Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: +zpoDupUUbnvWaAtDOB/MGz0tfEgmUI6MeyNwzL71Vk=
Subject key identifier: F0:25:48:C4:9F:2D:23:FE:F2:93:6F:BE:FA:B6:28:16:4F:6A:F7:5B
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 01987D1C75F4B46A47567FC6F15F31D289C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 1572
Signing time: Wed 06 Aug 2025 02:01:13 +0000
Manifest this update: Wed 06 Aug 2025 02:01:13 +0000
Manifest next update: Thu 07 Aug 2025 02:01:13 +0000
Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: 3RHqS4PeXcr0H2cCp1S78RPbu6a4FXriCRpa+hZtK6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:75:f4:b4:6a:47:56:7f:c6:f1:5f:31:d2:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Aug 6 02:01:13 2025 GMT
Not After : Aug 7 02:01:13 2025 GMT
Subject: CN=f02548c49f2d23fef2936fbefab628164f6af75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:a9:cd:7c:2b:5f:cb:73:75:a2:27:4a:8b:
c9:bb:66:c1:ea:e4:96:89:1f:00:3c:85:7f:6d:fd:
5e:bf:20:3a:56:b9:2c:8e:56:4c:04:ac:f4:1f:4f:
3b:fd:a2:27:31:5f:e8:1a:81:c4:8b:46:99:87:7d:
44:b5:02:6c:ee:93:a1:84:ed:9a:4e:7f:39:3c:cd:
cf:cc:8f:f3:35:50:bf:60:c4:a5:1e:19:fd:f8:bf:
ff:a0:23:ca:43:bf:c6:7a:49:3e:8e:e2:ae:de:c2:
fd:bb:8c:42:65:9f:6d:6a:77:6c:ba:c7:be:70:4e:
32:0c:06:0f:4b:99:fd:60:3f:16:e8:84:92:55:dc:
9d:cc:97:26:47:f5:0a:72:9d:55:cf:51:97:7d:58:
fa:09:10:0e:fd:5a:e1:54:da:b7:c0:c3:0e:4e:eb:
ff:89:61:9c:a7:1f:b6:45:4a:b9:b1:a8:a3:2a:b8:
4c:71:83:05:ad:5b:fa:83:7b:5c:fb:11:ad:04:9a:
ff:09:66:4e:91:80:14:14:a0:9a:c3:1c:04:62:6e:
fa:6a:a6:84:b4:a4:2e:e6:76:f3:55:de:7b:60:4b:
48:8b:1d:72:68:ac:12:25:fb:03:2d:0a:91:60:d4:
d4:47:37:c2:a2:ab:96:63:82:3e:49:01:e3:53:59:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:48:C4:9F:2D:23:FE:F2:93:6F:BE:FA:B6:28:16:4F:6A:F7:5B
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:5e:c4:4a:50:2c:80:71:78:49:51:8b:5f:02:41:e1:a8:
6c:9e:01:33:d1:03:2a:cb:51:7b:0e:6f:c7:e5:5f:1a:25:27:
87:52:68:77:9e:16:03:a6:d6:3d:19:bf:01:9d:3a:56:c1:08:
da:b2:94:44:15:09:b4:7f:16:32:e0:73:d3:61:dc:d1:f1:8e:
a0:39:6e:9f:7b:ed:c6:68:5c:cb:1a:28:98:6c:ff:31:30:d4:
f4:08:ab:0c:29:4d:b9:1a:67:a3:13:de:61:a2:b7:85:e6:89:
60:a3:38:7a:67:b0:62:33:cb:c3:bb:ae:0d:76:87:47:12:99:
14:37:fe:4d:ce:93:c6:23:76:92:83:42:3d:d8:d1:af:ce:ea:
e3:7d:c5:a6:1c:7d:b7:24:b9:83:e1:79:09:28:01:01:fd:6a:
dc:61:9f:88:e1:33:d2:e8:21:53:77:6a:4e:b3:91:a4:77:2b:
63:9b:98:02:82:a8:a8:1d:c3:92:0b:3f:16:42:0c:46:5b:98:
15:66:ab:f6:35:a4:b8:51:09:0a:c2:a3:7c:66:e9:0d:3d:4c:
af:6a:3b:dd:01:94:92:ac:2e:fb:dd:85:c9:6c:4d:9d:7e:d5:
07:ae:6a:c5:50:80:38:dd:01:d7:7d:8e:38:de:1c:0a:8a:6c:
27:f6:12:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HHX0tGpHVn/G8V8x0onEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjUwODA2MDIwMTEzWhcNMjUwODA3MDIwMTEzWjAzMTEwLwYDVQQD
EyhmMDI1NDhjNDlmMmQyM2ZlZjI5MzZmYmVmYWI2MjgxNjRmNmFmNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybGpzXwrX8tzdaInSovJu2bB6uSW
iR8APIV/bf1evyA6VrksjlZMBKz0H087/aInMV/oGoHEi0aZh31EtQJs7pOhhO2a
Tn85PM3PzI/zNVC/YMSlHhn9+L//oCPKQ7/Gekk+juKu3sL9u4xCZZ9tandsuse+
cE4yDAYPS5n9YD8W6ISSVdydzJcmR/UKcp1Vz1GXfVj6CRAO/VrhVNq3wMMOTuv/
iWGcpx+2RUq5saijKrhMcYMFrVv6g3tc+xGtBJr/CWZOkYAUFKCawxwEYm76aqaE
tKQu5nbzVd57YEtIix1yaKwSJfsDLQqRYNTURzfCoquWY4I+SQHjU1kGYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAlSMSfLSP+8pNvvvq2KBZPavdbMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLJexEpQ
LIBxeElRi18CQeGobJ4BM9EDKstRew5vx+VfGiUnh1Jod54WA6bWPRm/AZ06VsEI
2rKURBUJtH8WMuBz02Hc0fGOoDlun3vtxmhcyxoomGz/MTDU9AirDClNuRpnoxPe
YaK3heaJYKM4emewYjPLw7uuDXaHRxKZFDf+Tc6TxiN2koNCPdjRr87q433Fphx9
tyS5g+F5CSgBAf1q3GGfiOEz0ughU3dqTrORpHcrY5uYAoKoqB3Dkgs/FkIMRluY
FWar9jWkuFEJCsKjfGbpDT1Mr2o73QGUkqwu+92FyWxNnX7VB65qxVCAON0B132O
ON4cCopsJ/YS9g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:20:54 2025 by rpki-client