Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: nNzVgW7hPe0twkwpmSbKy45w4uV/uid/Nx7RvPynSgw=
Subject key identifier: F6:56:50:7C:05:BB:E2:A7:CC:07:E3:B2:84:99:1C:80:4C:6F:44:41
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 0199240C9D9A68A48F3A0629B26AB98941FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0F21
Signing time: Sun 07 Sep 2025 12:00:30 +0000
Manifest this update: Sun 07 Sep 2025 12:00:30 +0000
Manifest next update: Mon 08 Sep 2025 12:00:30 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: YUtFqHIGWQtGy4A8I2uNnQPGDLtfGlTuEs/2cFdgNqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:9d:9a:68:a4:8f:3a:06:29:b2:6a:b9:89:41:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Sep 7 12:00:30 2025 GMT
Not After : Sep 8 12:00:30 2025 GMT
Subject: CN=f656507c05bbe2a7cc07e3b284991c804c6f4441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:c4:ca:58:b7:e0:bd:55:52:78:c4:0e:4a:
bf:f0:49:37:f8:04:13:47:95:47:0d:ce:b5:54:62:
93:8b:88:d5:63:e8:1f:2f:f6:8e:49:c9:3f:1f:cc:
e1:7f:03:b5:0e:2d:79:94:ef:17:fb:4b:09:e2:79:
5f:7e:13:7e:b4:b5:ec:ef:e8:ae:43:f8:c4:df:06:
ed:8e:6b:46:50:59:19:cf:6f:b3:28:6b:1a:1e:3c:
a6:3b:f1:95:0c:bf:cc:b8:1b:fe:f8:0c:7a:d0:10:
a0:86:17:8f:95:8c:e6:9e:ad:57:47:46:7b:d4:94:
4a:71:5e:42:e2:b3:26:c2:d5:c1:e8:f4:52:5e:11:
ca:56:48:53:b9:ad:ef:5e:22:58:54:e1:6d:e3:12:
f5:ba:c7:49:2d:76:9d:3f:04:90:bc:6e:60:15:36:
35:74:ee:b6:54:7d:86:56:ba:8f:ce:b9:69:f7:30:
0e:48:65:bb:4c:9d:10:49:1e:12:0f:c2:a0:1d:7d:
60:fb:b0:76:86:3d:ad:e3:b8:9e:4e:f8:92:72:dd:
34:b9:ce:52:cd:df:85:5d:a7:69:c4:c5:74:6d:c7:
12:f9:c1:a2:20:5e:40:2d:a3:74:cb:ab:5e:e0:9f:
74:0c:07:20:58:d8:e4:9d:02:27:10:75:b4:28:d5:
95:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:56:50:7C:05:BB:E2:A7:CC:07:E3:B2:84:99:1C:80:4C:6F:44:41
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1e:c4:f6:a7:90:84:e0:23:a8:7f:15:52:54:f5:ff:66:bc:
09:e4:72:4a:19:8d:4a:93:97:7e:bc:7b:fd:a3:23:f0:46:cb:
cc:d3:ab:1f:8c:ca:a8:31:06:40:eb:b5:56:4b:15:ed:e8:4a:
42:4a:d8:08:80:4b:ff:24:aa:b0:a1:c1:8c:fa:5f:89:6f:b9:
da:30:a4:ba:d7:69:38:19:4b:10:cb:f9:6c:15:69:88:83:78:
12:b2:41:2d:a9:bd:6d:cd:20:a0:33:bf:54:97:c0:c1:fa:5e:
7c:17:0c:ac:41:48:31:b7:1e:82:89:38:83:cc:c0:5d:6c:8f:
6b:30:bc:52:f0:16:05:a3:00:b0:19:14:82:4a:18:1e:33:39:
d9:b8:0f:ec:ef:13:42:c0:bf:34:42:85:27:fd:b5:8e:73:46:
df:62:d2:f8:4a:32:c9:16:26:57:0f:54:e1:87:0b:97:f0:f8:
1a:16:9a:2a:89:f6:87:0b:e7:81:af:9b:df:67:5b:40:93:a0:
33:97:be:07:53:ec:68:99:ca:35:9a:6c:3c:a8:b6:86:55:37:
1e:7d:75:a5:0e:61:db:fa:ce:41:75:b7:ec:c6:31:65:e3:f6:
da:08:d8:f3:60:f0:7f:52:97:1e:09:a0:c2:01:c2:f4:ad:ba:
58:68:ee:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDJ2aaKSPOgYpsmq5iUH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTcxNTZiOGFhODlmNzZlNGQzOGFmMmMxMDlmYmMxNDkx
N2IwODYwHhcNMjUwOTA3MTIwMDMwWhcNMjUwOTA4MTIwMDMwWjAzMTEwLwYDVQQD
EyhmNjU2NTA3YzA1YmJlMmE3Y2MwN2UzYjI4NDk5MWM4MDRjNmY0NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX/Eyli34L1VUnjEDkq/8Ek3+AQT
R5VHDc61VGKTi4jVY+gfL/aOSck/H8zhfwO1Di15lO8X+0sJ4nlffhN+tLXs7+iu
Q/jE3wbtjmtGUFkZz2+zKGsaHjymO/GVDL/MuBv++Ax60BCghhePlYzmnq1XR0Z7
1JRKcV5C4rMmwtXB6PRSXhHKVkhTua3vXiJYVOFt4xL1usdJLXadPwSQvG5gFTY1
dO62VH2GVrqPzrlp9zAOSGW7TJ0QSR4SD8KgHX1g+7B2hj2t47ieTviSct00uc5S
zd+FXadpxMV0bccS+cGiIF5ALaN0y6te4J90DAcgWNjknQInEHW0KNWVfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZWUHwFu+KnzAfjsoSZHIBMb0RBMB8GA1UdIwQY
MBaAFGSnFWuKqJ925NOK8sEJ+8FJF7CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQt
NTM1MWYxYmRlNzJmLzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQtNTM1MWYxYmRlNzJm
LzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXx7E9qeQ
hOAjqH8VUlT1/2a8CeRyShmNSpOXfrx7/aMj8EbLzNOrH4zKqDEGQOu1VksV7ehK
QkrYCIBL/ySqsKHBjPpfiW+52jCkutdpOBlLEMv5bBVpiIN4ErJBLam9bc0goDO/
VJfAwfpefBcMrEFIMbcegok4g8zAXWyPazC8UvAWBaMAsBkUgkoYHjM52bgP7O8T
QsC/NEKFJ/21jnNG32LS+EoyyRYmVw9U4YcLl/D4GhaaKon2hwvnga+b32dbQJOg
M5e+B1PsaJnKNZpsPKi2hlU3Hn11pQ5h2/rOQXW37MYxZeP22gjY82Dwf1KXHgmg
wgHC9K26WGjurQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:23 2025 by rpki-client