Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier: B2Vnp+7FeWOkEcwmj0w9AFgV2MDpR35RJPPfmZUj3sc=
Subject key identifier: 8E:53:2F:B7:08:84:4B:37:48:0D:7F:87:C1:EA:6E:21:6B:9D:23:37
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 01989FDEB47530E75003ABC3AA3F6208C667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number: 013D
Signing time: Tue 12 Aug 2025 20:00:29 +0000
Manifest this update: Tue 12 Aug 2025 20:00:29 +0000
Manifest next update: Wed 13 Aug 2025 20:00:29 +0000
Files and hashes: 1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=)
2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: 6A9cOJtDq+NRQ6xI9pEsGBHCwJNKYbgrGK35LdN/1sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:b4:75:30:e7:50:03:ab:c3:aa:3f:62:08:c6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Aug 12 20:00:29 2025 GMT
Not After : Aug 13 20:00:29 2025 GMT
Subject: CN=8e532fb708844b37480d7f87c1ea6e216b9d2337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:0e:1e:05:43:d5:d5:03:15:1f:6c:07:94:
e6:21:c4:b6:13:f4:58:dc:54:26:7c:3f:32:ef:81:
6b:67:b5:fe:49:06:24:01:28:49:0a:05:51:ea:bc:
47:7d:8e:06:ab:fe:d8:96:56:b6:b9:90:72:b5:d6:
a9:5a:e3:22:80:9a:01:f4:a5:cf:3d:cc:1f:c3:16:
b9:2d:28:df:cc:9a:1b:ea:2b:c2:b4:eb:41:ec:c3:
b7:0d:b0:c1:af:f0:0a:06:04:23:53:ed:ef:c7:91:
57:7a:12:9c:c8:24:9e:7f:c6:2a:1a:02:d0:13:48:
8f:0a:32:f6:74:d1:66:7b:af:0d:97:9e:17:18:fd:
9e:4c:5c:78:cc:88:ac:30:e7:c5:6c:1a:b4:ea:65:
c2:e5:0f:1c:0e:61:2c:98:1e:2c:8b:67:c8:83:08:
9e:de:4a:d4:2d:ed:64:f3:a0:c8:5f:6f:1b:1a:ca:
7d:a4:a9:2a:fc:42:cf:85:36:5c:0b:8d:3c:a5:e2:
ae:04:1f:ec:34:e5:c4:4d:59:28:5f:95:7e:e7:bc:
33:1a:8d:f1:ac:b4:ae:26:89:dc:3b:f7:9a:8d:6e:
07:9f:86:2c:da:d1:18:52:85:08:ee:79:60:7a:92:
14:41:7c:5c:d3:21:0a:a8:65:81:c3:e5:61:58:39:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:2F:B7:08:84:4B:37:48:0D:7F:87:C1:EA:6E:21:6B:9D:23:37
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:6f:1c:72:99:bf:7a:bc:d7:33:6d:2f:8a:85:d5:fe:ff:
01:57:3b:de:9f:86:46:c9:39:a9:0b:02:e7:b1:8f:9d:e6:fc:
de:02:59:0a:96:b4:80:4e:82:9c:b4:4d:27:11:c9:99:ad:37:
7c:3b:a3:fa:b0:a9:0c:4c:2b:2c:17:b9:b5:99:9e:c7:a7:ec:
c9:11:f0:e0:dd:89:f7:2d:13:da:f0:48:b6:6d:e8:6c:72:4a:
78:af:ab:ea:56:78:0e:69:6f:29:de:3e:b2:58:98:bd:c9:da:
79:88:a7:9f:a1:6e:a3:4d:0b:6d:3c:61:f4:9f:29:52:12:8d:
fe:c5:47:86:b8:ab:f6:5a:e5:44:d6:f3:4e:1a:49:55:85:69:
17:3c:20:d0:9a:a4:07:10:25:03:35:8b:9c:8f:db:17:f2:fc:
ba:04:a7:52:e3:a4:26:de:ed:8d:b9:27:4a:a4:77:d7:89:1a:
05:77:e1:1a:60:e0:94:75:fc:4e:43:5a:b4:7d:81:c9:6c:b0:
aa:e1:93:03:a1:4d:f5:fa:4d:15:86:3f:b7:16:cd:eb:b0:ba:
97:25:12:80:0a:3b:9d:6e:c1:d1:54:8c:01:4b:79:1c:f7:e5:
c4:a7:0b:5e:64:ec:b2:af:2c:bd:76:e3:58:cb:01:76:f0:32:
ba:68:64:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZif3rR1MOdQA6vDqj9iCMZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1
ZWNiMGIwHhcNMjUwODEyMjAwMDI5WhcNMjUwODEzMjAwMDI5WjAzMTEwLwYDVQQD
Eyg4ZTUzMmZiNzA4ODQ0YjM3NDgwZDdmODdjMWVhNmUyMTZiOWQyMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpgOHgVD1dUDFR9sB5TmIcS2E/RY
3FQmfD8y74FrZ7X+SQYkAShJCgVR6rxHfY4Gq/7Ylla2uZBytdapWuMigJoB9KXP
Pcwfwxa5LSjfzJob6ivCtOtB7MO3DbDBr/AKBgQjU+3vx5FXehKcyCSef8YqGgLQ
E0iPCjL2dNFme68Nl54XGP2eTFx4zIisMOfFbBq06mXC5Q8cDmEsmB4si2fIgwie
3krULe1k86DIX28bGsp9pKkq/ELPhTZcC408peKuBB/sNOXETVkoX5V+57wzGo3x
rLSuJoncO/eajW4Hn4Ys2tEYUoUI7nlgepIUQXxc0yEKqGWBw+VhWDla+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5TL7cIhEs3SA1/h8HqbiFrnSM3MB8GA1UdIwQY
MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt
ZTEyZDE2ZjQ0MTUzLzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz
LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/5vHHKZ
v3q81zNtL4qF1f7/AVc73p+GRsk5qQsC57GPneb83gJZCpa0gE6CnLRNJxHJma03
fDuj+rCpDEwrLBe5tZmex6fsyRHw4N2J9y0T2vBItm3obHJKeK+r6lZ4DmlvKd4+
sliYvcnaeYinn6Fuo00LbTxh9J8pUhKN/sVHhrir9lrlRNbzThpJVYVpFzwg0Jqk
BxAlAzWLnI/bF/L8ugSnUuOkJt7tjbknSqR314kaBXfhGmDglHX8TkNatH2ByWyw
quGTA6FN9fpNFYY/txbN67C6lyUSgAo7nW7B0VSMAUt5HPflxKcLXmTssq8svXbj
WMsBdvAyumhkCQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:33 2025 by rpki-client