Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: WSkc/lqcaKVBiFFYX65DryayJhN0XOm1FoIY03ImUls=
Subject key identifier: 2F:13:6E:91:3F:16:B5:69:A4:16:D8:51:CF:C9:A4:30:20:B3:D1:6C
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 0199239EEB070B1863F8C9BFBC8C51F188F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 0B79
Signing time: Sun 07 Sep 2025 10:00:41 +0000
Manifest this update: Sun 07 Sep 2025 10:00:41 +0000
Manifest next update: Mon 08 Sep 2025 10:00:41 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: 0Ic7hiYH6s2G5olRR5qJ7TrVz3FAkfaOlTdyMkkA3Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:eb:07:0b:18:63:f8:c9:bf:bc:8c:51:f1:88:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Sep 7 10:00:41 2025 GMT
Not After : Sep 8 10:00:41 2025 GMT
Subject: CN=2f136e913f16b569a416d851cfc9a43020b3d16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:32:16:46:8c:d7:43:9c:89:b8:c7:20:5a:
a7:ca:b7:15:5d:d6:4c:bd:32:a3:58:85:22:d5:ff:
52:98:07:3d:20:b4:b9:18:e6:77:01:ea:42:d5:8f:
df:48:13:48:07:4e:a8:3b:17:08:24:aa:26:bc:55:
59:1a:70:7d:9a:11:ee:f7:79:4e:a1:33:1f:92:fd:
dc:b5:19:9a:c3:17:8d:d1:91:72:c0:83:57:1c:c2:
07:69:41:29:ad:f9:ac:fb:a8:26:f2:d0:92:ce:ea:
df:68:94:47:d4:8a:88:b3:55:b1:90:3f:e8:a2:cf:
bc:29:eb:fa:72:eb:d2:f1:f4:c3:84:54:0a:95:b8:
3e:b6:18:e2:c7:16:79:35:56:4c:32:43:96:7b:c9:
d1:f5:ec:40:fc:a6:47:7b:a9:87:b2:77:d6:88:8d:
04:ab:63:b0:c4:50:77:e6:16:7c:83:58:0e:9b:f1:
d8:4f:80:01:d5:b9:04:1a:08:a1:51:e7:cf:07:c2:
ef:54:5d:68:df:7e:ec:c6:50:e8:18:29:08:48:1b:
04:99:45:63:ac:e5:05:1c:f3:0a:36:e1:f6:ad:61:
55:77:86:27:0c:0e:38:e2:96:2f:77:4d:2d:fa:0c:
1c:ea:a9:81:39:dd:c2:43:7f:40:5a:41:6f:b8:7d:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:6E:91:3F:16:B5:69:A4:16:D8:51:CF:C9:A4:30:20:B3:D1:6C
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:45:5f:83:2b:88:05:58:eb:1e:23:fe:b0:6c:e3:7c:c9:60:
08:aa:8b:01:d4:1a:20:49:60:34:d0:91:76:9b:b2:1f:22:3f:
7e:5d:71:47:21:73:e8:1e:be:d1:6c:85:39:2a:55:5e:92:f0:
44:78:39:0f:10:fe:3c:83:66:0f:01:af:de:29:bd:81:3a:d9:
81:a9:9b:ff:d7:71:b2:5a:fe:83:ed:6b:9c:c2:08:98:05:3d:
d6:41:dd:1c:46:5e:e7:1d:8a:22:fb:58:ec:87:0c:07:7c:b5:
76:de:a3:75:86:91:ba:48:5b:f1:1d:c5:66:19:06:53:e2:d0:
2b:27:42:ad:17:e4:7d:07:c1:24:4f:59:b9:26:cc:04:d4:8b:
fd:af:75:06:52:35:81:8d:5e:07:cd:67:ef:ec:94:b5:dc:e6:
05:35:3c:9e:b9:09:2a:75:51:de:f6:ef:02:28:55:d5:d9:cf:
f5:86:dc:cc:cf:84:22:4b:8a:70:0f:17:4a:64:67:18:c0:f3:
d2:00:fd:ae:90:33:06:a3:1a:b9:87:b2:49:5b:a5:af:05:08:
cb:a6:dd:32:7e:e4:7d:e2:74:34:30:ef:74:32:b0:cc:5a:e8:
db:69:9b:52:04:37:b0:6f:1e:ef:42:7b:bd:0e:49:b2:7d:d2:
62:79:6d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnusHCxhj+Mm/vIxR8Yj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU1ZDkwMDYxZmEyYTcyNGMzNjc0MjU4NmM2MjlkNDcx
ZTdhNGQwHhcNMjUwOTA3MTAwMDQxWhcNMjUwOTA4MTAwMDQxWjAzMTEwLwYDVQQD
EygyZjEzNmU5MTNmMTZiNTY5YTQxNmQ4NTFjZmM5YTQzMDIwYjNkMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q8yFkaM10OcibjHIFqnyrcVXdZM
vTKjWIUi1f9SmAc9ILS5GOZ3AepC1Y/fSBNIB06oOxcIJKomvFVZGnB9mhHu93lO
oTMfkv3ctRmawxeN0ZFywINXHMIHaUEprfms+6gm8tCSzurfaJRH1IqIs1WxkD/o
os+8Kev6cuvS8fTDhFQKlbg+thjixxZ5NVZMMkOWe8nR9exA/KZHe6mHsnfWiI0E
q2OwxFB35hZ8g1gOm/HYT4AB1bkEGgihUefPB8LvVF1o337sxlDoGCkISBsEmUVj
rOUFHPMKNuH2rWFVd4YnDA444pYvd00t+gwc6qmBOd3CQ39AWkFvuH1hVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8TbpE/FrVppBbYUc/JpDAgs9FsMB8GA1UdIwQY
MBaAFM3uXZAGH6KnJMNnQlhsYp1HHnpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUt
NTdhNWYzMjg5OTkyLzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUtNTdhNWYzMjg5OTky
LzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUVfgyuI
BVjrHiP+sGzjfMlgCKqLAdQaIElgNNCRdpuyHyI/fl1xRyFz6B6+0WyFOSpVXpLw
RHg5DxD+PINmDwGv3im9gTrZgamb/9dxslr+g+1rnMIImAU91kHdHEZe5x2KIvtY
7IcMB3y1dt6jdYaRukhb8R3FZhkGU+LQKydCrRfkfQfBJE9ZuSbMBNSL/a91BlI1
gY1eB81n7+yUtdzmBTU8nrkJKnVR3vbvAihV1dnP9YbczM+EIkuKcA8XSmRnGMDz
0gD9rpAzBqMauYeySVulrwUIy6bdMn7kfeJ0NDDvdDKwzFro22mbUgQ3sG8e70J7
vQ5Jsn3SYnlt3A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:55 2025 by rpki-client