Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: iFP4wOGqznfNCRB3GRpyL1Gp/EiiBbdTQ9H4qb3ltEA=
Subject key identifier: F9:2C:87:51:44:59:4E:FC:1B:4C:26:5C:C3:B4:79:F2:1C:C0:5F:14
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 019873E28E89354EBF5AA03324F6A6BA36FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 052F
Signing time: Mon 04 Aug 2025 07:01:24 +0000
Manifest this update: Mon 04 Aug 2025 07:01:24 +0000
Manifest next update: Tue 05 Aug 2025 07:01:24 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: LE5+NjNneF+h6N8bkFUqfTXJZCP8kl/sKN/SWtOI+CQ=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:8e:89:35:4e:bf:5a:a0:33:24:f6:a6:ba:36:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Aug 4 07:01:24 2025 GMT
Not After : Aug 5 07:01:24 2025 GMT
Subject: CN=f92c875144594efc1b4c265cc3b479f21cc05f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:96:48:cf:42:b2:b4:d1:5e:2f:fc:34:bf:
ea:94:1d:f7:bf:dc:85:03:99:5d:33:7e:62:eb:2b:
cc:cc:0a:35:d7:91:0d:e4:6b:7f:2e:bc:a2:ca:13:
92:d4:7f:85:89:ec:20:ae:46:21:59:46:d5:bc:e5:
d7:75:f3:73:f1:6a:43:b4:5d:d1:25:f7:a3:31:ad:
5d:37:34:4b:04:d9:98:a3:fa:37:d8:1b:1a:eb:57:
0a:c4:50:e7:3d:70:6f:dd:a3:9b:8b:57:c6:08:4e:
f8:7a:51:da:4c:40:88:34:e5:51:d3:62:d9:8e:ad:
6b:72:98:af:26:0d:30:b7:02:b1:7f:17:ae:cb:9b:
29:30:1f:b2:b7:fd:09:99:89:03:62:cf:40:c3:26:
8f:36:48:09:01:83:34:84:5f:26:67:19:35:40:51:
d4:86:bf:38:7c:c2:59:74:c6:63:40:57:71:87:07:
ff:13:7e:9f:72:32:ad:5d:57:b4:93:0f:f0:79:be:
65:0d:79:a6:c9:d6:5e:4f:b1:e1:f2:9f:fe:3e:06:
be:09:d3:68:8c:cd:3c:fa:ab:de:7c:b1:39:89:29:
a0:52:e9:33:45:12:99:8c:74:c8:9c:9c:78:3f:b0:
35:76:2c:9d:d5:5e:af:6a:d5:be:00:85:c0:f3:b8:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2C:87:51:44:59:4E:FC:1B:4C:26:5C:C3:B4:79:F2:1C:C0:5F:14
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:39:79:c6:8b:33:b1:ae:dc:88:d4:01:35:79:7d:df:a9:
33:dd:5a:1e:82:ff:22:63:33:00:cc:19:76:0f:97:76:9d:92:
3c:9e:f3:28:24:20:cf:ca:d8:69:80:ae:fa:23:d7:bb:db:48:
2a:5e:ff:55:96:61:41:ed:de:af:d1:89:0b:9d:76:6b:1b:dd:
15:12:bb:d0:51:20:65:23:04:6a:ba:bb:12:42:8f:ad:b6:04:
51:e9:54:73:87:c4:fe:5a:2a:85:14:9c:7c:8a:92:a9:22:76:
01:62:2f:9c:2a:0c:a6:18:72:72:f7:b1:d1:7a:53:84:78:29:
cb:c6:c8:a3:e2:2d:7f:18:57:06:cc:00:03:4b:fa:ef:98:97:
e7:be:6a:fb:3f:27:e1:cc:55:bf:48:4c:98:66:ad:47:0c:4f:
8f:5b:92:3c:4b:b4:b2:01:f9:66:bd:ad:b3:d2:b2:57:43:38:
a8:71:12:9b:20:15:a7:4a:45:7f:95:e3:48:6a:61:a1:64:72:
8f:5b:e2:1e:05:5d:e0:36:41:e0:e4:c7:9c:e4:db:9f:65:a2:
d9:85:0b:25:2f:a9:8a:e5:63:6c:db:24:90:85:39:c9:ea:a4:
6e:f6:c4:56:7e:3f:25:5a:dc:15:a1:cd:f1:a6:55:93:83:42:
d9:52:86:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4o6JNU6/WqAzJPamujb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODQ2Yjg0Yzc3OTA1MTIyODFmODBjMjQ4MWJlNGIzMGE2
NWQwOGQwHhcNMjUwODA0MDcwMTI0WhcNMjUwODA1MDcwMTI0WjAzMTEwLwYDVQQD
EyhmOTJjODc1MTQ0NTk0ZWZjMWI0YzI2NWNjM2I0NzlmMjFjYzA1ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6aWSM9CsrTRXi/8NL/qlB33v9yF
A5ldM35i6yvMzAo115EN5Gt/LryiyhOS1H+FiewgrkYhWUbVvOXXdfNz8WpDtF3R
JfejMa1dNzRLBNmYo/o32Bsa61cKxFDnPXBv3aObi1fGCE74elHaTECINOVR02LZ
jq1rcpivJg0wtwKxfxeuy5spMB+yt/0JmYkDYs9AwyaPNkgJAYM0hF8mZxk1QFHU
hr84fMJZdMZjQFdxhwf/E36fcjKtXVe0kw/web5lDXmmydZeT7Hh8p/+Pga+CdNo
jM08+qvefLE5iSmgUukzRRKZjHTInJx4P7A1diyd1V6vatW+AIXA87ipUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPksh1FEWU78G0wmXMO0efIcwF8UMB8GA1UdIwQY
MBaAFGeEa4THeQUSKB+Awkgb5LMKZdCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQt
ODVhMGQxMjM5OTIzLzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQtODVhMGQxMjM5OTIz
LzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVw5ecaL
M7Gu3IjUATV5fd+pM91aHoL/ImMzAMwZdg+Xdp2SPJ7zKCQgz8rYaYCu+iPXu9tI
Kl7/VZZhQe3er9GJC512axvdFRK70FEgZSMEarq7EkKPrbYEUelUc4fE/loqhRSc
fIqSqSJ2AWIvnCoMphhycvex0XpThHgpy8bIo+ItfxhXBswAA0v675iX575q+z8n
4cxVv0hMmGatRwxPj1uSPEu0sgH5Zr2ts9KyV0M4qHESmyAVp0pFf5XjSGphoWRy
j1viHgVd4DZB4OTHnOTbn2Wi2YULJS+piuVjbNskkIU5yeqkbvbEVn4/JVrcFaHN
8aZVk4NC2VKGvA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:15 2025 by rpki-client