Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: G0sRk7D17E3JAhlyLcB7ZP9j8vs89HWR1ZpUNEVaU5g=
Subject key identifier: 29:90:90:3E:B8:01:F3:A4:5B:22:CA:FB:0A:22:1B:05:C9:57:9E:ED
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 01992C6B6449DDF7BD20AC279CCECE27F4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 0B2D
Signing time: Tue 09 Sep 2025 03:00:59 +0000
Manifest this update: Tue 09 Sep 2025 03:00:59 +0000
Manifest next update: Wed 10 Sep 2025 03:00:59 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: hKvAc5y9CAzZODseUmKdN7fGcFfY4bMUPKPQ+McO0qE=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6b:64:49:dd:f7:bd:20:ac:27:9c:ce:ce:27:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Sep 9 03:00:59 2025 GMT
Not After : Sep 10 03:00:59 2025 GMT
Subject: CN=2990903eb801f3a45b22cafb0a221b05c9579eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:9b:6e:97:b1:6a:69:2e:26:68:67:77:5b:
0f:fa:fa:ac:a8:a9:5f:d6:5b:9e:9a:82:a3:38:36:
52:61:be:0e:4a:ad:96:e3:83:5e:eb:41:65:3a:c4:
a1:cd:a8:64:e8:65:71:8d:af:a9:a7:95:d7:f2:3f:
54:ab:e3:f7:54:85:ba:73:89:e2:22:d6:e4:57:8a:
99:e4:6d:c3:29:a2:88:bb:5a:db:b4:8d:87:df:b9:
1b:14:18:4d:e3:26:c5:fb:49:2c:2d:f0:61:21:85:
a5:e0:a5:63:ee:a8:ce:2e:3d:7c:de:56:14:75:c1:
16:57:76:99:b3:33:79:bb:cc:f2:d3:8a:bd:cb:79:
80:87:04:73:33:f9:39:cc:d3:2a:ea:c3:6f:83:d3:
81:ba:00:2c:98:17:81:05:a5:b6:7c:b2:45:f3:6f:
eb:9c:36:0b:bb:f4:35:a8:ab:14:4b:17:56:7f:b6:
a7:1c:da:bd:41:51:b6:91:ee:d4:c4:37:6c:a6:d6:
1b:d2:27:12:68:6f:e5:57:69:76:e1:03:c9:48:37:
b9:2c:17:35:7c:a5:27:12:6a:41:90:c9:aa:6d:2f:
51:8c:13:dd:f1:aa:56:71:6b:aa:ef:d1:95:68:35:
91:ee:22:44:d9:81:84:4f:7d:00:74:c9:37:4e:b5:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:90:90:3E:B8:01:F3:A4:5B:22:CA:FB:0A:22:1B:05:C9:57:9E:ED
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3a:28:9b:5e:40:dd:01:f1:79:ad:a4:0e:96:01:c1:02:d7:
7b:43:55:e6:81:65:c6:1a:ee:66:0f:e8:13:de:eb:91:eb:b5:
49:da:cc:cc:c4:55:ad:6d:f9:de:ec:f9:f0:ef:28:05:99:18:
c6:4c:2a:2c:86:4d:b0:e4:4e:83:bb:55:e6:ba:b9:92:09:c4:
31:a8:b4:92:4d:92:1e:71:bf:38:6c:18:79:2b:ff:3f:b7:23:
d2:a3:c2:3b:20:b9:23:22:0c:80:35:fa:e1:2e:d2:31:4b:4c:
bb:6f:9e:63:59:ac:db:06:59:c7:65:b5:11:64:62:c9:6a:67:
e6:e4:f8:29:4e:4a:74:36:ff:89:7c:7c:45:08:81:79:b9:90:
8e:c3:31:36:e9:e5:ad:03:e9:26:78:ad:db:66:68:c9:45:51:
23:8d:ce:7f:a9:8a:9a:fd:61:a6:62:ca:72:75:54:df:92:f7:
b2:7b:2c:86:1f:a7:94:54:07:79:af:c9:f5:90:e4:66:c3:e6:
96:1e:58:12:70:a1:92:8f:8b:9d:ac:c4:04:56:75:5b:bf:01:
86:7c:93:4f:0d:59:d8:55:d9:1d:f7:d0:8c:f6:74:49:aa:02:
ff:9b:58:ea:e0:64:2d:28:ac:78:57:f8:3a:4d:d3:0e:de:9e:
cc:a0:2e:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZksa2RJ3fe9IKwnnM7OJ/TOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx
NzEzZWEwHhcNMjUwOTA5MDMwMDU5WhcNMjUwOTEwMDMwMDU5WjAzMTEwLwYDVQQD
EygyOTkwOTAzZWI4MDFmM2E0NWIyMmNhZmIwYTIyMWIwNWM5NTc5ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv6bbpexamkuJmhnd1sP+vqsqKlf
1luemoKjODZSYb4OSq2W44Ne60FlOsShzahk6GVxja+pp5XX8j9Uq+P3VIW6c4ni
ItbkV4qZ5G3DKaKIu1rbtI2H37kbFBhN4ybF+0ksLfBhIYWl4KVj7qjOLj183lYU
dcEWV3aZszN5u8zy04q9y3mAhwRzM/k5zNMq6sNvg9OBugAsmBeBBaW2fLJF82/r
nDYLu/Q1qKsUSxdWf7anHNq9QVG2ke7UxDdsptYb0icSaG/lV2l24QPJSDe5LBc1
fKUnEmpBkMmqbS9RjBPd8apWcWuq79GVaDWR7iJE2YGET30AdMk3TrWVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmQkD64AfOkWyLK+woiGwXJV57tMB8GA1UdIwQY
MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt
Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm
LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzoom15A
3QHxea2kDpYBwQLXe0NV5oFlxhruZg/oE97rkeu1SdrMzMRVrW353uz58O8oBZkY
xkwqLIZNsOROg7tV5rq5kgnEMai0kk2SHnG/OGwYeSv/P7cj0qPCOyC5IyIMgDX6
4S7SMUtMu2+eY1ms2wZZx2W1EWRiyWpn5uT4KU5KdDb/iXx8RQiBebmQjsMxNunl
rQPpJnit22ZoyUVRI43Of6mKmv1hpmLKcnVU35L3snsshh+nlFQHea/J9ZDkZsPm
lh5YEnChko+LnazEBFZ1W78BhnyTTw1Z2FXZHffQjPZ0SaoC/5tY6uBkLSiseFf4
Ok3TDt6ezKAutQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:43:32 2025 by rpki-client