Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: RF46KrfJ1PuxiEaBLpbAbK14g3PJyitoVYACsUXXfz0=
Subject key identifier: 7B:F8:B7:C4:94:76:C1:79:DD:62:4E:09:34:7A:3D:6B:3C:8D:11:FB
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 0198819DE848D3D37D8A5BF16D9A39A2E214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 074B
Signing time: Wed 06 Aug 2025 23:01:06 +0000
Manifest this update: Wed 06 Aug 2025 23:01:06 +0000
Manifest next update: Thu 07 Aug 2025 23:01:06 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: u41odn63owmczpjvLDek+M9Im55GFYsoQdtjw2UWuzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:e8:48:d3:d3:7d:8a:5b:f1:6d:9a:39:a2:e2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Aug 6 23:01:06 2025 GMT
Not After : Aug 7 23:01:06 2025 GMT
Subject: CN=7bf8b7c49476c179dd624e09347a3d6b3c8d11fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:74:62:aa:07:29:66:0c:e5:e0:90:1f:8e:25:
99:d5:2a:b5:87:43:fe:25:f9:dd:06:1e:ea:aa:5e:
8d:96:2d:8f:9f:75:54:d1:94:a2:17:b6:8d:15:89:
e0:4f:84:f3:3d:48:28:60:74:a8:cc:bb:f9:72:64:
ac:3f:92:0f:26:3a:3d:4e:6b:2d:ba:ff:d9:65:b2:
9e:ea:b4:38:b6:76:d4:29:0c:a3:66:98:23:4b:c7:
d1:eb:0b:d3:4d:8c:e9:04:3d:33:66:cc:c1:00:d4:
3a:59:f0:e8:cb:5a:3d:8e:45:09:a6:64:6a:6f:0c:
85:5a:dd:51:db:03:9d:63:a9:4b:b5:65:c4:31:7f:
d7:46:45:47:52:d1:5f:82:39:f1:dc:77:d8:6d:a0:
b5:e5:b3:70:48:06:57:ef:ee:1e:aa:3c:b1:0b:84:
f3:d8:7f:d2:45:74:2e:8a:71:ae:25:d4:bb:bb:c2:
ef:29:a7:82:e7:09:e7:ea:04:e9:ce:89:4e:cf:0d:
01:84:b7:c1:89:84:87:bd:5c:13:e7:00:97:d4:9a:
0c:66:c3:1e:fa:2f:2c:c2:ce:39:79:18:dc:60:99:
72:90:48:36:c4:8c:3b:39:d4:f8:3e:96:a9:f7:77:
c9:8c:16:9e:f9:13:14:9d:26:20:99:b7:4a:af:8a:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F8:B7:C4:94:76:C1:79:DD:62:4E:09:34:7A:3D:6B:3C:8D:11:FB
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:d2:31:d6:f4:26:d3:0e:4e:f7:c1:5c:a9:36:a5:9f:78:
00:58:60:68:91:f5:e9:92:4e:fa:91:70:b1:d2:6b:e4:0e:a7:
07:c7:3b:58:2e:1c:09:47:95:ef:56:45:58:14:21:15:1c:6c:
90:bc:46:df:88:12:66:8c:46:69:dd:14:48:82:65:43:83:f2:
18:09:b0:99:82:2d:3e:d9:a6:f2:a2:1e:d3:5c:ac:89:94:57:
79:a4:68:a2:41:a1:b1:b1:92:68:fb:22:e1:ef:f5:a1:be:cc:
ec:80:43:4d:18:5f:74:3e:7f:8e:a5:71:b5:fa:9c:4f:d4:04:
f7:b1:8c:15:35:2e:91:77:58:5f:e7:0f:ee:18:df:cf:46:10:
0a:a1:92:d6:0f:2d:e5:06:71:08:82:12:ab:ab:d6:ca:cd:c4:
01:42:04:27:1d:24:32:88:e9:2a:9a:e9:f5:a9:18:74:c0:8c:
61:b7:6b:b8:b0:6d:04:d6:bc:54:79:10:d4:b6:b1:7c:d5:a8:
9b:8b:9c:7c:97:58:18:eb:6c:87:cd:30:6c:a9:b8:fd:e1:fe:
6a:72:31:80:06:cb:63:a3:34:aa:6a:40:4d:76:8c:eb:44:b4:
d1:b5:c0:65:9b:b7:10:b7:a7:4e:cf:1d:88:a7:1e:6c:af:f4:
39:b9:ed:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnehI09N9ilvxbZo5ouIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzZjYzRhNzQxOGEwOTQyMWJhOTgwNWU3NjRlZWYzNDJl
ZjhmMzgwHhcNMjUwODA2MjMwMTA2WhcNMjUwODA3MjMwMTA2WjAzMTEwLwYDVQQD
Eyg3YmY4YjdjNDk0NzZjMTc5ZGQ2MjRlMDkzNDdhM2Q2YjNjOGQxMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XRiqgcpZgzl4JAfjiWZ1Sq1h0P+
JfndBh7qql6Nli2Pn3VU0ZSiF7aNFYngT4TzPUgoYHSozLv5cmSsP5IPJjo9Tmst
uv/ZZbKe6rQ4tnbUKQyjZpgjS8fR6wvTTYzpBD0zZszBANQ6WfDoy1o9jkUJpmRq
bwyFWt1R2wOdY6lLtWXEMX/XRkVHUtFfgjnx3HfYbaC15bNwSAZX7+4eqjyxC4Tz
2H/SRXQuinGuJdS7u8LvKaeC5wnn6gTpzolOzw0BhLfBiYSHvVwT5wCX1JoMZsMe
+i8sws45eRjcYJlykEg2xIw7OdT4Ppap93fJjBae+RMUnSYgmbdKr4pLRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv4t8SUdsF53WJOCTR6PWs8jRH7MB8GA1UdIwQY
MBaAFM/GzEp0GKCUIbqYBedk7vNC7484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzIt
NGFmMWZiNzQzOGU3LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzItNGFmMWZiNzQzOGU3
LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuzSMdb0
JtMOTvfBXKk2pZ94AFhgaJH16ZJO+pFwsdJr5A6nB8c7WC4cCUeV71ZFWBQhFRxs
kLxG34gSZoxGad0USIJlQ4PyGAmwmYItPtmm8qIe01ysiZRXeaRookGhsbGSaPsi
4e/1ob7M7IBDTRhfdD5/jqVxtfqcT9QE97GMFTUukXdYX+cP7hjfz0YQCqGS1g8t
5QZxCIISq6vWys3EAUIEJx0kMojpKprp9akYdMCMYbdruLBtBNa8VHkQ1LaxfNWo
m4ucfJdYGOtsh80wbKm4/eH+anIxgAbLY6M0qmpATXaM60S00bXAZZu3ELenTs8d
iKcebK/0ObntLQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:16 2025 by rpki-client