Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: Z2DmCzKGYek6FwQ/PafeT89oBpyt2OKqNT1sdczD0FI=
Subject key identifier: 59:F0:0B:BA:14:0A:40:79:37:1C:A8:81:CF:55:EF:8C:DF:3A:FC:43
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019931C85FD512B5B9247C5E21D0C8DCC9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 064E
Signing time: Wed 10 Sep 2025 04:00:39 +0000
Manifest this update: Wed 10 Sep 2025 04:00:39 +0000
Manifest next update: Thu 11 Sep 2025 04:00:39 +0000
Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: E64O/I8tn35NZ3ROttsctSBK1OuO2mHDONmkj7GkKWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:5f:d5:12:b5:b9:24:7c:5e:21:d0:c8:dc:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Sep 10 04:00:39 2025 GMT
Not After : Sep 11 04:00:39 2025 GMT
Subject: CN=59f00bba140a4079371ca881cf55ef8cdf3afc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:af:fe:fc:a3:06:60:ac:d9:bc:74:f1:4f:
cb:59:53:46:cd:28:5a:72:c7:79:8d:d6:0e:71:3c:
21:a1:ab:99:35:43:71:d1:ae:73:eb:02:81:60:e5:
e8:b5:d6:34:eb:b0:c8:f2:c3:af:89:5d:5d:7a:44:
6f:01:db:b3:32:94:fa:8d:61:ca:85:99:d0:45:8c:
96:2c:9a:23:dd:d2:98:2a:a5:26:42:3b:76:ff:59:
a2:72:2e:a0:b4:cc:1a:fb:cb:44:cc:e8:12:6e:e5:
e5:1c:ee:9d:ec:c8:3b:7f:05:39:08:ee:52:4f:92:
e4:e4:f2:d4:b1:71:e6:10:e6:1e:bd:70:88:f4:1b:
a6:f0:9e:eb:23:46:c2:ea:3d:ab:d7:db:d1:91:78:
bd:3d:91:5d:ba:50:ca:29:7a:c8:f1:3c:72:45:19:
ca:ae:31:d0:e8:7e:9a:20:c8:a6:79:ac:6e:45:b3:
39:e4:2b:35:6f:0d:63:4b:b2:4c:4a:f6:04:ee:9f:
f3:aa:56:45:7c:d4:b9:c4:ce:4a:3b:df:a1:ef:85:
ab:43:f4:fa:f3:8b:46:57:3d:cb:ba:7c:a1:04:1f:
f7:42:48:38:e4:db:d9:c8:8c:9c:5d:40:0a:3a:23:
87:4e:03:7c:39:7d:7e:62:6a:e9:49:f5:27:10:2e:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:0B:BA:14:0A:40:79:37:1C:A8:81:CF:55:EF:8C:DF:3A:FC:43
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6e:d7:0f:03:f9:f0:27:31:a2:71:c2:85:41:7a:44:24:77:
c0:37:ad:87:a0:78:eb:95:b9:b2:bd:31:f4:26:1c:cf:53:85:
f4:98:e6:82:e0:2b:ec:e0:bd:df:d4:93:fd:53:d4:aa:26:e1:
31:f1:59:43:35:44:9a:9e:13:94:26:50:40:68:c5:d1:68:cb:
76:28:6e:3f:39:ea:96:d0:2b:ef:57:33:b3:dc:27:9e:7a:c2:
27:86:4c:98:47:a7:3c:68:73:43:7c:b9:0f:9a:6c:92:24:23:
0a:33:a8:93:17:37:7f:14:03:fa:af:c2:9d:e2:6a:d4:b8:13:
36:6f:b6:61:94:51:47:70:75:80:fa:11:a4:7a:18:a7:e3:ea:
2c:78:da:9a:8b:cb:c5:be:e4:4e:96:c9:e4:3f:6f:1e:05:1f:
3f:a8:3e:dc:c3:b4:af:8d:d8:58:d8:11:88:6f:43:b1:6d:c8:
fc:a8:1d:ec:f7:50:36:94:d9:b3:3a:97:b3:aa:86:89:e2:15:
00:1e:57:98:33:46:ab:6a:52:35:f3:78:aa:e2:84:61:62:4f:
3e:10:d5:f6:d6:da:cf:03:75:42:a5:71:94:d6:da:32:87:0b:
b2:8c:42:de:f6:fa:eb:32:1d:8f:c6:8d:64:0a:a0:ce:33:ed:
f8:f3:1a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxyF/VErW5JHxeIdDI3Mn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2
ODQ5NjEwHhcNMjUwOTEwMDQwMDM5WhcNMjUwOTExMDQwMDM5WjAzMTEwLwYDVQQD
Eyg1OWYwMGJiYTE0MGE0MDc5MzcxY2E4ODFjZjU1ZWY4Y2RmM2FmYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Sv/vyjBmCs2bx08U/LWVNGzSha
csd5jdYOcTwhoauZNUNx0a5z6wKBYOXotdY067DI8sOviV1dekRvAduzMpT6jWHK
hZnQRYyWLJoj3dKYKqUmQjt2/1mici6gtMwa+8tEzOgSbuXlHO6d7Mg7fwU5CO5S
T5Lk5PLUsXHmEOYevXCI9Bum8J7rI0bC6j2r19vRkXi9PZFdulDKKXrI8TxyRRnK
rjHQ6H6aIMimeaxuRbM55Cs1bw1jS7JMSvYE7p/zqlZFfNS5xM5KO9+h74WrQ/T6
84tGVz3LunyhBB/3Qkg45NvZyIycXUAKOiOHTgN8OX1+YmrpSfUnEC53SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnwC7oUCkB5Nxyogc9V74zfOvxDMB8GA1UdIwQY
MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct
ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl
LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT27XDwP5
8CcxonHChUF6RCR3wDeth6B465W5sr0x9CYcz1OF9JjmguAr7OC939ST/VPUqibh
MfFZQzVEmp4TlCZQQGjF0WjLdihuPznqltAr71czs9wnnnrCJ4ZMmEenPGhzQ3y5
D5pskiQjCjOokxc3fxQD+q/CneJq1LgTNm+2YZRRR3B1gPoRpHoYp+PqLHjamovL
xb7kTpbJ5D9vHgUfP6g+3MO0r43YWNgRiG9DsW3I/Kgd7PdQNpTZszqXs6qGieIV
AB5XmDNGq2pSNfN4quKEYWJPPhDV9tbazwN1QqVxlNbaMocLsoxC3vb66zIdj8aN
ZAqgzjPt+PMaMg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:16:38 2025 by rpki-client