
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: dOK6gIH5MKSEZg/XgF8Wcg/WsP3UmjqnTONJ17CQZ9o=
Subject key identifier: 6B:F1:79:0B:C0:61:5B:7A:1A:78:9B:C1:86:A1:A2:38:8D:40:CD:FF
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019873E43FC2D47D890E4BB452892C330F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0CD9
Signing time: Mon 04 Aug 2025 07:03:14 +0000
Manifest this update: Mon 04 Aug 2025 07:03:14 +0000
Manifest next update: Tue 05 Aug 2025 07:03:14 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: p+F+QB4+ZQRU3TQKoTgZokmJU4iA8KP9r5d1j0uNkpU=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:3f:c2:d4:7d:89:0e:4b:b4:52:89:2c:33:0f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Aug 4 07:03:14 2025 GMT
Not After : Aug 5 07:03:14 2025 GMT
Subject: CN=6bf1790bc0615b7a1a789bc186a1a2388d40cdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dd:c3:05:9d:af:7e:29:6b:f2:f1:74:3e:76:
5c:1e:0e:1b:27:43:32:a1:00:e2:26:21:cb:14:83:
be:58:92:e5:c4:72:0c:f3:c3:f2:6a:8c:67:6b:c8:
05:d8:a9:7d:d6:29:a1:51:09:01:04:2f:36:3c:79:
a6:9c:8e:37:87:4c:05:9f:1c:8c:75:81:df:ea:ea:
21:9c:8d:5c:f9:6a:60:11:9b:d5:02:b0:cb:8c:ac:
81:84:f6:11:c8:be:25:7b:dc:2f:50:48:84:78:6b:
e5:70:d3:79:4f:42:11:7a:c0:02:cb:be:10:db:ac:
8d:ab:d2:7f:2a:68:bd:05:cf:6b:63:c2:2d:29:e1:
e1:ae:6b:72:6a:af:9c:12:d2:22:96:2b:ec:68:b9:
d1:6a:de:9a:38:12:50:bc:9d:65:1a:94:41:6a:e4:
ea:df:67:ae:85:0e:fa:b9:b2:55:ca:0e:a1:54:97:
d2:bf:1c:0a:18:e6:8c:80:95:0c:7d:eb:f1:70:5d:
2b:5d:9b:0e:de:66:bd:69:af:f6:a2:8c:75:5e:aa:
b5:00:fa:c3:36:c4:1c:a4:47:e8:b9:88:11:01:0a:
4f:ec:1b:18:38:17:cf:ce:fc:45:dd:20:b8:37:58:
34:f4:ff:a7:cf:8b:93:ee:6a:aa:03:09:ac:eb:7f:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:79:0B:C0:61:5B:7A:1A:78:9B:C1:86:A1:A2:38:8D:40:CD:FF
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:62:91:cf:9f:b6:2b:de:a9:cb:1d:e2:f6:f4:96:9e:68:a2:
3c:51:68:e8:6b:1a:e8:ee:fc:ef:a7:bc:ce:c4:49:d0:7e:95:
6a:5d:26:ec:d9:20:c5:9d:b0:3e:52:7f:be:8d:81:a5:7d:28:
7f:b7:d6:b8:3e:45:21:96:ea:5f:ef:14:4c:40:c2:bc:08:2b:
ca:4e:15:03:2f:ef:d2:f0:6d:26:86:04:a0:2d:58:6b:b2:e0:
01:4d:8f:14:d4:85:a6:7e:12:15:10:a7:08:9b:2c:d3:90:2f:
2d:0a:d2:4d:bc:3a:10:fd:c5:a6:0f:0e:6c:c6:dc:5d:f7:ee:
f4:6b:62:e9:4f:01:5e:1f:35:3b:a9:a6:87:ab:82:12:58:8f:
52:6a:fd:c2:de:ad:26:d5:6a:1f:03:2f:22:77:80:a2:bb:8a:
26:c1:30:19:3d:38:5a:70:b5:33:0b:66:95:97:2e:6f:b4:86:
55:12:62:e6:2f:06:0d:af:c8:e2:c8:e9:ec:3a:4e:aa:ed:79:
d3:d7:58:f5:91:f4:50:fd:5d:ab:a9:fe:c0:07:4d:04:3d:86:
d6:7c:d3:3a:b2:af:73:10:a4:87:7c:12:6a:c2:98:35:c5:85:
e1:f9:24:ec:0c:16:0b:a1:c6:8d:b5:5f:72:75:83:ec:10:54:
ad:78:db:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz5D/C1H2JDku0UoksMw+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4
OGQ0ZWMwHhcNMjUwODA0MDcwMzE0WhcNMjUwODA1MDcwMzE0WjAzMTEwLwYDVQQD
Eyg2YmYxNzkwYmMwNjE1YjdhMWE3ODliYzE4NmExYTIzODhkNDBjZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut3DBZ2vfilr8vF0PnZcHg4bJ0My
oQDiJiHLFIO+WJLlxHIM88Pyaoxna8gF2Kl91imhUQkBBC82PHmmnI43h0wFnxyM
dYHf6uohnI1c+WpgEZvVArDLjKyBhPYRyL4le9wvUEiEeGvlcNN5T0IResACy74Q
26yNq9J/Kmi9Bc9rY8ItKeHhrmtyaq+cEtIilivsaLnRat6aOBJQvJ1lGpRBauTq
32euhQ76ubJVyg6hVJfSvxwKGOaMgJUMfevxcF0rXZsO3ma9aa/2oox1Xqq1APrD
NsQcpEfouYgRAQpP7BsYOBfPzvxF3SC4N1g09P+nz4uT7mqqAwms639F3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvxeQvAYVt6GnibwYahojiNQM3/MB8GA1UdIwQY
MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt
NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5
LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2KRz5+2
K96pyx3i9vSWnmiiPFFo6Gsa6O7876e8zsRJ0H6Val0m7NkgxZ2wPlJ/vo2BpX0o
f7fWuD5FIZbqX+8UTEDCvAgryk4VAy/v0vBtJoYEoC1Ya7LgAU2PFNSFpn4SFRCn
CJss05AvLQrSTbw6EP3Fpg8ObMbcXffu9Gti6U8BXh81O6mmh6uCEliPUmr9wt6t
JtVqHwMvIneAoruKJsEwGT04WnC1MwtmlZcub7SGVRJi5i8GDa/I4sjp7DpOqu15
09dY9ZH0UP1dq6n+wAdNBD2G1nzTOrKvcxCkh3wSasKYNcWF4fkk7AwWC6HGjbVf
cnWD7BBUrXjbRg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:40 2025 by rpki-client