Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: tC2j3/GPKZba2hI41iVjPNV2/1c/GQiHqj9JDO1vibY=
Subject key identifier: BD:20:98:DF:E0:19:0D:57:7B:BF:75:BE:41:A6:A0:C2:BF:FE:5D:57
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01988921D0405CB56DA96E55B96C6C7751D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 10:02:31 +0000
Manifest this update: Fri 08 Aug 2025 10:02:31 +0000
Manifest next update: Sat 09 Aug 2025 10:02:31 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: qtOwjZCcoMjjHyGlzRJJqE6bc7RgH42ttYKzcwxPBGM=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:d0:40:5c:b5:6d:a9:6e:55:b9:6c:6c:77:51:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Aug 8 10:02:31 2025 GMT
Not After : Aug 9 10:02:31 2025 GMT
Subject: CN=bd2098dfe0190d577bbf75be41a6a0c2bffe5d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:b1:72:f1:ef:37:f8:03:9a:8e:db:41:67:
87:ed:5a:29:10:94:bb:e2:14:e8:28:dc:05:38:cb:
54:68:88:8c:14:1b:ca:58:c4:55:7f:99:7a:2c:69:
b5:a4:44:d9:d1:94:6b:ff:2a:6c:38:aa:b0:46:07:
22:fd:7d:25:31:77:8f:47:b7:26:98:65:c4:84:7e:
0f:b0:6b:d5:01:e9:c9:45:9b:30:c6:97:fe:52:87:
bd:93:d1:93:c9:52:cc:5c:67:1a:ed:e9:68:79:72:
55:aa:0a:56:93:e4:ad:4d:43:23:ba:04:f4:57:32:
da:43:df:9b:7c:e5:4f:d0:3e:e5:37:6d:ba:51:1b:
20:9b:b5:21:4e:bd:56:06:4f:37:c1:ed:37:d1:dd:
63:a9:f4:10:9c:45:b7:37:ad:11:e6:a5:7f:1f:1e:
ed:8c:de:d6:50:6e:0f:7e:3d:af:54:5b:4a:f9:c2:
98:19:36:24:57:38:99:70:0e:fc:0d:4a:47:50:39:
21:47:a6:78:ac:0f:71:0b:ff:c9:52:33:26:17:ee:
20:ab:c6:4f:da:74:08:7f:be:bf:b9:70:35:97:b6:
11:3d:b6:92:aa:7f:41:e0:d8:1e:92:03:2b:f6:2a:
fe:bf:fc:22:37:6b:01:16:cb:4f:34:45:80:81:ea:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:98:DF:E0:19:0D:57:7B:BF:75:BE:41:A6:A0:C2:BF:FE:5D:57
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:76:e4:06:a1:e7:68:4a:27:6e:55:e9:ec:35:cb:c6:f6:c7:
b3:c4:f7:22:8f:4f:a1:76:0e:fb:40:49:88:61:48:4d:84:1b:
db:0a:df:b7:3b:50:b9:b2:8a:02:d2:c2:31:81:72:a9:c6:11:
60:4f:6a:18:f3:13:37:02:06:db:e7:c1:b9:a9:62:38:5a:fd:
2d:5e:8e:51:86:d2:d3:6e:49:74:10:1f:0c:9b:1e:99:a6:ea:
f2:8b:08:cd:97:5d:81:1e:ec:f6:41:f3:b3:a4:f3:77:3b:75:
78:3c:a9:ce:63:bc:ef:ea:7e:e0:f3:c6:af:6a:6b:9f:0a:e0:
4b:3d:0e:10:cb:e1:a0:a7:18:7c:da:2e:94:89:a1:d0:64:11:
12:21:74:f3:30:a2:60:9a:0e:d3:c0:22:08:e2:7f:48:65:6b:
75:61:33:20:df:12:29:86:81:a2:82:5a:4f:2d:73:34:b2:a8:
c7:c9:6e:7d:a7:dd:03:15:3c:43:54:f5:32:99:80:05:96:68:
b1:3f:1c:33:e6:41:64:b1:20:06:0e:4d:af:57:b6:9c:e0:60:
6b:50:13:93:27:c2:33:a8:fb:e5:9e:10:df:94:aa:da:24:6d:
eb:27:98:e2:02:0c:d1:e2:f5:ac:5f:b5:2b:79:3b:70:de:93:
4f:a8:c2:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIdBAXLVtqW5VuWxsd1HZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjUwODA4MTAwMjMxWhcNMjUwODA5MTAwMjMxWjAzMTEwLwYDVQQD
EyhiZDIwOThkZmUwMTkwZDU3N2JiZjc1YmU0MWE2YTBjMmJmZmU1ZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5WxcvHvN/gDmo7bQWeH7VopEJS7
4hToKNwFOMtUaIiMFBvKWMRVf5l6LGm1pETZ0ZRr/ypsOKqwRgci/X0lMXePR7cm
mGXEhH4PsGvVAenJRZswxpf+Uoe9k9GTyVLMXGca7eloeXJVqgpWk+StTUMjugT0
VzLaQ9+bfOVP0D7lN226URsgm7UhTr1WBk83we030d1jqfQQnEW3N60R5qV/Hx7t
jN7WUG4Pfj2vVFtK+cKYGTYkVziZcA78DUpHUDkhR6Z4rA9xC//JUjMmF+4gq8ZP
2nQIf76/uXA1l7YRPbaSqn9B4NgekgMr9ir+v/wiN2sBFstPNEWAgerRjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0gmN/gGQ1Xe791vkGmoMK//l1XMB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXbkBqHn
aEonblXp7DXLxvbHs8T3Io9PoXYO+0BJiGFITYQb2wrftztQubKKAtLCMYFyqcYR
YE9qGPMTNwIG2+fBualiOFr9LV6OUYbS025JdBAfDJsemabq8osIzZddgR7s9kHz
s6Tzdzt1eDypzmO87+p+4PPGr2prnwrgSz0OEMvhoKcYfNoulImh0GQREiF08zCi
YJoO08AiCOJ/SGVrdWEzIN8SKYaBooJaTy1zNLKox8lufafdAxU8Q1T1MpmABZZo
sT8cM+ZBZLEgBg5Nr1e2nOBga1ATkyfCM6j75Z4Q35Sq2iRt6yeY4gIM0eL1rF+1
K3k7cN6TT6jCpg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:45 2025 by rpki-client