Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: CKldBSwYOq+6ShPHRA3s6FCYHG5LQyOXvSvhnvmtHcE=
Subject key identifier: 22:F7:AF:78:11:A7:BC:61:98:28:DF:B4:DC:11:55:70:03:F5:A4:B0
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 019889202FCDD3493D27316CBF66DDB02C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 10:00:44 +0000
Manifest this update: Fri 08 Aug 2025 10:00:44 +0000
Manifest next update: Sat 09 Aug 2025 10:00:44 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: YqbMIDXRXey+8UTqWU0xbZBHFqTU5OE4DJLr8nMRn8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:2f:cd:d3:49:3d:27:31:6c:bf:66:dd:b0:2c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Aug 8 10:00:44 2025 GMT
Not After : Aug 9 10:00:44 2025 GMT
Subject: CN=22f7af7811a7bc619828dfb4dc11557003f5a4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:cc:a1:a5:61:c0:58:e8:a6:54:01:4f:44:
4d:dc:85:fd:54:99:db:34:5a:e1:f7:84:9e:fa:3f:
06:f7:2d:e5:bf:82:02:99:9f:63:c1:8a:60:b5:b7:
ec:c8:b0:1c:f7:e1:07:5c:90:28:cd:a7:7f:c9:47:
94:9b:89:e8:10:9a:ee:54:0a:cd:b4:35:cf:b9:66:
15:10:d4:18:c1:06:5d:52:4b:31:46:03:e3:cd:5c:
8c:4d:c7:81:e1:fa:a5:f2:cd:88:5a:9a:cd:0f:c6:
e2:67:c2:3c:14:c2:94:48:81:91:17:73:52:da:8c:
c4:a2:4e:08:ea:9c:96:18:a8:f7:94:4c:e7:8d:e3:
f3:cd:26:42:7b:11:58:d9:25:71:d5:80:13:0b:89:
14:ac:75:ea:73:a7:87:d1:68:fa:1c:d5:c0:d1:40:
60:81:e4:28:3c:b2:63:44:a3:0a:a5:21:52:4b:4e:
08:3e:e7:59:5a:07:7c:34:01:3c:0e:00:12:5e:9d:
c7:6a:fc:30:71:36:aa:aa:9a:74:9a:26:c1:d9:ba:
d4:f7:9a:b1:cf:c5:01:e1:4a:9a:f6:4a:90:fb:50:
95:5e:2a:78:8b:c5:9a:7e:bb:83:c6:f4:ad:b0:37:
ab:e7:cb:c1:c5:ec:8b:d8:57:2f:6e:e1:af:24:68:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:AF:78:11:A7:BC:61:98:28:DF:B4:DC:11:55:70:03:F5:A4:B0
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:99:d0:a5:43:98:43:c7:7b:8b:98:6c:2d:9d:69:88:d6:3e:
d1:e7:56:d1:d4:2f:12:42:e6:23:46:23:02:33:4d:04:20:ec:
02:fa:fa:4b:01:08:f2:a9:f1:b8:bd:9b:77:db:e6:83:4d:8c:
26:ff:d3:7c:90:9d:d0:79:12:8c:a6:c2:e5:cc:5d:48:5d:12:
46:64:f6:d8:c4:c1:e9:2b:a3:5e:a0:31:4d:82:8d:45:71:62:
79:fe:cd:ae:36:ae:34:49:f8:b1:84:ac:29:ba:4e:bb:14:28:
56:8f:cb:d6:29:f4:69:e8:c0:2e:f8:d6:0b:cb:ac:d8:39:51:
43:ba:4a:a1:ca:6a:af:d9:98:64:05:70:18:ff:be:52:fb:a9:
4e:81:04:0c:60:14:e0:d5:dd:a3:b3:dc:47:59:89:c6:d0:42:
5e:8e:c2:f5:56:eb:db:bd:8c:6c:bf:7e:19:41:8d:71:d3:0b:
78:c7:f8:be:3f:28:73:7c:e7:1e:af:c1:a5:f4:39:b2:45:0d:
03:7c:07:15:d5:e0:aa:3f:b9:9f:c4:ad:ff:55:ff:30:e5:53:
e5:61:18:96:d9:c0:7a:f3:79:04:f3:6e:54:db:e9:4a:9d:ef:
f8:b2:fc:cd:84:86:91:27:d7:52:ec:ff:be:76:dd:93:97:56:
db:c3:ac:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIC/N00k9JzFsv2bdsCxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3
MzZiMTkwHhcNMjUwODA4MTAwMDQ0WhcNMjUwODA5MTAwMDQ0WjAzMTEwLwYDVQQD
EygyMmY3YWY3ODExYTdiYzYxOTgyOGRmYjRkYzExNTU3MDAzZjVhNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRvMoaVhwFjoplQBT0RN3IX9VJnb
NFrh94Se+j8G9y3lv4ICmZ9jwYpgtbfsyLAc9+EHXJAozad/yUeUm4noEJruVArN
tDXPuWYVENQYwQZdUksxRgPjzVyMTceB4fql8s2IWprND8biZ8I8FMKUSIGRF3NS
2ozEok4I6pyWGKj3lEznjePzzSZCexFY2SVx1YATC4kUrHXqc6eH0Wj6HNXA0UBg
geQoPLJjRKMKpSFSS04IPudZWgd8NAE8DgASXp3HavwwcTaqqpp0mibB2brU95qx
z8UB4Uqa9kqQ+1CVXip4i8WafruDxvStsDer58vBxeyL2FcvbuGvJGjr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCL3r3gRp7xhmCjftNwRVXAD9aSwMB8GA1UdIwQY
MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et
MzNlMjcwNWI0YzNlLzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl
LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpnQpUOY
Q8d7i5hsLZ1piNY+0edW0dQvEkLmI0YjAjNNBCDsAvr6SwEI8qnxuL2bd9vmg02M
Jv/TfJCd0HkSjKbC5cxdSF0SRmT22MTB6SujXqAxTYKNRXFief7NrjauNEn4sYSs
KbpOuxQoVo/L1in0aejALvjWC8us2DlRQ7pKocpqr9mYZAVwGP++UvupToEEDGAU
4NXdo7PcR1mJxtBCXo7C9Vbr272MbL9+GUGNcdMLeMf4vj8oc3znHq/BpfQ5skUN
A3wHFdXgqj+5n8St/1X/MOVT5WEYltnAevN5BPNuVNvpSp3v+LL8zYSGkSfXUuz/
vnbdk5dW28OsFA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:28 2025 by rpki-client