Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
File: zGB34ATojv-PE7d0DfJU2eSN1XQ.mft (raw, json)
Hash identifier: jgQQdq92xMXKwXrpDGgEnwyrxqy2GEQ8qnHTiErf7F0=
Subject key identifier: BE:C8:08:BC:FF:BF:85:0F:02:2F:6E:61:24:63:2F:51:A4:B7:DF:6E
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 0199657EDE5816A2E5268D51B763F712C10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
Manifest number: 1698
Signing time: Sat 20 Sep 2025 05:00:37 +0000
Manifest this update: Sat 20 Sep 2025 05:00:37 +0000
Manifest next update: Sun 21 Sep 2025 05:00:37 +0000
Files and hashes: 1: VeyJDEEty7IaphGW3rZRjoHUojg.roa (hash: nlnkQXVcXOy604OjeWWR6cJfH3A2u1gS0XEnkUUPxgU=)
2: ZJT0zr7m2y5wt4gW9bKEzmGI1ow.roa (hash: G77N1gA2nJ38QCQzMuuTUjtsbNVh+2EuSfRtrFna6jE=)
3: grKIm7Lo2eZE2vteQMGt4oHjtOE.roa (hash: 2kq2MqRQm4HSGsYIQVdRn5p0QWWgpGXBFjPu/GSW7ak=)
4: zGB34ATojv-PE7d0DfJU2eSN1XQ.crl (hash: mvAiiRHLYaCmB3zN0WEWdwtbsm7epQwZoSZgvQfcHBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:7e:de:58:16:a2:e5:26:8d:51:b7:63:f7:12:c1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Sep 20 05:00:37 2025 GMT
Not After : Sep 21 05:00:37 2025 GMT
Subject: CN=bec808bcffbf850f022f6e6124632f51a4b7df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:5d:39:22:5d:64:92:34:e6:9f:dc:60:72:
48:46:17:c7:31:97:26:3e:ac:dd:0d:1f:cf:7c:d4:
17:d1:a6:d6:c7:a9:8d:13:07:16:fb:c3:36:f4:c2:
86:03:6c:75:e9:b3:6a:0e:1c:0f:6f:15:94:0a:26:
ba:cd:fe:2c:3e:4a:03:ee:21:9e:0c:a3:98:93:30:
3e:67:14:de:b1:df:c4:5a:67:b2:1a:c0:c6:4d:89:
31:3e:d2:e9:aa:50:e8:b4:dd:53:20:9e:97:62:73:
3a:1e:9d:b5:25:82:65:e6:30:c0:be:3c:e1:66:bd:
4a:78:d7:df:2f:09:74:5c:93:47:78:d9:dc:37:04:
92:e5:f8:6a:b0:95:14:6f:40:0e:c0:f9:cc:bc:0a:
dd:66:9c:9f:05:f8:90:82:1f:fe:32:d5:2f:7c:72:
f9:68:f2:92:ac:c6:b0:c6:4f:91:50:f7:74:4b:57:
5d:e0:9c:19:8a:e3:d8:a8:0d:bd:e7:56:e4:21:95:
fd:58:19:d4:71:2b:aa:0c:cc:31:59:a2:b7:0d:23:
78:cb:09:25:4d:c2:69:ca:99:23:24:ab:2b:61:d1:
67:03:bc:33:dd:42:6a:24:7e:5f:d7:81:fb:e9:d1:
cd:e0:c3:5c:60:3e:30:df:ba:7b:71:8b:b3:62:81:
3c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:08:BC:FF:BF:85:0F:02:2F:6E:61:24:63:2F:51:A4:B7:DF:6E
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9f:18:7d:ce:8b:07:4b:10:ab:28:7b:d9:88:cf:4f:b6:88:
cf:ad:84:5e:fc:c2:ea:e1:f1:4d:c3:f4:b3:2e:d4:79:4d:1f:
c6:08:5a:4a:63:9f:79:26:a4:81:61:2e:2a:aa:ea:3b:ca:dc:
6d:6b:c9:22:30:10:1f:c8:cd:e3:14:96:22:72:53:7c:cc:78:
99:4e:e3:d4:fa:25:27:33:2a:c3:88:4f:2e:76:fb:4b:b5:6b:
49:60:ae:1f:6e:ac:32:e1:25:59:b5:46:7e:fd:79:5f:a2:cc:
5a:a4:31:a5:e2:85:b4:49:df:24:ff:d4:11:71:c8:14:88:8b:
35:0b:96:b2:b8:db:2a:ea:15:64:b5:0e:be:6c:22:10:5f:b9:
b8:dd:2d:e6:2b:fc:75:08:74:31:1e:e2:47:ba:18:e4:8f:2a:
bb:6c:4a:c0:0c:84:e2:60:ab:91:d8:a9:01:72:30:ec:49:70:
a2:42:93:40:f0:8b:b8:88:e7:6e:50:32:24:c0:89:08:75:0a:
32:89:a7:a3:5b:24:fd:e2:1b:ac:fa:aa:06:9b:ed:40:62:ff:
9b:34:af:0f:7c:5d:98:a0:ca:c7:21:85:d1:a2:0d:bd:f8:3f:
ac:d1:cf:15:77:80:51:29:57:0e:17:1f:a0:12:24:1c:33:b1:
2c:0e:f6:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZllft5YFqLlJo1Rt2P3EsEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4
ZGQ1NzQwHhcNMjUwOTIwMDUwMDM3WhcNMjUwOTIxMDUwMDM3WjAzMTEwLwYDVQQD
EyhiZWM4MDhiY2ZmYmY4NTBmMDIyZjZlNjEyNDYzMmY1MWE0YjdkZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviZdOSJdZJI05p/cYHJIRhfHMZcm
PqzdDR/PfNQX0abWx6mNEwcW+8M29MKGA2x16bNqDhwPbxWUCia6zf4sPkoD7iGe
DKOYkzA+ZxTesd/EWmeyGsDGTYkxPtLpqlDotN1TIJ6XYnM6Hp21JYJl5jDAvjzh
Zr1KeNffLwl0XJNHeNncNwSS5fhqsJUUb0AOwPnMvArdZpyfBfiQgh/+MtUvfHL5
aPKSrMawxk+RUPd0S1dd4JwZiuPYqA2951bkIZX9WBnUcSuqDMwxWaK3DSN4ywkl
TcJpypkjJKsrYdFnA7wz3UJqJH5f14H76dHN4MNcYD4w37p7cYuzYoE88QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7ICLz/v4UPAi9uYSRjL1Gkt99uMB8GA1UdIwQY
MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt
NDY3MWY0YmFhOWIxLzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx
LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ8Yfc6L
B0sQqyh72YjPT7aIz62EXvzC6uHxTcP0sy7UeU0fxghaSmOfeSakgWEuKqrqO8rc
bWvJIjAQH8jN4xSWInJTfMx4mU7j1PolJzMqw4hPLnb7S7VrSWCuH26sMuElWbVG
fv15X6LMWqQxpeKFtEnfJP/UEXHIFIiLNQuWsrjbKuoVZLUOvmwiEF+5uN0t5iv8
dQh0MR7iR7oY5I8qu2xKwAyE4mCrkdipAXIw7ElwokKTQPCLuIjnblAyJMCJCHUK
Momno1sk/eIbrPqqBpvtQGL/mzSvD3xdmKDKxyGF0aINvfg/rNHPFXeAUSlXDhcf
oBIkHDOxLA72mw==
-----END CERTIFICATE-----
Generated at Sat Sep 20 12:38:00 2025 by rpki-client