
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: MH1PVWwWQmbVPJqwIea9udrWtRrWAlZhdcbJ9RDUFVY=
Subject key identifier: B8:8B:1C:D4:A5:24:3F:48:F0:6B:79:C3:ED:24:F8:44:7F:52:8A:DF
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 01987418C02EE0128C87CC921BE2471B4709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 151C
Signing time: Mon 04 Aug 2025 08:00:35 +0000
Manifest this update: Mon 04 Aug 2025 08:00:35 +0000
Manifest next update: Tue 05 Aug 2025 08:00:35 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: uqN99VqrduYtS8ib0v9hFJkjqp8DZdz5BkCLlHD6Aio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:c0:2e:e0:12:8c:87:cc:92:1b:e2:47:1b:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Aug 4 08:00:35 2025 GMT
Not After : Aug 5 08:00:35 2025 GMT
Subject: CN=b88b1cd4a5243f48f06b79c3ed24f8447f528adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:68:07:6e:75:e5:88:61:70:b5:81:59:38:
88:d0:1b:42:72:b7:d2:38:95:d4:5b:86:78:48:7c:
8a:dd:51:da:76:20:df:d7:66:77:d5:5a:db:90:01:
64:27:67:86:a0:68:f0:39:04:f2:64:7b:1b:1f:3e:
73:c2:ed:e6:9c:ca:00:9b:e7:87:37:3b:a8:86:aa:
a5:4f:2e:63:70:eb:6f:80:12:ab:8b:34:ec:a6:0b:
13:15:bc:25:03:a7:45:96:d1:da:b0:83:03:de:11:
07:d5:2d:6f:5a:53:9d:a4:d9:a3:ac:a5:57:ee:15:
d2:71:11:2c:b2:9d:e9:49:12:c5:58:73:1b:e4:e1:
6c:2f:00:50:a9:aa:59:a9:85:57:5d:2e:c8:38:c7:
a1:b2:d9:c0:de:cc:e0:01:c7:4d:50:15:47:23:86:
81:30:8f:4c:1c:a6:b2:6c:8f:79:38:40:48:c7:50:
4c:a9:89:c6:2c:07:80:36:13:67:d3:58:13:43:15:
a8:d3:8f:17:52:ca:f3:19:fb:38:7b:44:7e:2f:11:
a9:0b:72:bc:e5:9c:c7:84:ce:1c:0c:a2:66:c8:ff:
7a:2e:a3:6e:6f:c6:13:3e:f0:30:9e:23:9a:10:ab:
b3:8c:c6:10:e7:4c:28:dc:47:d4:41:11:6e:90:1a:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8B:1C:D4:A5:24:3F:48:F0:6B:79:C3:ED:24:F8:44:7F:52:8A:DF
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e9:f1:43:ef:b5:17:5e:dc:62:2d:1f:de:e4:b1:db:b1:c1:
7b:52:6d:b0:e2:c1:68:e5:e7:76:80:12:db:1d:76:a4:40:92:
04:e7:64:84:b0:ad:ed:39:91:c2:af:6a:a1:a2:f6:cf:fa:56:
8a:56:93:da:f0:1f:c9:ea:13:da:69:9b:22:ed:42:bb:fe:5c:
72:a9:07:7c:ee:3b:f5:ed:bc:e9:96:22:1b:2c:60:30:fb:e3:
35:65:0f:5b:3a:1d:4d:65:43:17:71:a9:20:d0:e1:67:78:28:
a8:59:33:07:61:64:50:a5:68:14:bd:8e:88:98:36:0f:b0:29:
7b:a6:30:c0:9b:31:9e:c9:f8:3d:44:8f:e9:63:37:e4:76:7e:
1f:4b:fc:cd:02:4d:57:b6:cf:96:10:09:c0:75:bb:2f:4f:1c:
a0:97:98:07:b6:a2:29:ff:f2:34:75:95:f6:76:cd:48:59:4d:
04:60:6a:64:6b:46:29:fd:35:dd:98:20:f4:9f:2c:d6:23:ec:
42:a6:da:e2:12:3d:01:6e:59:93:24:8b:d1:c8:53:31:ee:eb:
00:ab:8f:46:77:f1:b9:04:6f:ac:db:9a:24:c3:9e:f9:a9:fb:
5b:2d:b5:50:1c:da:9d:d2:f8:27:57:ef:16:32:54:8e:81:6a:
1d:aa:cf:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GMAu4BKMh8ySG+JHG0cJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYzk4MTRhODJjY2I2OGY1MWMzN2JmODNhZTZjZjU3ODI0
NGNhMWEwHhcNMjUwODA0MDgwMDM1WhcNMjUwODA1MDgwMDM1WjAzMTEwLwYDVQQD
EyhiODhiMWNkNGE1MjQzZjQ4ZjA2Yjc5YzNlZDI0Zjg0NDdmNTI4YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2BoB2515YhhcLWBWTiI0BtCcrfS
OJXUW4Z4SHyK3VHadiDf12Z31VrbkAFkJ2eGoGjwOQTyZHsbHz5zwu3mnMoAm+eH
NzuohqqlTy5jcOtvgBKrizTspgsTFbwlA6dFltHasIMD3hEH1S1vWlOdpNmjrKVX
7hXScREssp3pSRLFWHMb5OFsLwBQqapZqYVXXS7IOMehstnA3szgAcdNUBVHI4aB
MI9MHKaybI95OEBIx1BMqYnGLAeANhNn01gTQxWo048XUsrzGfs4e0R+LxGpC3K8
5ZzHhM4cDKJmyP96LqNub8YTPvAwniOaEKuzjMYQ50wo3EfUQRFukBo7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiLHNSlJD9I8Gt5w+0k+ER/UorfMB8GA1UdIwQY
MBaAFM3JgUqCzLaPUcN7+Drmz1eCRMoaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUt
OTYzYjI1ZmEzMDY4LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mOTA3YzgtNTNhMy00NTdhLThkMDUtOTYzYjI1ZmEzMDY4
LzEvemNtQlNvTE10bzlSdzN2NE91YlBWNEpFeWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANunxQ++1
F17cYi0f3uSx27HBe1JtsOLBaOXndoAS2x12pECSBOdkhLCt7TmRwq9qoaL2z/pW
ilaT2vAfyeoT2mmbIu1Cu/5ccqkHfO479e286ZYiGyxgMPvjNWUPWzodTWVDF3Gp
INDhZ3goqFkzB2FkUKVoFL2OiJg2D7Ape6YwwJsxnsn4PUSP6WM35HZ+H0v8zQJN
V7bPlhAJwHW7L08coJeYB7aiKf/yNHWV9nbNSFlNBGBqZGtGKf013Zgg9J8s1iPs
Qqba4hI9AW5ZkySL0chTMe7rAKuPRnfxuQRvrNuaJMOe+an7Wy21UBzandL4J1fv
FjJUjoFqHarPEQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:50 2025 by rpki-client