Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: cv1smCvjcMs3URZheuWCmmnp26CUgn7rqlnb5Dnmo2Q=
Subject key identifier: 27:7A:42:BB:48:89:5D:26:4B:23:18:BE:43:2E:C8:93:35:FD:E6:D9
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019875D2025D57BE5617ADBB675629594E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0ECD
Signing time: Mon 04 Aug 2025 16:02:33 +0000
Manifest this update: Mon 04 Aug 2025 16:02:33 +0000
Manifest next update: Tue 05 Aug 2025 16:02:33 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: 4oz7n87HdP8yrtrDwipqymZI/ada5CUyu97jBSNwQuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:02:5d:57:be:56:17:ad:bb:67:56:29:59:4e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Aug 4 16:02:33 2025 GMT
Not After : Aug 5 16:02:33 2025 GMT
Subject: CN=277a42bb48895d264b2318be432ec89335fde6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:73:c8:38:dc:17:5a:31:74:18:a3:85:26:
8e:3c:6d:9c:03:bd:a0:97:7f:e5:dc:7b:9a:e7:ae:
2b:84:7e:4e:0c:d4:a4:1f:d9:a9:a8:6f:85:d2:d8:
dc:1a:7e:55:e3:19:50:c0:b5:ff:32:cd:a8:35:5a:
37:36:44:6a:fd:60:9e:95:a0:3c:97:bf:a4:19:8d:
39:cc:2b:c9:db:f4:53:21:51:16:1f:49:65:f8:fd:
ff:a7:c6:eb:56:37:0a:b1:b0:d7:5b:34:38:60:e2:
b6:4d:c3:0b:02:f6:11:3e:2c:6b:ed:72:86:ad:64:
48:7f:5e:be:a0:4b:6a:7f:91:84:43:d3:f6:67:6e:
fa:ab:0c:17:74:1d:f7:12:7b:8f:80:9a:68:f4:a3:
65:e0:ed:7b:fb:71:73:25:bb:5f:1e:ed:91:20:b1:
60:fe:6c:66:fe:ff:c5:89:82:e8:42:88:7b:75:81:
ca:26:fd:fc:06:fe:27:d5:84:3b:1c:31:9e:98:4b:
25:d5:8f:d5:b7:6f:2c:36:c7:18:74:4c:07:5f:a4:
9d:9a:c7:4b:28:1d:45:6e:8d:24:5d:58:46:ea:0a:
02:5d:b5:bc:a9:bf:99:00:ca:27:96:68:8b:69:4f:
f7:1f:3e:04:ae:8a:53:54:36:c3:13:4a:7a:eb:05:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7A:42:BB:48:89:5D:26:4B:23:18:BE:43:2E:C8:93:35:FD:E6:D9
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7b:5b:15:6a:b4:61:f3:4b:c1:ef:18:1e:78:f8:60:3c:da:
18:57:4e:64:c3:94:b3:1a:31:c1:6a:ed:23:10:d9:66:10:68:
5c:3e:28:54:36:59:c2:9c:98:6b:8c:c2:07:f2:f9:83:57:61:
8c:cf:a3:0d:6e:09:16:73:e9:30:e9:b9:b2:44:1a:50:49:ce:
08:5b:6d:c6:30:06:91:9d:a3:18:c0:91:f1:36:bf:d0:1c:fd:
cb:cc:5e:a8:a7:93:56:e0:55:76:b6:d2:ae:ec:5c:39:4a:88:
46:7b:dc:9e:9d:9e:da:11:48:e2:1c:4f:8c:72:f6:33:78:dd:
92:20:ba:e4:9b:74:ae:ec:50:c5:32:0b:9a:f2:dc:26:29:8f:
36:4e:18:b6:7f:73:81:c0:cd:c0:6e:55:d6:e4:af:72:1f:a9:
2a:1a:23:98:55:aa:6d:9f:77:45:cd:59:2e:95:4b:59:78:04:
d0:12:5b:8b:52:fd:61:e1:68:b3:e8:9b:40:f9:4e:4f:e0:79:
a5:65:eb:a3:b1:d8:5d:88:28:8e:a7:e2:d8:b6:f5:81:9f:7a:
bf:80:c4:cf:33:5c:a3:3d:57:f7:55:49:54:10:41:ee:ab:73:
71:ef:fe:69:e5:76:28:64:f2:a4:60:f1:c5:2b:3b:8e:2a:cb:
11:d0:37:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10gJdV75WF627Z1YpWU50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk
OWRjYzgwHhcNMjUwODA0MTYwMjMzWhcNMjUwODA1MTYwMjMzWjAzMTEwLwYDVQQD
EygyNzdhNDJiYjQ4ODk1ZDI2NGIyMzE4YmU0MzJlYzg5MzM1ZmRlNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jZzyDjcF1oxdBijhSaOPG2cA72g
l3/l3Hua564rhH5ODNSkH9mpqG+F0tjcGn5V4xlQwLX/Ms2oNVo3NkRq/WCelaA8
l7+kGY05zCvJ2/RTIVEWH0ll+P3/p8brVjcKsbDXWzQ4YOK2TcMLAvYRPixr7XKG
rWRIf16+oEtqf5GEQ9P2Z276qwwXdB33EnuPgJpo9KNl4O17+3FzJbtfHu2RILFg
/mxm/v/FiYLoQoh7dYHKJv38Bv4n1YQ7HDGemEsl1Y/Vt28sNscYdEwHX6SdmsdL
KB1Fbo0kXVhG6goCXbW8qb+ZAMonlmiLaU/3Hz4EropTVDbDE0p66wU/fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd6QrtIiV0mSyMYvkMuyJM1/ebZMB8GA1UdIwQY
MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut
NmQyZTExZmUwOGNkLzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk
LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXtbFWq0
YfNLwe8YHnj4YDzaGFdOZMOUsxoxwWrtIxDZZhBoXD4oVDZZwpyYa4zCB/L5g1dh
jM+jDW4JFnPpMOm5skQaUEnOCFttxjAGkZ2jGMCR8Ta/0Bz9y8xeqKeTVuBVdrbS
ruxcOUqIRnvcnp2e2hFI4hxPjHL2M3jdkiC65Jt0ruxQxTILmvLcJimPNk4Ytn9z
gcDNwG5V1uSvch+pKhojmFWqbZ93Rc1ZLpVLWXgE0BJbi1L9YeFos+ibQPlOT+B5
pWXro7HYXYgojqfi2Lb1gZ96v4DEzzNcoz1X91VJVBBB7qtzce/+aeV2KGTypGDx
xSs7jirLEdA3Kg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:22 2025 by rpki-client