Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: /1w7HyIXeZqF8X5eO3l7sszg1dAvx217BIGWLg3vdNY=
Subject key identifier: 6C:F8:56:B8:85:A6:E3:50:9A:38:3F:BE:86:AF:A3:75:11:3C:A7:83
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 01988F9060C9FAAF4510067A2A2656FB608F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 16:01:00 +0000
Manifest this update: Sat 09 Aug 2025 16:01:00 +0000
Manifest next update: Sun 10 Aug 2025 16:01:00 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: GT9+oROcKd8MvryVNpNL2A2y3cCa/4EquO8t2idT6ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:60:c9:fa:af:45:10:06:7a:2a:26:56:fb:60:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Aug 9 16:01:00 2025 GMT
Not After : Aug 10 16:01:00 2025 GMT
Subject: CN=6cf856b885a6e3509a383fbe86afa375113ca783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:c7:47:41:ca:7f:3e:09:34:2b:69:99:24:
c4:ff:41:1c:ec:f7:dd:1c:c8:b0:e1:08:7f:67:8b:
0d:2c:ad:80:57:7c:e5:ae:95:44:f7:91:80:8d:ad:
04:cf:ee:8c:d3:97:70:60:4a:40:80:d9:03:85:25:
90:4f:40:8f:9c:e6:30:c9:af:a3:26:6c:0d:eb:bf:
b0:b8:f2:96:cc:23:e8:f1:ff:69:7e:f5:32:0d:2d:
e3:25:f8:af:f9:8b:a0:38:2b:aa:47:93:8f:50:0d:
6e:1c:fa:f0:6b:f7:31:4f:3b:a4:2f:7a:ff:85:05:
ef:c7:88:3c:fe:32:09:40:1f:b0:60:f1:9f:5d:1d:
0c:3f:09:99:08:03:b9:13:54:c6:d5:3d:d9:ea:99:
e4:6f:d8:d5:94:ad:9d:a8:94:81:65:4d:92:b8:8f:
28:bf:e9:8b:1d:11:ab:d0:58:a5:00:98:56:07:a6:
e7:c2:f7:08:cd:aa:dc:07:8a:bb:38:19:43:e8:8e:
75:de:ea:04:fb:bb:e6:fc:56:6d:8c:97:5d:68:72:
70:cc:bb:7d:0e:06:05:09:34:4f:83:03:a4:26:e0:
34:31:00:58:f2:d8:2f:15:30:ca:1b:5f:d5:49:de:
d0:89:84:06:11:28:5b:0d:17:ea:6c:82:b8:d7:18:
ee:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F8:56:B8:85:A6:E3:50:9A:38:3F:BE:86:AF:A3:75:11:3C:A7:83
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dc:18:2d:3f:78:85:1c:cf:af:0f:28:13:92:5c:02:83:63:
90:50:41:f0:59:6b:8c:be:c0:5a:d9:6d:af:7f:9b:e2:a6:07:
5e:b5:4f:16:9e:31:74:6b:dd:2f:18:d2:d3:14:32:8c:23:98:
99:c5:1d:71:53:a9:a8:45:dc:80:3a:7f:36:7d:5f:1c:c3:c2:
e7:ce:bf:83:8a:03:d7:19:e1:91:45:cc:3f:a7:6e:63:48:46:
16:3c:9d:e4:6d:85:db:9a:77:44:37:f8:f1:eb:02:6e:cf:aa:
58:56:6d:44:81:ae:65:55:34:75:5e:b7:1a:8a:98:76:a7:33:
b8:9e:d8:f9:04:38:95:6b:e3:22:b1:09:35:4e:15:e3:ad:0f:
94:e9:64:46:48:11:d9:d1:52:91:ad:ee:2f:aa:cb:93:c5:9d:
83:be:92:b1:ae:c3:b6:a7:4a:af:bf:9b:a9:01:c5:9f:56:44:
a5:c7:9d:ae:0a:08:82:10:a2:5d:fd:d5:62:d4:6a:ee:c2:1a:
2c:c3:80:fa:18:53:a2:15:20:6f:9e:1d:55:37:16:01:67:50:
dc:22:4d:28:bf:b7:e5:b3:6a:0a:c7:15:51:12:4e:11:1a:2b:
bc:9c:d7:dd:c1:92:62:da:3c:92:91:4f:0d:ae:70:4c:ce:31:
1d:ca:58:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkGDJ+q9FEAZ6KiZW+2CPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1
NjJjNDQwHhcNMjUwODA5MTYwMTAwWhcNMjUwODEwMTYwMTAwWjAzMTEwLwYDVQQD
Eyg2Y2Y4NTZiODg1YTZlMzUwOWEzODNmYmU4NmFmYTM3NTExM2NhNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSfHR0HKfz4JNCtpmSTE/0Ec7Pfd
HMiw4Qh/Z4sNLK2AV3zlrpVE95GAja0Ez+6M05dwYEpAgNkDhSWQT0CPnOYwya+j
JmwN67+wuPKWzCPo8f9pfvUyDS3jJfiv+YugOCuqR5OPUA1uHPrwa/cxTzukL3r/
hQXvx4g8/jIJQB+wYPGfXR0MPwmZCAO5E1TG1T3Z6pnkb9jVlK2dqJSBZU2SuI8o
v+mLHRGr0FilAJhWB6bnwvcIzarcB4q7OBlD6I513uoE+7vm/FZtjJddaHJwzLt9
DgYFCTRPgwOkJuA0MQBY8tgvFTDKG1/VSd7QiYQGEShbDRfqbIK41xjuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz4VriFpuNQmjg/voavo3URPKeDMB8GA1UdIwQY
MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt
Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4
LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9wYLT94
hRzPrw8oE5JcAoNjkFBB8FlrjL7AWtltr3+b4qYHXrVPFp4xdGvdLxjS0xQyjCOY
mcUdcVOpqEXcgDp/Nn1fHMPC586/g4oD1xnhkUXMP6duY0hGFjyd5G2F25p3RDf4
8esCbs+qWFZtRIGuZVU0dV63GoqYdqczuJ7Y+QQ4lWvjIrEJNU4V460PlOlkRkgR
2dFSka3uL6rLk8Wdg76Ssa7DtqdKr7+bqQHFn1ZEpcedrgoIghCiXf3VYtRq7sIa
LMOA+hhTohUgb54dVTcWAWdQ3CJNKL+35bNqCscVURJOERorvJzX3cGSYto8kpFP
Da5wTM4xHcpY/w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:51:38 2025 by rpki-client