Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: Hmii6pnIyepTGdopCPD8aEEDz7neCmx3rWwTlencdTg=
Subject key identifier: EF:8E:6A:9F:C3:A3:05:64:A8:99:18:77:6C:50:05:6D:F9:BD:E7:4B
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 019923A0A2945C52BA8AB397A36F2FD68605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:02:33 +0000
Manifest this update: Sun 07 Sep 2025 10:02:33 +0000
Manifest next update: Mon 08 Sep 2025 10:02:33 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: a8EuOcDj7cPKuuhuTrCm+Bl5S38KKHbvIHjJA6ICj2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:a2:94:5c:52:ba:8a:b3:97:a3:6f:2f:d6:86:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Sep 7 10:02:33 2025 GMT
Not After : Sep 8 10:02:33 2025 GMT
Subject: CN=ef8e6a9fc3a30564a89918776c50056df9bde74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:81:92:28:08:20:ca:c1:35:ed:8a:b7:b2:9b:
5d:1d:2a:e3:0a:2d:2a:e3:80:06:cf:42:48:d7:7e:
a5:f4:0a:60:0b:7f:18:63:3b:e5:f1:37:aa:b6:24:
4f:f5:a7:a6:6d:23:e1:e4:fb:e4:04:de:1a:cf:24:
0e:bd:9f:f3:a3:1d:49:ee:f4:00:fc:c5:cb:fb:42:
a8:0a:85:be:7b:a7:6b:4c:a8:12:82:e6:bf:5a:e1:
86:3e:74:44:af:5e:ee:ab:c2:40:b7:02:a1:59:0d:
cc:da:f4:52:a8:18:c1:bd:59:ab:22:89:65:23:0b:
78:ca:19:f0:9f:86:48:2c:92:98:91:be:97:82:98:
64:ea:c7:1c:60:85:98:76:99:12:2f:19:af:5a:92:
d5:f5:c1:e6:0e:5b:63:73:7c:c0:12:66:52:4f:11:
37:47:ec:28:50:5b:0c:03:a6:87:42:75:3f:05:17:
11:4c:5e:a1:f8:df:ae:67:79:1d:9b:45:11:6d:2a:
74:e9:ec:55:df:40:e1:51:bc:2c:9f:4a:20:f2:b0:
63:96:ad:cf:f0:88:34:15:9b:7a:25:44:94:83:da:
aa:05:ef:e4:85:82:1e:dd:a9:ef:57:b6:1a:64:2e:
c2:f4:6d:67:13:21:f2:ff:a1:e4:6d:ed:16:9d:b8:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:6A:9F:C3:A3:05:64:A8:99:18:77:6C:50:05:6D:F9:BD:E7:4B
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:32:89:85:46:a8:55:d6:df:12:65:ef:bf:9d:3c:c7:76:97:
2a:e2:49:dd:41:42:41:a6:13:2d:75:21:b0:48:57:13:0c:12:
e1:93:84:63:48:64:dd:54:e0:39:8e:ef:a2:0c:48:4b:c4:d9:
6e:d6:0c:87:61:a3:a7:b0:df:8d:a1:e7:7a:24:b4:68:cc:98:
ec:a7:11:79:1f:c3:3b:0b:b5:3d:d9:e3:ab:7b:70:7b:84:d9:
5c:e2:6f:51:41:0d:87:ad:d2:69:70:73:8a:4e:32:23:ed:5d:
11:68:ae:57:e2:f6:be:99:63:e5:44:45:cd:90:77:1b:0c:56:
ae:0f:c0:5e:86:c4:a6:0c:de:2e:55:c6:3c:de:e1:83:c9:dd:
11:b8:fa:dc:bc:df:87:8a:05:29:ba:42:ae:6f:3a:5c:3b:8e:
0d:b7:5b:72:9d:35:df:95:6f:ab:65:f2:81:57:8c:64:6d:89:
ae:c9:1e:a0:7d:4a:7c:a3:9c:80:e9:41:f7:a8:5d:d0:e1:01:
95:89:44:f4:28:f0:3d:8e:59:dd:c4:40:24:d3:31:07:4e:a6:
2c:0c:6c:f5:71:9c:6f:ed:37:2b:7b:77:c9:ff:a9:c6:2f:fe:
5b:bd:5d:4a:79:e1:2d:46:92:77:ac:88:ea:3e:0a:a4:ef:52:
ae:20:b1:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoKKUXFK6irOXo28v1oYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx
MDc4NTQwHhcNMjUwOTA3MTAwMjMzWhcNMjUwOTA4MTAwMjMzWjAzMTEwLwYDVQQD
EyhlZjhlNmE5ZmMzYTMwNTY0YTg5OTE4Nzc2YzUwMDU2ZGY5YmRlNzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74GSKAggysE17Yq3sptdHSrjCi0q
44AGz0JI136l9ApgC38YYzvl8TeqtiRP9aembSPh5PvkBN4azyQOvZ/zox1J7vQA
/MXL+0KoCoW+e6drTKgSgua/WuGGPnREr17uq8JAtwKhWQ3M2vRSqBjBvVmrIoll
Iwt4yhnwn4ZILJKYkb6Xgphk6sccYIWYdpkSLxmvWpLV9cHmDltjc3zAEmZSTxE3
R+woUFsMA6aHQnU/BRcRTF6h+N+uZ3kdm0URbSp06exV30DhUbwsn0og8rBjlq3P
8Ig0FZt6JUSUg9qqBe/khYIe3anvV7YaZC7C9G1nEyHy/6Hkbe0WnbiQrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+Oap/DowVkqJkYd2xQBW35vedLMB8GA1UdIwQY
MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt
Y2YwMTI0Y2VkNGQ2LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2
LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTKJhUao
VdbfEmXvv508x3aXKuJJ3UFCQaYTLXUhsEhXEwwS4ZOEY0hk3VTgOY7vogxIS8TZ
btYMh2Gjp7DfjaHneiS0aMyY7KcReR/DOwu1Pdnjq3twe4TZXOJvUUENh63SaXBz
ik4yI+1dEWiuV+L2vplj5URFzZB3GwxWrg/AXobEpgzeLlXGPN7hg8ndEbj63Lzf
h4oFKbpCrm86XDuODbdbcp0135Vvq2XygVeMZG2JrskeoH1KfKOcgOlB96hd0OEB
lYlE9CjwPY5Z3cRAJNMxB06mLAxs9XGcb+03K3t3yf+pxi/+W71dSnnhLUaSd6yI
6j4KpO9SriCxpw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:36 2025 by rpki-client