Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: X3Epd8cuiL/es+4C+lL4aUkgfuXbk/kruZby0NUiH0o=
Subject key identifier: 2D:C6:B6:B5:AA:9C:94:E8:95:C1:8E:F5:20:6E:DD:C3:BC:5A:6E:35
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0198A08422186C34205FED8A90ED0CD72214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 11C2
Signing time: Tue 12 Aug 2025 23:01:10 +0000
Manifest this update: Tue 12 Aug 2025 23:01:10 +0000
Manifest next update: Wed 13 Aug 2025 23:01:10 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: pFQBNxoHnwG/sXkOoxSpCwdgmPb4F1FJx+J9H2YxNJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:22:18:6c:34:20:5f:ed:8a:90:ed:0c:d7:22:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Aug 12 23:01:10 2025 GMT
Not After : Aug 13 23:01:10 2025 GMT
Subject: CN=2dc6b6b5aa9c94e895c18ef5206eddc3bc5a6e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:30:b9:f1:6d:12:40:e3:e6:fc:d7:d4:00:
02:b6:76:13:cd:47:f6:19:5c:55:f8:68:3a:5a:c3:
d9:00:39:9d:b8:86:6a:f6:ee:20:66:a8:98:7c:5c:
4e:af:d8:4a:cb:ae:e2:fc:69:88:5e:93:69:01:c3:
4d:1f:76:06:3b:03:d0:9a:61:fe:41:4f:f1:6d:c6:
32:ab:cd:f8:05:d4:2e:c6:12:a0:6d:33:17:d7:8d:
6c:b7:a7:52:50:2a:ef:e9:43:91:33:82:46:45:1f:
99:27:8a:34:42:4f:73:97:cf:a7:80:fd:69:8f:d2:
dd:e9:62:00:c1:23:41:a8:19:c0:99:9d:e0:f5:63:
2d:fd:e5:09:c3:70:bf:18:07:e6:71:56:b0:6c:40:
43:b7:d0:f5:bd:54:97:f4:57:d9:4d:3b:55:2e:15:
ea:1d:2f:c4:49:bf:ff:0d:02:a4:bb:7d:ce:cc:b8:
e7:39:50:5d:c2:3d:21:36:0f:53:2e:2e:9e:94:b3:
a5:87:bc:8b:b6:a7:6d:58:e5:20:37:48:de:2c:32:
70:87:b7:50:ca:86:5b:99:25:7b:fd:d0:1a:f4:d1:
f4:c1:0d:1b:b7:0f:0f:8a:b9:b4:d9:88:0f:52:48:
1f:35:2d:de:e7:3d:e2:c8:0d:1b:50:56:01:88:e6:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C6:B6:B5:AA:9C:94:E8:95:C1:8E:F5:20:6E:DD:C3:BC:5A:6E:35
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d7:e1:2c:34:91:d5:c3:99:5f:68:c7:4e:a9:0a:d2:13:72:
47:a2:37:d7:3d:b5:96:39:4d:fe:e8:98:c3:cc:06:b9:fc:0d:
5e:9f:03:47:e3:0c:2d:32:48:b8:48:d5:c7:cd:40:6c:5e:d3:
f4:16:b1:27:15:a5:57:3c:f9:bd:00:c6:b2:c9:99:b8:94:b1:
c2:d8:80:79:00:f3:20:2b:28:fb:c3:0b:1b:e2:da:16:d9:2d:
00:2a:77:a9:97:15:dd:a8:a3:09:64:e6:26:b6:a8:37:94:48:
71:00:b6:88:3e:1e:4d:88:39:13:9e:84:60:39:3f:d7:ff:8b:
90:be:49:9a:94:24:71:db:22:ff:4a:28:30:e4:77:fa:75:92:
f2:76:a9:f2:f6:58:92:a9:ec:fe:ef:9f:14:33:f2:46:b2:de:
ea:94:a0:48:34:b8:73:ad:29:bb:91:11:8b:87:30:f7:9e:70:
6a:19:3b:16:e8:5a:6a:ca:9b:df:e3:0f:93:fd:a8:03:38:c4:
b3:b0:45:0a:b5:53:4e:ee:c5:ed:26:5b:ee:05:42:9b:5f:27:
41:8e:d8:6d:19:fa:6b:b9:1c:8a:c5:e1:77:0a:6e:bd:4b:5e:
9d:ec:8c:f9:77:cd:28:05:e8:a7:12:4a:8a:e5:9b:18:a2:d1:
24:63:49:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZighCIYbDQgX+2KkO0M1yIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOTYyNTU0MWFiZTZiNWFlOTI2NjcxZGFhOThhYzZkODA5
NGVjN2IwHhcNMjUwODEyMjMwMTEwWhcNMjUwODEzMjMwMTEwWjAzMTEwLwYDVQQD
EygyZGM2YjZiNWFhOWM5NGU4OTVjMThlZjUyMDZlZGRjM2JjNWE2ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lowufFtEkDj5vzX1AACtnYTzUf2
GVxV+Gg6WsPZADmduIZq9u4gZqiYfFxOr9hKy67i/GmIXpNpAcNNH3YGOwPQmmH+
QU/xbcYyq834BdQuxhKgbTMX141st6dSUCrv6UORM4JGRR+ZJ4o0Qk9zl8+ngP1p
j9Ld6WIAwSNBqBnAmZ3g9WMt/eUJw3C/GAfmcVawbEBDt9D1vVSX9FfZTTtVLhXq
HS/ESb//DQKku33OzLjnOVBdwj0hNg9TLi6elLOlh7yLtqdtWOUgN0jeLDJwh7dQ
yoZbmSV7/dAa9NH0wQ0btw8Pirm02YgPUkgfNS3e5z3iyA0bUFYBiOZyjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3GtrWqnJTolcGO9SBu3cO8Wm41MB8GA1UdIwQY
MBaAFM+WJVQavmta6SZnHaqYrG2AlOx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2Et
NTlhNTg3YmRlYTNmLzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2EtNTlhNTg3YmRlYTNm
LzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtfhLDSR
1cOZX2jHTqkK0hNyR6I31z21ljlN/uiYw8wGufwNXp8DR+MMLTJIuEjVx81AbF7T
9BaxJxWlVzz5vQDGssmZuJSxwtiAeQDzICso+8MLG+LaFtktACp3qZcV3aijCWTm
JraoN5RIcQC2iD4eTYg5E56EYDk/1/+LkL5JmpQkcdsi/0ooMOR3+nWS8nap8vZY
kqns/u+fFDPyRrLe6pSgSDS4c60pu5ERi4cw955wahk7Fuhaasqb3+MPk/2oAzjE
s7BFCrVTTu7F7SZb7gVCm18nQY7YbRn6a7kcisXhdwpuvUteneyM+XfNKAXopxJK
iuWbGKLRJGNJQw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:45:10 2025 by rpki-client