:d9:72:ab:88:13:11:ce:0d:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:09:54:18:26:39:92:B9:C8:66:B5:CC:EC:CD:CE:EB:A0:D4:A8:4C
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:8f:45:c9:7c:b5:bc:62:07:bb:39:23:ec:21:e4:3f:d6:
18:0c:fb:e4:61:74:af:88:97:0f:7a:19:6a:bf:06:4f:8c:e2:
e9:46:44:70:39:e6:24:a8:a9:53:63:aa:10:7c:e6:97:29:78:
8b:c8:d1:ff:cb:63:91:1b:9c:5a:4d:10:e6:b8:cb:d6:b9:21:
50:ff:1e:04:23:f1:13:46:67:34:2a:36:21:d8:55:3d:68:2c:
f4:a3:c1:8a:7f:c4:31:4f:6e:6e:9a:af:7c:b5:77:24:87:7d:
cd:52:31:3d:84:f1:40:c7:1b:df:fd:ff:0b:27:31:fa:1c:ab:
10:8a:c9:fe:a2:f0:5c:da:4e:2b:76:45:17:6d:76:06:8f:c9:
32:44:8a:e6:5a:7d:44:9c:c2:24:5e:d4:75:09:0e:92:4c:cd:
a1:1b:02:c1:95:68:03:1f:67:2a:24:61:59:a5:3b:cd:9d:7a:
ab:f0:0a:37:c6:25:67:c2:ca:35:f4:b2:74:8b:d1:00:b7:c0:
9a:ea:df:89:a6:c3:a8:d0:3d:98:2c:0d:b3:d8:2c:da:c4:c3:
f7:f4:ec:c3:c5:6e:0f:82:ae:39:4c:e3:1f:93:1f:5b:37:5b:
9a:ff:da:45:45:52:43:fc:b7:08:3a:db:41:76:b9:a8:0d:3a:
1a:d1:1e:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMV70CLt3aTGPGjbBuDmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjUxYTdiNGM1YjI0NTgwMjkyYjhjNGFhNmFhOWMzMjU2
NjU0ODAwHhcNMjUwOTA3MDgwMTAxWhcNMjUwOTA4MDgwMTAxWjAzMTEwLwYDVQQD
Eyg5YTA5NTQxODI2Mzk5MmI5Yzg2NmI1Y2NlY2NkY2VlYmEwZDRhODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoi5EUGIq+2JE3nRTE1bGbDzo2R9
jJFSqXEzMdDc/9bz3q+Dds2w6lRM6bZdZYR/j8cEeuRf0ECH5vtKTzwMsYZ5oemT
ukRFZvtaKU8BP+etoo143GYEuM9CgzdNKThsmJGI6XpMrQcxTEHutZHjJCdPLBzi
+mq/hCQrmXB+IyvG/SwacnmPn0YhKT6KXK5zt3vIoCgCA3GhSE4fFLSQvv127KkX
r+jg6HA2VHk2PQvhXS3702jjEKKg+5LaLG5eC4k6h3GHdCUMPrmn31VbalbNrQCm
sKy2cC7qLMK6fu49jrMRa018jh4SbpDi/r2ia62k4asb2XKriBMRzg06SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoJVBgmOZK5yGa1zOzNzuug1KhMMB8GA1UdIwQY
MBaAFM31GntMWyRYApK4xKpqqcMlZlSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzct
YTU1YjU4MGIwZWEzLzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzctYTU1YjU4MGIwZWEz
LzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaePRcl8
tbxiB7s5I+wh5D/WGAz75GF0r4iXD3oZar8GT4zi6UZEcDnmJKipU2OqEHzmlyl4
i8jR/8tjkRucWk0Q5rjL1rkhUP8eBCPxE0ZnNCo2IdhVPWgs9KPBin/EMU9ubpqv
fLV3JId9zVIxPYTxQMcb3/3/Cycx+hyrEIrJ/qLwXNpOK3ZFF212Bo/JMkSK5lp9
RJzCJF7UdQkOkkzNoRsCwZVoAx9nKiRhWaU7zZ16q/AKN8YlZ8LKNfSydIvRALfA
murfiabDqNA9mCwNs9gs2sTD9/Tsw8VuD4KuOUzjH5MfWzdbmv/aRUVSQ/y3CDrb
QXa5qA06GtEePQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:09 2025 by rpki-client