Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: 6krDWTCpmxMteD3bTD5G7WqxNhNIOni8th9txUmXekA=
Subject key identifier: 51:93:FB:AE:FF:B2:05:4A:84:32:73:12:78:F4:C4:9F:15:0D:94:72
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 01988BB33053A208A6E889D8D4093FF752D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 0EA9
Signing time: Fri 08 Aug 2025 22:00:33 +0000
Manifest this update: Fri 08 Aug 2025 22:00:33 +0000
Manifest next update: Sat 09 Aug 2025 22:00:33 +0000
Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: qgm8LeI7p9YTeBp9ZeyGF9PqdV3QrwlsKh9gvXe9w8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:30:53:a2:08:a6:e8:89:d8:d4:09:3f:f7:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Aug 8 22:00:33 2025 GMT
Not After : Aug 9 22:00:33 2025 GMT
Subject: CN=5193fbaeffb2054a8432731278f4c49f150d9472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:b6:14:01:7b:14:69:71:7d:84:5e:a1:ce:
c4:a6:36:b6:e8:8d:81:0a:9c:f8:bb:82:e0:ce:2f:
34:a4:35:1b:50:a6:a3:37:e7:c4:76:9b:a4:10:40:
61:26:4d:59:14:6d:55:1a:02:5a:23:33:f9:2e:be:
c2:87:f2:0c:23:62:77:27:28:47:c6:eb:30:8d:a0:
fb:13:b7:ce:99:91:0c:9a:90:4f:16:37:7f:d3:0f:
06:1c:1c:77:c7:72:60:6d:f4:eb:74:4f:c3:36:62:
e4:42:00:2e:1f:f2:81:bd:5a:82:56:bc:64:c1:98:
5a:6d:54:76:90:ac:7d:1b:1c:69:a3:20:f5:53:d5:
28:90:ed:2b:3d:d4:4f:99:f2:ab:1b:53:7a:89:5d:
75:01:44:1b:f0:38:73:30:2e:90:4d:0c:45:ff:48:
33:a7:be:3f:c1:09:07:22:b2:7b:20:e1:f8:40:7e:
39:7c:d7:b6:35:16:56:89:69:32:71:5e:42:1e:9a:
d4:cc:06:03:e6:34:dc:47:11:30:f6:e5:7f:c2:b9:
e2:4e:a7:17:02:20:07:1b:0a:44:33:fa:6b:38:0a:
df:34:64:4a:80:66:eb:26:12:fe:f9:74:df:6e:ad:
b9:4a:9c:e2:f4:56:cc:bf:28:52:e1:e9:1b:a0:69:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:93:FB:AE:FF:B2:05:4A:84:32:73:12:78:F4:C4:9F:15:0D:94:72
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:96:97:c7:24:5d:eb:4a:5e:81:41:cb:de:29:b8:62:c7:a8:
b6:49:7a:08:d7:94:38:df:41:ba:24:5c:bf:61:ec:1f:ec:2d:
70:f0:75:73:1d:cb:b2:8b:e0:d3:01:73:49:1c:0f:69:4d:71:
a2:84:1c:fb:f0:58:9a:ae:83:68:a0:5d:fc:8d:c7:a6:f7:8c:
a0:7d:3b:81:96:61:19:ae:ed:1c:c4:11:96:c9:e5:12:ad:65:
e6:c2:ac:d3:e3:86:68:45:73:7d:c9:9c:86:56:63:c3:7d:25:
2d:96:d1:d3:a4:a1:ce:aa:d8:a9:3c:5e:b9:94:d1:1a:45:9e:
ff:dc:5d:9c:16:6d:ce:e9:66:ea:4f:36:95:a3:8c:8f:8f:9d:
4a:c7:7a:dd:fd:b7:52:91:5b:a3:ab:15:4b:dc:33:9c:f5:09:
1b:39:2b:f5:5d:80:d7:12:3a:59:da:1a:54:b1:cc:84:21:91:
8e:37:d5:07:02:20:00:af:9f:c3:73:d3:3e:38:b5:f7:0b:58:
72:f5:b1:e4:ba:c1:a4:74:80:7e:e2:49:3b:db:79:44:99:53:
33:40:a8:a8:d9:12:a4:c6:e0:6d:ef:d8:03:f5:34:11:b9:50:
4c:d6:24:80:45:11:e4:29:af:57:ce:b6:b7:1b:3d:4b:d6:0c:
47:cb:3a:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLszBTogim6InY1Ak/91LRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli
YzA1YTcwHhcNMjUwODA4MjIwMDMzWhcNMjUwODA5MjIwMDMzWjAzMTEwLwYDVQQD
Eyg1MTkzZmJhZWZmYjIwNTRhODQzMjczMTI3OGY0YzQ5ZjE1MGQ5NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp22FAF7FGlxfYReoc7Epja26I2B
Cpz4u4Lgzi80pDUbUKajN+fEdpukEEBhJk1ZFG1VGgJaIzP5Lr7Ch/IMI2J3JyhH
xuswjaD7E7fOmZEMmpBPFjd/0w8GHBx3x3JgbfTrdE/DNmLkQgAuH/KBvVqCVrxk
wZhabVR2kKx9GxxpoyD1U9UokO0rPdRPmfKrG1N6iV11AUQb8DhzMC6QTQxF/0gz
p74/wQkHIrJ7IOH4QH45fNe2NRZWiWkycV5CHprUzAYD5jTcRxEw9uV/wrniTqcX
AiAHGwpEM/prOArfNGRKgGbrJhL++XTfbq25Spzi9FbMvyhS4ekboGlkFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGT+67/sgVKhDJzEnj0xJ8VDZRyMB8GA1UdIwQY
MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt
MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2
LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopaXxyRd
60pegUHL3im4Yseotkl6CNeUON9BuiRcv2HsH+wtcPB1cx3Lsovg0wFzSRwPaU1x
ooQc+/BYmq6DaKBd/I3HpveMoH07gZZhGa7tHMQRlsnlEq1l5sKs0+OGaEVzfcmc
hlZjw30lLZbR06ShzqrYqTxeuZTRGkWe/9xdnBZtzulm6k82laOMj4+dSsd63f23
UpFbo6sVS9wznPUJGzkr9V2A1xI6WdoaVLHMhCGRjjfVBwIgAK+fw3PTPji19wtY
cvWx5LrBpHSAfuJJO9t5RJlTM0CoqNkSpMbgbe/YA/U0EblQTNYkgEUR5CmvV862
txs9S9YMR8s6qQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:37 2025 by rpki-client