Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: gfiA3bRRP64Q9eaPp5v7mfCGeBglTgFBsODZrJ30Ie4=
Subject key identifier: 6F:C1:57:10:CB:3D:30:7B:5B:55:38:53:6A:8C:7D:71:3F:A4:6C:6E
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 0199179AAFAE6BB5F5B739864BDAB67ABC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 064E
Signing time: Fri 05 Sep 2025 02:00:37 +0000
Manifest this update: Fri 05 Sep 2025 02:00:37 +0000
Manifest next update: Sat 06 Sep 2025 02:00:37 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: bfn1IygGw2PlhChlGhcbRtdblz9qYHLfu4Yd445a6t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:af:ae:6b:b5:f5:b7:39:86:4b:da:b6:7a:bc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Sep 5 02:00:37 2025 GMT
Not After : Sep 6 02:00:37 2025 GMT
Subject: CN=6fc15710cb3d307b5b5538536a8c7d713fa46c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:5a:d9:22:f2:f3:72:8d:6c:23:a8:c2:36:
a0:61:04:e6:5b:f4:fc:52:44:75:91:bd:1b:f8:ae:
3b:58:d5:f8:14:e3:21:4e:9c:3b:46:65:88:5e:fa:
c4:00:9c:60:f7:5d:2d:6d:1a:e5:7c:a2:af:c5:95:
2a:6a:e7:c1:b4:b2:c1:97:39:cc:1d:ae:8c:39:25:
df:27:d0:55:02:5e:93:d3:f8:10:f1:2a:f8:ed:2b:
cc:a8:73:87:d5:6a:58:4e:ec:fa:1d:e7:15:cd:f7:
10:3d:10:f2:da:43:dc:39:af:ac:2a:8f:d9:f3:6e:
cd:37:ca:d1:4d:de:bc:07:84:bb:e7:a7:7b:5b:b5:
dd:d8:dd:d4:21:59:39:99:75:0f:a3:aa:01:ca:f7:
e2:6a:15:86:57:f4:ab:65:6a:53:bc:f3:a3:51:73:
03:dd:39:05:d5:1c:f9:d1:f6:ad:e8:05:5f:1e:53:
d8:d1:a2:7c:52:09:83:6b:ce:19:ba:25:08:2a:b0:
5d:5b:ee:70:88:08:3d:22:fc:02:7a:1d:1e:5d:20:
8d:d0:fc:ba:54:64:83:57:ca:fa:5c:4b:ac:55:28:
b1:d9:7a:62:32:aa:b1:ed:1d:8f:75:df:af:38:83:
2b:44:94:de:5b:4c:11:55:99:e6:09:e7:57:2a:77:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:57:10:CB:3D:30:7B:5B:55:38:53:6A:8C:7D:71:3F:A4:6C:6E
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b0:42:2d:63:56:bc:37:c0:7c:0e:1b:89:2a:67:e2:66:85:
78:04:ae:a0:44:fc:b1:cf:59:ff:02:42:23:68:b3:2b:ef:de:
aa:0e:8b:7a:13:bc:23:78:75:06:44:b8:a7:32:96:79:65:46:
8f:55:d2:bc:f1:63:2c:df:2f:3a:58:eb:39:a8:89:fb:56:44:
28:88:24:bd:a4:62:b6:60:db:ea:f6:90:21:89:35:bf:65:0a:
b3:54:88:4d:7e:0d:7d:a3:af:f3:46:93:02:12:0e:34:8d:4d:
d0:78:c4:d0:e1:cc:98:cc:3a:ac:9e:57:9e:0c:33:00:cc:d0:
5b:4f:bc:35:b9:5b:a5:4c:2a:d8:b2:f6:de:f5:2e:61:41:e8:
68:27:29:d8:e5:34:76:ea:cc:c4:6e:3a:12:20:ab:96:d1:96:
34:43:c9:36:77:49:de:e2:d6:05:44:38:18:af:c1:a8:31:31:
19:0d:5d:70:f8:f4:0b:71:32:8c:76:eb:29:10:95:1d:96:6b:
93:74:a5:4f:a6:1d:08:34:b9:97:3d:ca:50:43:54:7a:9c:fc:
04:4e:7b:72:2d:f7:2f:db:68:51:8f:f2:23:77:ec:99:76:2a:
a4:8f:50:de:67:dd:87:32:dd:46:8d:e1:14:d0:d2:6d:dc:92:
66:19:84:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkXmq+ua7X1tzmGS9q2erwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzY2YTczOTE1ZjkwOTBkNGIxMDgzODk3YWE0MDI1Nzdl
MTYzZGUwHhcNMjUwOTA1MDIwMDM3WhcNMjUwOTA2MDIwMDM3WjAzMTEwLwYDVQQD
Eyg2ZmMxNTcxMGNiM2QzMDdiNWI1NTM4NTM2YThjN2Q3MTNmYTQ2YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxRa2SLy83KNbCOowjagYQTmW/T8
UkR1kb0b+K47WNX4FOMhTpw7RmWIXvrEAJxg910tbRrlfKKvxZUqaufBtLLBlznM
Ha6MOSXfJ9BVAl6T0/gQ8Sr47SvMqHOH1WpYTuz6HecVzfcQPRDy2kPcOa+sKo/Z
827NN8rRTd68B4S756d7W7Xd2N3UIVk5mXUPo6oByvfiahWGV/SrZWpTvPOjUXMD
3TkF1Rz50fat6AVfHlPY0aJ8UgmDa84ZuiUIKrBdW+5wiAg9IvwCeh0eXSCN0Py6
VGSDV8r6XEusVSix2XpiMqqx7R2Pdd+vOIMrRJTeW0wRVZnmCedXKneGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/BVxDLPTB7W1U4U2qMfXE/pGxuMB8GA1UdIwQY
MBaAFGQ2anORX5CQ1LEIOJeqQCV34WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xYmFmZjEtZGRhMy00MzA0LWIxYjMt
NTE4MmVlZGUyYTI5LzEvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xYmFmZjEtZGRhMy00MzA0LWIxYjMtNTE4MmVlZGUyYTI5
LzEvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLBCLWNW
vDfAfA4biSpn4maFeASuoET8sc9Z/wJCI2izK+/eqg6LehO8I3h1BkS4pzKWeWVG
j1XSvPFjLN8vOljrOaiJ+1ZEKIgkvaRitmDb6vaQIYk1v2UKs1SITX4NfaOv80aT
AhIONI1N0HjE0OHMmMw6rJ5XngwzAMzQW0+8NblbpUwq2LL23vUuYUHoaCcp2OU0
durMxG46EiCrltGWNEPJNndJ3uLWBUQ4GK/BqDExGQ1dcPj0C3EyjHbrKRCVHZZr
k3SlT6YdCDS5lz3KUENUepz8BE57ci33L9toUY/yI3fsmXYqpI9Q3mfdhzLdRo3h
FNDSbdySZhmEGQ==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:31 2025 by rpki-client