Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: BsN6hhOoEjb0+JW1mA1nTtPizqnBy4lT7TnDLS/Aykw=
Subject key identifier: F4:0D:86:00:00:42:6D:25:9E:A4:6A:20:56:49:4F:91:E8:62:09:3D
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 01987A5245C35FE0BD97D27F4E8D2F039509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 110C
Signing time: Tue 05 Aug 2025 13:01:08 +0000
Manifest this update: Tue 05 Aug 2025 13:01:08 +0000
Manifest next update: Wed 06 Aug 2025 13:01:08 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: 8OxywBNwjUVUeKg5BQG2tROWBxfazBXHWU+YwlsOlKs=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:45:c3:5f:e0:bd:97:d2:7f:4e:8d:2f:03:95:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: Aug 5 13:01:08 2025 GMT
Not After : Aug 6 13:01:08 2025 GMT
Subject: CN=f40d860000426d259ea46a2056494f91e862093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:92:ac:24:84:7e:55:5c:d5:e5:b9:60:10:
54:e1:19:20:2f:fc:3c:9e:17:11:aa:f6:8a:17:3e:
31:bb:a5:40:f6:75:d5:31:3f:ca:79:45:e6:a3:b8:
ff:ca:b1:f7:05:c4:61:e1:ea:55:43:5e:95:61:23:
0b:a0:20:61:f3:f4:0e:7c:1e:cf:58:d1:5c:ad:c8:
60:30:bb:8a:79:28:81:81:eb:9a:57:b1:42:30:26:
7f:d9:12:3a:76:38:f5:fe:d8:b1:0d:39:1e:93:f0:
91:65:70:bd:86:0d:12:34:15:34:08:5d:84:88:5e:
e1:92:55:f0:cf:be:99:25:25:95:49:29:62:fe:f6:
87:09:6d:8f:47:93:55:da:cc:6b:9a:10:e3:8b:65:
89:4a:24:73:a5:32:3d:bb:87:ff:09:8a:58:ad:09:
a5:a4:39:3e:8f:1f:73:74:00:54:c3:e6:a8:14:39:
9a:f5:b0:76:f1:e4:60:4f:ce:37:f5:14:6e:6a:7d:
db:fb:94:b4:a5:87:a9:6e:a8:23:c2:e9:5d:fd:93:
d6:01:4d:d9:bd:16:38:7d:30:0d:ce:46:ae:0b:eb:
d7:fd:27:5b:9f:b1:b9:a9:9d:e8:10:e3:5a:2e:3b:
c9:92:d3:f0:ed:35:de:b2:04:6c:7f:1b:6f:e3:38:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:86:00:00:42:6D:25:9E:A4:6A:20:56:49:4F:91:E8:62:09:3D
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9e:97:05:5c:a5:7e:43:cf:97:e7:28:64:ea:82:d2:b7:51:
49:4e:c7:54:df:86:cf:2f:5a:2b:ac:82:2f:8c:e4:69:19:ad:
ce:a2:f6:32:a3:2d:e6:98:35:91:a1:84:9f:52:93:7a:11:04:
73:87:53:19:1a:a7:e0:a1:a8:f2:a2:6e:b6:2d:fb:27:44:f6:
7b:a3:81:ab:a5:ff:4a:fc:3c:50:df:66:38:18:d4:5e:b6:30:
64:58:5e:7f:5d:38:42:a7:6f:58:e7:e9:d4:9f:80:6d:fc:db:
69:b4:8b:a8:de:76:f3:18:11:1b:0e:05:78:6c:16:e8:99:81:
6b:29:8f:b9:bc:75:28:81:b0:51:8f:00:7c:02:37:94:98:5c:
aa:2f:51:2a:c2:11:5b:4d:e6:19:cf:e2:fc:0b:2b:65:90:9d:
f1:48:70:77:17:29:24:40:69:82:db:86:a7:28:47:7e:57:a0:
70:b3:e2:53:70:37:46:11:b1:f0:e0:61:69:f3:76:58:b5:52:
5b:9b:b4:09:68:11:57:2d:b2:7d:49:94:e9:44:19:29:4e:01:
bf:bf:3e:e0:c5:ab:93:24:eb:b2:dd:9e:a6:51:92:45:6d:ab:
05:e2:9b:e3:4a:81:37:c5:4a:9a:70:8a:7e:40:39:f2:32:87:
5e:65:89:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6UkXDX+C9l9J/To0vA5UJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzNhY2Y5MjlhMjIzMzhmMmIzODAxODBjYzg1MmRiNDc3
OWFhZDAwHhcNMjUwODA1MTMwMTA4WhcNMjUwODA2MTMwMTA4WjAzMTEwLwYDVQQD
EyhmNDBkODYwMDAwNDI2ZDI1OWVhNDZhMjA1NjQ5NGY5MWU4NjIwOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMSSrCSEflVc1eW5YBBU4RkgL/w8
nhcRqvaKFz4xu6VA9nXVMT/KeUXmo7j/yrH3BcRh4epVQ16VYSMLoCBh8/QOfB7P
WNFcrchgMLuKeSiBgeuaV7FCMCZ/2RI6djj1/tixDTkek/CRZXC9hg0SNBU0CF2E
iF7hklXwz76ZJSWVSSli/vaHCW2PR5NV2sxrmhDji2WJSiRzpTI9u4f/CYpYrQml
pDk+jx9zdABUw+aoFDma9bB28eRgT8439RRuan3b+5S0pYepbqgjwuld/ZPWAU3Z
vRY4fTANzkauC+vX/Sdbn7G5qZ3oEONaLjvJktPw7TXesgRsfxtv4zjZNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQNhgAAQm0lnqRqIFZJT5HoYgk9MB8GA1UdIwQY
MBaAFGfDrPkpoiM48rOAGAzIUttHearQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUt
Y2FjYThiODBjOTFjLzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jYTQ4MTUtMGUwMC00OWJmLTg4ZjUtY2FjYThiODBjOTFj
LzEvWjhPcy1TbWlJemp5czRBWURNaFMyMGQ1cXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmp6XBVyl
fkPPl+coZOqC0rdRSU7HVN+Gzy9aK6yCL4zkaRmtzqL2MqMt5pg1kaGEn1KTehEE
c4dTGRqn4KGo8qJuti37J0T2e6OBq6X/Svw8UN9mOBjUXrYwZFhef104QqdvWOfp
1J+AbfzbabSLqN528xgRGw4FeGwW6JmBaymPubx1KIGwUY8AfAI3lJhcqi9RKsIR
W03mGc/i/AsrZZCd8UhwdxcpJEBpgtuGpyhHflegcLPiU3A3RhGx8OBhafN2WLVS
W5u0CWgRVy2yfUmU6UQZKU4Bv78+4MWrkyTrst2eplGSRW2rBeKb40qBN8VKmnCK
fkA58jKHXmWJag==
-----END CERTIFICATE-----
Generated at Tue Aug 5 20:03:37 2025 by rpki-client