Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: fljSR3nPKpl9jOqLB5n7PaoZRnFqupIz5+XEl/+UYB8=
Subject key identifier: E6:0E:67:B1:07:0F:B6:46:FD:48:67:47:B2:3F:4C:34:80:C2:E8:34
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 0198733D45106CEFA898CC4E6BEAA904E8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 094C
Signing time: Mon 04 Aug 2025 04:00:51 +0000
Manifest this update: Mon 04 Aug 2025 04:00:51 +0000
Manifest next update: Tue 05 Aug 2025 04:00:51 +0000
Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: U5ECBhLE/IgEfZrBFoYZjR9wvIJbGQO4anodeqF1OpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:45:10:6c:ef:a8:98:cc:4e:6b:ea:a9:04:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Aug 4 04:00:51 2025 GMT
Not After : Aug 5 04:00:51 2025 GMT
Subject: CN=e60e67b1070fb646fd486747b23f4c3480c2e834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:0a:04:38:58:4f:1e:13:75:e7:1a:3e:e9:
ef:52:ea:91:cb:74:b6:48:b9:d4:bb:f3:09:ed:53:
df:e0:1a:43:21:b7:92:9c:39:f7:01:50:4f:b2:54:
6d:fd:21:14:7f:dc:ab:c0:61:2b:da:8d:f6:82:db:
82:c1:b0:06:4f:ea:25:02:15:89:71:15:37:17:a7:
9d:36:25:81:5f:88:71:93:c9:7e:50:b0:86:fa:52:
10:3b:ab:a0:9d:cd:30:f2:45:f1:ff:f1:aa:61:4c:
0c:fa:97:50:dc:0b:a9:1d:70:47:19:2b:59:7c:e0:
e8:54:09:4a:1d:80:4e:33:9e:bf:85:a1:10:f9:67:
bb:61:91:d1:f4:04:47:d1:11:56:d2:f5:6c:5b:a4:
d7:f5:8c:d7:2d:88:c4:7f:76:8a:15:9e:e4:a6:c0:
5e:df:f1:a2:dc:77:66:ad:8e:6c:0c:b2:3f:e5:a5:
ad:89:a0:ff:af:e4:e8:b3:f1:62:e5:5f:0e:4d:91:
a9:00:6c:0b:8b:7d:e3:2f:9d:c4:84:58:3b:dd:0c:
58:3a:9c:00:e6:8a:96:39:c8:33:16:73:e6:0d:76:
f2:ff:70:e0:0f:ed:71:75:f3:c7:5a:5b:fe:7f:38:
ea:89:40:03:49:61:63:06:7d:8b:55:7e:99:e3:10:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0E:67:B1:07:0F:B6:46:FD:48:67:47:B2:3F:4C:34:80:C2:E8:34
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:53:f3:ca:55:57:b5:c3:77:fa:a8:a7:2f:4c:10:20:35:c0:
d8:89:7a:65:83:c4:ca:6a:c0:c2:7a:3b:d2:c9:41:b1:09:5c:
30:78:33:c9:f1:1e:40:bf:13:83:3b:31:b0:11:9a:8f:96:d2:
e9:69:4c:53:b8:bd:13:d8:cb:c3:cd:7f:49:52:84:81:96:1f:
43:3d:f3:16:66:03:df:85:75:f5:80:3c:a5:5e:9b:75:96:71:
30:1d:a1:f1:1e:7b:6f:99:b0:30:c9:27:c8:7e:f1:15:eb:89:
42:29:0e:21:29:a0:2f:8f:00:95:e4:13:fd:69:5a:e8:27:45:
00:0b:8d:3f:68:63:68:97:62:ca:9f:23:57:94:73:f0:ca:97:
14:b3:00:ae:eb:4b:db:8d:4f:bc:d2:af:82:e6:f5:e6:6f:2e:
5f:2d:72:e1:10:8b:74:26:92:d7:8e:9e:c4:33:ba:8c:f3:64:
0d:c2:0d:f9:12:8f:5f:5c:1b:54:23:77:07:7e:a6:e0:7c:eb:
cf:86:92:02:bd:fe:a2:3f:77:3e:96:0d:10:cc:b2:70:d1:27:
bf:dd:1c:ef:73:a0:96:63:6f:03:9d:41:90:ae:b8:19:fb:ad:
f0:9c:5b:95:97:9e:ff:18:16:71:03:f5:4d:f7:14:ee:70:9b:
59:4e:77:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPUUQbO+omMxOa+qpBOjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzY4NTkyMTYzYTQ5YWQzOGZmYWQxZDQxOWE3NzUyYjMz
M2RhNzcwHhcNMjUwODA0MDQwMDUxWhcNMjUwODA1MDQwMDUxWjAzMTEwLwYDVQQD
EyhlNjBlNjdiMTA3MGZiNjQ2ZmQ0ODY3NDdiMjNmNGMzNDgwYzJlODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZoKBDhYTx4TdecaPunvUuqRy3S2
SLnUu/MJ7VPf4BpDIbeSnDn3AVBPslRt/SEUf9yrwGEr2o32gtuCwbAGT+olAhWJ
cRU3F6edNiWBX4hxk8l+ULCG+lIQO6ugnc0w8kXx//GqYUwM+pdQ3AupHXBHGStZ
fODoVAlKHYBOM56/haEQ+We7YZHR9ARH0RFW0vVsW6TX9YzXLYjEf3aKFZ7kpsBe
3/Gi3HdmrY5sDLI/5aWtiaD/r+Tos/Fi5V8OTZGpAGwLi33jL53EhFg73QxYOpwA
5oqWOcgzFnPmDXby/3DgD+1xdfPHWlv+fzjqiUADSWFjBn2LVX6Z4xAqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYOZ7EHD7ZG/UhnR7I/TDSAwug0MB8GA1UdIwQY
MBaAFM82hZIWOkmtOP+tHUGad1KzM9p3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEt
MjMxYWM2ZWQ5Nzg1LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83MjA2YzctZmYyNi00MGNlLWJlNzEtMjMxYWM2ZWQ5Nzg1
LzEvenphRmtoWTZTYTA0XzYwZFFacDNVck16Mm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlPzylVX
tcN3+qinL0wQIDXA2Il6ZYPEymrAwno70slBsQlcMHgzyfEeQL8TgzsxsBGaj5bS
6WlMU7i9E9jLw81/SVKEgZYfQz3zFmYD34V19YA8pV6bdZZxMB2h8R57b5mwMMkn
yH7xFeuJQikOISmgL48AleQT/Wla6CdFAAuNP2hjaJdiyp8jV5Rz8MqXFLMArutL
241PvNKvgub15m8uXy1y4RCLdCaS146exDO6jPNkDcIN+RKPX1wbVCN3B36m4Hzr
z4aSAr3+oj93PpYNEMyycNEnv90c73OglmNvA51BkK64Gfut8JxblZee/xgWcQP1
TfcU7nCbWU53kg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:44 2025 by rpki-client