Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: I+X3tCL3VcP9HWpGhdnQfZA2UtL2iCv+dWDV7tcquiE=
Subject key identifier: E8:3F:73:7A:97:BE:3D:AF:17:67:D3:DE:D4:C8:D9:92:E7:B8:75:9F
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019896A49F185DF4AD4A91120556302CE4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 021E
Signing time: Mon 11 Aug 2025 01:00:27 +0000
Manifest this update: Mon 11 Aug 2025 01:00:27 +0000
Manifest next update: Tue 12 Aug 2025 01:00:27 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: y4iIDNDYfVWWPOu9hce4MkhCBfPMwIsLXxysFXpozJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:9f:18:5d:f4:ad:4a:91:12:05:56:30:2c:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Aug 11 01:00:27 2025 GMT
Not After : Aug 12 01:00:27 2025 GMT
Subject: CN=e83f737a97be3daf1767d3ded4c8d992e7b8759f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a6:66:a0:ea:37:0e:a4:6d:b4:a9:1a:9f:d1:
83:dd:40:c8:10:33:cc:14:39:bf:d6:df:31:67:9e:
89:c8:9d:f5:b6:6e:07:c7:02:4e:25:7b:ad:65:e7:
ab:91:6b:67:ec:32:fa:84:97:ec:19:5c:8e:36:28:
8e:09:63:00:bf:29:59:64:24:1b:c1:e3:8a:f6:a8:
ce:3f:a7:43:79:72:b6:c6:ec:7a:d1:6c:91:9b:8e:
aa:47:71:0c:c3:20:12:f6:72:1d:04:e5:22:da:bc:
4a:19:0e:16:a1:bf:23:63:8e:bd:4b:14:5d:08:e2:
88:93:cf:6e:6c:c0:90:d3:20:e7:9f:7d:6e:12:2e:
47:a3:9f:78:ab:20:f3:db:07:ed:df:fd:1a:49:89:
60:93:1a:4f:3a:a3:2e:39:09:9d:89:e0:31:71:7d:
6d:41:53:b6:49:29:96:32:d2:0b:b0:fe:34:2b:09:
e1:59:22:14:1b:f3:d5:3f:50:59:93:a0:95:a7:53:
b2:33:04:0c:25:c3:63:49:40:a3:30:e8:2d:81:7d:
3b:d5:2e:23:4b:eb:43:ec:19:83:df:c3:0a:9f:2e:
aa:6d:d9:6d:66:1f:1b:93:bc:69:d2:85:75:f8:0e:
ea:1d:32:a8:88:24:fb:33:1c:f0:e1:bc:36:7b:fb:
6c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:73:7A:97:BE:3D:AF:17:67:D3:DE:D4:C8:D9:92:E7:B8:75:9F
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e5:41:2a:b5:37:51:5b:e3:47:51:97:de:c0:41:3f:c9:2c:
7d:41:ef:11:14:7d:19:f9:ea:1d:cd:e0:75:50:31:2d:c1:c4:
67:b3:d1:98:1b:f5:b8:51:e9:81:e9:dc:ef:b3:06:8d:39:33:
c7:5f:f9:00:8f:e6:7f:2c:a5:8f:f9:a2:4f:4e:f7:bd:1d:be:
f9:da:7d:13:14:7a:09:24:ee:83:9a:33:a8:9d:54:a9:09:65:
43:3c:bf:ec:20:83:41:fe:9c:17:91:f4:83:df:24:34:97:db:
84:83:32:5a:06:d0:d8:9a:bd:d7:8b:d5:48:f8:27:b9:11:31:
09:f2:24:d5:be:5f:0c:85:57:3e:f8:1c:63:9d:14:42:05:0e:
8f:b7:b5:16:1a:20:9a:89:8c:19:cb:06:b8:5c:b6:2a:ec:1e:
57:56:02:19:56:e5:15:f6:e3:30:88:b6:18:2a:32:ae:8e:ba:
29:55:52:d9:18:8e:52:8f:63:49:ae:70:d2:80:57:cd:47:b1:
54:34:94:0e:a1:f1:06:60:8f:1b:18:2c:a4:12:be:7d:5d:3c:
56:11:64:7a:fd:42:08:6f:25:fb:5b:86:05:7a:53:2b:60:bf:
f9:3d:22:1d:20:d3:a4:1c:f0:d2:05:7e:a6:a0:c5:d3:c1:7e:
b6:99:86:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpJ8YXfStSpESBVYwLOSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj
NDE4NDMwHhcNMjUwODExMDEwMDI3WhcNMjUwODEyMDEwMDI3WjAzMTEwLwYDVQQD
EyhlODNmNzM3YTk3YmUzZGFmMTc2N2QzZGVkNGM4ZDk5MmU3Yjg3NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6ZmoOo3DqRttKkan9GD3UDIEDPM
FDm/1t8xZ56JyJ31tm4HxwJOJXutZeerkWtn7DL6hJfsGVyONiiOCWMAvylZZCQb
weOK9qjOP6dDeXK2xux60WyRm46qR3EMwyAS9nIdBOUi2rxKGQ4Wob8jY469SxRd
COKIk89ubMCQ0yDnn31uEi5Ho594qyDz2wft3/0aSYlgkxpPOqMuOQmdieAxcX1t
QVO2SSmWMtILsP40KwnhWSIUG/PVP1BZk6CVp1OyMwQMJcNjSUCjMOgtgX071S4j
S+tD7BmD38MKny6qbdltZh8bk7xp0oV1+A7qHTKoiCT7Mxzw4bw2e/tsiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg/c3qXvj2vF2fT3tTI2ZLnuHWfMB8GA1UdIwQY
MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt
YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy
LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkuVBKrU3
UVvjR1GX3sBBP8ksfUHvERR9GfnqHc3gdVAxLcHEZ7PRmBv1uFHpgenc77MGjTkz
x1/5AI/mfyylj/miT073vR2++dp9ExR6CSTug5ozqJ1UqQllQzy/7CCDQf6cF5H0
g98kNJfbhIMyWgbQ2Jq914vVSPgnuRExCfIk1b5fDIVXPvgcY50UQgUOj7e1Fhog
momMGcsGuFy2KuweV1YCGVblFfbjMIi2GCoyro66KVVS2RiOUo9jSa5w0oBXzUex
VDSUDqHxBmCPGxgspBK+fV08VhFkev1CCG8l+1uGBXpTK2C/+T0iHSDTpBzw0gV+
pqDF08F+tpmGaw==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:16 2025 by rpki-client