Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier: KDMBh7dhrYgppfpy7jgvL9xMhZM3qiSuPFyBsRImmlc=
Subject key identifier: 6F:1F:CF:B7:DB:84:53:40:DA:8C:BA:19:A2:E6:84:BC:8B:FC:CA:18
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 01988B7CC17B005432AB2BA3BCA8FA4081B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number: 0C88
Signing time: Fri 08 Aug 2025 21:01:05 +0000
Manifest this update: Fri 08 Aug 2025 21:01:05 +0000
Manifest next update: Sat 09 Aug 2025 21:01:05 +0000
Files and hashes: 1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=)
2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: EcWih4aAtL4XeHa41mGlBnYDeNqdIy2CtvnTSPkniCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:c1:7b:00:54:32:ab:2b:a3:bc:a8:fa:40:81:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Aug 8 21:01:05 2025 GMT
Not After : Aug 9 21:01:05 2025 GMT
Subject: CN=6f1fcfb7db845340da8cba19a2e684bc8bfcca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:9a:33:3c:1c:2e:a3:38:3a:26:d9:99:1c:
7e:d3:e0:23:a4:59:e8:d5:2b:7f:49:06:3b:93:fc:
61:69:38:08:6f:d5:3a:fd:d2:4e:34:12:ce:5d:6e:
ac:38:c1:44:b7:dc:16:60:cb:de:52:25:a3:92:b3:
af:7d:c2:8a:0a:8c:50:18:04:1b:2b:91:99:08:fe:
34:34:b5:22:35:17:52:bd:4f:8d:ff:7f:1c:39:3f:
7c:1b:96:c3:88:6b:1a:81:b9:f1:fe:11:c3:a2:08:
b6:43:00:9b:c2:6b:be:e8:5b:0a:80:7f:62:f5:af:
18:35:4c:1b:b8:1e:02:56:8d:69:84:c1:15:f2:87:
34:01:da:31:f2:30:1c:52:66:1d:1b:8f:a5:26:0f:
70:e0:ef:bc:d0:eb:83:03:99:0b:49:de:f6:d4:a5:
71:32:cf:d1:65:29:28:5a:1d:b2:c9:03:25:39:d2:
36:4d:1a:96:b1:a5:33:a1:1f:f4:13:de:1a:8a:9f:
0a:98:eb:c5:01:0f:e3:23:f8:01:1c:b2:ed:4a:c3:
6c:1c:c7:87:fc:de:a7:95:3b:4c:74:41:6e:36:3c:
10:fe:3e:ff:39:9b:59:8c:27:9a:7e:42:a9:a1:02:
1f:68:ee:b6:ce:fd:9d:f1:84:93:34:1d:0b:55:5e:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1F:CF:B7:DB:84:53:40:DA:8C:BA:19:A2:E6:84:BC:8B:FC:CA:18
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:87:14:46:20:74:7b:fd:7f:0f:e2:8e:fb:8f:c6:3f:92:
d4:66:b7:b3:ae:a6:33:c9:2a:9c:e2:88:79:52:a1:ec:9c:65:
68:f2:24:2b:d6:a6:ae:78:9b:a8:f5:57:31:4f:4f:fd:57:e3:
9d:53:10:3d:e7:93:dc:f8:2e:28:01:7b:d5:22:e4:ee:20:e0:
ef:fd:dc:f0:cb:d0:ea:96:29:13:df:88:49:e6:43:a1:65:70:
9c:e0:2f:9d:f7:ce:c3:f0:32:3c:d4:43:5c:ef:84:df:1c:71:
4a:05:b3:b2:a2:f5:61:15:2e:4f:46:54:bf:b6:a5:b3:56:47:
a2:13:46:29:42:6b:ac:68:ff:7a:ea:a2:cf:53:c2:93:2b:b2:
71:b2:fc:76:9f:77:24:02:a3:8f:0a:02:5a:ba:c6:85:f6:a4:
12:ef:f1:d7:a2:8e:cb:85:39:7d:d7:27:05:87:0b:22:ae:f4:
ce:62:ab:09:15:b5:de:04:84:b3:cc:c6:df:53:4c:70:e9:3c:
16:a1:41:46:29:75:99:8c:25:04:03:8e:f6:25:2f:83:ba:c6:
52:a7:33:44:96:aa:b8:d5:b5:81:54:29:e8:ac:88:80:7a:63:
20:48:35:3f:ae:a7:f1:37:06:37:52:19:fa:b6:43:fa:c2:43:
db:a2:4b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfMF7AFQyqyujvKj6QIG3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTExNzAyZjQ5M2Q2ZWRlMWI2ZTg3MmJjYWNkY2I4NTQy
ODJiYWQwHhcNMjUwODA4MjEwMTA1WhcNMjUwODA5MjEwMTA1WjAzMTEwLwYDVQQD
Eyg2ZjFmY2ZiN2RiODQ1MzQwZGE4Y2JhMTlhMmU2ODRiYzhiZmNjYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUqaMzwcLqM4OibZmRx+0+AjpFno
1St/SQY7k/xhaTgIb9U6/dJONBLOXW6sOMFEt9wWYMveUiWjkrOvfcKKCoxQGAQb
K5GZCP40NLUiNRdSvU+N/38cOT98G5bDiGsagbnx/hHDogi2QwCbwmu+6FsKgH9i
9a8YNUwbuB4CVo1phMEV8oc0Adox8jAcUmYdG4+lJg9w4O+80OuDA5kLSd721KVx
Ms/RZSkoWh2yyQMlOdI2TRqWsaUzoR/0E94aip8KmOvFAQ/jI/gBHLLtSsNsHMeH
/N6nlTtMdEFuNjwQ/j7/OZtZjCeafkKpoQIfaO62zv2d8YSTNB0LVV6ELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8fz7fbhFNA2oy6GaLmhLyL/MoYMB8GA1UdIwQY
MBaAFM2RFwL0k9bt4bbocrys3LhUKCutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUt
MjJiNzc4MjE2MmNhLzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUtMjJiNzc4MjE2MmNh
LzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUmHFEYg
dHv9fw/ijvuPxj+S1Ga3s66mM8kqnOKIeVKh7JxlaPIkK9amrnibqPVXMU9P/Vfj
nVMQPeeT3PguKAF71SLk7iDg7/3c8MvQ6pYpE9+ISeZDoWVwnOAvnffOw/AyPNRD
XO+E3xxxSgWzsqL1YRUuT0ZUv7als1ZHohNGKUJrrGj/euqiz1PCkyuycbL8dp93
JAKjjwoCWrrGhfakEu/x16KOy4U5fdcnBYcLIq70zmKrCRW13gSEs8zG31NMcOk8
FqFBRil1mYwlBAOO9iUvg7rGUqczRJaquNW1gVQp6KyIgHpjIEg1P66n8TcGN1IZ
+rZD+sJD26JLFg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:41 2025 by rpki-client