
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier: cqA1H44MAgHicEzEFHkxGDe/ZDhTQ24VxV+YWDpnO5g=
Subject key identifier: 0B:6C:54:3D:6D:89:1E:85:1D:E3:98:BF:24:07:0C:2D:64:09:6A:B3
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 01987A1AFFBBBE3141AEC13E5D482D8F27F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number: 0452
Signing time: Tue 05 Aug 2025 12:00:46 +0000
Manifest this update: Tue 05 Aug 2025 12:00:46 +0000
Manifest next update: Wed 06 Aug 2025 12:00:46 +0000
Files and hashes: 1: TP9gFKgxBg6Q0nRcWGidlz7qFCE.roa (hash: jhQI7t+AgP6hvPj91hzIOl0xoOYJULkePtGE660/ydE=)
2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: TSnX3dA2k3Xx8l6Hv+cpQjpl1nvyd1el90PgZYXDZjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1a:ff:bb:be:31:41:ae:c1:3e:5d:48:2d:8f:27:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Aug 5 12:00:46 2025 GMT
Not After : Aug 6 12:00:46 2025 GMT
Subject: CN=0b6c543d6d891e851de398bf24070c2d64096ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:3b:15:a2:14:fb:c7:9c:65:ec:7d:61:dd:
79:e0:00:c7:67:24:8a:1b:57:0a:5c:ca:fa:12:0b:
59:cb:93:7d:ee:c6:41:19:dd:7e:41:c6:d9:c6:2f:
56:a7:10:61:fb:8a:f1:43:20:5d:95:ee:19:62:66:
c5:c5:5c:ab:97:12:73:e1:13:e0:e0:c7:77:9b:ea:
ea:6a:5a:ec:cb:e8:a6:65:43:69:5c:36:0d:86:78:
67:dc:8d:6e:95:01:4c:86:73:9f:56:b4:0b:4c:57:
40:79:46:5e:dc:ac:6c:28:a5:95:07:ae:c5:cc:cb:
bc:08:8f:8a:f2:80:11:12:93:bf:41:0b:96:bd:80:
c0:9c:77:b7:52:0e:9d:ad:0d:79:77:81:73:6f:54:
21:a1:93:68:a4:cf:95:4d:80:c6:9a:92:ba:36:f0:
d0:5d:47:b2:7d:15:d6:a2:b9:a3:4e:2e:cb:a1:b1:
91:27:3e:85:c9:fe:38:f8:4f:19:e1:3c:d3:56:51:
98:57:a1:96:c6:26:1b:7b:8f:4f:70:7d:58:fb:c7:
29:06:27:79:f3:49:79:5f:b0:40:da:a1:ef:22:e8:
1c:57:59:4d:34:d9:ad:3a:e8:36:f4:72:24:91:22:
3f:75:04:ab:f8:98:38:ec:f9:c3:23:da:74:73:0a:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:54:3D:6D:89:1E:85:1D:E3:98:BF:24:07:0C:2D:64:09:6A:B3
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d5:dc:29:32:fd:b7:1c:35:52:ed:72:f0:5c:5c:e8:a0:d9:
62:5a:78:9e:f2:31:c5:3a:23:41:02:0f:f7:27:7c:91:06:2b:
79:f0:d9:97:1c:cd:3d:dc:49:b4:de:48:55:94:68:da:55:b9:
4c:4e:86:84:8b:dd:a5:49:78:87:6b:f3:f2:bd:7c:3d:77:43:
6e:06:f6:d4:22:d0:1d:f9:bb:51:4d:de:f6:ba:a3:ab:6c:dd:
ec:2f:60:64:4a:f0:21:49:d0:57:5f:3b:48:0e:72:95:bc:0f:
f1:af:48:b6:68:bd:fe:0a:ad:0f:b5:f6:34:cd:2e:be:91:e2:
ad:0d:d2:13:dc:e0:2c:b9:73:77:90:2b:3a:db:66:bf:46:9c:
28:95:d4:e5:94:9f:4b:51:88:60:8d:55:5d:dd:52:37:1d:93:
1f:54:9f:f6:d7:87:32:56:85:d4:cc:3f:02:3c:63:ab:9a:a9:
26:e1:3c:fe:ae:82:b1:80:2d:cc:9e:5b:13:bd:96:d3:3f:af:
97:fb:e9:80:76:db:05:67:73:c8:af:ba:72:ae:1c:6c:7b:7c:
f5:c0:36:29:c1:2d:7b:3f:2b:05:dd:0e:0a:53:bf:a1:f4:4d:
ad:a5:5a:3c:f2:95:b8:33:7a:56:55:81:37:e5:a5:83:2e:54:
e1:d7:c6:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6Gv+7vjFBrsE+XUgtjyf3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWNlNzgwZGZkYTQzYWI0YTg0MTcyN2ViMjBkNzFmYzc2
NTI4YmMwHhcNMjUwODA1MTIwMDQ2WhcNMjUwODA2MTIwMDQ2WjAzMTEwLwYDVQQD
EygwYjZjNTQzZDZkODkxZTg1MWRlMzk4YmYyNDA3MGMyZDY0MDk2YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpE7FaIU+8ecZex9Yd154ADHZySK
G1cKXMr6EgtZy5N97sZBGd1+QcbZxi9WpxBh+4rxQyBdle4ZYmbFxVyrlxJz4RPg
4Md3m+rqalrsy+imZUNpXDYNhnhn3I1ulQFMhnOfVrQLTFdAeUZe3KxsKKWVB67F
zMu8CI+K8oAREpO/QQuWvYDAnHe3Ug6drQ15d4Fzb1QhoZNopM+VTYDGmpK6NvDQ
XUeyfRXWormjTi7LobGRJz6Fyf44+E8Z4TzTVlGYV6GWxiYbe49PcH1Y+8cpBid5
80l5X7BA2qHvIugcV1lNNNmtOug29HIkkSI/dQSr+Jg47PnDI9p0cwq6nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtsVD1tiR6FHeOYvyQHDC1kCWqzMB8GA1UdIwQY
MBaAFJPs54Df2kOrSoQXJ+sg1x/HZSi8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUt
YTRkNDEzZDdmODljLzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83ZmE5NDMtOWVhNi00MDY4LWI2YWUtYTRkNDEzZDdmODlj
LzEvay16bmdOX2FRNnRLaEJjbjZ5RFhIOGRsS0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdXcKTL9
txw1Uu1y8Fxc6KDZYlp4nvIxxTojQQIP9yd8kQYrefDZlxzNPdxJtN5IVZRo2lW5
TE6GhIvdpUl4h2vz8r18PXdDbgb21CLQHfm7UU3e9rqjq2zd7C9gZErwIUnQV187
SA5ylbwP8a9Itmi9/gqtD7X2NM0uvpHirQ3SE9zgLLlzd5ArOttmv0acKJXU5ZSf
S1GIYI1VXd1SNx2TH1Sf9teHMlaF1Mw/Ajxjq5qpJuE8/q6CsYAtzJ5bE72W0z+v
l/vpgHbbBWdzyK+6cq4cbHt89cA2KcEtez8rBd0OClO/ofRNraVaPPKVuDN6VlWB
N+Wlgy5U4dfGVg==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:38 2025 by rpki-client