Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: pSF8hAqL0xMZ9El/jDxUdCRqqvKJFOaTem/4RWnrSs4=
Subject key identifier: 8F:E2:89:2C:DA:21:AA:6A:98:47:7E:88:C2:87:B5:79:88:39:DC:91
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 01987450934A462EA6C85C24028FDD07B6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 4C
Signing time: Mon 04 Aug 2025 09:01:34 +0000
Manifest this update: Mon 04 Aug 2025 09:01:34 +0000
Manifest next update: Tue 05 Aug 2025 09:01:34 +0000
Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: Fitw5Y69Ob8W5iW2I4XaW0WCv2IG3S4Tc+4gfQ5+Jh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:93:4a:46:2e:a6:c8:5c:24:02:8f:dd:07:b6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Aug 4 09:01:34 2025 GMT
Not After : Aug 5 09:01:34 2025 GMT
Subject: CN=8fe2892cda21aa6a98477e88c287b5798839dc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:4b:32:96:17:e6:45:a8:f6:6b:f8:53:cb:
e2:d1:51:cc:2b:f4:77:49:f8:6f:05:fa:27:12:ea:
3e:ed:64:ce:7f:e4:3b:7a:e5:68:63:03:6d:f6:dd:
13:34:d6:84:50:8d:dd:01:8c:bd:8b:16:24:da:26:
76:12:af:9f:ce:3a:fa:26:98:dd:c1:e6:95:c9:bf:
a8:36:ff:87:f6:aa:04:68:57:9f:4a:a4:86:91:5c:
07:9f:79:68:32:27:af:92:69:3d:39:40:f7:25:9b:
76:fb:7c:a6:55:5f:22:f1:3b:4e:67:aa:9e:8b:c8:
8d:e0:06:14:90:51:0b:6f:33:e3:44:e7:8b:54:cd:
fd:94:ba:fe:1f:b2:72:f0:99:f6:82:c3:70:e7:24:
3c:25:87:1e:4e:72:de:81:e8:0e:a9:42:bd:76:89:
a9:4b:fa:64:ff:ae:c8:d5:ec:eb:ea:7e:30:8a:cb:
2b:d6:58:4b:07:5b:b9:1e:3d:f3:58:dc:ab:db:aa:
3d:cf:1c:45:25:3a:ed:1d:81:2b:75:b1:a7:08:21:
e5:a1:1a:6e:0a:a0:44:db:df:b3:74:f5:69:c4:33:
31:37:95:4f:d6:af:cd:29:53:c4:2b:c9:bb:f7:f3:
63:28:a6:7d:86:08:40:f2:c2:54:b2:1b:64:c8:04:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:89:2C:DA:21:AA:6A:98:47:7E:88:C2:87:B5:79:88:39:DC:91
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:98:4d:bb:70:9e:10:f9:e3:85:ae:8c:67:05:c1:51:68:8c:
90:dd:e9:67:cb:66:d4:75:2e:05:54:ca:fc:86:80:58:09:61:
c2:8e:4e:9c:d0:c9:3b:5e:15:8c:29:50:39:2e:99:05:c6:af:
08:54:eb:1b:7e:0e:21:e4:e4:4b:cb:21:ce:99:c0:a8:e1:83:
a9:c6:03:5b:0d:9e:8a:1d:a4:5f:38:a0:0e:10:95:af:cf:74:
1f:e5:0e:d9:94:14:16:01:6d:a9:40:f6:fb:56:82:c6:5e:2a:
b3:9e:6c:08:f3:75:ef:77:0d:06:9b:40:39:bf:7d:93:a0:69:
5f:07:0d:38:4d:d0:63:c7:e4:81:40:40:25:c1:69:10:6f:87:
20:60:51:2d:98:72:56:3c:f6:f1:ef:b6:b0:ec:30:88:1a:69:
d4:18:5d:be:cb:e0:22:9f:79:ba:35:45:e5:37:cf:e6:46:29:
7b:14:f1:cb:15:78:f8:97:2f:a5:d8:f1:e5:08:20:ae:69:c0:
b1:2c:d1:46:6d:90:b8:02:f8:3e:1f:54:6d:ea:fa:47:97:80:
f1:2a:ae:16:6b:27:91:65:e0:7a:fd:6c:b5:df:f7:a5:12:14:
eb:b7:b9:e7:aa:97:fa:c6:e9:e9:f0:ed:ca:9d:e8:db:14:de:
0e:22:cf:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UJNKRi6myFwkAo/dB7agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk
MTQ3NTYwHhcNMjUwODA0MDkwMTM0WhcNMjUwODA1MDkwMTM0WjAzMTEwLwYDVQQD
Eyg4ZmUyODkyY2RhMjFhYTZhOTg0NzdlODhjMjg3YjU3OTg4MzlkYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bRLMpYX5kWo9mv4U8vi0VHMK/R3
SfhvBfonEuo+7WTOf+Q7euVoYwNt9t0TNNaEUI3dAYy9ixYk2iZ2Eq+fzjr6Jpjd
weaVyb+oNv+H9qoEaFefSqSGkVwHn3loMievkmk9OUD3JZt2+3ymVV8i8TtOZ6qe
i8iN4AYUkFELbzPjROeLVM39lLr+H7Jy8Jn2gsNw5yQ8JYceTnLegegOqUK9domp
S/pk/67I1ezr6n4wissr1lhLB1u5Hj3zWNyr26o9zxxFJTrtHYErdbGnCCHloRpu
CqBE29+zdPVpxDMxN5VP1q/NKVPEK8m79/NjKKZ9hghA8sJUshtkyAScYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/iiSzaIapqmEd+iMKHtXmIOdyRMB8GA1UdIwQY
MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt
MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1
LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZhNu3Ce
EPnjha6MZwXBUWiMkN3pZ8tm1HUuBVTK/IaAWAlhwo5OnNDJO14VjClQOS6ZBcav
CFTrG34OIeTkS8shzpnAqOGDqcYDWw2eih2kXzigDhCVr890H+UO2ZQUFgFtqUD2
+1aCxl4qs55sCPN173cNBptAOb99k6BpXwcNOE3QY8fkgUBAJcFpEG+HIGBRLZhy
Vjz28e+2sOwwiBpp1BhdvsvgIp95ujVF5TfP5kYpexTxyxV4+Jcvpdjx5QggrmnA
sSzRRm2QuAL4Ph9Uber6R5eA8SquFmsnkWXgev1std/3pRIU67e556qX+sbp6fDt
yp3o2xTeDiLPFw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:55 2025 by rpki-client