Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json)
Hash identifier: y4YeVjPM1VrpZW7BLEUK2pmTeyaZsm/M7kY6wB2xA74=
Subject key identifier: 51:9E:8B:9E:A5:0D:A3:B0:BF:91:B0:86:0F:9C:11:43:B0:0D:EF:2A
Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Certificate serial: 01987DC0B92B70FD87E54A4C7DF61636344E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 05:00:38 +0000
Manifest this update: Wed 06 Aug 2025 05:00:38 +0000
Manifest next update: Thu 07 Aug 2025 05:00:38 +0000
Files and hashes: 1: cvViwCnJHbOmjnS2VIR4xe7m6w0.roa (hash: fo4ubxrjnffY7zW1GcJNKmk2YbysHvDvLAY+YQK8Gj8=)
2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: cIY80XSGhbUGGNqm5z+tE+6Xb/Dj1PivAvhdvCw3FWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:b9:2b:70:fd:87:e5:4a:4c:7d:f6:16:36:34:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Validity
Not Before: Aug 6 05:00:38 2025 GMT
Not After : Aug 7 05:00:38 2025 GMT
Subject: CN=519e8b9ea50da3b0bf91b0860f9c1143b00def2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:80:c8:6c:7d:e7:60:dc:91:e3:ae:08:84:
14:30:5b:fa:7c:67:10:43:24:c3:c0:e7:ba:b5:1b:
d2:95:e5:00:a1:be:8f:d9:69:d3:cc:4d:8b:0f:49:
11:1c:69:97:3d:1e:63:b0:71:1c:55:b1:e7:15:c3:
09:1d:62:53:55:b2:6c:12:b6:74:62:e0:86:ce:9f:
6e:62:f9:15:75:a3:65:d3:1c:8b:a4:d9:df:0f:4f:
96:7d:9b:50:38:36:0b:22:f0:7e:88:14:3b:cf:6a:
7d:40:70:6b:58:48:2a:0a:d1:53:76:5e:c9:4b:33:
c7:e7:c3:ae:ff:f5:55:f9:0b:13:d8:a1:9d:bd:29:
e7:f1:70:23:16:63:2e:c3:67:ae:b2:5b:70:fd:1d:
13:fa:80:0a:07:28:d5:87:48:76:73:75:0f:ad:aa:
c1:88:7d:9c:1a:1d:77:5b:60:f7:3b:a9:cb:dc:32:
41:cc:14:93:7c:6f:cc:72:0c:9a:b9:fe:ef:43:4b:
06:61:44:fc:5c:84:39:79:d7:02:a8:9a:fd:a3:56:
3b:9b:6c:93:89:be:07:a3:cb:14:4a:1c:cf:9e:4b:
54:52:7c:11:f3:70:8a:bc:0e:38:94:a1:b3:e1:26:
e1:0a:23:39:47:2b:b4:b0:69:05:aa:5b:38:ee:c8:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9E:8B:9E:A5:0D:A3:B0:BF:91:B0:86:0F:9C:11:43:B0:0D:EF:2A
X509v3 Authority Key Identifier:
keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a3:82:1e:fd:1f:e7:c0:22:72:e2:1e:37:b8:b0:e0:a0:49:
49:ec:7b:1b:8a:ef:d6:fc:3d:b5:dd:0d:0a:46:a2:88:20:87:
4e:1b:e3:2c:58:be:31:ed:ad:e9:2f:fe:2f:f9:d8:e4:a0:2c:
4f:4e:b4:e2:de:3d:b4:b6:f9:6f:44:15:b7:a6:32:63:89:1c:
e3:f9:b2:87:bd:f5:1b:69:5b:cb:cc:0c:d4:46:3e:e9:8f:a4:
cd:fe:50:a0:5f:0a:08:cb:32:70:3a:4b:46:17:75:b0:c7:35:
99:31:28:1f:c5:60:e6:16:53:dc:a8:a2:db:1e:3f:4c:c4:c0:
d3:a1:38:94:78:2f:09:b5:da:95:a7:ae:6a:9b:c9:d3:17:d1:
34:99:ef:31:55:ed:f4:ee:79:aa:95:2d:30:1e:a5:5b:6c:e7:
0c:10:9b:a0:e0:14:44:d6:74:9f:70:fc:2b:00:ba:e4:24:7a:
1b:a4:14:0a:d2:d6:ef:30:b4:94:36:99:bd:b3:d7:f3:07:17:
d4:14:29:df:e0:9c:80:d7:fb:9f:ad:b2:a4:13:77:33:09:e0:
ef:aa:91:99:cb:43:d4:ff:70:18:15:07:a0:c6:c9:40:65:3a:
28:d1:84:2a:82:3a:ab:a4:42:ea:7a:8f:38:bf:c6:76:b1:9b:
1f:1e:e3:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9wLkrcP2H5UpMffYWNjROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0
YzZhOWEwHhcNMjUwODA2MDUwMDM4WhcNMjUwODA3MDUwMDM4WjAzMTEwLwYDVQQD
Eyg1MTllOGI5ZWE1MGRhM2IwYmY5MWIwODYwZjljMTE0M2IwMGRlZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi76AyGx952DckeOuCIQUMFv6fGcQ
QyTDwOe6tRvSleUAob6P2WnTzE2LD0kRHGmXPR5jsHEcVbHnFcMJHWJTVbJsErZ0
YuCGzp9uYvkVdaNl0xyLpNnfD0+WfZtQODYLIvB+iBQ7z2p9QHBrWEgqCtFTdl7J
SzPH58Ou//VV+QsT2KGdvSnn8XAjFmMuw2eusltw/R0T+oAKByjVh0h2c3UPrarB
iH2cGh13W2D3O6nL3DJBzBSTfG/Mcgyauf7vQ0sGYUT8XIQ5edcCqJr9o1Y7m2yT
ib4Ho8sUShzPnktUUnwR83CKvA44lKGz4SbhCiM5Ryu0sGkFqls47si/2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGei56lDaOwv5Gwhg+cEUOwDe8qMB8GA1UdIwQY
MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt
MWVmMDA5MGI3MTU0LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0
LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv6OCHv0f
58AicuIeN7iw4KBJSex7G4rv1vw9td0NCkaiiCCHThvjLFi+Me2t6S/+L/nY5KAs
T0604t49tLb5b0QVt6YyY4kc4/myh731G2lby8wM1EY+6Y+kzf5QoF8KCMsycDpL
Rhd1sMc1mTEoH8Vg5hZT3Kii2x4/TMTA06E4lHgvCbXalaeuapvJ0xfRNJnvMVXt
9O55qpUtMB6lW2znDBCboOAURNZ0n3D8KwC65CR6G6QUCtLW7zC0lDaZvbPX8wcX
1BQp3+CcgNf7n62ypBN3Mwng76qRmctD1P9wGBUHoMbJQGU6KNGEKoI6q6RC6nqP
OL/GdrGbHx7jMg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:43 2025 by rpki-client