Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: l/aNWjjZS3mgPNfa1QOKPJPgLywdmAuHtjxaD1LT13U=
Subject key identifier: ED:C2:AF:79:FA:71:79:7C:0A:9D:23:7E:7E:70:85:FA:16:4A:8D:4D
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01987A88C56BB60D15FEF90FF789C4D08E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 1092
Signing time: Tue 05 Aug 2025 14:00:40 +0000
Manifest this update: Tue 05 Aug 2025 14:00:40 +0000
Manifest next update: Wed 06 Aug 2025 14:00:40 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: zJtKUAfqGyrV1A1Hz3gpQGvlPl63WASNb4In8xZNsEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:c5:6b:b6:0d:15:fe:f9:0f:f7:89:c4:d0:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Aug 5 14:00:40 2025 GMT
Not After : Aug 6 14:00:40 2025 GMT
Subject: CN=edc2af79fa71797c0a9d237e7e7085fa164a8d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:37:0e:de:80:3a:6d:c7:08:4d:05:0b:b6:
91:d2:06:fc:45:48:6d:7b:40:da:44:57:74:92:e5:
34:8d:08:17:35:91:e5:d8:ce:11:39:50:b1:ef:c9:
1b:81:be:b0:1e:54:78:d5:74:54:e1:12:4b:3b:eb:
f2:97:4d:9c:48:3b:70:e6:6c:35:5d:0b:07:b2:ad:
7b:fe:bd:ae:3d:f3:2a:10:1f:2b:a3:4e:dd:29:d1:
6a:e1:05:7f:c7:4e:85:02:e6:ec:85:ac:63:df:69:
ce:8d:57:37:17:74:ed:19:4c:e2:f0:01:1d:13:8b:
63:e4:a9:6b:b4:36:5b:b5:81:d4:2e:41:75:40:62:
02:70:57:b2:7e:3e:d3:57:ad:9c:84:f1:00:27:19:
15:dd:93:fa:db:6f:ca:23:0c:26:b7:c7:33:27:d1:
1d:a8:0e:cf:a7:06:15:b6:61:03:98:2e:a0:bc:88:
f1:e0:85:d1:bc:89:a7:f0:40:de:78:c5:44:59:33:
a8:20:b5:d3:b1:40:00:0a:01:e7:3e:7d:57:58:0e:
31:52:7c:21:b3:41:89:59:06:13:4f:f9:40:0d:29:
df:b8:de:76:e7:ec:43:b9:83:65:0c:d4:fe:ba:66:
be:05:41:50:b7:53:dc:c3:76:90:62:d0:e6:32:da:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C2:AF:79:FA:71:79:7C:0A:9D:23:7E:7E:70:85:FA:16:4A:8D:4D
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:52:71:71:09:a2:49:92:af:0b:04:cf:80:b1:22:bf:74:cf:
6d:85:24:38:0b:85:7b:6f:ea:c0:ac:40:20:89:60:6d:cd:d2:
e4:0f:17:18:3e:9f:fd:39:48:f2:b0:95:49:1c:ab:ab:8d:e0:
b9:a3:1d:78:2a:33:62:03:da:88:54:aa:c5:23:db:ee:d8:e8:
f2:0d:d9:e0:6f:2d:78:96:0a:01:81:72:1a:2a:65:51:55:2a:
4f:5a:c3:99:a2:43:a9:df:f0:70:42:ca:a7:a0:12:b7:23:b8:
33:7a:39:54:3f:e9:b2:01:d2:22:89:99:e0:41:f0:cb:2b:9d:
37:30:39:10:3f:ce:2b:71:f7:f0:fd:d4:0f:62:21:f0:c0:52:
20:e0:63:40:72:94:fb:9b:4e:80:2e:5d:9e:4e:17:e1:8e:27:
f2:ee:be:04:e4:81:7b:27:00:7e:cb:d1:e5:fe:eb:44:96:3a:
03:a0:4d:86:c4:d1:04:c6:d4:c3:d5:75:e3:51:31:2c:89:28:
bc:b5:82:03:07:6d:51:aa:9f:e7:b1:7e:62:3c:4c:90:e2:08:
60:7d:e7:cc:64:41:a6:b9:31:0b:8b:6b:fb:c4:c7:93:9b:0f:
88:09:bd:bc:ff:60:3f:3d:0b:2d:e7:7c:71:7f:ca:46:3d:10:
e2:0d:b3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6iMVrtg0V/vkP94nE0I6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz
NmQxM2YwHhcNMjUwODA1MTQwMDQwWhcNMjUwODA2MTQwMDQwWjAzMTEwLwYDVQQD
EyhlZGMyYWY3OWZhNzE3OTdjMGE5ZDIzN2U3ZTcwODVmYTE2NGE4ZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmU3Dt6AOm3HCE0FC7aR0gb8RUht
e0DaRFd0kuU0jQgXNZHl2M4ROVCx78kbgb6wHlR41XRU4RJLO+vyl02cSDtw5mw1
XQsHsq17/r2uPfMqEB8ro07dKdFq4QV/x06FAubshaxj32nOjVc3F3TtGUzi8AEd
E4tj5KlrtDZbtYHULkF1QGICcFeyfj7TV62chPEAJxkV3ZP622/KIwwmt8czJ9Ed
qA7PpwYVtmEDmC6gvIjx4IXRvImn8EDeeMVEWTOoILXTsUAACgHnPn1XWA4xUnwh
s0GJWQYTT/lADSnfuN525+xDuYNlDNT+uma+BUFQt1Pcw3aQYtDmMtp2hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3Cr3n6cXl8Cp0jfn5whfoWSo1NMB8GA1UdIwQY
MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt
YzVkMTNlODhlNGRlLzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl
LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFJxcQmi
SZKvCwTPgLEiv3TPbYUkOAuFe2/qwKxAIIlgbc3S5A8XGD6f/TlI8rCVSRyrq43g
uaMdeCozYgPaiFSqxSPb7tjo8g3Z4G8teJYKAYFyGiplUVUqT1rDmaJDqd/wcELK
p6AStyO4M3o5VD/psgHSIomZ4EHwyyudNzA5ED/OK3H38P3UD2Ih8MBSIOBjQHKU
+5tOgC5dnk4X4Y4n8u6+BOSBeycAfsvR5f7rRJY6A6BNhsTRBMbUw9V141ExLIko
vLWCAwdtUaqf57F+YjxMkOIIYH3nzGRBprkxC4tr+8THk5sPiAm9vP9gPz0LLed8
cX/KRj0Q4g2zjg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:41 2025 by rpki-client