Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File: zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier: IwsMq74P0kCkw3IB62/979AO+1Qrq0M9Jgv4CGRa870=
Subject key identifier: 03:51:A1:C1:4F:FF:80:56:79:5C:75:85:F3:70:DB:F6:4C:9F:94:56
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer: /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial: 01988C8F13074DDD701671A0C88A1D46B272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number: 0D0B
Signing time: Sat 09 Aug 2025 02:00:43 +0000
Manifest this update: Sat 09 Aug 2025 02:00:43 +0000
Manifest next update: Sun 10 Aug 2025 02:00:43 +0000
Files and hashes: 1: 2DOh93abUDEP7iIvARNzO8Baro0.roa (hash: Z/CdPO3BFU4U75w3sjAjZS7oL1oIaDik0hINZ7FE5ak=)
2: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
3: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: ZSCmSmXlodx+Ep+HOgWHtMMwKgD7JPNE3o8kor+MQfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:13:07:4d:dd:70:16:71:a0:c8:8a:1d:46:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Validity
Not Before: Aug 9 02:00:43 2025 GMT
Not After : Aug 10 02:00:43 2025 GMT
Subject: CN=0351a1c14fff8056795c7585f370dbf64c9f9456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:ef:03:fe:3c:00:bb:c8:3b:12:5b:75:05:
fd:68:e1:b4:aa:57:a7:11:ae:71:12:26:93:26:48:
fc:32:78:a9:f3:b9:81:7d:d1:ee:65:ed:72:06:b3:
15:e9:c5:66:90:c1:f3:1d:89:5d:05:83:25:7b:e2:
03:e7:60:6d:10:f8:e6:96:6c:a9:45:1c:7f:c1:4f:
91:a8:dd:2a:df:ae:6d:83:bf:56:db:ef:1c:f4:6d:
9e:3a:19:67:cb:01:ec:9e:10:86:a4:3a:57:da:38:
63:01:cf:2f:bc:23:42:0e:11:d2:87:87:fb:8f:ba:
dd:73:a4:67:42:67:55:fd:91:a9:88:ad:8e:05:dd:
51:a2:54:8e:96:88:72:90:11:22:22:23:02:05:73:
09:18:28:12:e8:85:70:3f:08:eb:6e:24:4a:9b:d8:
6c:f1:a2:eb:dd:03:5f:65:4d:f1:1e:3e:7c:cc:46:
a8:b7:f3:33:7f:90:f3:36:69:f1:bc:ed:05:37:65:
be:96:fc:04:9f:9a:ed:98:04:8b:e2:ad:af:a6:7e:
73:96:f4:d5:7b:86:fd:a8:10:ce:da:41:5a:b1:8c:
e0:38:e1:da:5f:5e:a9:45:e2:48:62:9a:d3:1f:e1:
bb:cb:89:cf:85:3a:34:af:10:23:c9:9a:4d:6b:b9:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:A1:C1:4F:FF:80:56:79:5C:75:85:F3:70:DB:F6:4C:9F:94:56
X509v3 Authority Key Identifier:
keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:76:de:19:2f:be:95:81:a7:97:fa:78:b8:b2:f7:c5:0b:
a6:ca:da:4b:e1:c2:92:25:9f:3d:81:76:d6:53:40:28:14:b2:
53:8d:2e:a9:44:26:ec:16:37:c1:61:85:be:cd:62:8e:f3:8b:
77:7a:cf:d6:31:0c:7c:ed:ff:11:72:bd:79:22:db:d2:51:a7:
a8:be:98:e9:40:c0:dc:7d:62:c2:27:c1:41:3a:c4:44:49:e8:
60:18:bc:02:2c:33:79:c8:a3:48:62:ad:50:48:c8:a6:3a:53:
9a:a3:04:1b:01:da:a3:56:6d:9d:53:00:51:02:0e:21:af:fd:
1f:ad:a2:a7:a0:64:fe:a3:aa:c0:fa:85:d3:d0:8f:52:eb:54:
46:28:e8:01:74:5c:d3:68:c0:40:41:7f:31:1a:dd:c8:fe:e7:
4c:a1:a7:8b:db:2f:ac:ed:4b:1d:7b:eb:63:1a:60:47:99:9b:
90:48:69:45:a5:54:78:d0:80:7e:83:8a:04:7b:04:bc:31:64:
b2:91:71:09:48:ba:4e:47:dc:4c:66:7f:b6:44:3c:6c:c0:53:
9f:98:61:36:8a:f7:6b:a0:25:ba:e3:5c:0e:a7:9a:8f:7a:56:
88:5e:42:86:b2:5a:62:a4:7c:9a:bf:f0:d9:39:19:50:86:ea:
13:0e:17:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMjxMHTd1wFnGgyIodRrJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU1N2IyYzNhZGZiYjI1ZDM3ZWEyYTJkZmQxOWIyZDRl
YTUxMGUwHhcNMjUwODA5MDIwMDQzWhcNMjUwODEwMDIwMDQzWjAzMTEwLwYDVQQD
EygwMzUxYTFjMTRmZmY4MDU2Nzk1Yzc1ODVmMzcwZGJmNjRjOWY5NDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iXvA/48ALvIOxJbdQX9aOG0qlen
Ea5xEiaTJkj8Mnip87mBfdHuZe1yBrMV6cVmkMHzHYldBYMle+ID52BtEPjmlmyp
RRx/wU+RqN0q365tg79W2+8c9G2eOhlnywHsnhCGpDpX2jhjAc8vvCNCDhHSh4f7
j7rdc6RnQmdV/ZGpiK2OBd1RolSOlohykBEiIiMCBXMJGCgS6IVwPwjrbiRKm9hs
8aLr3QNfZU3xHj58zEaot/Mzf5DzNmnxvO0FN2W+lvwEn5rtmASL4q2vpn5zlvTV
e4b9qBDO2kFasYzgOOHaX16pReJIYprTH+G7y4nPhTo0rxAjyZpNa7kp0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANRocFP/4BWeVx1hfNw2/ZMn5RWMB8GA1UdIwQY
MBaAFMwVV7LDrfuyXTfqKi39GbLU6lEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGIt
YTU2ZGM1MDEyMWRkLzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGItYTU2ZGM1MDEyMWRk
LzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFl23hkv
vpWBp5f6eLiy98ULpsraS+HCkiWfPYF21lNAKBSyU40uqUQm7BY3wWGFvs1ijvOL
d3rP1jEMfO3/EXK9eSLb0lGnqL6Y6UDA3H1iwifBQTrEREnoYBi8AiwzecijSGKt
UEjIpjpTmqMEGwHao1ZtnVMAUQIOIa/9H62ip6Bk/qOqwPqF09CPUutURijoAXRc
02jAQEF/MRrdyP7nTKGni9svrO1LHXvrYxpgR5mbkEhpRaVUeNCAfoOKBHsEvDFk
spFxCUi6TkfcTGZ/tkQ8bMBTn5hhNor3a6AluuNcDqeaj3pWiF5ChrJaYqR8mr/w
2TkZUIbqEw4XnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:36:24 2025 by rpki-client