Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File: ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier: LX7BwhIlX6Q3+CT6TwLuiCvtUtwofXN742IHu4z/oC0=
Subject key identifier: 03:0D:16:89:73:30:96:14:77:F6:54:D3:C4:CB:D9:11:AD:7E:E9:4C
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 019923A085F59340B78A8005FA1EACF24A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number: 0C8C
Signing time: Sun 07 Sep 2025 10:02:26 +0000
Manifest this update: Sun 07 Sep 2025 10:02:26 +0000
Manifest next update: Mon 08 Sep 2025 10:02:26 +0000
Files and hashes: 1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: 5lGbjHjkeHbAZtnnvPxXJIu67gIcxjb+3Nzj0X/46rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:85:f5:93:40:b7:8a:80:05:fa:1e:ac:f2:4a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: Sep 7 10:02:26 2025 GMT
Not After : Sep 8 10:02:26 2025 GMT
Subject: CN=030d16897330961477f654d3c4cbd911ad7ee94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:6e:ad:63:3c:43:e2:d2:a5:87:49:a6:29:
57:7f:b8:68:2b:d3:2b:33:c1:a2:95:2a:42:f1:4e:
11:45:45:c9:f9:85:2b:5d:c7:32:28:a6:0c:ca:f4:
c3:1c:82:ee:db:5b:69:94:20:0e:f0:9e:b5:97:a4:
b5:31:08:97:f4:19:65:47:94:d6:00:cd:89:5e:b4:
00:3e:aa:ce:7d:7a:c2:8d:24:b2:24:04:30:10:07:
50:6a:9a:03:48:d4:91:13:0a:15:bc:18:fc:64:e1:
95:b5:df:89:e5:04:93:df:c7:10:e3:14:dd:72:38:
c8:55:ed:da:f2:e9:3a:2d:b0:0c:de:83:f6:ea:c3:
af:db:ee:7a:dd:0d:40:7e:65:56:4d:30:d5:de:4f:
f8:08:f9:11:d4:d7:5d:25:55:9b:e1:df:43:0f:26:
05:a7:45:e7:c9:d2:ff:1e:08:68:34:2e:01:76:a0:
7a:29:1f:a7:f2:c4:6a:0c:b0:f7:a8:bc:22:af:21:
4a:02:bb:a0:79:12:11:58:37:e9:05:8f:3f:df:77:
aa:c4:de:a1:1b:6b:39:c0:c2:fc:33:fa:fb:96:73:
cf:c3:4c:7b:c8:29:24:97:fe:64:bd:ce:f3:c1:a8:
9a:65:90:23:11:ee:bb:86:a4:17:24:2e:90:96:ff:
f7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0D:16:89:73:30:96:14:77:F6:54:D3:C4:CB:D9:11:AD:7E:E9:4C
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:72:af:d6:7d:04:98:f8:e0:fe:28:12:05:ce:cf:59:6e:b2:
43:96:4a:54:62:64:6f:70:19:b5:71:00:cc:c1:11:97:27:39:
c8:3d:2e:0d:59:2c:fe:cd:37:0d:70:41:5c:a2:1d:e3:34:a0:
16:52:99:7f:36:7d:83:b7:3c:82:ca:68:4f:26:96:7a:cb:4a:
39:b7:79:19:fb:47:c8:e9:98:22:7d:85:43:8c:82:dc:a5:85:
3b:7b:88:74:be:d6:89:91:f4:3f:bd:27:87:21:4c:f8:45:3d:
94:3c:29:03:0f:31:48:a6:cc:5a:29:b7:40:ee:1b:37:ca:3a:
6c:3e:65:47:59:82:43:31:f9:c1:b0:4a:31:1b:d3:56:25:cb:
c8:98:91:cf:0c:8a:9a:f7:11:a8:1c:59:35:41:d0:6f:49:ae:
b0:58:9f:1b:1c:a5:17:c3:1e:c1:37:fe:cb:9a:8c:f4:39:c6:
01:e7:d6:da:7e:02:0c:81:93:42:28:3c:4d:b3:c1:36:6c:4a:
4e:58:4b:64:92:21:9f:5b:a5:28:6c:80:55:61:bc:d8:3c:88:
4d:82:8e:48:1c:cb:31:fb:e8:ce:b6:9d:50:9f:96:f2:42:92:
3f:8c:67:20:8f:39:63:1c:67:f2:8a:fc:2c:f0:f0:70:29:e8:
6d:27:2c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoIX1k0C3ioAF+h6s8kpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjAxMjljMjIxZjdhNDc4MTI4ODVhNjQ4MzhiMTJlZTZi
MTVlZDUwHhcNMjUwOTA3MTAwMjI2WhcNMjUwOTA4MTAwMjI2WjAzMTEwLwYDVQQD
EygwMzBkMTY4OTczMzA5NjE0NzdmNjU0ZDNjNGNiZDkxMWFkN2VlOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT5urWM8Q+LSpYdJpilXf7hoK9Mr
M8GilSpC8U4RRUXJ+YUrXccyKKYMyvTDHILu21tplCAO8J61l6S1MQiX9BllR5TW
AM2JXrQAPqrOfXrCjSSyJAQwEAdQapoDSNSREwoVvBj8ZOGVtd+J5QST38cQ4xTd
cjjIVe3a8uk6LbAM3oP26sOv2+563Q1AfmVWTTDV3k/4CPkR1NddJVWb4d9DDyYF
p0XnydL/HghoNC4BdqB6KR+n8sRqDLD3qLwiryFKArugeRIRWDfpBY8/33eqxN6h
G2s5wML8M/r7lnPPw0x7yCkkl/5kvc7zwaiaZZAjEe67hqQXJC6Qlv/3UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMNFolzMJYUd/ZU08TL2RGtfulMMB8GA1UdIwQY
MBaAFGRgEpwiH3pHgSiFpkg4sS7msV7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hNjQ2YWYtZTYxZC00OGI2LTg5ZDIt
ZWJhOTg4YTU0OGU3LzEvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hNjQ2YWYtZTYxZC00OGI2LTg5ZDItZWJhOTg4YTU0OGU3
LzEvWkdBU25DSWZla2VCS0lXbVNEaXhMdWF4WHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzXKv1n0E
mPjg/igSBc7PWW6yQ5ZKVGJkb3AZtXEAzMERlyc5yD0uDVks/s03DXBBXKId4zSg
FlKZfzZ9g7c8gspoTyaWestKObd5GftHyOmYIn2FQ4yC3KWFO3uIdL7WiZH0P70n
hyFM+EU9lDwpAw8xSKbMWim3QO4bN8o6bD5lR1mCQzH5wbBKMRvTViXLyJiRzwyK
mvcRqBxZNUHQb0musFifGxylF8MewTf+y5qM9DnGAefW2n4CDIGTQig8TbPBNmxK
TlhLZJIhn1ulKGyAVWG82DyITYKOSBzLMfvozradUJ+W8kKSP4xnII85Yxxn8or8
LPDwcCnobScsIg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:05:22 2025 by rpki-client