Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: U2VUFLq5AQvjOnl+YulTeaCgi+wPX775OZTTprDuJhE=
Subject key identifier: C0:CE:8D:E6:AC:81:87:83:12:29:35:A4:EA:45:D0:42:C5:82:34:E1
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 019881D5714E435D8497E334EC5573CD2385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 0337
Signing time: Thu 07 Aug 2025 00:01:45 +0000
Manifest this update: Thu 07 Aug 2025 00:01:45 +0000
Manifest next update: Fri 08 Aug 2025 00:01:45 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: jaap45d6ySPyeJSAZnQZAiDxTpHF68s6ujsvb/bIvHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:71:4e:43:5d:84:97:e3:34:ec:55:73:cd:23:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Aug 7 00:01:45 2025 GMT
Not After : Aug 8 00:01:45 2025 GMT
Subject: CN=c0ce8de6ac818783122935a4ea45d042c58234e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:24:9d:34:3e:c5:55:a9:05:63:f5:bc:6c:
59:bc:d1:7d:e9:ff:ed:d1:4e:b3:bd:30:32:9b:46:
03:48:fe:a3:41:5b:71:e9:5c:92:21:11:54:c8:6c:
0c:ae:80:a9:44:6e:85:0a:86:37:de:9c:b7:a2:0e:
14:f3:57:97:32:79:fc:45:f6:de:79:52:16:21:5c:
9b:c2:3f:29:a8:e8:55:86:f0:72:52:d9:51:be:6e:
9e:5c:34:d3:58:6e:cd:40:47:35:cb:53:07:d9:e6:
88:f6:f5:75:82:22:dd:aa:e4:e9:28:b6:35:8c:18:
97:1e:af:97:eb:72:76:f7:d3:94:5e:39:c6:a9:49:
d2:6f:65:f2:19:32:05:9c:39:30:8c:29:fd:9e:1e:
61:ed:7f:4e:d1:6c:6c:3c:c1:e1:1d:c2:9d:2c:57:
da:31:32:2c:3b:e0:83:f5:e8:5a:57:c3:19:8a:77:
dd:31:92:5d:31:2b:b8:26:73:a5:14:98:d4:e5:5f:
5e:db:cd:d5:0d:82:43:58:6f:c7:7d:66:8d:d0:fc:
81:dc:a5:9a:f9:e1:53:c9:c2:8b:b8:30:88:57:f4:
6c:1c:e3:87:17:05:1f:fd:19:b0:d4:28:a0:31:81:
1b:61:c6:eb:69:1c:20:ec:f8:a9:0c:67:03:1f:f0:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CE:8D:E6:AC:81:87:83:12:29:35:A4:EA:45:D0:42:C5:82:34:E1
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:52:7a:7d:6e:8a:72:64:de:c0:da:91:e6:37:46:8b:38:1f:
c4:40:a0:3c:08:f1:13:d9:4d:3b:f4:4b:0e:86:1b:89:88:53:
16:03:33:6a:36:96:90:c9:4f:47:41:7b:fc:a4:31:41:59:37:
55:c1:be:54:01:db:bd:9a:60:a1:72:5d:72:51:04:1a:22:cd:
38:6e:5e:86:51:8a:dd:31:63:ac:ec:6b:41:60:6a:db:dd:23:
de:45:b1:e6:b4:d7:e8:92:0a:e5:1d:98:e4:f5:be:e3:1f:0a:
91:40:1d:28:97:3c:fc:17:0a:ec:29:2c:1d:43:32:b9:a4:9d:
94:ba:10:59:fa:2c:da:21:6f:f0:48:8d:18:80:fd:d1:d4:df:
b1:0f:a7:ea:c3:70:2e:d1:bd:26:14:eb:c2:4f:ed:e2:87:f2:
43:63:f9:b0:2a:6b:50:84:fd:21:8d:f1:e6:45:b5:ea:1f:21:
ea:f9:12:d5:f4:22:37:d3:6b:c7:45:cc:9c:77:20:61:53:f3:
95:41:5c:49:93:e6:8d:b9:be:d9:98:33:af:d2:76:3a:be:35:
fc:f2:68:81:1f:66:84:9c:1d:42:e9:0b:3a:63:28:c5:37:48:
77:71:7f:3a:f7:d9:a2:77:9b:ff:ff:cc:0e:ed:0c:65:05:17:
07:38:b5:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1XFOQ12El+M07FVzzSOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYWU0NjExODhmZmMxZWYyZjNhMTQ3NDU3MWE5NDM5YTU1
Mzc0YWMwHhcNMjUwODA3MDAwMTQ1WhcNMjUwODA4MDAwMTQ1WjAzMTEwLwYDVQQD
EyhjMGNlOGRlNmFjODE4NzgzMTIyOTM1YTRlYTQ1ZDA0MmM1ODIzNGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8AknTQ+xVWpBWP1vGxZvNF96f/t
0U6zvTAym0YDSP6jQVtx6VySIRFUyGwMroCpRG6FCoY33py3og4U81eXMnn8Rfbe
eVIWIVybwj8pqOhVhvByUtlRvm6eXDTTWG7NQEc1y1MH2eaI9vV1giLdquTpKLY1
jBiXHq+X63J299OUXjnGqUnSb2XyGTIFnDkwjCn9nh5h7X9O0WxsPMHhHcKdLFfa
MTIsO+CD9ehaV8MZinfdMZJdMSu4JnOlFJjU5V9e283VDYJDWG/HfWaN0PyB3KWa
+eFTycKLuDCIV/RsHOOHFwUf/Rmw1CigMYEbYcbraRwg7PipDGcDH/ArwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDOjeasgYeDEik1pOpF0ELFgjThMB8GA1UdIwQY
MBaAFM+uRhGI/8HvLzoUdFcalDmlU3SsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMt
NTVmMDZmMDYyY2UwLzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMtNTVmMDZmMDYyY2Uw
LzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdlJ6fW6K
cmTewNqR5jdGizgfxECgPAjxE9lNO/RLDoYbiYhTFgMzajaWkMlPR0F7/KQxQVk3
VcG+VAHbvZpgoXJdclEEGiLNOG5ehlGK3TFjrOxrQWBq290j3kWx5rTX6JIK5R2Y
5PW+4x8KkUAdKJc8/BcK7CksHUMyuaSdlLoQWfos2iFv8EiNGID90dTfsQ+n6sNw
LtG9JhTrwk/t4ofyQ2P5sCprUIT9IY3x5kW16h8h6vkS1fQiN9Nrx0XMnHcgYVPz
lUFcSZPmjbm+2Zgzr9J2Or41/PJogR9mhJwdQukLOmMoxTdId3F/OvfZoneb///M
Du0MZQUXBzi1dA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:03 2025 by rpki-client