Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: 9FA51RO8VUwSeEoJMs6gippoFHb7ra2CzgudebPE/Eg=
Subject key identifier: BC:E2:A5:CE:47:EB:51:C4:92:BD:02:68:36:96:BA:CE:B9:57:54:DB
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 01988166B1625E28F31B3BDFA0F710472A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0EB6
Signing time: Wed 06 Aug 2025 22:00:47 +0000
Manifest this update: Wed 06 Aug 2025 22:00:47 +0000
Manifest next update: Thu 07 Aug 2025 22:00:47 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: CODBqYadLdfF8ZH5zI9d/KYG5dveCIKf6gHk0YCmJQU=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:66:b1:62:5e:28:f3:1b:3b:df:a0:f7:10:47:2a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Aug 6 22:00:47 2025 GMT
Not After : Aug 7 22:00:47 2025 GMT
Subject: CN=bce2a5ce47eb51c492bd02683696baceb95754db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:62:6b:af:de:df:86:19:72:f9:76:4c:b5:
e2:7f:e6:b7:19:a4:d7:3b:e2:98:12:76:03:68:f5:
30:aa:19:1f:a6:d9:57:87:67:86:a9:28:9e:47:92:
a1:b5:4e:cf:aa:9a:c0:65:86:d6:79:c5:3a:cf:bc:
29:4b:58:2e:f8:e1:76:24:f1:75:d0:82:f6:ba:0d:
59:97:d0:85:37:3b:84:c3:8d:4c:ab:78:7b:08:86:
24:e2:88:38:ce:3e:00:f9:30:17:29:33:15:19:70:
4d:0c:68:54:85:8f:73:4f:9d:0b:61:dd:bd:64:e2:
05:19:53:96:8a:da:a2:c7:83:0a:fb:a2:d0:ca:39:
2a:52:98:c7:e8:c3:99:b8:5e:89:d1:ee:eb:b0:65:
e6:5a:a2:de:bc:b1:1f:d7:ae:60:68:24:a3:e8:4c:
a9:5f:e7:71:f0:bb:94:ca:23:78:f3:82:4f:bf:05:
1f:95:a0:3b:9c:7d:07:4a:70:fb:4d:d0:77:fd:43:
1a:af:f2:d4:d9:61:77:30:44:d3:11:b1:99:91:b0:
8c:5f:48:a0:51:24:86:15:06:c4:95:53:05:36:9c:
0c:05:9c:bb:33:69:e4:10:07:18:73:26:5c:dd:7c:
1f:b9:01:cf:07:a8:e9:eb:56:f1:75:0a:47:fb:22:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E2:A5:CE:47:EB:51:C4:92:BD:02:68:36:96:BA:CE:B9:57:54:DB
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5c:8c:c4:75:77:b3:1b:03:6e:a8:88:c1:49:d4:81:38:e4:
30:f1:41:62:57:00:7e:f6:3e:b6:10:19:6d:df:66:25:fb:2c:
b7:4e:a7:53:54:93:9c:3c:4c:f1:a3:d3:5a:e8:00:ed:43:56:
53:0c:1a:7d:9a:33:ab:2b:8e:a2:1f:f3:81:ab:c0:55:32:5f:
58:7a:2f:c0:fb:ca:54:59:8e:50:db:b1:3d:53:66:bc:93:8e:
f4:ab:0d:d2:e5:14:49:4f:f9:09:6f:b5:5c:bf:ba:7a:e7:cf:
ea:ab:66:62:9e:63:63:ad:9a:8b:7a:70:63:6d:09:68:f5:ab:
c8:75:34:20:c0:aa:96:2f:0a:4a:0e:33:76:a5:c5:98:d6:91:
c4:0d:02:43:31:67:3b:d6:d4:9c:60:75:f6:c7:50:9c:7b:9f:
07:d2:5c:a2:18:98:04:ed:f5:58:d0:91:41:25:b2:78:bb:f4:
92:80:a0:c2:6c:98:34:cf:e2:ac:d0:34:19:a7:f0:60:57:85:
92:12:df:f5:28:d6:3b:9e:a4:56:5d:00:a9:6a:3b:be:f9:bb:
f1:58:ef:9d:e6:81:65:f6:25:80:6d:3e:26:e7:7e:c0:f1:9e:
07:25:b3:8f:38:5d:6a:cf:b3:5f:dd:fc:eb:17:04:99:59:e6:
2c:d3:e8:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZrFiXijzGzvfoPcQRyqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw
Yzg4N2QwHhcNMjUwODA2MjIwMDQ3WhcNMjUwODA3MjIwMDQ3WjAzMTEwLwYDVQQD
EyhiY2UyYTVjZTQ3ZWI1MWM0OTJiZDAyNjgzNjk2YmFjZWI5NTc1NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPpia6/e34YZcvl2TLXif+a3GaTX
O+KYEnYDaPUwqhkfptlXh2eGqSieR5KhtU7PqprAZYbWecU6z7wpS1gu+OF2JPF1
0IL2ug1Zl9CFNzuEw41Mq3h7CIYk4og4zj4A+TAXKTMVGXBNDGhUhY9zT50LYd29
ZOIFGVOWitqix4MK+6LQyjkqUpjH6MOZuF6J0e7rsGXmWqLevLEf165gaCSj6Eyp
X+dx8LuUyiN484JPvwUflaA7nH0HSnD7TdB3/UMar/LU2WF3METTEbGZkbCMX0ig
USSGFQbElVMFNpwMBZy7M2nkEAcYcyZc3XwfuQHPB6jp61bxdQpH+yK4lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzipc5H61HEkr0CaDaWus65V1TbMB8GA1UdIwQY
MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt
NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw
LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFyMxHV3
sxsDbqiIwUnUgTjkMPFBYlcAfvY+thAZbd9mJfsst06nU1STnDxM8aPTWugA7UNW
UwwafZozqyuOoh/zgavAVTJfWHovwPvKVFmOUNuxPVNmvJOO9KsN0uUUSU/5CW+1
XL+6eufP6qtmYp5jY62ai3pwY20JaPWryHU0IMCqli8KSg4zdqXFmNaRxA0CQzFn
O9bUnGB19sdQnHufB9JcohiYBO31WNCRQSWyeLv0koCgwmyYNM/irNA0GafwYFeF
khLf9SjWO56kVl0AqWo7vvm78VjvneaBZfYlgG0+Jud+wPGeByWzjzhdas+zX938
6xcEmVnmLNPoOw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:11:06 2025 by rpki-client