Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: NwCP+46iULDOlhGYbG6hd3GhuPqR8XNDJic/+UbU01c=
Subject key identifier: 50:B1:58:79:63:12:2A:97:B1:AE:9B:D0:25:D4:DD:08:86:BE:26:9B
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 019880543659AA31CAFE7163EC894F3ADB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 032B
Signing time: Wed 06 Aug 2025 17:00:59 +0000
Manifest this update: Wed 06 Aug 2025 17:00:59 +0000
Manifest next update: Thu 07 Aug 2025 17:00:59 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: 3sza5m+nhjLQc7c15GxKjrWeM0cq+up6dLZipWvJvHY=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:36:59:aa:31:ca:fe:71:63:ec:89:4f:3a:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Aug 6 17:00:59 2025 GMT
Not After : Aug 7 17:00:59 2025 GMT
Subject: CN=50b1587963122a97b1ae9bd025d4dd0886be269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:8f:53:4b:57:be:df:0d:87:8b:87:91:08:
8c:18:05:59:21:c8:82:3e:7a:94:d0:da:76:1e:7f:
b5:bc:25:4a:7e:d5:b1:af:d9:01:89:c2:af:b6:c1:
dd:76:84:2b:0c:c3:91:c5:a6:6b:68:81:4d:4a:77:
37:2f:df:e5:50:64:0d:57:92:e1:22:8f:2d:51:e7:
73:9b:d6:bc:f9:4f:68:58:6c:e4:35:14:c9:a3:76:
85:13:42:03:44:57:85:e2:e0:3b:93:cf:ae:68:9a:
c9:1e:ea:e8:3f:b9:b3:2d:01:3d:fe:4f:fe:3e:76:
a6:3b:fc:44:88:02:59:d6:7e:04:79:24:71:35:b3:
e5:f0:b0:f7:7d:82:8c:17:29:03:11:f1:1c:18:2e:
98:9e:24:7f:91:ea:59:f5:d2:3c:ca:fd:03:74:c0:
64:bd:75:7b:8f:6f:8d:54:3a:a6:68:5f:95:5f:d4:
76:f4:14:98:c5:62:8e:5f:2e:17:75:03:8d:24:a9:
07:c4:27:72:36:2e:90:59:74:d9:5c:c1:78:a3:fb:
86:10:5b:2a:18:d1:b3:07:b3:aa:7e:01:bc:c3:18:
f3:2d:c3:2e:50:3f:5e:24:b2:fe:51:ba:cb:9f:e2:
c1:6f:cb:29:19:e1:c1:46:21:19:83:3c:78:b0:1d:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:58:79:63:12:2A:97:B1:AE:9B:D0:25:D4:DD:08:86:BE:26:9B
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:97:9b:58:07:ad:3f:dd:32:9f:1f:54:b0:59:61:d7:8d:
81:bf:da:c5:b7:0f:c1:6b:2c:e7:7e:e8:bc:31:96:34:79:fe:
88:43:e2:42:54:c2:ec:82:85:9e:5a:42:fb:69:77:e2:e6:e7:
c3:51:7b:23:86:e7:96:bf:40:5b:02:d6:81:43:27:d3:8f:b7:
e7:61:c3:19:c6:d5:00:c4:e0:c8:92:47:73:aa:6b:5f:31:a5:
12:8d:d0:11:86:7b:e0:b5:97:f3:d6:36:67:08:61:b8:e4:31:
6a:52:15:b4:2c:61:0a:05:96:03:4f:34:9a:0e:1a:0f:56:e4:
b4:b0:36:87:38:b4:f9:06:43:09:df:ef:db:67:2f:ff:7b:a7:
ea:57:d4:a4:d6:0e:a0:08:75:8d:1b:e6:8b:0a:22:6d:45:b8:
78:32:7d:d5:c5:7b:de:df:80:f8:fe:ad:b6:69:7f:5b:40:d8:
9f:05:73:fc:da:5f:9e:20:0d:77:0c:e6:c7:ff:0b:86:aa:a8:
f7:0d:b5:09:00:bd:e5:99:06:36:99:c0:79:d9:e0:02:d3:4f:
d8:f1:b5:d1:4c:0d:1c:84:a3:16:e1:69:dd:75:ca:dc:42:1b:
47:66:96:9b:73:8e:67:31:5b:d9:4f:8e:79:28:c0:a4:97:35:
65:dc:7a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVDZZqjHK/nFj7IlPOtsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2
N2VlZmEwHhcNMjUwODA2MTcwMDU5WhcNMjUwODA3MTcwMDU5WjAzMTEwLwYDVQQD
Eyg1MGIxNTg3OTYzMTIyYTk3YjFhZTliZDAyNWQ0ZGQwODg2YmUyNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5GPU0tXvt8Nh4uHkQiMGAVZIciC
PnqU0Np2Hn+1vCVKftWxr9kBicKvtsHddoQrDMORxaZraIFNSnc3L9/lUGQNV5Lh
Io8tUedzm9a8+U9oWGzkNRTJo3aFE0IDRFeF4uA7k8+uaJrJHuroP7mzLQE9/k/+
PnamO/xEiAJZ1n4EeSRxNbPl8LD3fYKMFykDEfEcGC6YniR/kepZ9dI8yv0DdMBk
vXV7j2+NVDqmaF+VX9R29BSYxWKOXy4XdQONJKkHxCdyNi6QWXTZXMF4o/uGEFsq
GNGzB7OqfgG8wxjzLcMuUD9eJLL+UbrLn+LBb8spGeHBRiEZgzx4sB1KewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCxWHljEiqXsa6b0CXU3QiGviabMB8GA1UdIwQY
MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt
YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4
LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSiXm1gH
rT/dMp8fVLBZYdeNgb/axbcPwWss537ovDGWNHn+iEPiQlTC7IKFnlpC+2l34ubn
w1F7I4bnlr9AWwLWgUMn04+352HDGcbVAMTgyJJHc6prXzGlEo3QEYZ74LWX89Y2
ZwhhuOQxalIVtCxhCgWWA080mg4aD1bktLA2hzi0+QZDCd/v22cv/3un6lfUpNYO
oAh1jRvmiwoibUW4eDJ91cV73t+A+P6ttml/W0DYnwVz/NpfniANdwzmx/8Lhqqo
9w21CQC95ZkGNpnAedngAtNP2PG10UwNHISjFuFp3XXK3EIbR2aWm3OOZzFb2U+O
eSjApJc1Zdx6KQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:01:50 2025 by rpki-client