Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: GbNFhhyQ5TF746ucdLX61WbTz7QwJqR4Swdc/FNrJ74=
Subject key identifier: 0D:1C:B9:2C:C8:71:BC:AE:82:5E:85:84:14:1A:B6:30:ED:D9:DC:4C
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 019923D6319B64C1A5243C4CB97C78A8775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 11:01:03 +0000
Manifest this update: Sun 07 Sep 2025 11:01:03 +0000
Manifest next update: Mon 08 Sep 2025 11:01:03 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: tJ4Sl2Ay8+VZa1+nKCYY9BtwuBD43TOas3eStrrvlro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:31:9b:64:c1:a5:24:3c:4c:b9:7c:78:a8:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Sep 7 11:01:03 2025 GMT
Not After : Sep 8 11:01:03 2025 GMT
Subject: CN=0d1cb92cc871bcae825e8584141ab630edd9dc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:48:57:bd:c7:52:11:cc:e8:53:03:eb:e6:
47:11:d0:d2:17:9e:bd:c8:da:6a:d1:71:18:db:c4:
f2:c7:64:27:3d:f0:1a:08:7c:ce:d8:01:75:79:a5:
0c:18:9e:07:97:62:21:09:23:dd:39:57:ce:74:b2:
f6:97:32:3f:65:10:75:4c:b0:27:b6:9d:54:67:f8:
43:37:63:a3:36:a6:bd:9c:07:78:26:80:b0:df:a6:
64:5d:13:6a:07:71:79:51:e3:0f:4c:74:1c:7c:af:
ee:2d:3a:74:ee:0f:de:95:bb:af:8f:6d:3b:1e:a4:
3f:17:c3:46:63:85:ea:d9:89:57:2e:78:93:71:6e:
61:38:83:a7:7d:68:80:bf:29:5f:c0:51:48:98:98:
4f:6e:47:e2:c3:69:c3:55:d1:a5:25:fb:45:9f:cb:
4b:5e:ce:3a:26:76:a0:8b:fd:da:07:31:10:d0:e1:
87:ba:35:de:fc:d0:10:7a:f9:a1:15:cd:20:58:63:
87:b7:12:47:fb:50:68:2c:37:89:fe:1b:98:b8:a8:
9b:93:c6:a3:f7:67:22:f1:00:48:9b:83:0e:bc:b1:
76:37:b7:f2:20:c5:bb:00:8b:42:7e:d0:7a:dc:e6:
7b:f9:ca:fe:83:9c:b8:cc:ca:e7:30:85:1e:41:da:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1C:B9:2C:C8:71:BC:AE:82:5E:85:84:14:1A:B6:30:ED:D9:DC:4C
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:66:7c:df:96:a4:d9:bd:b5:06:90:86:ab:50:4a:6f:80:51:
b8:5c:07:08:d1:a7:69:2f:78:72:cd:54:fb:77:ef:3a:b9:1f:
a4:ad:4d:e4:70:01:59:ac:77:40:56:5c:1b:42:bf:52:76:b9:
24:7b:68:27:78:a6:dd:59:84:9f:35:1b:0c:b6:fc:d2:a1:16:
54:71:11:aa:f6:8e:89:83:37:bc:b5:0e:26:2a:c8:1b:0f:55:
3b:68:c2:d7:bb:da:87:0a:bc:82:da:a2:be:40:7c:17:6b:c7:
10:5e:47:af:06:e8:70:f3:6b:61:c1:73:62:45:91:3e:46:34:
f1:d1:05:07:3e:33:fd:f7:f2:e4:c9:59:a1:09:c9:fd:33:fa:
c8:0e:bb:49:6c:53:32:47:01:dd:ba:31:0e:7e:81:65:49:48:
ca:aa:4a:f6:e1:e0:12:d4:0b:21:39:30:e3:b3:b5:34:8a:da:
f9:a5:10:c0:d0:7e:e9:76:c1:36:26:77:00:12:ff:29:25:d6:
d9:fe:21:56:79:51:64:98:27:47:18:fa:03:04:27:13:4c:b4:
db:25:a1:26:4b:9f:66:e1:e1:de:13:db:15:23:09:f5:da:f8:
b1:b5:dc:9a:5f:87:49:78:ce:30:d0:d5:4b:ec:39:ef:d7:d9:
0f:e7:fd:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1jGbZMGlJDxMuXx4qHdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODI5MGZlOTgxNGZjYjA2MmFiNzFlMzJlYzFmOTZkYTk5
NzNhMzMwHhcNMjUwOTA3MTEwMTAzWhcNMjUwOTA4MTEwMTAzWjAzMTEwLwYDVQQD
EygwZDFjYjkyY2M4NzFiY2FlODI1ZTg1ODQxNDFhYjYzMGVkZDlkYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj35IV73HUhHM6FMD6+ZHEdDSF569
yNpq0XEY28Tyx2QnPfAaCHzO2AF1eaUMGJ4Hl2IhCSPdOVfOdLL2lzI/ZRB1TLAn
tp1UZ/hDN2OjNqa9nAd4JoCw36ZkXRNqB3F5UeMPTHQcfK/uLTp07g/elbuvj207
HqQ/F8NGY4Xq2YlXLniTcW5hOIOnfWiAvylfwFFImJhPbkfiw2nDVdGlJftFn8tL
Xs46Jnagi/3aBzEQ0OGHujXe/NAQevmhFc0gWGOHtxJH+1BoLDeJ/huYuKibk8aj
92ci8QBIm4MOvLF2N7fyIMW7AItCftB63OZ7+cr+g5y4zMrnMIUeQdoEPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0cuSzIcbyugl6FhBQatjDt2dxMMB8GA1UdIwQY
MBaAFGWCkP6YFPywYqtx4y7B+W2plzozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4Mzkt
YWVkZTNmZmE0NDU3LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDNiMTMtYzRhMS00MWMwLWE4MzktYWVkZTNmZmE0NDU3
LzEvWllLUV9wZ1VfTEJpcTNIakxzSDViYW1YT2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWZ835ak
2b21BpCGq1BKb4BRuFwHCNGnaS94cs1U+3fvOrkfpK1N5HABWax3QFZcG0K/Una5
JHtoJ3im3VmEnzUbDLb80qEWVHERqvaOiYM3vLUOJirIGw9VO2jC17vahwq8gtqi
vkB8F2vHEF5HrwbocPNrYcFzYkWRPkY08dEFBz4z/ffy5MlZoQnJ/TP6yA67SWxT
MkcB3boxDn6BZUlIyqpK9uHgEtQLITkw47O1NIra+aUQwNB+6XbBNiZ3ABL/KSXW
2f4hVnlRZJgnRxj6AwQnE0y02yWhJkufZuHh3hPbFSMJ9dr4sbXcml+HSXjOMNDV
S+w579fZD+f90w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:25 2025 by rpki-client