Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: 60WKAet50oEOBKg47h5p5q2cncmJVP8awDPljhibbSw=
Subject key identifier: 72:5D:EF:AF:DF:6D:0A:AE:E6:50:31:FD:BF:A3:B8:1A:4C:8D:F5:F0
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0198819E4417D3FEE32F46A3FD1C7E34720A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0B6D
Signing time: Wed 06 Aug 2025 23:01:29 +0000
Manifest this update: Wed 06 Aug 2025 23:01:29 +0000
Manifest next update: Thu 07 Aug 2025 23:01:29 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: AKsJFojTeVFE1iTjCRxDLc9Us/Q+fYQ6lIDOEK91HLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:44:17:d3:fe:e3:2f:46:a3:fd:1c:7e:34:72:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Aug 6 23:01:29 2025 GMT
Not After : Aug 7 23:01:29 2025 GMT
Subject: CN=725defafdf6d0aaee65031fdbfa3b81a4c8df5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:16:bd:2d:b1:f2:1e:be:a3:82:81:34:3c:
e3:c8:56:d2:f9:10:84:ee:95:de:8d:d1:51:bb:9b:
bd:a4:56:3f:6a:0c:32:16:52:21:44:6b:36:5b:98:
75:76:60:66:2a:a3:00:a4:aa:7e:97:3b:e4:8c:3b:
4d:3b:98:c9:97:56:99:4c:7b:45:85:26:59:a2:51:
b2:5a:5d:86:ac:24:3f:a4:6a:1b:cc:80:06:d9:1f:
eb:a7:a2:e4:59:05:7a:2a:f3:40:2e:14:de:0a:02:
c9:a8:c0:e0:12:4b:ad:9d:06:8f:aa:33:12:31:f0:
a6:fd:70:0e:59:c6:37:c2:0e:e3:7c:e3:4c:8a:13:
99:a0:94:7d:12:7d:76:f5:1e:15:16:ae:c8:c8:9a:
09:07:a2:fe:2c:b9:a8:4c:b3:fa:8f:27:16:c4:f1:
0a:ae:f4:66:7f:c1:4c:bf:58:4b:cb:9f:f0:f2:3b:
58:95:b7:cc:38:99:ae:03:23:fd:94:81:e5:b4:0f:
e6:4b:7d:d5:22:82:33:cf:82:ba:04:cd:9c:1a:cc:
51:70:7d:79:38:af:4f:7f:2a:b8:1a:ff:3e:a3:c3:
e5:69:9e:ae:b1:6b:71:84:0f:2c:1f:c3:00:24:68:
27:67:92:50:6d:00:a4:46:ee:d1:35:40:44:c3:10:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:EF:AF:DF:6D:0A:AE:E6:50:31:FD:BF:A3:B8:1A:4C:8D:F5:F0
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:d6:37:19:e4:10:f3:8c:50:64:9e:91:9e:66:c5:85:bb:
71:9f:d3:78:27:e7:00:72:b5:e2:80:4f:d7:16:bb:65:24:a0:
d1:cd:b6:91:00:29:76:a0:4d:2f:4a:3c:c1:b4:25:06:18:02:
eb:1e:2c:ce:c0:b4:4c:c6:e1:8b:56:a3:2c:d4:c5:3c:9d:9f:
1b:95:eb:1a:3e:88:5c:b6:78:96:86:92:57:53:76:96:cb:04:
02:31:39:ae:f2:9e:c2:fe:c2:8d:cc:cd:d9:dd:ef:99:46:71:
5b:a8:5a:82:22:57:44:88:a1:de:16:c7:f7:47:88:5f:8e:56:
ff:d9:65:94:43:b5:3f:06:85:91:52:d7:08:2d:02:34:51:d6:
51:2b:18:2e:e7:b8:7d:53:c8:0a:db:02:7c:00:7e:69:69:c1:
48:c9:2b:65:5d:38:ec:be:f2:99:40:a8:3c:b0:f1:d5:95:42:
8b:7f:90:a9:1f:87:2e:8e:db:e9:32:eb:75:f3:33:fc:61:6e:
dd:5b:c1:58:0b:cc:2f:97:77:96:54:a1:d4:75:25:f4:bf:3a:
e4:18:71:16:3a:03:68:34:f6:30:4e:f9:fa:3a:c3:a3:1d:d0:
b0:06:3d:3e:a0:58:00:6d:0a:05:00:88:22:8a:af:0b:4a:a1:
52:03:51:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBnkQX0/7jL0aj/Rx+NHIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDFjZGEwMzAyYjgxM2ViMTQ1NTc5YWQ4MWY1ZWQ3ZDI5
YzAyMDkwHhcNMjUwODA2MjMwMTI5WhcNMjUwODA3MjMwMTI5WjAzMTEwLwYDVQQD
Eyg3MjVkZWZhZmRmNmQwYWFlZTY1MDMxZmRiZmEzYjgxYTRjOGRmNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt38WvS2x8h6+o4KBNDzjyFbS+RCE
7pXejdFRu5u9pFY/agwyFlIhRGs2W5h1dmBmKqMApKp+lzvkjDtNO5jJl1aZTHtF
hSZZolGyWl2GrCQ/pGobzIAG2R/rp6LkWQV6KvNALhTeCgLJqMDgEkutnQaPqjMS
MfCm/XAOWcY3wg7jfONMihOZoJR9En129R4VFq7IyJoJB6L+LLmoTLP6jycWxPEK
rvRmf8FMv1hLy5/w8jtYlbfMOJmuAyP9lIHltA/mS33VIoIzz4K6BM2cGsxRcH15
OK9Pfyq4Gv8+o8PlaZ6usWtxhA8sH8MAJGgnZ5JQbQCkRu7RNUBEwxBnbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJd76/fbQqu5lAx/b+juBpMjfXwMB8GA1UdIwQY
MBaAFM0BzaAwK4E+sUVXmtgfXtfSnAIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEt
ZGQ3MjU1MGQ3OGFjLzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEtZGQ3MjU1MGQ3OGFj
LzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJrWNxnk
EPOMUGSekZ5mxYW7cZ/TeCfnAHK14oBP1xa7ZSSg0c22kQApdqBNL0o8wbQlBhgC
6x4szsC0TMbhi1ajLNTFPJ2fG5XrGj6IXLZ4loaSV1N2lssEAjE5rvKewv7CjczN
2d3vmUZxW6hagiJXRIih3hbH90eIX45W/9lllEO1PwaFkVLXCC0CNFHWUSsYLue4
fVPICtsCfAB+aWnBSMkrZV047L7ymUCoPLDx1ZVCi3+QqR+HLo7b6TLrdfMz/GFu
3VvBWAvML5d3llSh1HUl9L865BhxFjoDaDT2ME75+jrDox3QsAY9PqBYAG0KBQCI
IoqvC0qhUgNRRA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:11 2025 by rpki-client