Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: NYFy6ix6gV1bv17iB+Z3n/Ik6nGjXvNYM8E33KNUXAk=
Subject key identifier: A7:D0:40:57:6C:6F:79:B4:8B:0B:21:75:8E:52:0C:B1:A5:01:1F:B5
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 01987B9BB317C488768E520D9CA8C700839F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0B6E
Signing time: Tue 05 Aug 2025 19:00:58 +0000
Manifest this update: Tue 05 Aug 2025 19:00:58 +0000
Manifest next update: Wed 06 Aug 2025 19:00:58 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: WBIfa4OKlsjXQwnlKFLRIhrfo0bjVHmbLvJ0MvaBTk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:b3:17:c4:88:76:8e:52:0d:9c:a8:c7:00:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Aug 5 19:00:58 2025 GMT
Not After : Aug 6 19:00:58 2025 GMT
Subject: CN=a7d040576c6f79b48b0b21758e520cb1a5011fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:d4:c9:e8:fc:dd:6a:0c:fc:6c:30:36:1f:
dd:03:fd:ce:72:36:5f:80:c9:08:ce:e1:5b:06:94:
98:cf:17:99:78:63:6c:bc:57:c7:f6:5e:52:dc:6f:
a8:d5:eb:ff:a7:27:56:2e:a5:60:89:e7:aa:44:3d:
8c:4c:c2:3d:cf:2d:cd:c0:96:18:c8:af:17:74:46:
4d:c3:72:5e:3f:14:e5:52:61:82:24:39:24:34:87:
48:96:06:cd:b8:a1:fb:85:81:ab:71:13:43:2b:2f:
2f:90:7c:4e:be:39:0a:64:c9:64:8e:cc:a5:70:f6:
b8:e7:2c:2c:d6:97:2e:f9:40:80:32:68:6f:07:6e:
81:8b:17:d3:8d:dd:3f:08:27:fb:5b:9a:61:ea:d4:
81:c2:c4:d2:d3:b6:a7:8b:73:ac:6b:73:f2:57:9d:
d4:94:d0:e3:56:d4:eb:93:27:f8:a3:bd:93:d9:ff:
ca:57:84:47:a8:56:89:77:a9:30:c6:3a:d4:a8:8d:
3e:78:50:4a:65:ad:65:5d:6a:7a:79:ad:98:d9:6d:
aa:fb:c9:71:85:e8:b2:1c:8f:e1:55:59:f5:e5:23:
68:ee:b9:d1:ba:4f:8e:57:eb:58:80:9f:59:c4:28:
a3:02:0b:22:09:4d:6b:f6:6f:bc:16:fc:f3:5b:0f:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:40:57:6C:6F:79:B4:8B:0B:21:75:8E:52:0C:B1:A5:01:1F:B5
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:87:96:96:8b:9d:eb:eb:92:4c:e4:0a:f5:0c:17:ae:88:5a:
1a:ee:b5:58:96:e2:69:da:63:0c:dd:77:06:24:4f:00:3a:b5:
a5:50:ed:46:ae:7c:d9:be:6a:87:d0:8e:8b:7d:e1:8f:9e:f0:
8c:5b:8f:34:2c:6e:18:c6:a8:fd:35:9b:ac:dc:93:81:a2:38:
c5:05:e8:7e:29:87:25:e5:4c:7e:03:8c:81:33:01:c8:e4:6b:
9f:c7:d7:db:62:fe:0a:e7:48:0e:ab:41:a5:2a:c3:c2:4e:ed:
17:18:32:d2:03:1e:15:7e:6f:4a:27:93:e8:b9:ae:df:c6:c1:
2e:63:cc:77:64:cf:52:a8:c8:f6:4a:e9:67:23:ed:99:f3:0c:
56:0a:cd:bf:1e:68:26:64:4a:f6:12:20:be:62:c8:bb:37:c8:
1c:44:da:d6:34:13:87:ab:2d:e9:6c:46:16:73:e7:55:48:9b:
c7:cb:dd:61:6d:4d:f9:7a:4d:03:bc:6b:30:c9:c5:b8:7b:6a:
03:57:35:e5:8f:9b:eb:64:ac:81:b9:44:5a:0e:46:f2:95:40:
bc:5a:3e:1e:cb:38:0f:7a:27:e1:8c:cc:9b:a0:59:06:65:6c:
67:5d:9e:e1:63:f3:cf:60:a7:75:02:39:a2:76:f8:56:ab:4f:
f3:bb:b1:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7m7MXxIh2jlINnKjHAIOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjVkOGI3ZjE5ZTJmYjc1Y2I3Zjk1Nzg5ZDkxMThmNmIx
Yjk3MDUwHhcNMjUwODA1MTkwMDU4WhcNMjUwODA2MTkwMDU4WjAzMTEwLwYDVQQD
EyhhN2QwNDA1NzZjNmY3OWI0OGIwYjIxNzU4ZTUyMGNiMWE1MDExZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFrUyej83WoM/GwwNh/dA/3OcjZf
gMkIzuFbBpSYzxeZeGNsvFfH9l5S3G+o1ev/pydWLqVgieeqRD2MTMI9zy3NwJYY
yK8XdEZNw3JePxTlUmGCJDkkNIdIlgbNuKH7hYGrcRNDKy8vkHxOvjkKZMlkjsyl
cPa45yws1pcu+UCAMmhvB26BixfTjd0/CCf7W5ph6tSBwsTS07ani3Osa3PyV53U
lNDjVtTrkyf4o72T2f/KV4RHqFaJd6kwxjrUqI0+eFBKZa1lXWp6ea2Y2W2q+8lx
heiyHI/hVVn15SNo7rnRuk+OV+tYgJ9ZxCijAgsiCU1r9m+8FvzzWw9G3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfQQFdsb3m0iwshdY5SDLGlAR+1MB8GA1UdIwQY
MBaAFGUl2Lfxni+3XLf5V4nZEY9rG5cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUt
NDY2MDNkZTgwNWVjLzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUtNDY2MDNkZTgwNWVj
LzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYeWloud
6+uSTOQK9QwXrohaGu61WJbiadpjDN13BiRPADq1pVDtRq582b5qh9COi33hj57w
jFuPNCxuGMao/TWbrNyTgaI4xQXofimHJeVMfgOMgTMByORrn8fX22L+CudIDqtB
pSrDwk7tFxgy0gMeFX5vSieT6Lmu38bBLmPMd2TPUqjI9krpZyPtmfMMVgrNvx5o
JmRK9hIgvmLIuzfIHETa1jQTh6st6WxGFnPnVUibx8vdYW1N+XpNA7xrMMnFuHtq
A1c15Y+b62SsgblEWg5G8pVAvFo+Hss4D3on4YzMm6BZBmVsZ12e4WPzz2CndQI5
onb4VqtP87ux6Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:23 2025 by rpki-client