Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier: 5phDQPH52yW3LunsrP5gEb6CAxyBYcZrrJlziWeDpX0=
Subject key identifier: CF:E8:84:6F:6C:4F:35:69:DC:45:D3:F5:20:B7:F2:D2:59:2E:9D:CA
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 019879E3E4954ED282CB745169AF09FB57A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number: 0639
Signing time: Tue 05 Aug 2025 11:00:34 +0000
Manifest this update: Tue 05 Aug 2025 11:00:34 +0000
Manifest next update: Wed 06 Aug 2025 11:00:34 +0000
Files and hashes: 1: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=)
2: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=)
3: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=)
4: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=)
5: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: dGPe7S72l5cV99d3pXmEl0Npgq1cBkEtwedqrWuwX08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e3:e4:95:4e:d2:82:cb:74:51:69:af:09:fb:57:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Aug 5 11:00:34 2025 GMT
Not After : Aug 6 11:00:34 2025 GMT
Subject: CN=cfe8846f6c4f3569dc45d3f520b7f2d2592e9dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bd:6e:1b:b3:6f:02:bb:5f:39:fc:a5:9d:20:
b1:cc:b1:b2:78:b3:45:cb:fe:cb:eb:a9:e5:b4:cf:
49:f9:d8:d9:e4:81:d8:06:aa:fe:1c:67:50:f7:70:
94:c3:3c:39:be:b8:da:86:6d:bb:47:16:ea:b1:3e:
6f:4a:f7:2d:82:5a:9d:15:b8:3b:51:70:10:50:bb:
9c:dd:a7:da:39:50:29:12:40:32:32:17:fb:4b:c2:
7e:ac:ba:ed:36:c5:49:30:27:b7:48:ea:7c:58:f2:
40:75:2b:f6:36:0f:d5:3a:c6:1f:85:09:7e:df:54:
49:a1:20:1c:85:7e:af:d6:b2:b5:f4:36:06:35:45:
d2:5b:d2:b5:15:0a:e4:e6:05:81:1a:8b:a0:6d:63:
e4:2d:cf:48:3f:9e:7f:2a:fc:05:7d:70:a4:fd:2a:
9f:43:ab:fa:f0:73:ce:a7:78:2a:66:75:b5:87:d8:
06:5a:6e:03:6b:98:99:c0:16:54:dc:8b:9f:89:3e:
37:5b:91:39:a3:59:ac:ef:26:10:cd:b5:01:52:01:
dd:5f:a3:63:19:d9:c4:f1:9f:41:0b:4f:bc:c7:e0:
ba:ff:66:d0:42:f7:d1:a6:5a:a6:c0:88:1e:02:70:
7a:f1:1c:70:e2:14:d8:9a:d4:3b:c9:82:73:8c:02:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:84:6F:6C:4F:35:69:DC:45:D3:F5:20:B7:F2:D2:59:2E:9D:CA
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:68:46:d5:08:58:63:7a:53:19:5f:5b:a3:24:6a:bd:f0:80:
a1:6d:2c:8e:bb:71:64:1a:86:d5:61:37:d2:69:14:8e:dc:09:
80:71:4b:77:a9:6b:b1:47:1f:0b:27:f1:a2:95:f4:22:34:4b:
a8:ea:4d:87:38:2b:26:1c:15:da:4e:18:df:4e:17:93:5c:6b:
28:f2:fd:7e:e9:93:2e:3a:93:33:48:1e:10:6f:f2:e1:67:39:
bf:9a:f3:e0:18:12:10:8c:9d:e7:d6:64:3c:89:ac:72:55:8c:
60:95:c8:27:c7:54:e8:d3:fa:66:71:e3:02:c2:aa:69:5a:df:
af:0d:5b:bf:50:cc:86:7d:41:b3:7b:9d:1f:7c:b8:1e:d7:2b:
79:8f:0a:83:b3:b7:c6:e6:6a:c7:3d:df:37:2d:ed:40:2b:58:
a6:31:1d:39:78:6f:e9:35:89:26:89:fd:03:3c:46:1f:07:8f:
ee:7f:ab:58:f6:7f:17:b7:de:e6:1e:41:83:08:a7:bd:fe:5d:
40:be:9e:88:35:e0:68:f9:a3:b5:8b:a2:60:c9:5b:a0:04:a3:
5e:be:24:1f:a9:44:15:c6:b0:9c:46:3a:a4:ed:aa:26:e4:f4:
b1:0a:99:02:d9:48:af:96:6e:01:cc:1f:96:48:aa:95:9c:e5:
b9:98:26:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh54+SVTtKCy3RRaa8J+1ejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk
NDBkYzYwHhcNMjUwODA1MTEwMDM0WhcNMjUwODA2MTEwMDM0WjAzMTEwLwYDVQQD
EyhjZmU4ODQ2ZjZjNGYzNTY5ZGM0NWQzZjUyMGI3ZjJkMjU5MmU5ZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL1uG7NvArtfOfylnSCxzLGyeLNF
y/7L66nltM9J+djZ5IHYBqr+HGdQ93CUwzw5vrjahm27RxbqsT5vSvctglqdFbg7
UXAQULuc3afaOVApEkAyMhf7S8J+rLrtNsVJMCe3SOp8WPJAdSv2Ng/VOsYfhQl+
31RJoSAchX6v1rK19DYGNUXSW9K1FQrk5gWBGougbWPkLc9IP55/KvwFfXCk/Sqf
Q6v68HPOp3gqZnW1h9gGWm4Da5iZwBZU3IufiT43W5E5o1ms7yYQzbUBUgHdX6Nj
GdnE8Z9BC0+8x+C6/2bQQvfRplqmwIgeAnB68Rxw4hTYmtQ7yYJzjAKYjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/ohG9sTzVp3EXT9SC38tJZLp3KMB8GA1UdIwQY
MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt
ZjJjNzkyMmZhZjMyLzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy
LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWhG1QhY
Y3pTGV9boyRqvfCAoW0sjrtxZBqG1WE30mkUjtwJgHFLd6lrsUcfCyfxopX0IjRL
qOpNhzgrJhwV2k4Y304Xk1xrKPL9fumTLjqTM0geEG/y4Wc5v5rz4BgSEIyd59Zk
PImsclWMYJXIJ8dU6NP6ZnHjAsKqaVrfrw1bv1DMhn1Bs3udH3y4HtcreY8Kg7O3
xuZqxz3fNy3tQCtYpjEdOXhv6TWJJon9AzxGHweP7n+rWPZ/F7fe5h5Bgwinvf5d
QL6eiDXgaPmjtYuiYMlboASjXr4kH6lEFcawnEY6pO2qJuT0sQqZAtlIr5ZuAcwf
lkiqlZzluZgm3Q==
-----END CERTIFICATE-----
Generated at Tue Aug 5 16:45:32 2025 by rpki-client