Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: +7Y+o75l0JXki8wOR0mNVJessNH2BPCcb7jLjhkKmEQ=
Subject key identifier: 3E:99:3A:72:B3:9C:0D:41:B4:C6:F1:5A:89:6D:00:98:86:8C:A6:04
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 0198737468BCAFAD135EE3A1D7837F62681B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:01:05 +0000
Manifest this update: Mon 04 Aug 2025 05:01:05 +0000
Manifest next update: Tue 05 Aug 2025 05:01:05 +0000
Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: t3EQPdjEGwJLgFrmsUjgyhH5tjgoQLxljbx2FSF8m9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:68:bc:af:ad:13:5e:e3:a1:d7:83:7f:62:68:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Aug 4 05:01:05 2025 GMT
Not After : Aug 5 05:01:05 2025 GMT
Subject: CN=3e993a72b39c0d41b4c6f15a896d0098868ca604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:24:74:fe:f9:d9:8b:87:0b:8c:07:9f:9b:
2d:c2:9c:db:95:22:6c:8b:aa:4e:55:7e:3a:ba:a6:
7c:df:be:8a:d6:ab:c5:70:01:88:17:33:78:81:99:
4b:a7:a9:7b:ba:2c:ab:eb:23:4d:e3:e7:95:a7:fa:
6e:1d:b8:1b:27:25:42:66:17:cf:33:a7:9f:f1:da:
1d:5e:c3:9f:81:b7:b2:6f:25:9e:e4:05:82:00:79:
c8:16:9a:02:bf:b4:3d:df:fe:ff:cd:cb:51:5c:77:
06:74:c0:ad:ec:20:2f:58:33:72:20:87:43:f1:cd:
ad:84:2b:cf:65:28:44:00:03:eb:41:5d:40:bc:7d:
3f:6e:0e:44:eb:b7:1c:87:5f:18:1b:7a:43:13:49:
c4:d2:be:62:44:ee:37:a8:b6:d3:0c:bb:f7:6c:c9:
ab:bd:40:e7:c7:9a:cd:fe:fe:65:88:24:45:66:0b:
9e:2b:2b:49:12:52:89:aa:bd:b8:b0:fb:ec:fa:d8:
1b:45:ad:09:d6:3c:01:e1:06:1a:dd:8a:9c:74:90:
9c:67:07:99:3a:76:47:99:f2:67:97:73:f3:9e:34:
e5:18:2e:c9:d3:be:87:11:8d:76:dd:b2:03:c6:8f:
e1:29:68:3f:fb:c8:49:41:22:dd:19:95:0d:67:b1:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:3A:72:B3:9C:0D:41:B4:C6:F1:5A:89:6D:00:98:86:8C:A6:04
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:04:d6:95:b6:28:9e:c9:99:38:d1:79:ac:24:70:8c:73:06:
96:55:38:fa:2f:18:ea:9d:d8:ae:a7:b3:9a:c1:98:92:c9:d3:
10:6f:94:41:7c:0d:ed:66:5e:26:d1:cd:15:c4:7d:a0:fd:6d:
c3:35:97:e5:ad:f4:a8:d1:7e:46:00:c1:fa:cb:c6:d1:5a:d2:
5a:90:a1:f0:6d:0d:d2:00:7d:67:84:61:e9:2c:52:be:62:c1:
b8:73:9c:cb:7b:5e:35:6e:c2:56:8f:a6:c9:da:f8:bd:cb:91:
93:7f:45:d8:18:66:6c:b2:a5:7b:98:7e:7b:e7:b3:69:90:97:
70:34:95:df:7e:cc:8c:0d:93:bc:f3:0a:ee:f8:81:a5:51:49:
16:dd:f4:1b:6c:87:01:52:06:6b:b1:b6:1f:9c:93:47:e8:2e:
55:05:a4:f5:12:33:25:3d:09:8f:de:71:e0:92:e1:58:b1:43:
3a:fa:01:e0:9b:43:46:ab:4f:4d:6e:95:58:8a:de:1c:e3:85:
18:5d:68:c4:9b:cd:e9:51:e0:69:82:02:67:b6:57:a6:ad:2a:
fe:16:f6:98:f7:6a:59:bd:54:f9:c6:dd:75:5c:f4:e6:a4:41:
4c:1d:59:19:a5:fe:44:8b:6a:d5:ae:39:2c:5a:77:5c:40:77:
a5:32:dc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdGi8r60TXuOh14N/YmgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTUwZTRlNThkNmFjMjdmODBmMDlhNWVkMmYzMDI4Yjgx
YWU4Y2EwHhcNMjUwODA0MDUwMTA1WhcNMjUwODA1MDUwMTA1WjAzMTEwLwYDVQQD
EygzZTk5M2E3MmIzOWMwZDQxYjRjNmYxNWE4OTZkMDA5ODg2OGNhNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSMkdP752YuHC4wHn5stwpzblSJs
i6pOVX46uqZ8376K1qvFcAGIFzN4gZlLp6l7uiyr6yNN4+eVp/puHbgbJyVCZhfP
M6ef8dodXsOfgbeybyWe5AWCAHnIFpoCv7Q93/7/zctRXHcGdMCt7CAvWDNyIIdD
8c2thCvPZShEAAPrQV1AvH0/bg5E67cch18YG3pDE0nE0r5iRO43qLbTDLv3bMmr
vUDnx5rN/v5liCRFZgueKytJElKJqr24sPvs+tgbRa0J1jwB4QYa3YqcdJCcZweZ
OnZHmfJnl3PznjTlGC7J076HEY123bIDxo/hKWg/+8hJQSLdGZUNZ7H9EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6ZOnKznA1BtMbxWoltAJiGjKYEMB8GA1UdIwQY
MBaAFGSVDk5Y1qwn+A8Jpe0vMCi4GujKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYt
ZTY2ZDQxMWZhNmEwLzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYtZTY2ZDQxMWZhNmEw
LzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEATWlbYo
nsmZONF5rCRwjHMGllU4+i8Y6p3YrqezmsGYksnTEG+UQXwN7WZeJtHNFcR9oP1t
wzWX5a30qNF+RgDB+svG0VrSWpCh8G0N0gB9Z4Rh6SxSvmLBuHOcy3teNW7CVo+m
ydr4vcuRk39F2BhmbLKle5h+e+ezaZCXcDSV337MjA2TvPMK7viBpVFJFt30G2yH
AVIGa7G2H5yTR+guVQWk9RIzJT0Jj95x4JLhWLFDOvoB4JtDRqtPTW6VWIreHOOF
GF1oxJvN6VHgaYICZ7ZXpq0q/hb2mPdqWb1U+cbddVz05qRBTB1ZGaX+RItq1a45
LFp3XEB3pTLcaw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:38 2025 by rpki-client