Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: YsfPKSPvmAauXDZT2nz85kNQLdeMKm4/XNOmeA2Yg/c=
Subject key identifier: 3C:45:57:73:AE:6C:AC:17:C2:78:A0:17:AA:A6:E8:F0:09:18:37:96
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 0199331201C8508719485C1C7D8729AE6B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 160C
Signing time: Wed 10 Sep 2025 10:00:42 +0000
Manifest this update: Wed 10 Sep 2025 10:00:42 +0000
Manifest next update: Thu 11 Sep 2025 10:00:42 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: I+zs3BSaE741IUijVQWy69g4bhQaGHn9uJfzxAVWeNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:01:c8:50:87:19:48:5c:1c:7d:87:29:ae:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Sep 10 10:00:42 2025 GMT
Not After : Sep 11 10:00:42 2025 GMT
Subject: CN=3c455773ae6cac17c278a017aaa6e8f009183796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:8e:3a:f5:ea:34:4d:fb:01:3d:5b:ae:94:
3d:a7:b2:c6:f2:b4:5b:68:d1:ff:44:f2:9e:2e:4c:
b7:6f:ae:a5:27:b8:86:ed:5c:b4:c8:9b:87:77:aa:
11:8b:c5:38:7b:41:64:61:dd:8d:e0:5b:72:71:67:
ad:68:83:00:da:31:5c:23:ad:3a:c0:07:8f:b4:24:
3a:7f:1d:57:20:2f:2a:89:3e:b0:81:0a:38:f1:89:
4e:a1:c9:f2:fd:77:c3:a8:fd:0e:85:a2:77:1d:5a:
35:8d:35:7f:81:75:74:16:b4:52:c1:6e:54:2c:88:
64:ff:a5:07:a8:cb:8c:8b:55:92:fc:9d:4b:e4:da:
c5:1a:6e:e1:e5:9b:c5:ea:f5:3f:19:d2:25:85:61:
53:e3:4c:06:fb:23:20:a4:6a:fc:76:58:7b:38:06:
7a:41:21:13:83:3f:e4:e7:21:65:28:5b:3a:a3:e6:
68:7b:66:22:0a:96:15:b0:ca:86:2a:89:b3:f4:4d:
23:c2:d2:f2:f5:78:a3:25:92:af:0a:7c:ab:27:d1:
3b:ce:29:33:d1:c1:a2:17:49:a7:23:cd:4b:d5:8d:
dd:bc:44:48:31:49:55:8d:83:f1:10:02:f1:cb:ae:
b1:42:6d:ed:50:3e:b1:4d:7c:c4:0b:72:90:4a:84:
2e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:45:57:73:AE:6C:AC:17:C2:78:A0:17:AA:A6:E8:F0:09:18:37:96
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:8f:be:96:15:7c:fd:f6:d9:60:24:fd:54:d9:8d:72:6c:
4e:3a:7e:cc:0a:90:11:2a:be:04:22:37:d8:cc:a6:b8:be:a2:
a0:e8:ff:f9:c1:ac:c3:ee:94:44:39:89:a9:8c:20:65:b1:50:
82:da:da:50:81:bc:0d:af:47:01:d7:d0:7b:16:33:48:f6:96:
89:90:d8:37:2f:9d:45:73:05:1b:7e:5c:62:10:04:b0:84:40:
45:8a:c0:be:36:c7:4b:3b:56:a3:d9:4b:a3:3a:c1:9c:df:7c:
c2:8a:91:ee:b7:32:2d:d4:5f:13:53:2c:c2:e2:76:62:10:72:
71:fb:bd:5e:54:2c:99:47:bf:05:3d:9a:26:02:24:24:c3:cd:
42:f1:71:1c:f2:f3:46:e8:d9:7c:41:ff:63:b5:dc:06:e1:73:
97:ce:8b:d4:50:5f:e8:5b:28:60:36:fb:37:6a:2b:9f:1c:f2:
83:5c:1c:2e:d1:63:13:0b:d4:23:10:28:ea:eb:13:ad:76:c8:
77:3d:ce:0e:93:f7:a0:63:c7:55:38:c7:66:c1:c3:5d:8a:02:
f6:de:81:a7:9b:49:fb:33:06:0c:49:3e:cc:a6:8c:29:b0:e3:
a8:f8:8d:45:dd:9a:e6:d1:a6:94:d7:f3:97:f2:d2:de:5c:45:
ca:7a:dd:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkzEgHIUIcZSFwcfYcprmscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzI5Yjk4OTA0YTJlY2U4NDgyZTBmMjU4ZjVjMzRmZWFk
NThjZTIwHhcNMjUwOTEwMTAwMDQyWhcNMjUwOTExMTAwMDQyWjAzMTEwLwYDVQQD
EygzYzQ1NTc3M2FlNmNhYzE3YzI3OGEwMTdhYWE2ZThmMDA5MTgzNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw2OOvXqNE37AT1brpQ9p7LG8rRb
aNH/RPKeLky3b66lJ7iG7Vy0yJuHd6oRi8U4e0FkYd2N4FtycWetaIMA2jFcI606
wAePtCQ6fx1XIC8qiT6wgQo48YlOocny/XfDqP0OhaJ3HVo1jTV/gXV0FrRSwW5U
LIhk/6UHqMuMi1WS/J1L5NrFGm7h5ZvF6vU/GdIlhWFT40wG+yMgpGr8dlh7OAZ6
QSETgz/k5yFlKFs6o+Zoe2YiCpYVsMqGKomz9E0jwtLy9XijJZKvCnyrJ9E7zikz
0cGiF0mnI81L1Y3dvERIMUlVjYPxEALxy66xQm3tUD6xTXzEC3KQSoQu+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxFV3OubKwXwnigF6qm6PAJGDeWMB8GA1UdIwQY
MBaAFP8ym5iQSi7OhILg8lj1w0/q1YziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMt
M2RmNDcxYzAxYzllLzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMtM2RmNDcxYzAxYzll
LzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhaPvpYV
fP322WAk/VTZjXJsTjp+zAqQESq+BCI32MymuL6ioOj/+cGsw+6URDmJqYwgZbFQ
gtraUIG8Da9HAdfQexYzSPaWiZDYNy+dRXMFG35cYhAEsIRARYrAvjbHSztWo9lL
ozrBnN98woqR7rcyLdRfE1MswuJ2YhBycfu9XlQsmUe/BT2aJgIkJMPNQvFxHPLz
RujZfEH/Y7XcBuFzl86L1FBf6FsoYDb7N2ornxzyg1wcLtFjEwvUIxAo6usTrXbI
dz3ODpP3oGPHVTjHZsHDXYoC9t6Bp5tJ+zMGDEk+zKaMKbDjqPiNRd2a5tGmlNfz
l/LS3lxFynrd5Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:12:03 2025 by rpki-client