Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
File: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft (raw, json)
Hash identifier: q7fmwZHolgREBA9BklIvr7l3YubSseuPrKJeJnmc8RA=
Subject key identifier: 5E:85:E2:98:DE:25:BE:1A:C1:CE:79:C9:79:BD:81:13:F3:A2:8C:09
Authority key identifier: 65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
Certificate issuer: /CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Certificate serial: 019873E3A68285F6E4358DC0F4530B6CE212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:35 +0000
Manifest this update: Mon 04 Aug 2025 07:02:35 +0000
Manifest next update: Tue 05 Aug 2025 07:02:35 +0000
Files and hashes: 1: OYSQ0B4bWIaFBDGeUbIro8GjNIM.roa (hash: ArDmycoBPumVopAcq7qMWyEpeGKW74OE/HKNZi11EfI=)
2: Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl (hash: 06yN34tCCBnc+wU2SKnnJGiMS5KcMIfpUsgnJnMwiYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a6:82:85:f6:e4:35:8d:c0:f4:53:0b:6c:e2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cd7803f41fe499e800664e0aacadee19b66d9d
Validity
Not Before: Aug 4 07:02:35 2025 GMT
Not After : Aug 5 07:02:35 2025 GMT
Subject: CN=5e85e298de25be1ac1ce79c979bd8113f3a28c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:e2:ee:b3:d8:6c:d0:98:1b:cc:ce:40:c9:
dd:c6:31:42:fe:fe:57:f4:94:7b:bf:06:0e:24:07:
e4:48:93:ac:2b:e2:46:b1:5e:0a:dd:49:d1:57:72:
72:71:46:2b:bd:cf:0f:26:69:52:d5:40:fe:42:8a:
12:ac:b8:4e:4a:37:69:bc:41:88:2d:27:15:7a:66:
42:31:15:aa:33:f9:4c:dc:bb:d5:7e:6c:b8:58:15:
0b:82:d4:70:2b:91:d3:f6:8d:7c:9d:32:16:c9:e7:
e1:00:61:7d:da:52:90:e3:62:67:7e:10:66:c9:24:
72:1f:45:6c:27:6f:4b:97:9e:b8:73:b5:5e:3c:58:
cf:43:41:6b:d7:05:b8:de:81:ce:85:81:13:c4:10:
b5:bc:31:c8:3c:86:82:c1:1f:5f:75:db:5d:e7:09:
64:fe:43:a1:f9:a7:3d:6a:d6:a1:68:da:74:9e:ba:
d8:56:c7:87:57:a5:05:e1:8b:58:7a:1e:98:64:a9:
5a:5c:48:30:ab:a1:1e:ba:aa:ee:a9:fe:95:1e:fa:
53:b9:16:7c:13:ce:1f:95:7a:18:f0:86:51:c3:6e:
70:2c:9a:3a:30:ca:da:4a:58:c4:4e:50:5d:d7:7f:
e8:36:71:b7:ab:61:d6:d2:1b:94:e1:e4:04:52:71:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:E2:98:DE:25:BE:1A:C1:CE:79:C9:79:BD:81:13:F3:A2:8C:09
X509v3 Authority Key Identifier:
keyid:65:CD:78:03:F4:1F:E4:99:E8:00:66:4E:0A:AC:AD:EE:19:B6:6D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e66f01-1d9d-4513-956a-f96bfb04e645/1/Zc14A_Qf5JnoAGZOCqyt7hm2bZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:58:2e:d8:ae:34:4a:9a:23:ad:cb:72:a5:90:93:4c:0d:dd:
d9:a3:b3:df:e2:6a:b6:19:a0:0d:04:da:99:c9:d9:f4:c2:df:
70:49:4a:eb:c9:d9:1f:93:8e:a2:62:cf:db:6b:75:8c:77:51:
dd:fe:5b:bb:32:64:9c:b7:7e:44:79:a3:25:6a:54:99:9c:7c:
b1:4b:e3:b3:77:a3:16:39:2a:8b:4d:13:0e:e4:e0:65:a0:f7:
6c:b5:63:19:97:ae:a1:f3:1d:c3:92:3c:18:33:ff:93:cf:fc:
fa:fd:f6:cd:bc:5a:37:65:b5:05:f0:7d:4f:f8:33:b8:2d:2d:
6d:c2:ee:7d:b1:7c:00:8a:4e:d4:23:06:69:25:59:da:69:0c:
21:bf:4b:1e:1d:2d:9d:ca:90:b8:a4:32:a1:38:d2:26:02:f9:
86:13:c0:72:34:2b:f6:f3:78:d4:02:62:40:de:df:30:b7:25:
3f:6c:63:e1:81:14:c5:8c:67:55:b6:fe:96:13:67:9d:26:ea:
90:da:5f:0c:0d:08:a5:01:b9:b2:f4:d9:a8:9f:d8:4e:39:96:
fd:5b:bc:f5:b0:5e:cf:28:73:4e:57:35:63:79:c3:60:0b:11:
48:e9:b4:3c:e0:b7:9f:0c:a0:6f:b5:29:43:f2:44:7a:62:9a:
d7:e3:f5:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz46aChfbkNY3A9FMLbOISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2Q3ODAzZjQxZmU0OTllODAwNjY0ZTBhYWNhZGVlMTli
NjZkOWQwHhcNMjUwODA0MDcwMjM1WhcNMjUwODA1MDcwMjM1WjAzMTEwLwYDVQQD
Eyg1ZTg1ZTI5OGRlMjViZTFhYzFjZTc5Yzk3OWJkODExM2YzYTI4YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoXi7rPYbNCYG8zOQMndxjFC/v5X
9JR7vwYOJAfkSJOsK+JGsV4K3UnRV3JycUYrvc8PJmlS1UD+QooSrLhOSjdpvEGI
LScVemZCMRWqM/lM3LvVfmy4WBULgtRwK5HT9o18nTIWyefhAGF92lKQ42JnfhBm
ySRyH0VsJ29Ll564c7VePFjPQ0Fr1wW43oHOhYETxBC1vDHIPIaCwR9fddtd5wlk
/kOh+ac9atahaNp0nrrYVseHV6UF4YtYeh6YZKlaXEgwq6Eeuqruqf6VHvpTuRZ8
E84flXoY8IZRw25wLJo6MMraSljETlBd13/oNnG3q2HW0huU4eQEUnGONwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6F4pjeJb4awc55yXm9gRPzoowJMB8GA1UdIwQY
MBaAFGXNeAP0H+SZ6ABmTgqsre4Ztm2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEt
Zjk2YmZiMDRlNjQ1LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9lNjZmMDEtMWQ5ZC00NTEzLTk1NmEtZjk2YmZiMDRlNjQ1
LzEvWmMxNEFfUWY1Sm5vQUdaT0NxeXQ3aG0yYlowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelgu2K40
SpojrctypZCTTA3d2aOz3+JqthmgDQTamcnZ9MLfcElK68nZH5OOomLP22t1jHdR
3f5buzJknLd+RHmjJWpUmZx8sUvjs3ejFjkqi00TDuTgZaD3bLVjGZeuofMdw5I8
GDP/k8/8+v32zbxaN2W1BfB9T/gzuC0tbcLufbF8AIpO1CMGaSVZ2mkMIb9LHh0t
ncqQuKQyoTjSJgL5hhPAcjQr9vN41AJiQN7fMLclP2xj4YEUxYxnVbb+lhNnnSbq
kNpfDA0IpQG5svTZqJ/YTjmW/Vu89bBezyhzTlc1Y3nDYAsRSOm0POC3nwygb7Up
Q/JEemKa1+P1Zg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:47 2025 by rpki-client