Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
File: z6ExZhMNKdWtimB9gUmNpmAm0DY.mft (raw, json)
Hash identifier: w819zv7q4kBJ9SjW5wysUmcCzqgecwQGnUtwfLwY23k=
Subject key identifier: 34:BB:5C:80:FA:FF:1B:53:3B:B0:AD:0F:FE:99:8B:7D:E3:9A:74:42
Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036
Certificate serial: 01988168A1333108EF070C292FE00F5A98FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
Manifest number: 032C
Signing time: Wed 06 Aug 2025 22:02:54 +0000
Manifest this update: Wed 06 Aug 2025 22:02:54 +0000
Manifest next update: Thu 07 Aug 2025 22:02:54 +0000
Files and hashes: 1: 8NRIip7PRvYkRKm_8iGpYTYG-fQ.roa (hash: baP/2HoWmnxywqu4ozYPStRBgvEVcCSlNjY9VrvxlOY=)
2: z6ExZhMNKdWtimB9gUmNpmAm0DY.crl (hash: LjdQqoVIz1/F62vaZa8ZfPV0vgyzU74SN5g7KuJLm1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:a1:33:31:08:ef:07:0c:29:2f:e0:0f:5a:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036
Validity
Not Before: Aug 6 22:02:54 2025 GMT
Not After : Aug 7 22:02:54 2025 GMT
Subject: CN=34bb5c80faff1b533bb0ad0ffe998b7de39a7442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:8a:7a:93:64:64:3e:4f:33:33:ce:5d:d9:
84:78:70:f0:9c:c1:98:fb:d1:bb:1c:82:db:53:72:
4d:3b:76:37:f5:bd:ea:92:f6:6b:55:fb:f9:4e:00:
28:7c:f8:48:ea:3b:04:c9:ec:64:a1:52:25:ad:b8:
a2:32:8d:e6:dc:6f:99:8d:34:98:77:3f:7c:58:77:
88:e6:a0:5f:6e:97:7e:a0:ed:66:98:b1:31:15:4a:
e3:01:69:40:fb:f2:5a:41:9f:59:2e:09:ce:8a:c9:
dc:dd:1b:67:87:4a:9f:5f:bd:a2:76:16:ee:02:de:
c1:46:30:97:72:52:a4:76:2f:58:f4:47:a5:85:8b:
bf:b1:f7:13:c2:0f:54:d0:9f:3b:6e:9b:86:7c:df:
14:16:e3:65:31:dc:98:d5:34:5c:7a:85:59:d3:1a:
90:06:0d:42:28:90:d2:cf:4e:a7:bd:30:ff:1a:51:
cf:67:72:e8:fc:9d:8e:be:a5:93:11:9c:8b:0b:6e:
2c:72:aa:d4:92:3a:55:bd:61:43:bf:47:96:f4:e3:
6d:61:fc:8e:3a:6b:f5:cc:8c:1a:66:36:38:06:82:
47:e9:22:9e:4f:de:d3:78:2d:84:de:0d:de:8f:a4:
5a:74:8d:ec:09:70:73:bc:fc:4f:eb:70:3c:81:cf:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:5C:80:FA:FF:1B:53:3B:B0:AD:0F:FE:99:8B:7D:E3:9A:74:42
X509v3 Authority Key Identifier:
keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:f3:65:99:01:da:0a:6a:77:05:14:ba:d8:b8:25:17:90:
3c:b2:0c:39:2f:b8:8c:15:db:8b:fa:87:33:3e:fa:e1:7e:2a:
1b:6e:5b:d7:c2:11:c3:ab:b2:70:3c:17:8a:4e:40:ff:88:36:
ee:00:89:c5:74:5c:2e:ec:b8:1e:3b:e0:39:64:ac:c2:03:6f:
a9:7f:ee:05:aa:e5:5b:ac:9f:1a:fc:39:e8:2f:3a:5c:6e:78:
72:a1:7c:e8:fc:87:55:4d:96:ce:e6:62:67:50:44:bd:d1:0a:
fa:c1:fc:10:3d:38:95:50:30:1a:a8:a1:c3:a5:8e:dd:31:7f:
96:b7:95:08:87:78:3f:ae:86:c5:b0:d7:6e:4f:81:a7:9b:3a:
50:ed:2c:81:f3:c6:88:7a:5e:d4:90:6d:f0:f3:d1:15:f0:bc:
8e:7a:16:37:11:97:54:39:81:17:88:dd:00:f1:51:9a:a0:ee:
24:56:5f:37:08:85:de:d1:f3:e2:2a:3f:1a:fb:a4:2f:c6:84:
be:8d:e3:59:2c:b3:f9:1b:f6:51:44:6c:eb:6d:63:a5:22:fc:
d5:3d:e5:71:0e:1e:cb:75:2e:51:7d:81:88:d7:ed:22:f8:b9:
2a:8a:ff:87:6c:f3:08:e7:6e:be:83:18:b0:bc:60:1e:a1:b8:
6b:75:f7:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaKEzMQjvBwwpL+APWpj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTEzMTY2MTMwZDI5ZDVhZDhhNjA3ZDgxNDk4ZGE2NjAy
NmQwMzYwHhcNMjUwODA2MjIwMjU0WhcNMjUwODA3MjIwMjU0WjAzMTEwLwYDVQQD
EygzNGJiNWM4MGZhZmYxYjUzM2JiMGFkMGZmZTk5OGI3ZGUzOWE3NDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEOKepNkZD5PMzPOXdmEeHDwnMGY
+9G7HILbU3JNO3Y39b3qkvZrVfv5TgAofPhI6jsEyexkoVIlrbiiMo3m3G+ZjTSY
dz98WHeI5qBfbpd+oO1mmLExFUrjAWlA+/JaQZ9ZLgnOisnc3Rtnh0qfX72idhbu
At7BRjCXclKkdi9Y9EelhYu/sfcTwg9U0J87bpuGfN8UFuNlMdyY1TRceoVZ0xqQ
Bg1CKJDSz06nvTD/GlHPZ3Lo/J2OvqWTEZyLC24scqrUkjpVvWFDv0eW9ONtYfyO
Omv1zIwaZjY4BoJH6SKeT97TeC2E3g3ej6RadI3sCXBzvPxP63A8gc9bSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS7XID6/xtTO7CtD/6Zi33jmnRCMB8GA1UdIwQY
MBaAFM+hMWYTDSnVrYpgfYFJjaZgJtA2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUt
MGM2NmJkMzQwMTlhLzEvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80NmVkOGQtM2YyZi00NzNkLWJlZDUtMGM2NmJkMzQwMTlh
LzEvejZFeFpoTU5LZFd0aW1COWdVbU5wbUFtMERZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUjzZZkB
2gpqdwUUuti4JReQPLIMOS+4jBXbi/qHMz764X4qG25b18IRw6uycDwXik5A/4g2
7gCJxXRcLuy4HjvgOWSswgNvqX/uBarlW6yfGvw56C86XG54cqF86PyHVU2WzuZi
Z1BEvdEK+sH8ED04lVAwGqihw6WO3TF/lreVCId4P66GxbDXbk+Bp5s6UO0sgfPG
iHpe1JBt8PPRFfC8jnoWNxGXVDmBF4jdAPFRmqDuJFZfNwiF3tHz4io/GvukL8aE
vo3jWSyz+Rv2UURs621jpSL81T3lcQ4ey3UuUX2BiNftIvi5Kor/h2zzCOduvoMY
sLxgHqG4a3X3Pw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:30:43 2025 by rpki-client