Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: 9gRzXMkd2r0Kg/59jT6kkl4c/Hqira1pgbYkGZ+2NDY=
Subject key identifier: BC:A3:61:84:31:E1:4A:BA:D6:53:70:AF:5F:58:D3:D1:06:23:8B:8E
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019896A4C10FFFD301B3C08E10036C8991E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 028F
Signing time: Mon 11 Aug 2025 01:00:36 +0000
Manifest this update: Mon 11 Aug 2025 01:00:36 +0000
Manifest next update: Tue 12 Aug 2025 01:00:36 +0000
Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: o6S132X/z1YjhACnrn20y31btXsmPoEE0riaFBqv2Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:c1:0f:ff:d3:01:b3:c0:8e:10:03:6c:89:91:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: Aug 11 01:00:36 2025 GMT
Not After : Aug 12 01:00:36 2025 GMT
Subject: CN=bca3618431e14abad65370af5f58d3d106238b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:2e:e9:5e:ea:bd:d6:05:60:bb:0e:e1:83:
c5:b6:48:b6:0a:41:97:c4:ce:ad:30:14:f8:ec:3e:
e5:3b:16:96:48:ea:26:f5:8d:81:e4:3e:1d:04:6a:
e7:8b:58:da:1f:a1:bb:8e:21:3f:78:ce:6c:54:36:
bb:84:a7:b1:b1:20:63:09:1b:c8:ff:0c:60:bd:6e:
e9:83:92:1c:78:b3:31:a1:d7:17:03:07:78:b3:af:
cb:98:4a:d4:04:5b:8f:97:48:3f:6c:00:05:f1:89:
ff:6a:70:ac:01:48:67:ef:83:99:0b:fc:5b:b1:23:
5e:d0:fb:a8:cd:9e:09:34:52:dd:13:9d:88:2c:58:
51:eb:cc:d9:d1:70:b8:29:6a:39:be:ca:ab:9b:10:
59:6c:21:7f:e3:2c:fe:5c:49:4c:05:fc:c2:b3:b2:
b5:db:83:ac:cf:12:90:e8:39:4d:57:90:a9:3b:9f:
a5:24:60:de:2b:3b:e0:c2:00:ba:8b:19:25:bf:0f:
d8:c5:b3:fa:33:54:1b:04:c6:c6:76:b6:26:62:c7:
13:71:b0:be:30:62:6b:d3:05:ab:7e:09:ba:27:1a:
8b:ed:a4:81:d4:5d:b6:95:26:6f:fe:da:44:cc:b4:
07:80:09:0a:c5:df:e3:ee:a4:22:63:cc:b9:a4:78:
67:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:61:84:31:E1:4A:BA:D6:53:70:AF:5F:58:D3:D1:06:23:8B:8E
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:66:45:5c:d7:a2:e6:5f:8d:e3:bf:a1:d5:7f:66:87:ca:00:
0e:7b:ee:46:72:6b:7f:7f:20:b2:d6:5e:25:77:8d:60:f1:7d:
fa:d9:45:d6:61:1f:39:9b:f3:a6:f0:4e:00:08:df:92:4a:b8:
08:83:62:79:a6:ef:4e:90:4e:56:ca:97:6d:91:45:da:ee:ae:
08:77:c2:1c:0c:9c:fc:90:93:bf:fc:f0:d1:64:39:c3:57:e1:
c9:ad:5b:92:23:ab:26:e0:86:43:20:6a:03:3a:9b:40:a3:98:
f7:aa:aa:1d:57:1d:08:d1:ee:49:3e:3d:bd:f6:71:d1:c5:c9:
0c:b9:4e:cd:dc:cb:b4:36:cd:27:88:58:76:d8:90:ca:8a:1c:
3c:95:17:d4:cf:34:88:47:9a:31:11:42:b8:be:f5:84:3e:69:
3e:50:54:65:bd:a2:00:00:92:34:18:ca:fd:85:5d:19:a1:4d:
05:5f:86:6b:6b:66:eb:f9:20:19:24:da:e0:2a:56:75:a0:c2:
d4:31:e6:d2:92:8e:3d:b4:2f:6c:6c:03:fc:7a:21:20:8d:56:
24:38:ea:14:57:1f:9b:03:26:db:77:d3:03:ee:6a:64:6b:4f:
06:bd:d9:58:36:af:4f:98:6a:b0:5b:cb:b0:92:2e:60:c4:9e:
96:35:7c:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpMEP/9MBs8COEANsiZHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk
NjBiZWYwHhcNMjUwODExMDEwMDM2WhcNMjUwODEyMDEwMDM2WjAzMTEwLwYDVQQD
EyhiY2EzNjE4NDMxZTE0YWJhZDY1MzcwYWY1ZjU4ZDNkMTA2MjM4YjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLUu6V7qvdYFYLsO4YPFtki2CkGX
xM6tMBT47D7lOxaWSOom9Y2B5D4dBGrni1jaH6G7jiE/eM5sVDa7hKexsSBjCRvI
/wxgvW7pg5IceLMxodcXAwd4s6/LmErUBFuPl0g/bAAF8Yn/anCsAUhn74OZC/xb
sSNe0PuozZ4JNFLdE52ILFhR68zZ0XC4KWo5vsqrmxBZbCF/4yz+XElMBfzCs7K1
24OszxKQ6DlNV5CpO5+lJGDeKzvgwgC6ixklvw/YxbP6M1QbBMbGdrYmYscTcbC+
MGJr0wWrfgm6JxqL7aSB1F22lSZv/tpEzLQHgAkKxd/j7qQiY8y5pHhnPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyjYYQx4Uq61lNwr19Y09EGI4uOMB8GA1UdIwQY
MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt
NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4
LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp2ZFXNei
5l+N47+h1X9mh8oADnvuRnJrf38gstZeJXeNYPF9+tlF1mEfOZvzpvBOAAjfkkq4
CINieabvTpBOVsqXbZFF2u6uCHfCHAyc/JCTv/zw0WQ5w1fhya1bkiOrJuCGQyBq
AzqbQKOY96qqHVcdCNHuST49vfZx0cXJDLlOzdzLtDbNJ4hYdtiQyoocPJUX1M80
iEeaMRFCuL71hD5pPlBUZb2iAACSNBjK/YVdGaFNBV+Ga2tm6/kgGSTa4CpWdaDC
1DHm0pKOPbQvbGwD/HohII1WJDjqFFcfmwMm23fTA+5qZGtPBr3ZWDavT5hqsFvL
sJIuYMSeljV8RQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:30 2025 by rpki-client