
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: ll+Mlsn3RwdWEAEyLCPXepH8vBhjYKPPEkNloy51wLY=
Subject key identifier: 90:13:21:00:BD:5D:5C:62:21:03:B2:14:B7:2A:E5:6E:67:25:C2:F0
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 01988BB39FE1C9E525FCC8E4DD1357381B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 068C
Signing time: Fri 08 Aug 2025 22:01:01 +0000
Manifest this update: Fri 08 Aug 2025 22:01:01 +0000
Manifest next update: Sat 09 Aug 2025 22:01:01 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: BZYg9D+lNCUVyNXDH9Oe/fvGlFlr2XzxDlnGzXIgl/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:9f:e1:c9:e5:25:fc:c8:e4:dd:13:57:38:1b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Aug 8 22:01:01 2025 GMT
Not After : Aug 9 22:01:01 2025 GMT
Subject: CN=90132100bd5d5c622103b214b72ae56e6725c2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:cf:db:bf:e8:a5:5f:49:5e:4f:e6:09:fe:
de:29:20:17:b7:37:12:72:fd:dd:50:a6:0c:dc:13:
35:0a:d6:74:9a:42:b9:ff:26:44:27:fa:95:55:7c:
15:e6:a9:b8:00:1c:67:cc:13:f1:29:45:17:a2:fc:
c9:66:33:11:5a:fa:2f:9f:16:00:76:58:96:66:6d:
fe:77:f0:8a:f2:13:bd:9c:b3:5c:f8:20:33:51:c9:
b1:87:37:48:db:f3:47:a7:b1:23:a5:ae:a1:20:69:
b4:61:67:0e:ad:51:84:74:90:0c:95:c9:c5:b0:a8:
06:aa:63:b3:16:ad:c9:52:7b:70:cd:db:6c:e7:c6:
b6:24:2c:54:3c:fe:82:0e:e3:ad:f1:82:fe:d3:af:
84:9c:8c:72:91:2b:bc:36:7c:6d:15:42:23:b2:c6:
32:5c:c3:72:c0:34:e0:ee:80:de:1f:ff:e3:a1:94:
18:3c:55:c8:3c:28:9a:37:54:17:bf:8b:47:91:37:
4d:c1:78:63:56:69:98:89:a8:c3:5d:f1:0d:08:ee:
60:d0:79:cd:0f:a7:02:34:3f:5e:4f:f3:a4:ea:fa:
03:d3:00:fe:00:7c:80:4c:f4:ec:41:11:20:1c:f3:
1d:3d:76:ff:1f:e8:00:89:ec:6a:a0:8e:ec:f8:b2:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:21:00:BD:5D:5C:62:21:03:B2:14:B7:2A:E5:6E:67:25:C2:F0
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:35:66:f6:68:d2:6e:79:f0:c1:42:6c:3d:c2:6a:67:c3:
4e:f1:57:c7:46:f1:99:9e:b6:57:0f:28:33:c2:b6:60:c8:e2:
17:a9:a0:28:ca:54:d3:a0:26:ca:e9:f1:a0:a8:26:71:47:6d:
5e:f1:a4:45:c8:50:9d:e8:17:77:e2:9d:58:94:1b:93:96:e9:
ca:e1:76:0b:51:69:5d:39:a7:bb:bc:59:37:b6:1b:b3:f8:a3:
84:63:37:c1:6c:36:4d:c7:44:10:82:1d:b5:f9:89:ad:90:19:
7d:2c:cf:89:39:84:4f:81:7f:e6:09:64:06:57:0d:9b:54:67:
df:5e:66:48:14:90:79:10:02:fc:be:b5:cc:58:c2:27:d0:ca:
b3:ed:34:20:65:79:f7:e1:35:68:1c:38:cc:22:74:d7:93:84:
33:d1:6e:5b:b1:81:91:1e:50:ed:5a:83:fc:a7:84:39:ba:14:
fc:94:fd:81:4a:c9:43:6a:45:d9:53:e0:75:7b:17:9e:ce:76:
8f:4e:44:4c:a4:7a:f5:f6:5e:26:b9:16:6d:ef:c0:15:35:f4:
91:e1:d1:21:04:17:6e:34:71:d7:82:75:88:ea:49:32:6d:ff:
e1:98:68:e9:90:08:db:10:a7:1e:df:a9:f2:a9:10:b5:1a:8d:
1d:7d:45:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs5/hyeUl/Mjk3RNXOBsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjUwODA4MjIwMTAxWhcNMjUwODA5MjIwMTAxWjAzMTEwLwYDVQQD
Eyg5MDEzMjEwMGJkNWQ1YzYyMjEwM2IyMTRiNzJhZTU2ZTY3MjVjMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+zP27/opV9JXk/mCf7eKSAXtzcS
cv3dUKYM3BM1CtZ0mkK5/yZEJ/qVVXwV5qm4ABxnzBPxKUUXovzJZjMRWvovnxYA
dliWZm3+d/CK8hO9nLNc+CAzUcmxhzdI2/NHp7Ejpa6hIGm0YWcOrVGEdJAMlcnF
sKgGqmOzFq3JUntwzdts58a2JCxUPP6CDuOt8YL+06+EnIxykSu8NnxtFUIjssYy
XMNywDTg7oDeH//joZQYPFXIPCiaN1QXv4tHkTdNwXhjVmmYiajDXfENCO5g0HnN
D6cCND9eT/Ok6voD0wD+AHyATPTsQREgHPMdPXb/H+gAiexqoI7s+LJp7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJATIQC9XVxiIQOyFLcq5W5nJcLwMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElg1ZvZo
0m558MFCbD3CamfDTvFXx0bxmZ62Vw8oM8K2YMjiF6mgKMpU06AmyunxoKgmcUdt
XvGkRchQnegXd+KdWJQbk5bpyuF2C1FpXTmnu7xZN7Ybs/ijhGM3wWw2TcdEEIId
tfmJrZAZfSzPiTmET4F/5glkBlcNm1Rn315mSBSQeRAC/L61zFjCJ9DKs+00IGV5
9+E1aBw4zCJ015OEM9FuW7GBkR5Q7VqD/KeEOboU/JT9gUrJQ2pF2VPgdXsXns52
j05ETKR69fZeJrkWbe/AFTX0keHRIQQXbjRx14J1iOpJMm3/4Zho6ZAI2xCnHt+p
8qkQtRqNHX1FxQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:18 2025 by rpki-client