Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: sawKWzxqFzFMfkEfxvuVxnZqIfPIDfjLCHAwaoGkB/U=
Subject key identifier: 00:B2:48:F0:5B:F5:7B:F7:05:70:A1:4E:BB:ED:7C:2D:F5:82:E8:2C
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 0199228C336E28AF5587A6583104177041EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 127B
Signing time: Sun 07 Sep 2025 05:00:37 +0000
Manifest this update: Sun 07 Sep 2025 05:00:37 +0000
Manifest next update: Mon 08 Sep 2025 05:00:37 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: iAw2Ca1QJTIqDMKUGTneM+EJNEg/z78JWJ9Zw0dGmuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:33:6e:28:af:55:87:a6:58:31:04:17:70:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: Sep 7 05:00:37 2025 GMT
Not After : Sep 8 05:00:37 2025 GMT
Subject: CN=00b248f05bf57bf70570a14ebbed7c2df582e82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:1d:fe:52:6d:2b:7c:ba:4f:e7:d4:dc:9e:
d3:57:64:d0:b3:f6:7c:5c:46:28:07:69:cb:26:15:
37:84:b8:e8:93:de:a9:a4:25:e1:8d:93:9b:ec:ea:
ab:ae:b7:9e:de:8e:74:f5:c9:c1:1c:ac:fb:a9:fc:
b2:1d:67:aa:42:63:1b:28:15:6f:cc:b1:c4:97:8a:
7c:bf:70:29:cf:fc:cd:ff:e1:33:7c:1f:9a:08:25:
e9:38:74:0d:15:b6:dd:ce:52:77:c7:7e:c9:43:c6:
20:d6:74:eb:e9:7a:ef:2a:1c:ac:ab:52:06:5d:3e:
36:2a:c8:a7:b3:f5:f1:00:2c:3a:3c:4a:da:e0:ac:
a5:ea:11:df:65:89:cd:06:55:6b:a0:67:6f:ea:2b:
63:e9:05:7a:f0:09:99:35:d4:f4:f7:99:51:70:04:
a2:c9:aa:5f:a1:97:c1:0a:32:bb:6c:8d:29:33:d7:
95:f2:5d:52:ae:64:57:95:38:eb:e2:66:48:fe:b6:
73:cb:c8:37:ca:f3:60:9f:83:14:72:ae:ff:35:bf:
81:6e:90:80:ab:63:aa:ea:ac:eb:c3:96:94:32:89:
d3:6b:28:71:b8:ab:71:56:b9:4d:d5:80:0a:6d:1b:
2b:fb:47:c3:db:2e:94:7a:95:6c:bb:01:7f:b3:80:
a2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:48:F0:5B:F5:7B:F7:05:70:A1:4E:BB:ED:7C:2D:F5:82:E8:2C
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:49:26:2d:b0:7f:8a:ab:a1:d6:e6:c4:56:8d:80:f9:03:a1:
17:74:ce:95:b0:2a:bf:7b:eb:4a:8a:df:48:53:24:4e:25:c1:
31:f8:df:f2:ad:3e:49:ac:c3:78:b9:c4:1e:86:26:fd:10:1b:
6b:5e:f5:57:74:01:d4:55:4f:e2:0a:50:c8:0c:9f:43:ed:1b:
fd:80:f5:49:c0:18:3a:13:d0:ec:03:1b:df:1d:dd:8f:4a:12:
e5:d5:4c:23:4e:36:2b:14:3b:86:f6:35:87:44:1d:aa:af:aa:
d4:da:b4:86:3a:3d:04:21:f6:86:15:4d:f3:48:fa:a4:9f:a8:
76:b6:96:e8:c0:4b:4a:a6:0a:78:86:1e:da:9f:7d:2d:8a:3f:
36:a3:84:ed:2d:8f:4a:2f:c2:71:a8:60:d6:a4:c7:7e:0e:33:
76:96:1e:b6:28:90:0b:b5:88:49:28:d8:14:9e:53:bd:6a:78:
f6:71:0c:2a:63:7a:16:ca:fe:86:2f:0e:93:2d:37:44:19:24:
2d:1d:ce:c0:c1:ac:43:c1:9c:cc:4f:49:00:63:98:e3:67:ea:
a5:88:0f:e5:89:a7:63:36:70:8e:15:3f:44:83:b6:76:a1:dd:
59:61:79:bd:a3:17:0e:41:6f:59:8a:69:3d:06:47:52:63:b4:
a5:d8:88:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijDNuKK9Vh6ZYMQQXcEHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTk4NTZkYjFhYjNiMjRmMDllOWNiOTI3NDM3Njg2Njgz
MDE0MTEwHhcNMjUwOTA3MDUwMDM3WhcNMjUwOTA4MDUwMDM3WjAzMTEwLwYDVQQD
EygwMGIyNDhmMDViZjU3YmY3MDU3MGExNGViYmVkN2MyZGY1ODJlODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppId/lJtK3y6T+fU3J7TV2TQs/Z8
XEYoB2nLJhU3hLjok96ppCXhjZOb7Oqrrree3o509cnBHKz7qfyyHWeqQmMbKBVv
zLHEl4p8v3Apz/zN/+EzfB+aCCXpOHQNFbbdzlJ3x37JQ8Yg1nTr6XrvKhysq1IG
XT42Ksins/XxACw6PEra4Kyl6hHfZYnNBlVroGdv6itj6QV68AmZNdT095lRcASi
yapfoZfBCjK7bI0pM9eV8l1SrmRXlTjr4mZI/rZzy8g3yvNgn4MUcq7/Nb+BbpCA
q2Oq6qzrw5aUMonTayhxuKtxVrlN1YAKbRsr+0fD2y6UepVsuwF/s4CikwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACySPBb9Xv3BXChTrvtfC31gugsMB8GA1UdIwQY
MBaAFGSphW2xqzsk8J6cuSdDdoZoMBQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkkmLbB/
iquh1ubEVo2A+QOhF3TOlbAqv3vrSorfSFMkTiXBMfjf8q0+SazDeLnEHoYm/RAb
a171V3QB1FVP4gpQyAyfQ+0b/YD1ScAYOhPQ7AMb3x3dj0oS5dVMI042KxQ7hvY1
h0Qdqq+q1Nq0hjo9BCH2hhVN80j6pJ+odraW6MBLSqYKeIYe2p99LYo/NqOE7S2P
Si/Ccahg1qTHfg4zdpYetiiQC7WISSjYFJ5TvWp49nEMKmN6Fsr+hi8Oky03RBkk
LR3OwMGsQ8GczE9JAGOY42fqpYgP5YmnYzZwjhU/RIO2dqHdWWF5vaMXDkFvWYpp
PQZHUmO0pdiIdg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:36 2025 by rpki-client