Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: Q4EC2RmPX/zrM2I6eQhNSSbVwf8jjqbME+ciuzqLaGw=
Subject key identifier: 14:C1:9B:13:C8:1B:D1:B2:91:80:0B:09:2D:28:0B:EF:66:48:36:99
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 01987ABF9652B38863BA188246D09DA4AC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 15:00:32 +0000
Manifest this update: Tue 05 Aug 2025 15:00:32 +0000
Manifest next update: Wed 06 Aug 2025 15:00:32 +0000
Files and hashes: 1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: vOC+rPAxw1ae4TO62w40wSbeJdobcmO3HLzvuPcDSPI=)
6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:96:52:b3:88:63:ba:18:82:46:d0:9d:a4:ac:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Aug 5 15:00:32 2025 GMT
Not After : Aug 6 15:00:32 2025 GMT
Subject: CN=14c19b13c81bd1b291800b092d280bef66483699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:30:52:c4:9d:08:05:3d:db:f5:12:1f:98:
4f:6e:80:92:a3:eb:b3:60:e6:ab:1d:81:d9:38:05:
51:83:e0:31:6d:90:e6:ef:a8:ab:28:ff:b4:45:62:
fc:7b:59:ce:a5:5e:85:30:60:32:31:53:00:17:93:
4c:c7:34:1c:d5:48:f0:15:b5:22:22:6c:44:27:80:
39:1e:fc:9f:d3:d7:4a:a4:6a:50:eb:3f:75:de:e2:
18:f1:1d:e8:18:c3:ee:fa:c7:4f:cc:78:1b:54:80:
86:a2:be:40:1c:ea:f8:54:b6:69:20:41:89:cb:de:
e4:6e:a9:5b:6a:a4:07:d0:12:a1:f0:fb:eb:b0:ff:
42:87:4b:fb:2b:f4:05:cd:81:f7:15:09:76:af:65:
0a:c8:0d:03:e1:f7:9a:60:b8:8a:bb:42:6a:f3:9d:
6e:3c:a7:88:98:80:38:82:a1:28:12:82:2b:96:28:
3e:b5:58:16:d7:fe:ef:1d:89:4d:21:6f:28:3f:fd:
85:1f:bd:01:86:3c:4e:1d:34:24:cf:c0:53:ca:f5:
81:1e:bf:17:8c:d9:14:b9:6b:53:74:02:e6:38:0d:
68:fc:d1:ce:a3:c1:78:c3:57:c6:c8:1f:0b:97:7a:
62:28:36:60:e8:12:01:d3:11:15:46:04:8e:59:4c:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:9B:13:C8:1B:D1:B2:91:80:0B:09:2D:28:0B:EF:66:48:36:99
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:59:04:ff:e3:1a:78:8b:64:e6:c2:53:d7:32:51:6b:70:9f:
dc:99:ae:d6:ed:d1:59:a0:4e:54:ec:bc:4c:66:e0:ba:7b:11:
2f:6a:37:4f:82:96:ee:0a:7d:80:cd:e7:a5:7d:9a:8f:9d:a2:
c4:99:18:35:a9:45:c3:54:ec:bb:60:2c:c2:a6:f7:83:32:68:
dd:b8:d1:c7:62:9d:2b:82:5e:e6:2a:c9:e0:56:7b:d5:83:0c:
6e:70:36:10:c3:9a:5c:9e:b1:f3:51:8e:3d:4b:ed:af:b7:cd:
ad:9e:d6:8c:3e:df:73:2c:69:a0:3a:d2:08:5b:cd:03:45:91:
ff:00:b5:de:71:75:7f:c7:97:cf:7e:08:17:0f:70:78:7c:2e:
43:d5:b6:4b:0c:07:f8:9f:69:d5:b8:35:38:6c:91:66:c9:25:
c1:8a:0f:92:bd:6e:29:1a:33:df:22:f6:47:c6:9b:e2:4e:ad:
08:88:85:92:de:4d:6f:3d:6b:dd:79:c8:1e:fe:6b:11:c1:36:
d8:2e:a2:63:92:be:d3:db:b3:9b:8d:09:c2:16:39:ed:6d:f2:
b1:39:fd:89:f0:0b:a2:6e:01:34:46:a4:fa:60:4e:46:62:3d:
be:5f:be:b1:0b:68:f6:ae:df:f5:ee:d7:44:3a:4d:31:66:95:
c7:3a:d7:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v5ZSs4hjuhiCRtCdpKxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0
ZTQzZWEwHhcNMjUwODA1MTUwMDMyWhcNMjUwODA2MTUwMDMyWjAzMTEwLwYDVQQD
EygxNGMxOWIxM2M4MWJkMWIyOTE4MDBiMDkyZDI4MGJlZjY2NDgzNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/owUsSdCAU92/USH5hPboCSo+uz
YOarHYHZOAVRg+AxbZDm76irKP+0RWL8e1nOpV6FMGAyMVMAF5NMxzQc1UjwFbUi
ImxEJ4A5Hvyf09dKpGpQ6z913uIY8R3oGMPu+sdPzHgbVICGor5AHOr4VLZpIEGJ
y97kbqlbaqQH0BKh8PvrsP9Ch0v7K/QFzYH3FQl2r2UKyA0D4feaYLiKu0Jq851u
PKeImIA4gqEoEoIrlig+tVgW1/7vHYlNIW8oP/2FH70BhjxOHTQkz8BTyvWBHr8X
jNkUuWtTdALmOA1o/NHOo8F4w1fGyB8Ll3piKDZg6BIB0xEVRgSOWUwcJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTBmxPIG9GykYALCS0oC+9mSDaZMB8GA1UdIwQY
MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt
ZmVhMGFmZjM1OWY1LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1
LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVkE/+Ma
eItk5sJT1zJRa3Cf3Jmu1u3RWaBOVOy8TGbgunsRL2o3T4KW7gp9gM3npX2aj52i
xJkYNalFw1Tsu2Aswqb3gzJo3bjRx2KdK4Je5irJ4FZ71YMMbnA2EMOaXJ6x81GO
PUvtr7fNrZ7WjD7fcyxpoDrSCFvNA0WR/wC13nF1f8eXz34IFw9weHwuQ9W2SwwH
+J9p1bg1OGyRZsklwYoPkr1uKRoz3yL2R8ab4k6tCIiFkt5Nbz1r3XnIHv5rEcE2
2C6iY5K+09uzm40JwhY57W3ysTn9ifALom4BNEak+mBORmI9vl++sQto9q7f9e7X
RDpNMWaVxzrXoQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:26 2025 by rpki-client