Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: NegEJVKHW5O3L2Sq2pqEYKTKxRQDJUeBaG2WhT4TmYg=
Subject key identifier: A4:70:7F:D6:16:06:62:9E:5D:02:C7:0F:BC:76:28:F2:A1:E0:36:84
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 0198733D5DE6CB297C7BFC3004BF7F07B2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 05B2
Signing time: Mon 04 Aug 2025 04:00:58 +0000
Manifest this update: Mon 04 Aug 2025 04:00:58 +0000
Manifest next update: Tue 05 Aug 2025 04:00:58 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: SeCMFLVwvQShoWYedsz83bF9mTV/x8zpivymvAPEJHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:5d:e6:cb:29:7c:7b:fc:30:04:bf:7f:07:b2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Aug 4 04:00:58 2025 GMT
Not After : Aug 5 04:00:58 2025 GMT
Subject: CN=a4707fd61606629e5d02c70fbc7628f2a1e03684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:66:31:fa:fd:00:69:55:73:ba:2a:d9:5f:
93:48:81:00:ed:28:af:28:e3:fc:61:71:92:cb:87:
5a:57:5d:bf:a4:3a:58:48:c1:45:ba:24:54:b7:ed:
5a:d3:4f:33:e5:f1:b9:da:ff:ae:02:12:a7:e2:fe:
c9:b3:c1:f1:ab:1a:af:8c:59:2e:ef:ea:3a:f8:1e:
1a:9f:8c:7d:64:fc:96:93:d3:04:41:d1:7a:af:7f:
99:e2:0d:06:fd:f3:7f:ab:e1:9e:6b:66:36:53:d4:
5c:b5:e2:3c:92:8b:0f:fc:4e:39:a7:92:05:8c:53:
e8:d9:e5:02:8e:84:c5:35:e7:45:0f:42:e5:e7:1b:
7f:f7:b0:7d:b0:67:30:33:e0:8b:88:e4:77:d5:12:
7b:71:29:ad:e6:93:50:1a:0c:ec:95:e2:39:f7:3f:
c3:a6:0b:17:ba:0d:21:02:8b:b8:75:36:1b:b7:fe:
f3:a7:74:2f:f8:b3:23:3b:d4:5c:5e:a0:e0:69:53:
ed:68:d9:61:ed:b9:02:24:fb:15:bb:5e:12:c4:b9:
77:54:ef:7a:53:10:8f:96:31:bc:ab:77:22:1e:0a:
d5:e3:41:9c:ce:c9:a6:0a:9d:0b:e9:87:0e:44:a9:
72:86:f3:be:b2:83:e5:ca:60:c9:5e:ca:49:e2:2c:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:7F:D6:16:06:62:9E:5D:02:C7:0F:BC:76:28:F2:A1:E0:36:84
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3a:9c:27:18:7e:e2:62:3e:de:c9:26:89:23:55:cf:fc:23:
e5:27:db:ca:b8:2c:64:d0:2a:f6:cc:a7:fa:f1:e8:26:31:ae:
90:a3:bc:8e:65:a1:85:47:4c:0b:50:72:88:86:84:27:8b:1e:
ac:fb:20:67:fd:d6:45:29:34:35:e1:67:08:eb:45:00:cc:09:
8f:f1:54:3f:97:f5:53:47:50:94:bd:3b:6f:b9:5a:14:06:1d:
7b:83:df:72:8f:c9:1d:9f:23:17:a5:81:b0:07:45:71:71:6c:
a4:a9:fd:55:12:d3:db:a1:32:b0:3f:6a:87:f1:8b:0b:b8:6a:
86:2c:ac:f1:ff:ea:6c:49:6d:f8:73:f0:05:47:c1:91:e6:cf:
52:ef:ab:7d:72:88:dd:a3:47:3d:f1:e5:ff:b3:0d:7e:38:f9:
33:e0:cb:55:f8:c7:67:2d:fb:9c:8d:91:04:a5:7e:94:48:18:
c9:5a:6f:96:3c:68:a0:7d:7f:59:98:a0:50:df:91:e1:b4:12:
16:a9:60:37:45:01:e3:ce:16:f2:e6:1e:03:e3:70:f0:04:1f:
63:92:65:8b:35:cd:8d:98:41:74:cb:60:81:70:23:f1:b5:bb:
6a:7a:c8:57:00:12:78:40:e3:e4:e4:a4:ad:2b:3b:af:30:f2:
b4:51:c4:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPV3myyl8e/wwBL9/B7K3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl
OGU5N2IwHhcNMjUwODA0MDQwMDU4WhcNMjUwODA1MDQwMDU4WjAzMTEwLwYDVQQD
EyhhNDcwN2ZkNjE2MDY2MjllNWQwMmM3MGZiYzc2MjhmMmExZTAzNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvc1mMfr9AGlVc7oq2V+TSIEA7Siv
KOP8YXGSy4daV12/pDpYSMFFuiRUt+1a008z5fG52v+uAhKn4v7Js8HxqxqvjFku
7+o6+B4an4x9ZPyWk9MEQdF6r3+Z4g0G/fN/q+Gea2Y2U9RcteI8kosP/E45p5IF
jFPo2eUCjoTFNedFD0Ll5xt/97B9sGcwM+CLiOR31RJ7cSmt5pNQGgzsleI59z/D
pgsXug0hAou4dTYbt/7zp3Qv+LMjO9RcXqDgaVPtaNlh7bkCJPsVu14SxLl3VO96
UxCPljG8q3ciHgrV40GczsmmCp0L6YcORKlyhvO+soPlymDJXspJ4ix4vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRwf9YWBmKeXQLHD7x2KPKh4DaEMB8GA1UdIwQY
MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt
MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm
LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjqcJxh+
4mI+3skmiSNVz/wj5SfbyrgsZNAq9syn+vHoJjGukKO8jmWhhUdMC1ByiIaEJ4se
rPsgZ/3WRSk0NeFnCOtFAMwJj/FUP5f1U0dQlL07b7laFAYde4Pfco/JHZ8jF6WB
sAdFcXFspKn9VRLT26EysD9qh/GLC7hqhiys8f/qbElt+HPwBUfBkebPUu+rfXKI
3aNHPfHl/7MNfjj5M+DLVfjHZy37nI2RBKV+lEgYyVpvljxooH1/WZigUN+R4bQS
FqlgN0UB484W8uYeA+Nw8AQfY5JlizXNjZhBdMtggXAj8bW7anrIVwASeEDj5OSk
rSs7rzDytFHEvQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:35 2025 by rpki-client