Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: rf/1f78UXGW0OWRcP9jQfmQygFQ/szFebYO7biI0UOs=
Subject key identifier: 0F:61:84:9A:24:DD:A5:9B:89:F1:1C:5A:B6:61:E8:03:7F:0B:0C:DA
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 0198745075B6F0FFA03B890A69A522DDA8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0C43
Signing time: Mon 04 Aug 2025 09:01:26 +0000
Manifest this update: Mon 04 Aug 2025 09:01:26 +0000
Manifest next update: Tue 05 Aug 2025 09:01:26 +0000
Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: XydCjchg2PBRk2E5J4xW3WGuEY9HeFu6VNWVKBShZOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:75:b6:f0:ff:a0:3b:89:0a:69:a5:22:dd:a8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Aug 4 09:01:26 2025 GMT
Not After : Aug 5 09:01:26 2025 GMT
Subject: CN=0f61849a24dda59b89f11c5ab661e8037f0b0cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:b2:c9:42:be:45:f2:d3:95:80:83:3a:e9:
09:32:c6:cc:1c:eb:fe:07:23:e6:22:f5:e2:b4:01:
ab:7c:c9:d6:21:ad:d3:6d:83:1b:19:71:a6:31:61:
95:41:74:fc:68:8d:01:6b:4f:29:36:e2:65:64:e4:
b4:10:a5:c9:0b:c8:87:26:07:ac:51:c2:63:54:b2:
0f:fd:f8:9b:fe:5d:a2:42:d7:8e:1f:6c:69:fd:01:
68:73:7a:82:8f:d2:1b:46:e9:e9:bc:fb:33:70:9c:
80:f2:ed:2b:01:86:ac:24:08:1f:4b:26:79:a0:74:
34:1a:08:46:e2:e9:33:69:92:b2:02:71:cf:18:b3:
c2:fa:87:4e:ef:54:dd:2b:31:1c:9d:c8:7b:33:37:
79:8a:3e:88:14:d1:1b:8d:68:d9:41:8b:cd:22:35:
0e:a7:e6:f7:5a:cd:31:7c:1b:f8:ea:e0:3d:4c:64:
19:84:3e:33:1d:8b:ef:f9:74:bc:8e:39:a0:be:82:
f1:82:52:f4:ca:ab:2b:e2:cb:7f:ab:44:f2:8c:80:
cb:fc:c9:bf:8f:76:e6:1c:ad:1a:12:2d:30:af:88:
d3:3e:87:4c:6f:e8:b3:b1:1e:4d:9b:b1:ea:48:96:
6c:61:30:0b:f2:5a:c9:53:7e:74:42:51:fa:56:a8:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:84:9A:24:DD:A5:9B:89:F1:1C:5A:B6:61:E8:03:7F:0B:0C:DA
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:43:05:eb:0f:fe:e7:6c:b7:ac:0c:ea:78:5e:8e:43:f3:81:
b5:96:0a:c2:ca:4d:b0:86:c3:c1:a4:25:66:5f:21:bc:f8:b6:
f6:af:68:81:aa:89:2f:de:d9:13:9c:68:1d:0d:99:a7:0b:f9:
43:aa:25:60:ab:c0:0f:15:d5:92:d6:13:3d:ec:bf:14:96:ba:
c2:27:25:34:a4:e3:7f:08:8f:29:51:3a:64:09:15:ae:44:d7:
20:a6:9f:29:0f:37:fd:be:80:0e:ee:6e:79:11:cb:b7:5b:d6:
db:07:2b:1c:35:a4:2a:91:14:63:0c:82:26:5a:de:d1:e3:04:
5d:b1:97:9c:1e:ae:b1:ac:8b:23:a2:b3:64:d2:e4:05:5a:68:
7a:60:eb:87:52:07:fc:83:9f:56:53:be:26:17:c0:0a:78:f2:
60:4c:67:e5:fb:c9:cc:4c:f0:1e:7b:24:34:9f:c4:43:21:04:
6b:6b:33:b9:51:48:86:6d:a5:36:3e:5f:98:f1:68:08:62:59:
34:16:56:2a:fb:3a:c0:9d:bc:10:9b:02:58:9a:a6:14:98:32:
94:62:39:58:dd:f3:9f:da:11:df:f7:f6:99:42:ec:2c:f8:66:
b0:db:8f:0a:89:a5:46:e7:6f:97:c5:5a:01:14:7d:5f:bd:32:
00:5c:85:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UHW28P+gO4kKaaUi3aj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2
YjkzZmQwHhcNMjUwODA0MDkwMTI2WhcNMjUwODA1MDkwMTI2WjAzMTEwLwYDVQQD
EygwZjYxODQ5YTI0ZGRhNTliODlmMTFjNWFiNjYxZTgwMzdmMGIwY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTqyyUK+RfLTlYCDOukJMsbMHOv+
ByPmIvXitAGrfMnWIa3TbYMbGXGmMWGVQXT8aI0Ba08pNuJlZOS0EKXJC8iHJges
UcJjVLIP/fib/l2iQteOH2xp/QFoc3qCj9IbRunpvPszcJyA8u0rAYasJAgfSyZ5
oHQ0GghG4ukzaZKyAnHPGLPC+odO71TdKzEcnch7Mzd5ij6IFNEbjWjZQYvNIjUO
p+b3Ws0xfBv46uA9TGQZhD4zHYvv+XS8jjmgvoLxglL0yqsr4st/q0TyjIDL/Mm/
j3bmHK0aEi0wr4jTPodMb+izsR5Nm7HqSJZsYTAL8lrJU350QlH6Vqi4VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9hhJok3aWbifEcWrZh6AN/CwzaMB8GA1UdIwQY
MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt
NmNmMTY1MjM5YmQ5LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5
LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUMF6w/+
52y3rAzqeF6OQ/OBtZYKwspNsIbDwaQlZl8hvPi29q9ogaqJL97ZE5xoHQ2Zpwv5
Q6olYKvADxXVktYTPey/FJa6wiclNKTjfwiPKVE6ZAkVrkTXIKafKQ83/b6ADu5u
eRHLt1vW2wcrHDWkKpEUYwyCJlre0eMEXbGXnB6usayLI6KzZNLkBVpoemDrh1IH
/IOfVlO+JhfACnjyYExn5fvJzEzwHnskNJ/EQyEEa2szuVFIhm2lNj5fmPFoCGJZ
NBZWKvs6wJ28EJsCWJqmFJgylGI5WN3zn9oR3/f2mULsLPhmsNuPComlRudvl8Va
ARR9X70yAFyFSQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:08:59 2025 by rpki-client