Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: 1AqzexUJVXFzoWPAOH44ZSsBFuVxfsqkX+v/ScT9Eww=
Subject key identifier: 33:BF:FF:15:CF:27:B1:E9:C0:0E:69:92:CE:0F:15:67:E5:E9:5A:BC
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019880C2453D89704DBFA88AFAF24AF2FF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 19:01:11 +0000
Manifest this update: Wed 06 Aug 2025 19:01:11 +0000
Manifest next update: Thu 07 Aug 2025 19:01:11 +0000
Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: YYpJwyc0dBTH1VNR2Ul4u8IJ15wxIo3oc1gHjKsDiRk=)
3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:45:3d:89:70:4d:bf:a8:8a:fa:f2:4a:f2:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Aug 6 19:01:11 2025 GMT
Not After : Aug 7 19:01:11 2025 GMT
Subject: CN=33bfff15cf27b1e9c00e6992ce0f1567e5e95abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:7e:fd:cc:b6:07:90:3e:82:4f:2c:01:50:
ff:3f:06:9a:97:b5:02:77:dc:bc:53:f6:87:e4:3f:
72:7f:88:48:07:32:4c:7a:ef:6b:5b:67:28:8b:47:
a3:dc:62:b6:d4:f1:ba:80:cf:a7:fa:96:27:e5:ae:
5a:3a:dc:46:86:da:25:9a:20:7d:75:9a:c9:c6:aa:
3a:91:9e:04:6d:54:54:97:3f:42:2e:a3:c0:71:44:
0b:ec:43:dd:1f:58:8b:6b:98:b1:04:ec:36:a3:8f:
b6:72:da:6f:c9:ab:e3:5d:67:ca:ea:cb:00:be:de:
1d:2a:82:90:47:91:dd:83:77:c3:e1:5d:03:eb:3a:
68:a7:b7:7f:a9:d1:75:a1:b8:52:bc:e6:7d:01:fa:
88:8f:fc:ba:c8:cb:40:6d:b6:5b:54:02:56:59:16:
34:76:8d:08:9c:e0:4c:46:29:1c:5d:8a:e8:0d:ce:
d9:c6:8c:da:90:ff:da:3d:b9:4e:58:9b:2b:7b:2b:
af:65:b1:64:7c:45:40:83:3b:9d:5d:84:f6:fd:22:
5a:2f:b0:f9:78:29:22:e7:6c:7c:41:4e:ac:04:96:
ba:72:8d:05:bb:29:cd:e3:d7:ce:6e:0e:5f:8b:39:
fe:bb:fd:7b:b6:6b:d1:2d:3e:3f:8b:cb:1c:14:88:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BF:FF:15:CF:27:B1:E9:C0:0E:69:92:CE:0F:15:67:E5:E9:5A:BC
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3f:d7:b0:f0:10:e4:29:25:e0:85:ca:e1:c1:b2:f2:05:48:
a6:5f:26:79:81:73:e2:57:d9:b9:46:ca:ed:2d:18:31:f2:a8:
79:fc:52:d3:c3:7a:d0:ee:ac:66:5a:ad:66:95:ee:b0:d8:66:
04:7a:5c:5a:a8:3f:15:3b:42:9b:e1:e2:6e:31:c0:d6:e9:3b:
2f:48:ce:0c:aa:76:e3:3b:11:78:a6:ed:fb:8e:e9:dd:c5:bf:
62:94:e0:c6:46:a9:82:2b:30:f5:d7:5c:5e:37:92:79:17:d1:
f5:16:1b:86:f0:33:5c:88:39:4a:ef:74:91:2f:24:fa:69:91:
8d:bd:6b:ec:cc:8a:6d:40:99:ae:ef:1b:6c:12:b0:69:f8:4e:
05:57:ff:85:57:1a:bb:d1:0f:e4:b6:3b:a3:35:b6:af:0a:24:
41:a8:2e:cd:ad:ec:b9:a5:ac:9c:6f:83:56:9e:3c:af:7a:a4:
f0:18:30:86:a1:79:49:0e:7b:8a:64:b7:6f:49:12:c2:cf:3c:
af:d4:3b:74:90:da:36:69:40:b5:14:84:81:de:1f:43:35:74:
12:cc:41:f8:62:46:ba:ba:bd:3e:3d:29:59:2e:c9:58:e7:9b:
7f:15:80:b4:ea:fd:60:a4:36:a0:b5:60:4d:10:5d:9e:28:27:
14:ee:b7:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwkU9iXBNv6iK+vJK8v9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDhhODRmMGU4Y2Y3NTUxMzdhOTY4MGViY2M0ZmNjZDIw
YTM0YjIwHhcNMjUwODA2MTkwMTExWhcNMjUwODA3MTkwMTExWjAzMTEwLwYDVQQD
EygzM2JmZmYxNWNmMjdiMWU5YzAwZTY5OTJjZTBmMTU2N2U1ZTk1YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0al+/cy2B5A+gk8sAVD/Pwaal7UC
d9y8U/aH5D9yf4hIBzJMeu9rW2coi0ej3GK21PG6gM+n+pYn5a5aOtxGhtolmiB9
dZrJxqo6kZ4EbVRUlz9CLqPAcUQL7EPdH1iLa5ixBOw2o4+2ctpvyavjXWfK6ssA
vt4dKoKQR5Hdg3fD4V0D6zpop7d/qdF1obhSvOZ9AfqIj/y6yMtAbbZbVAJWWRY0
do0InOBMRikcXYroDc7ZxozakP/aPblOWJsreyuvZbFkfEVAgzudXYT2/SJaL7D5
eCki52x8QU6sBJa6co0FuynN49fObg5fizn+u/17tmvRLT4/i8scFIjljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO//xXPJ7HpwA5pks4PFWfl6Vq8MB8GA1UdIwQY
MBaAFGbYqE8OjPdVE3qWgOvMT8zSCjSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUt
YWExNDgxZjBjMTNhLzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81ZDVjYzUtOWQ5OC00MTVhLWFiMGUtYWExNDgxZjBjMTNh
LzEvWnRpb1R3Nk05MVVUZXBhQTY4eFB6TklLTkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZT/XsPAQ
5Ckl4IXK4cGy8gVIpl8meYFz4lfZuUbK7S0YMfKoefxS08N60O6sZlqtZpXusNhm
BHpcWqg/FTtCm+HibjHA1uk7L0jODKp24zsReKbt+47p3cW/YpTgxkapgisw9ddc
XjeSeRfR9RYbhvAzXIg5Su90kS8k+mmRjb1r7MyKbUCZru8bbBKwafhOBVf/hVca
u9EP5LY7ozW2rwokQaguza3suaWsnG+DVp48r3qk8BgwhqF5SQ57imS3b0kSws88
r9Q7dJDaNmlAtRSEgd4fQzV0EsxB+GJGurq9Pj0pWS7JWOebfxWAtOr9YKQ2oLVg
TRBdnignFO63Cw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:55 2025 by rpki-client