Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: BUW1HC03bK12jz/ppQAckOQTjjtQr4oe0Z8ofouNa+U=
Subject key identifier: 99:E7:D4:89:12:FB:28:A1:E6:E8:EE:CB:02:B6:92:6A:ED:1B:74:4C
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 019922FAC27585024A8915DC4DA7AE402D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: 5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa (hash: 3M5MqZOHY6IgU/oY5PEX9Quago5F235Gft3ZQVLU+EE=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: HLbMB6ubacRBOvsEoVsrqq44fAPwxmd3UpmFvn8wgEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c2:75:85:02:4a:89:15:dc:4d:a7:ae:40:2d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=99e7d48912fb28a1e6e8eecb02b6926aed1b744c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:0b:22:17:21:00:3a:49:49:8b:86:38:f0:
6a:9b:bc:57:96:30:68:04:00:0e:70:96:ba:a0:18:
c9:88:1c:78:e6:5c:4b:c3:5d:f5:37:46:f0:5c:a8:
01:50:87:bc:d1:d4:67:fa:d4:6b:4d:c2:2c:22:c2:
63:30:ad:46:ce:d7:31:1f:0e:99:f0:75:ea:c8:fb:
46:4c:d6:2d:e0:03:75:1e:f1:2a:96:25:2f:4a:5f:
0e:fb:e1:71:22:cf:9e:cc:28:2f:58:6a:c3:1e:45:
cc:d6:0e:c7:e2:c5:48:ce:cd:2f:3a:79:60:60:d4:
0c:bf:8f:5f:ab:98:7b:33:e0:e3:7e:eb:ac:0c:75:
eb:6e:44:e7:b7:13:1a:e8:df:75:ea:51:dd:d9:b4:
f6:c2:61:79:5a:31:a8:d5:61:56:71:58:2b:67:9a:
bf:b7:1e:bb:47:fe:39:8e:da:92:ad:db:14:34:65:
01:17:94:ff:e9:87:8e:67:c6:78:ff:e9:ca:d1:60:
dd:15:78:b2:92:f2:47:13:e9:7b:6d:7d:30:11:12:
98:fe:4a:76:0c:42:94:32:02:04:5e:47:41:2e:d5:
24:06:d0:91:1e:d0:8d:b7:11:1f:d2:74:51:6a:6a:
87:4e:d3:f4:63:a3:5e:f0:d0:08:71:df:a0:1b:5b:
69:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:D4:89:12:FB:28:A1:E6:E8:EE:CB:02:B6:92:6A:ED:1B:74:4C
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1a:b9:59:92:5c:58:ec:f0:46:8c:6b:46:c7:f6:36:f7:9f:
7d:23:1b:aa:36:c4:fc:9e:db:85:1f:71:a7:ce:53:e1:de:2f:
16:72:c5:9c:38:1d:ae:29:d1:67:23:be:7d:6f:48:10:2b:59:
ba:84:a7:8f:43:dd:e0:92:ef:2f:28:36:55:f1:41:08:1d:5f:
85:bc:4a:b3:14:5a:19:83:21:05:42:39:66:5a:b0:5e:0f:f0:
a4:e2:c6:13:09:a5:6f:02:d8:d1:b7:47:e5:f5:4a:44:6d:2b:
d2:ab:3f:17:e3:88:e9:5f:96:a2:17:2b:81:28:cd:00:b3:fa:
ad:f4:89:79:f1:56:63:6b:aa:87:df:fc:a5:f3:1b:02:ca:b4:
d0:4b:f9:83:75:31:e6:17:fa:d7:61:72:5a:c4:1d:d1:e1:8d:
01:41:60:4a:8b:56:db:f6:7f:55:b7:70:07:6f:56:48:97:e0:
17:8c:70:93:27:35:12:14:af:ff:61:97:33:23:46:c6:cb:36:
cd:d1:c9:40:ad:a9:d0:87:1f:2d:15:00:8f:df:98:d6:4a:5f:
23:7d:ef:09:02:a0:7e:f3:57:09:c7:84:26:b0:9a:2d:81:75:
fa:05:b0:f2:45:b5:71:e1:1a:a2:28:ae:85:ec:7e:bb:6d:44:
43:f8:39:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+sJ1hQJKiRXcTaeuQC1rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MGIxZjg3NzJjNmVmNDg0ZTJjZDJkNjYyNjNmMmVmOThm
YTM5NjgwHhcNMjUwOTA3MDcwMTIyWhcNMjUwOTA4MDcwMTIyWjAzMTEwLwYDVQQD
Eyg5OWU3ZDQ4OTEyZmIyOGExZTZlOGVlY2IwMmI2OTI2YWVkMWI3NDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplkLIhchADpJSYuGOPBqm7xXljBo
BAAOcJa6oBjJiBx45lxLw131N0bwXKgBUIe80dRn+tRrTcIsIsJjMK1GztcxHw6Z
8HXqyPtGTNYt4AN1HvEqliUvSl8O++FxIs+ezCgvWGrDHkXM1g7H4sVIzs0vOnlg
YNQMv49fq5h7M+DjfuusDHXrbkTntxMa6N916lHd2bT2wmF5WjGo1WFWcVgrZ5q/
tx67R/45jtqSrdsUNGUBF5T/6YeOZ8Z4/+nK0WDdFXiykvJHE+l7bX0wERKY/kp2
DEKUMgIEXkdBLtUkBtCRHtCNtxEf0nRRamqHTtP0Y6Ne8NAIcd+gG1tp7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnn1IkS+yih5ujuywK2kmrtG3RMMB8GA1UdIwQY
MBaAFGQLH4dyxu9ITizS1mJj8u+Y+jloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQt
Mzg3YWZhMGE1MzRmLzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQtMzg3YWZhMGE1MzRm
LzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRq5WZJc
WOzwRoxrRsf2NveffSMbqjbE/J7bhR9xp85T4d4vFnLFnDgdrinRZyO+fW9IECtZ
uoSnj0Pd4JLvLyg2VfFBCB1fhbxKsxRaGYMhBUI5ZlqwXg/wpOLGEwmlbwLY0bdH
5fVKRG0r0qs/F+OI6V+WohcrgSjNALP6rfSJefFWY2uqh9/8pfMbAsq00Ev5g3Ux
5hf612FyWsQd0eGNAUFgSotW2/Z/VbdwB29WSJfgF4xwkyc1EhSv/2GXMyNGxss2
zdHJQK2p0IcfLRUAj9+Y1kpfI33vCQKgfvNXCceEJrCaLYF1+gWw8kW1ceEaoiiu
hex+u21EQ/g5Zw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:47 2025 by rpki-client