Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: 3dHMx84RUBtV46jt7vXYDtHvAUlobWtQu+uI4ouBmVE=
Subject key identifier: B5:A7:06:FB:1A:36:7D:89:36:56:8D:7D:3D:CE:CF:91:79:32:A7:27
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 0199239F19F1F6DBE405138196CC43C7CC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 13B2
Signing time: Sun 07 Sep 2025 10:00:53 +0000
Manifest this update: Sun 07 Sep 2025 10:00:53 +0000
Manifest next update: Mon 08 Sep 2025 10:00:53 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: UaOYq+EDcVOIad65+P8VXxEg6Etk3bQX0zxrZDIo/e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:19:f1:f6:db:e4:05:13:81:96:cc:43:c7:cc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Sep 7 10:00:53 2025 GMT
Not After : Sep 8 10:00:53 2025 GMT
Subject: CN=b5a706fb1a367d8936568d7d3dcecf917932a727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:3f:09:6d:fe:b9:b0:31:6f:9c:49:1f:a3:
b4:ed:fa:16:dc:1a:e7:13:1f:56:e8:77:8d:d5:92:
8c:ea:45:47:58:f6:da:3d:15:1d:ed:d4:5b:84:39:
f2:a2:9e:05:0e:b4:36:7d:89:8e:98:aa:8f:99:55:
40:6d:d4:f9:ea:e5:fe:5b:cc:33:de:81:e5:45:1b:
8e:58:ec:52:f5:af:39:89:71:be:e9:d7:ec:a3:51:
4f:4e:f1:18:de:ad:a8:3d:0c:8a:e8:04:c6:04:00:
cb:63:18:dd:6b:20:5c:e9:37:75:da:51:51:a0:67:
6d:91:a7:bb:b7:50:f1:2f:95:f1:35:3a:a5:a1:7b:
77:52:50:03:38:b3:99:cf:18:a9:a3:78:92:fc:fb:
0b:75:08:72:5c:ca:f7:56:6e:a9:66:6a:81:c0:3c:
cb:54:ed:ab:d4:e4:a5:38:ff:d1:b4:6c:68:d6:cc:
90:5a:80:90:0b:56:df:e2:ad:6c:1d:83:0e:a2:5b:
84:e3:20:33:28:47:ef:a1:22:64:51:9f:fa:12:80:
04:3e:a5:83:97:a6:73:b3:10:da:49:23:5d:71:98:
98:c3:15:2c:01:e7:c7:58:d6:0b:f7:38:3f:ba:c3:
58:f2:f4:02:31:f8:de:af:52:e2:94:d3:7a:72:46:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:06:FB:1A:36:7D:89:36:56:8D:7D:3D:CE:CF:91:79:32:A7:27
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:81:07:35:d4:03:da:3d:c4:1b:ce:b9:5d:08:7b:81:a0:c0:
d6:fa:8f:65:20:7b:a6:8c:9f:ea:2f:8d:0a:e5:4f:ec:42:55:
e7:77:d4:9c:2e:e2:b1:ff:2a:be:a4:66:cb:83:29:af:2b:94:
96:c3:eb:d5:14:16:34:a9:27:3a:ac:71:8d:97:3a:38:a0:40:
a8:1f:22:0d:74:c8:b1:ba:22:c6:bf:b6:30:c4:43:fa:15:10:
ee:91:6f:8f:98:3d:5b:79:86:81:e3:65:f1:88:5b:db:6d:1a:
82:7a:79:7a:e5:40:c8:3c:ad:ef:aa:14:93:e3:c4:3b:6c:b3:
8e:99:f2:f6:61:3c:46:42:90:fd:ed:6b:72:d2:39:77:70:d4:
c6:8a:03:b7:68:a0:09:58:56:f4:1e:2a:4f:46:49:db:8b:03:
cf:81:99:76:25:ce:ad:76:7a:94:85:b5:fc:b4:fc:79:89:76:
ee:54:7b:cc:8f:8a:15:01:29:c0:01:7a:40:ff:01:97:2f:df:
05:a9:a0:5d:4f:39:94:ca:d0:2b:6b:81:df:0a:08:7b:cf:f6:
71:b4:0c:fc:63:12:30:c7:20:78:fb:bd:b3:c8:a1:ce:0c:5e:
38:ce:d3:7d:4b:26:ee:82:e4:5d:8a:c6:59:06:e7:d7:df:fd:
6b:8c:f9:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnxnx9tvkBROBlsxDx8yHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx
YjRhMjAwHhcNMjUwOTA3MTAwMDUzWhcNMjUwOTA4MTAwMDUzWjAzMTEwLwYDVQQD
EyhiNWE3MDZmYjFhMzY3ZDg5MzY1NjhkN2QzZGNlY2Y5MTc5MzJhNzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX8/CW3+ubAxb5xJH6O07foW3Brn
Ex9W6HeN1ZKM6kVHWPbaPRUd7dRbhDnyop4FDrQ2fYmOmKqPmVVAbdT56uX+W8wz
3oHlRRuOWOxS9a85iXG+6dfso1FPTvEY3q2oPQyK6ATGBADLYxjdayBc6Td12lFR
oGdtkae7t1DxL5XxNTqloXt3UlADOLOZzxipo3iS/PsLdQhyXMr3Vm6pZmqBwDzL
VO2r1OSlOP/RtGxo1syQWoCQC1bf4q1sHYMOoluE4yAzKEfvoSJkUZ/6EoAEPqWD
l6ZzsxDaSSNdcZiYwxUsAefHWNYL9zg/usNY8vQCMfjer1LilNN6ckax2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWnBvsaNn2JNlaNfT3Oz5F5MqcnMB8GA1UdIwQY
MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt
ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl
LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoEHNdQD
2j3EG865XQh7gaDA1vqPZSB7poyf6i+NCuVP7EJV53fUnC7isf8qvqRmy4MpryuU
lsPr1RQWNKknOqxxjZc6OKBAqB8iDXTIsboixr+2MMRD+hUQ7pFvj5g9W3mGgeNl
8Yhb220agnp5euVAyDyt76oUk+PEO2yzjpny9mE8RkKQ/e1rctI5d3DUxooDt2ig
CVhW9B4qT0ZJ24sDz4GZdiXOrXZ6lIW1/LT8eYl27lR7zI+KFQEpwAF6QP8Bly/f
BamgXU85lMrQK2uB3woIe8/2cbQM/GMSMMcgePu9s8ihzgxeOM7TfUsm7oLkXYrG
WQbn19/9a4z5VA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:08 2025 by rpki-client