Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: 8W7wqnfvm/omotZIhnw0sL8ZSiRlK5rq7VcxZCIrzPw=
Subject key identifier: 2F:AE:63:EF:3D:7E:BC:73:86:71:F5:C6:4F:1C:0E:C7:29:1A:21:82
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 019873E3086AF928443E6BD4B33757691D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 07:01:55 +0000
Manifest this update: Mon 04 Aug 2025 07:01:55 +0000
Manifest next update: Tue 05 Aug 2025 07:01:55 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: ZexdCGhdTRxAekSKqBr2Ft0mYwx/81ZEPQvzpsY699k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:08:6a:f9:28:44:3e:6b:d4:b3:37:57:69:1d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Aug 4 07:01:55 2025 GMT
Not After : Aug 5 07:01:55 2025 GMT
Subject: CN=2fae63ef3d7ebc738671f5c64f1c0ec7291a2182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:10:87:5f:73:79:6e:2a:ed:c5:bf:fe:e4:7a:
b3:bc:1a:aa:e8:3a:02:35:ec:6d:72:07:6e:1f:e8:
a4:31:40:c9:51:b1:71:71:6d:18:e7:9f:5c:b7:0a:
75:18:fa:39:13:61:6b:7b:05:02:33:1c:59:23:4e:
cb:4a:6b:36:6e:87:72:49:ac:c7:31:a4:b4:6b:dd:
5e:23:c3:e5:49:69:dd:8e:fa:da:de:a2:c5:2a:3b:
75:ff:84:4d:d4:05:6b:6d:b5:99:1d:95:88:91:91:
d2:0b:4e:e4:ea:76:06:68:99:45:f2:79:f4:4a:0e:
75:37:0a:4e:0f:6e:f3:3d:82:06:87:44:6e:62:f4:
14:7c:2a:fc:35:f6:76:3e:e7:47:77:ab:99:4a:e7:
79:e8:c5:4a:1e:b7:a6:bb:b0:f8:f3:e2:95:53:d7:
08:22:4f:d5:81:59:d9:94:af:ed:01:00:4e:24:f9:
9c:3a:37:d6:23:c9:61:d9:67:99:9a:c9:49:29:8e:
29:93:40:39:a1:63:7e:b8:e6:f3:13:e2:d1:55:be:
68:40:1f:c9:44:7c:5a:f5:ff:ec:07:c5:87:e9:e9:
32:8a:0d:0b:a7:af:86:f7:fe:b5:cb:a3:d3:f1:9f:
c4:15:22:36:25:87:c9:9e:a6:93:5d:2a:48:21:f7:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AE:63:EF:3D:7E:BC:73:86:71:F5:C6:4F:1C:0E:C7:29:1A:21:82
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:61:9c:d4:dc:84:8d:de:24:82:8e:9d:bd:cb:25:5b:d2:b5:
44:1d:95:a9:63:1a:21:8e:69:cb:fa:77:e4:32:5f:7c:89:de:
a0:c0:c6:3e:74:f4:5d:a3:62:41:43:f2:47:ee:c2:28:19:ae:
01:41:b8:59:e2:7b:e9:29:84:cb:50:2f:f3:13:9a:3b:9d:ae:
cb:d5:77:ac:7b:54:13:bf:eb:7d:61:9f:ea:6b:ae:47:b2:1b:
45:71:cf:76:19:e9:34:98:cb:89:d4:fd:56:8f:81:9d:05:bb:
0f:1a:ed:37:6a:6a:7e:a1:ba:24:16:80:3d:58:b7:35:95:b5:
c1:38:ab:77:57:cb:ba:f6:5e:eb:01:5e:98:62:0f:85:dd:79:
fb:fe:cc:2a:be:db:3e:a2:ef:d3:73:b6:7f:1a:26:40:25:ab:
82:8e:ce:cf:a9:c9:5d:b1:83:d3:99:f7:19:f8:8e:33:c9:65:
a2:d3:b2:f0:92:b0:7f:08:8d:01:2c:a1:fd:d0:e8:cd:0a:1b:
41:ec:30:c2:be:0e:7e:c5:95:e1:47:e0:ea:59:e0:14:80:73:
0f:b3:67:46:c8:06:3d:e7:a0:4c:22:88:28:ea:14:41:a7:39:
5d:da:55:00:d9:95:eb:ed:13:cf:af:0c:f9:f0:ff:87:c7:a2:
de:fb:70:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4whq+ShEPmvUszdXaR2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5
NTIxYmIwHhcNMjUwODA0MDcwMTU1WhcNMjUwODA1MDcwMTU1WjAzMTEwLwYDVQQD
EygyZmFlNjNlZjNkN2ViYzczODY3MWY1YzY0ZjFjMGVjNzI5MWEyMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BCHX3N5birtxb/+5HqzvBqq6DoC
NextcgduH+ikMUDJUbFxcW0Y559ctwp1GPo5E2FrewUCMxxZI07LSms2bodySazH
MaS0a91eI8PlSWndjvra3qLFKjt1/4RN1AVrbbWZHZWIkZHSC07k6nYGaJlF8nn0
Sg51NwpOD27zPYIGh0RuYvQUfCr8NfZ2PudHd6uZSud56MVKHremu7D48+KVU9cI
Ik/VgVnZlK/tAQBOJPmcOjfWI8lh2WeZmslJKY4pk0A5oWN+uObzE+LRVb5oQB/J
RHxa9f/sB8WH6ekyig0Lp6+G9/61y6PT8Z/EFSI2JYfJnqaTXSpIIfcklwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+uY+89frxzhnH1xk8cDscpGiGCMB8GA1UdIwQY
MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt
OTgyNDZhNGNiNmY4LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4
LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzmGc1NyE
jd4kgo6dvcslW9K1RB2VqWMaIY5py/p35DJffIneoMDGPnT0XaNiQUPyR+7CKBmu
AUG4WeJ76SmEy1Av8xOaO52uy9V3rHtUE7/rfWGf6muuR7IbRXHPdhnpNJjLidT9
Vo+BnQW7DxrtN2pqfqG6JBaAPVi3NZW1wTird1fLuvZe6wFemGIPhd15+/7MKr7b
PqLv03O2fxomQCWrgo7Oz6nJXbGD05n3GfiOM8llotOy8JKwfwiNASyh/dDozQob
Qewwwr4OfsWV4Ufg6lngFIBzD7NnRsgGPeegTCKIKOoUQac5XdpVANmV6+0Tz68M
+fD/h8ei3vtwgw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:00 2025 by rpki-client