Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: X0nCOPKc+0T/u2ICAacziPiTwXmE0DgF+Zf9cKDSWzw=
Subject key identifier: 1E:33:DF:68:3B:3D:8B:7E:54:44:5F:7A:E3:AB:3C:25:43:6B:7B:B8
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 0198C75BE234CE375A8CFDDDA49772BF34C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0F29
Signing time: Wed 20 Aug 2025 12:02:24 +0000
Manifest this update: Wed 20 Aug 2025 12:02:24 +0000
Manifest next update: Thu 21 Aug 2025 12:02:24 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: s3Xr7VkmKqJ0V6iBdzvggVYDQj9+ZN+p1dQV8DfrBNw=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:e2:34:ce:37:5a:8c:fd:dd:a4:97:72:bf:34:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Aug 20 12:02:24 2025 GMT
Not After : Aug 21 12:02:24 2025 GMT
Subject: CN=1e33df683b3d8b7e54445f7ae3ab3c25436b7bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:c1:19:7e:48:60:04:c7:e4:13:44:d6:c1:
ed:cd:c7:43:a1:21:ce:3f:cc:b9:b7:3b:5e:e3:d6:
69:c2:3f:7b:83:a4:d1:b6:6c:d5:11:23:fc:d1:1e:
97:31:76:06:ff:9f:0f:d0:41:32:24:b5:73:58:6f:
10:02:5a:1d:9a:57:d5:a4:05:ba:35:10:2c:4a:74:
ff:5d:c4:5a:4b:a1:5c:7d:bc:a3:44:8b:b3:92:2e:
58:ea:f2:ec:cc:d9:31:c3:09:36:9c:f9:db:89:25:
02:57:9c:57:cd:8a:c2:23:b6:7c:f7:9a:57:88:73:
a6:8b:48:05:bd:18:81:f0:31:89:4e:3d:60:ed:44:
8b:a6:35:dd:94:64:d8:6b:3d:7d:6f:3c:38:71:dd:
e2:7e:71:91:f8:e2:a5:99:b6:f9:34:61:0a:c9:83:
3a:6e:a1:f1:d0:24:39:b0:e7:03:6a:f7:58:6b:e6:
41:c9:d8:f1:3d:74:5f:4a:fd:55:eb:37:62:3f:4c:
b5:86:09:43:97:de:71:1f:c4:94:17:cc:12:cd:29:
1a:55:e2:84:54:e3:3b:3d:85:36:c9:17:64:26:d4:
d0:da:a3:67:22:93:a4:66:75:d5:80:fd:c8:97:f6:
88:3a:b2:ef:e9:ee:26:f7:2d:f6:45:2b:9d:6a:77:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:DF:68:3B:3D:8B:7E:54:44:5F:7A:E3:AB:3C:25:43:6B:7B:B8
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:95:50:f3:83:8e:3d:39:14:5d:e5:81:3d:e5:df:47:8d:e7:
5f:5b:6c:d4:9a:37:9b:cf:af:21:79:25:52:48:7b:83:fc:d4:
7f:16:7f:05:22:89:0f:20:a7:12:3d:f5:60:35:ef:ac:76:f5:
7c:f3:c0:6d:ae:46:71:85:0c:f9:9b:c7:91:39:12:6e:3f:94:
45:9d:f6:1d:bb:11:db:cf:e6:68:21:0f:5f:07:7f:13:db:43:
3b:e8:90:f3:30:e0:f4:55:f5:ab:70:44:8d:d4:74:1a:23:93:
34:52:d9:81:2b:18:e1:63:17:9f:8e:4a:5f:03:83:76:28:d1:
b3:97:dd:eb:47:84:bd:6f:7a:2e:c3:b4:57:91:28:67:a5:78:
e4:ca:69:30:56:eb:aa:98:3d:94:0a:87:f1:1f:b1:26:2a:bc:
ca:5f:7f:4c:29:13:70:5c:ba:5f:a4:b2:47:e4:4a:7e:97:09:
ec:03:51:c0:e8:d5:1a:e9:cf:77:2b:ac:05:a4:d5:97:9b:64:
47:f5:01:02:cf:fa:58:22:15:5f:18:68:84:d5:bf:91:c2:47:
10:f3:74:f0:73:1a:34:f9:3a:d9:90:4d:29:fb:36:a9:2b:bc:
ec:30:bc:fd:3e:77:8b:98:65:72:2b:fe:4f:e8:42:6d:d2:4b:
a2:92:95:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjHW+I0zjdajP3dpJdyvzTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3
YTg3MmMwHhcNMjUwODIwMTIwMjI0WhcNMjUwODIxMTIwMjI0WjAzMTEwLwYDVQQD
EygxZTMzZGY2ODNiM2Q4YjdlNTQ0NDVmN2FlM2FiM2MyNTQzNmI3YmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn/BGX5IYATH5BNE1sHtzcdDoSHO
P8y5tzte49Zpwj97g6TRtmzVESP80R6XMXYG/58P0EEyJLVzWG8QAlodmlfVpAW6
NRAsSnT/XcRaS6FcfbyjRIuzki5Y6vLszNkxwwk2nPnbiSUCV5xXzYrCI7Z895pX
iHOmi0gFvRiB8DGJTj1g7USLpjXdlGTYaz19bzw4cd3ifnGR+OKlmbb5NGEKyYM6
bqHx0CQ5sOcDavdYa+ZBydjxPXRfSv1V6zdiP0y1hglDl95xH8SUF8wSzSkaVeKE
VOM7PYU2yRdkJtTQ2qNnIpOkZnXVgP3Il/aIOrLv6e4m9y32RSudandCdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4z32g7PYt+VERfeuOrPCVDa3u4MB8GA1UdIwQY
MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It
NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk
LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJVQ84OO
PTkUXeWBPeXfR43nX1ts1Jo3m8+vIXklUkh7g/zUfxZ/BSKJDyCnEj31YDXvrHb1
fPPAba5GcYUM+ZvHkTkSbj+URZ32HbsR28/maCEPXwd/E9tDO+iQ8zDg9FX1q3BE
jdR0GiOTNFLZgSsY4WMXn45KXwODdijRs5fd60eEvW96LsO0V5EoZ6V45MppMFbr
qpg9lAqH8R+xJiq8yl9/TCkTcFy6X6SyR+RKfpcJ7ANRwOjVGunPdyusBaTVl5tk
R/UBAs/6WCIVXxhohNW/kcJHEPN08HMaNPk62ZBNKfs2qSu87DC8/T53i5hlciv+
T+hCbdJLopKVaA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:29 2025 by rpki-client