
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: u5QsjGRa5zOFSSr8mBwmfZoAQC+KNKFKO33ESi9CKw8=
Subject key identifier: F9:21:CF:8F:8A:A6:80:14:4E:38:30:EE:3C:D2:96:AD:0E:E6:FA:4E
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 01988B0F058C8188F1D129C2C7D45C270411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0793
Signing time: Fri 08 Aug 2025 19:01:14 +0000
Manifest this update: Fri 08 Aug 2025 19:01:14 +0000
Manifest next update: Sat 09 Aug 2025 19:01:14 +0000
Files and hashes: 1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=)
2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: 20pXHYnb3AVSyKORna0Xbp0UmOf35OddkQOVmyS2Ul0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:05:8c:81:88:f1:d1:29:c2:c7:d4:5c:27:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Aug 8 19:01:14 2025 GMT
Not After : Aug 9 19:01:14 2025 GMT
Subject: CN=f921cf8f8aa680144e3830ee3cd296ad0ee6fa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:d2:c8:97:13:48:91:84:0f:86:74:5d:17:
06:13:55:28:97:dd:65:88:f4:b2:b8:27:92:f1:92:
c4:b6:7e:22:e8:cf:48:fc:ad:8c:86:ea:c7:c3:5b:
08:ea:ba:a8:d1:6a:91:02:f9:8b:de:17:bd:03:b6:
67:8d:b8:22:e3:98:a1:14:43:46:bf:93:c1:48:4f:
49:76:3a:d0:8b:f2:26:aa:e3:fd:c6:32:42:71:8a:
ac:10:08:3d:1a:88:5e:e8:82:3f:00:f5:2f:be:db:
f7:7e:37:5b:e9:0d:61:24:84:a5:11:7e:8b:40:31:
e8:63:78:a6:8e:00:9f:4f:bd:39:a4:e7:69:49:b0:
88:3b:6d:d2:8e:55:0c:77:c6:81:12:86:7f:ae:69:
87:50:dc:1c:bb:d6:2e:88:bf:7c:d8:5a:07:95:1c:
48:da:8b:31:5c:37:72:d8:c9:80:b9:a9:89:e3:59:
d0:be:0d:42:d3:5c:3b:3a:42:30:e1:9a:cb:8f:51:
f0:41:3f:63:fe:ee:ff:08:58:0d:80:31:eb:47:0f:
87:c5:a5:15:27:5c:d2:24:eb:c9:ce:86:fd:ad:1b:
f7:a3:97:b0:96:c3:37:20:7e:51:9e:7c:c8:47:3e:
cd:3e:78:9e:42:89:d6:c2:db:fe:61:65:b5:66:56:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:CF:8F:8A:A6:80:14:4E:38:30:EE:3C:D2:96:AD:0E:E6:FA:4E
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:d8:55:83:f7:5a:dc:64:9e:00:db:7d:a4:9d:44:7f:c1:
ce:c8:d5:04:a6:c3:c6:1b:7e:72:e8:c9:64:e0:54:28:3e:01:
d3:fd:c9:bc:dd:88:09:48:2c:c6:cf:6e:63:2d:23:19:72:a7:
14:8e:80:7a:d6:7e:2c:fb:eb:47:db:f9:e7:16:af:68:c2:7f:
dc:17:a7:13:8a:ab:9d:02:4f:0d:43:02:5c:83:1c:3e:17:a7:
3d:a7:6a:f1:32:10:90:8d:38:34:9e:c6:36:ec:a1:06:df:94:
12:f2:5a:26:9a:0b:4e:b9:39:00:da:6e:59:0d:ae:29:ca:cc:
93:5b:2c:af:f5:d2:73:0e:54:03:8d:62:ad:8a:49:fd:ca:c2:
12:11:af:01:84:16:20:65:4f:38:c2:40:12:94:86:6f:63:16:
69:c6:b7:4d:f7:9f:95:36:9b:c7:da:87:39:e9:21:61:22:8a:
85:5e:3b:61:3f:24:3a:1e:df:97:7c:24:ea:19:96:07:5c:e6:
cf:bf:46:d9:a8:b5:df:43:52:c7:b5:8d:df:68:13:a9:91:47:
8d:a6:2f:54:93:fb:37:44:c4:b8:c6:e9:af:f7:33:bc:1a:a8:
ff:59:71:7f:ca:12:3d:2a:18:58:b9:b1:55:77:bd:ab:32:92:
24:4f:28:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDwWMgYjx0SnCx9RcJwQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWQ2OGY3ZThhYmFkZjQ0NzI2MjMzNDNhMzI1NjE1MDcy
MjQxODkwHhcNMjUwODA4MTkwMTE0WhcNMjUwODA5MTkwMTE0WjAzMTEwLwYDVQQD
EyhmOTIxY2Y4ZjhhYTY4MDE0NGUzODMwZWUzY2QyOTZhZDBlZTZmYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTDSyJcTSJGED4Z0XRcGE1Uol91l
iPSyuCeS8ZLEtn4i6M9I/K2MhurHw1sI6rqo0WqRAvmL3he9A7Znjbgi45ihFENG
v5PBSE9JdjrQi/ImquP9xjJCcYqsEAg9Gohe6II/APUvvtv3fjdb6Q1hJISlEX6L
QDHoY3imjgCfT705pOdpSbCIO23SjlUMd8aBEoZ/rmmHUNwcu9YuiL982FoHlRxI
2osxXDdy2MmAuamJ41nQvg1C01w7OkIw4ZrLj1HwQT9j/u7/CFgNgDHrRw+HxaUV
J1zSJOvJzob9rRv3o5ewlsM3IH5RnnzIRz7NPnieQonWwtv+YWW1ZlauRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkhz4+KpoAUTjgw7jzSlq0O5vpOMB8GA1UdIwQY
MBaAFMytaPfoq630RyYjNDoyVhUHIkGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMt
NjM1OWY5MmUxZDJmLzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YmJhMDgtYmUzNi00N2ViLWFiMmMtNjM1OWY5MmUxZDJm
LzEveksxbzktaXJyZlJISmlNME9qSldGUWNpUVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaHYVYP3
WtxkngDbfaSdRH/BzsjVBKbDxht+cujJZOBUKD4B0/3JvN2ICUgsxs9uYy0jGXKn
FI6AetZ+LPvrR9v55xavaMJ/3BenE4qrnQJPDUMCXIMcPhenPadq8TIQkI04NJ7G
NuyhBt+UEvJaJpoLTrk5ANpuWQ2uKcrMk1ssr/XScw5UA41irYpJ/crCEhGvAYQW
IGVPOMJAEpSGb2MWaca3TfeflTabx9qHOekhYSKKhV47YT8kOh7fl3wk6hmWB1zm
z79G2ai130NSx7WN32gTqZFHjaYvVJP7N0TEuMbpr/czvBqo/1lxf8oSPSoYWLmx
VXe9qzKSJE8o+A==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:44 2025 by rpki-client