Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: NEwxDtFAAl/IitTp8K2udBNziFKTibQbNE79WXy8cT8=
Subject key identifier: 60:6E:37:8C:34:D9:FC:52:25:47:6B:50:02:1B:70:50:F4:CE:C0:5E
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 0198820C111F1F51BC5CA57880A4F6DC3FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0D04
Signing time: Thu 07 Aug 2025 01:01:25 +0000
Manifest this update: Thu 07 Aug 2025 01:01:25 +0000
Manifest next update: Fri 08 Aug 2025 01:01:25 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: 55avymFR4MGvHiVoNX+7Nm5fW8kolkCoRRsExvB1jy4=)
2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:11:1f:1f:51:bc:5c:a5:78:80:a4:f6:dc:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Aug 7 01:01:25 2025 GMT
Not After : Aug 8 01:01:25 2025 GMT
Subject: CN=606e378c34d9fc5225476b50021b7050f4cec05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:51:00:d0:0b:9d:1c:60:7d:81:6f:4f:d8:
7d:e4:95:9e:79:cf:aa:1d:07:33:0b:d5:31:dd:fa:
4f:be:30:89:4c:e6:c9:6e:7b:7c:a9:7d:fa:9d:0f:
6b:93:fe:95:65:35:20:cd:d8:05:74:56:49:e8:de:
d7:ae:14:e2:88:72:46:d2:f7:e3:b7:99:5d:78:4d:
d2:9f:ac:ae:37:33:f3:3f:86:88:db:c3:52:ad:11:
d4:0e:f7:34:78:fa:22:ae:e1:52:f2:10:93:99:7f:
ca:66:83:99:03:96:d5:c7:3f:34:24:4f:80:33:2f:
7d:58:7b:43:40:ec:4a:3e:19:4e:3f:0a:a1:e1:4f:
dc:ce:21:01:df:da:18:82:04:2c:f2:3f:29:8d:3a:
07:6a:12:7e:39:76:ae:3c:4d:ac:90:4c:ca:07:1f:
d5:8c:10:2d:2c:80:6b:51:98:78:f2:88:f7:ce:66:
28:8e:65:99:74:3c:b4:c9:07:74:16:0c:3e:e0:46:
ed:01:d9:4a:92:ab:c7:5a:47:b4:d6:c2:a7:d8:2d:
b4:70:e5:ba:b0:c9:a8:c1:a8:f0:a8:66:43:92:7a:
36:af:67:7d:0e:64:e9:d1:90:18:1d:d4:d8:4b:83:
34:79:05:4c:b9:20:13:f1:3b:0f:ea:51:1d:df:3d:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:37:8C:34:D9:FC:52:25:47:6B:50:02:1B:70:50:F4:CE:C0:5E
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:96:14:f8:f6:9d:08:7d:c4:e2:5c:54:7b:f1:24:25:e3:c8:
c4:4c:36:ad:f7:6d:09:db:2e:c0:50:25:32:75:78:44:17:66:
54:e3:ae:19:93:f5:9c:c5:eb:d9:f8:8d:f7:5c:e8:8c:55:95:
ab:7e:a2:32:29:39:40:fd:c9:a4:b6:8f:4e:13:3b:f4:62:c8:
4a:d6:43:47:8b:19:31:34:e2:4a:15:70:80:06:bc:9e:a8:e1:
05:e3:3a:c7:10:9f:90:a1:44:40:3f:dc:f7:e3:e0:68:3d:4f:
2d:72:6d:8a:a5:c7:1e:76:98:14:54:45:a4:24:70:5e:85:2b:
de:58:93:61:f4:55:33:61:35:af:e8:af:d2:50:44:56:ed:01:
a2:69:5d:d8:be:32:35:3d:93:02:cd:4a:12:55:1f:c7:7e:67:
ee:28:2f:ff:f9:b2:22:b3:49:a8:4d:d3:3b:9f:f5:e7:eb:ec:
5a:49:91:13:be:12:f7:7e:5c:59:cd:83:24:5a:a1:d4:50:a4:
95:84:e7:1b:13:c1:b0:1e:28:5f:1b:a1:9f:c1:53:a5:b6:a9:
91:3f:ec:4c:45:6b:d6:79:c6:86:66:72:8f:88:69:31:0d:0b:
12:19:de:ac:75:50:80:cc:19:0c:a2:f7:6b:9f:8b:5c:9c:28:
0b:ef:b6:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCDBEfH1G8XKV4gKT23D/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Zjg0ZTc0NjkxYzNiN2ZkMmQ1MThlNTYyZjllYTg3ZGU1
ZDNmNTAwHhcNMjUwODA3MDEwMTI1WhcNMjUwODA4MDEwMTI1WjAzMTEwLwYDVQQD
Eyg2MDZlMzc4YzM0ZDlmYzUyMjU0NzZiNTAwMjFiNzA1MGY0Y2VjMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm1RANALnRxgfYFvT9h95JWeec+q
HQczC9Ux3fpPvjCJTObJbnt8qX36nQ9rk/6VZTUgzdgFdFZJ6N7XrhTiiHJG0vfj
t5ldeE3Sn6yuNzPzP4aI28NSrRHUDvc0ePoiruFS8hCTmX/KZoOZA5bVxz80JE+A
My99WHtDQOxKPhlOPwqh4U/cziEB39oYggQs8j8pjToHahJ+OXauPE2skEzKBx/V
jBAtLIBrUZh48oj3zmYojmWZdDy0yQd0Fgw+4EbtAdlKkqvHWke01sKn2C20cOW6
sMmowajwqGZDkno2r2d9DmTp0ZAYHdTYS4M0eQVMuSAT8TsP6lEd3z05JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBuN4w02fxSJUdrUAIbcFD0zsBeMB8GA1UdIwQY
MBaAFGf4TnRpHDt/0tUY5WL56ofeXT9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUt
ZDZjZjgzN2IwZWZhLzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lOTM2MGMtZDczZS00MzBiLWI3MmUtZDZjZjgzN2IwZWZh
LzEvWl9oT2RHa2NPM19TMVJqbFl2bnFoOTVkUDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapYU+Pad
CH3E4lxUe/EkJePIxEw2rfdtCdsuwFAlMnV4RBdmVOOuGZP1nMXr2fiN91zojFWV
q36iMik5QP3JpLaPThM79GLIStZDR4sZMTTiShVwgAa8nqjhBeM6xxCfkKFEQD/c
9+PgaD1PLXJtiqXHHnaYFFRFpCRwXoUr3liTYfRVM2E1r+iv0lBEVu0Bomld2L4y
NT2TAs1KElUfx35n7igv//myIrNJqE3TO5/15+vsWkmRE74S935cWc2DJFqh1FCk
lYTnGxPBsB4oXxuhn8FTpbapkT/sTEVr1nnGhmZyj4hpMQ0LEhnerHVQgMwZDKL3
a5+LXJwoC++2uw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:11:14 2025 by rpki-client