Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json)
Hash identifier: gqCufKiaAc17Ai2E75EZgibjmhiIb0LOavNX8vWfGVU=
Subject key identifier: 3E:B6:72:47:74:C8:63:75:59:F4:95:E3:59:A7:2A:15:F8:8C:23:10
Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695
Certificate serial: 019873E1F1797F130E135C2EE87C4B963661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
Manifest number: 1057
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: 9bAZH6Hclz1M3r8H6byBMGkIdxenz8tkKVG6c+9JqTw=)
2: jPXJlh-t4_XYR3J0eKKhQRTzmMQ.roa (hash: LCBAN0N7xGJeaqTX5AAQMXZtcLuwBKPNcwcKiOcd8Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f1:79:7f:13:0e:13:5c:2e:e8:7c:4b:96:36:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=3eb6724774c8637559f495e359a72a15f88c2310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:ff:25:ab:4f:12:40:f2:71:20:3d:f8:87:
a9:be:3c:91:5c:9b:3b:c7:10:7b:17:22:94:97:ac:
5b:86:06:7c:93:93:74:d5:41:79:ca:4f:a6:46:6e:
a0:ee:1b:4b:9a:44:60:5d:6c:74:85:4f:c1:9f:65:
b8:cc:7b:38:73:d1:c1:14:b1:9d:01:f6:60:ac:9f:
70:72:e1:03:79:2f:31:45:7b:02:19:8c:87:35:29:
09:bd:a2:f8:bc:51:c2:26:a1:d0:95:e5:91:c1:bc:
06:6b:cf:06:82:33:b3:90:09:bc:2d:e6:3b:27:96:
25:1d:6c:ae:27:03:6f:1f:85:c2:7f:4c:f2:90:0b:
a3:23:a8:b8:4e:8e:54:a3:60:79:ae:31:17:f0:28:
b8:67:59:09:43:ce:81:a5:fb:7c:f6:f4:5e:7c:10:
7c:6c:ec:ca:03:89:d1:b6:8a:0d:f8:d9:29:2c:9b:
ce:9f:44:35:85:eb:24:1c:ad:14:be:fc:21:dd:fe:
2b:32:22:0d:36:87:f2:db:d6:ae:ab:86:85:f5:58:
43:f0:fe:51:22:b2:c3:62:8c:f4:f1:6c:0f:b0:a2:
8c:b8:f6:45:c6:bd:e0:8d:de:72:ff:5b:df:99:ff:
df:e7:e2:d7:a8:6e:38:4f:4d:d5:84:97:89:a4:d7:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B6:72:47:74:C8:63:75:59:F4:95:E3:59:A7:2A:15:F8:8C:23:10
X509v3 Authority Key Identifier:
keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:61:17:28:d7:b9:93:73:36:39:b3:a6:b5:bc:a6:7c:81:62:
88:e1:e0:f7:7c:60:b2:09:bb:ea:09:a8:5f:65:cb:38:a5:4f:
bc:ac:da:c1:cf:7f:23:85:c6:5b:2a:b2:73:b5:02:c1:1e:70:
d3:23:6c:50:4d:68:7d:09:f2:73:29:4d:4c:b2:3a:33:54:66:
07:5e:9f:a0:fa:ae:53:c3:c3:8c:d7:06:fc:42:9b:66:ad:c3:
cd:0b:ba:0a:80:b8:78:63:e7:fa:0a:49:f8:3c:33:58:62:c1:
81:53:d7:4c:a3:e4:ce:ed:af:cb:6f:2d:97:f7:de:29:f8:5c:
7e:2a:98:fa:13:72:05:fb:39:9c:9b:48:86:42:90:e8:e8:2a:
44:2b:13:58:c1:f1:a2:c1:d3:ce:f6:d1:4d:06:01:23:5f:d5:
0a:9e:93:c6:32:8e:4b:cd:1b:4e:9b:60:33:1a:87:b9:32:27:
d4:d1:89:22:d5:3a:6f:6b:9c:8a:14:3d:09:ba:9d:46:3a:f1:
ca:f2:8b:83:08:a7:d5:c5:9e:3b:6f:fa:a8:2f:4b:59:44:d2:
eb:18:9e:d9:71:cd:85:09:7e:6c:4e:72:41:87:9f:e4:6b:e5:
41:fc:ca:24:bb:1d:a8:13:7f:5d:7e:02:5a:16:f4:96:5a:ae:
e1:95:bc:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4fF5fxMOE1wu6HxLljZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YWVjODAyNGNhYTEwM2E4NDEyNjk2YzdlNzJmNzc4MDNj
ZDg2OTUwHhcNMjUwODA0MDcwMDQzWhcNMjUwODA1MDcwMDQzWjAzMTEwLwYDVQQD
EygzZWI2NzI0Nzc0Yzg2Mzc1NTlmNDk1ZTM1OWE3MmExNWY4OGMyMzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrH/JatPEkDycSA9+IepvjyRXJs7
xxB7FyKUl6xbhgZ8k5N01UF5yk+mRm6g7htLmkRgXWx0hU/Bn2W4zHs4c9HBFLGd
AfZgrJ9wcuEDeS8xRXsCGYyHNSkJvaL4vFHCJqHQleWRwbwGa88GgjOzkAm8LeY7
J5YlHWyuJwNvH4XCf0zykAujI6i4To5Uo2B5rjEX8Ci4Z1kJQ86Bpft89vRefBB8
bOzKA4nRtooN+NkpLJvOn0Q1heskHK0Uvvwh3f4rMiINNofy29auq4aF9VhD8P5R
IrLDYoz08WwPsKKMuPZFxr3gjd5y/1vfmf/f5+LXqG44T03VhJeJpNd66QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD62ckd0yGN1WfSV41mnKhX4jCMQMB8GA1UdIwQY
MBaAFGSuyAJMqhA6hBJpbH5y93gDzYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQt
YjAzOWMyNGI5OWNhLzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQtYjAzOWMyNGI5OWNh
LzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWEXKNe5
k3M2ObOmtbymfIFiiOHg93xgsgm76gmoX2XLOKVPvKzawc9/I4XGWyqyc7UCwR5w
0yNsUE1ofQnycylNTLI6M1RmB16foPquU8PDjNcG/EKbZq3DzQu6CoC4eGPn+gpJ
+DwzWGLBgVPXTKPkzu2vy28tl/feKfhcfiqY+hNyBfs5nJtIhkKQ6OgqRCsTWMHx
osHTzvbRTQYBI1/VCp6TxjKOS80bTptgMxqHuTIn1NGJItU6b2ucihQ9CbqdRjrx
yvKLgwin1cWeO2/6qC9LWUTS6xie2XHNhQl+bE5yQYef5GvlQfzKJLsdqBN/XX4C
Whb0llqu4ZW8sw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:20 2025 by rpki-client