Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: AtQyf+2JiuJpo/Y0xaG5k/TGXEgws1DMtDa1pJAcLsg=
Subject key identifier: CF:7C:75:96:56:9E:0D:EE:6B:9A:A8:F8:76:55:10:9F:84:E2:B1:8B
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 01988BB34C9B73AE3E6F1C32F8A01332E46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 05F8
Signing time: Fri 08 Aug 2025 22:00:40 +0000
Manifest this update: Fri 08 Aug 2025 22:00:40 +0000
Manifest next update: Sat 09 Aug 2025 22:00:40 +0000
Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: UrdkN/XV9vCyUgBBgmDEChhdRcLPk0+Yh/R4lCRJwC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:4c:9b:73:ae:3e:6f:1c:32:f8:a0:13:32:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Aug 8 22:00:40 2025 GMT
Not After : Aug 9 22:00:40 2025 GMT
Subject: CN=cf7c7596569e0dee6b9aa8f87655109f84e2b18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:bb:47:ae:43:fa:08:97:a7:91:5d:3f:02:
65:64:30:ba:a8:71:5b:92:6f:db:77:ec:eb:e9:58:
76:6f:cb:8c:01:2f:75:68:7c:3d:eb:41:0d:0b:3f:
2d:7e:64:5e:5e:1a:45:5f:dc:54:35:89:42:6d:68:
d4:d0:ed:18:0f:ba:4d:a9:83:0b:13:75:7e:8d:61:
ab:b8:94:0f:72:52:ad:25:e1:b5:fe:d9:e3:97:03:
94:50:0c:4c:35:9c:28:7f:21:96:b1:d8:b4:3e:a0:
e8:d3:22:e7:21:a6:fc:65:bc:72:6d:eb:77:1e:7d:
d1:8a:43:54:ff:7b:d1:26:0b:12:d9:b1:a1:9b:81:
04:45:5a:15:82:44:ca:c4:22:6d:db:6c:98:45:86:
73:c8:91:c1:76:dc:cf:26:47:86:19:e3:11:68:2a:
29:e2:fa:8b:bb:e9:21:90:66:73:a6:3d:d2:75:87:
6f:89:55:47:5a:c0:77:04:e5:be:e4:b9:4c:12:cf:
1f:a1:b6:92:23:4a:4a:ee:fe:a7:82:a5:9a:b6:ba:
da:2a:46:ef:62:c9:c6:82:9e:52:66:42:53:53:2d:
55:a8:b6:a7:3b:18:8f:ab:a6:33:cb:a3:3a:49:68:
13:83:e3:5a:3f:4b:f2:7d:a3:b3:c1:7d:6f:d9:ab:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7C:75:96:56:9E:0D:EE:6B:9A:A8:F8:76:55:10:9F:84:E2:B1:8B
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:07:e7:22:cf:f5:53:5b:48:ff:7f:6a:8d:e8:56:f0:00:
3f:c7:34:5b:a3:89:d6:4c:9d:20:56:d2:0c:22:95:0f:cb:20:
5d:9c:57:70:e4:c7:02:e4:d0:77:55:22:ed:71:32:df:37:c7:
a4:11:0d:27:b2:87:19:a8:1a:3e:48:e2:8c:93:12:22:9f:fc:
64:b8:6e:85:5d:b8:66:3c:6b:d0:77:65:6b:9b:6a:bc:3d:0a:
6b:5f:a4:e4:ac:7a:c6:86:9c:e1:62:18:c9:f0:ac:75:11:5b:
1c:8a:cf:39:b1:67:e3:8c:35:ae:8d:65:de:aa:b3:f3:8f:eb:
5c:79:bd:32:94:33:ff:b6:f0:07:dc:ea:c8:2b:99:52:26:d9:
8e:ad:e7:d4:c9:e5:b0:f2:92:e9:2c:07:b8:ee:31:7d:75:c1:
e0:a7:79:9d:57:52:59:92:b4:eb:fa:1a:de:2d:c4:cb:4a:98:
6c:b4:f0:49:e7:03:13:74:a6:d1:c1:ba:a9:b9:04:75:df:d0:
8e:55:ef:19:a0:fc:ff:61:99:7a:1a:d8:cf:51:76:40:0b:bb:
89:8b:0d:6d:46:7b:2b:5c:4b:30:0e:de:e1:04:23:dc:51:40:
c5:37:a0:23:ca:8e:e6:87:e2:4e:2f:80:dc:53:6f:eb:09:14:
08:3a:9f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs0ybc64+bxwy+KATMuRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2
ODQ5NjEwHhcNMjUwODA4MjIwMDQwWhcNMjUwODA5MjIwMDQwWjAzMTEwLwYDVQQD
EyhjZjdjNzU5NjU2OWUwZGVlNmI5YWE4Zjg3NjU1MTA5Zjg0ZTJiMThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU67R65D+giXp5FdPwJlZDC6qHFb
km/bd+zr6Vh2b8uMAS91aHw960ENCz8tfmReXhpFX9xUNYlCbWjU0O0YD7pNqYML
E3V+jWGruJQPclKtJeG1/tnjlwOUUAxMNZwofyGWsdi0PqDo0yLnIab8Zbxybet3
Hn3RikNU/3vRJgsS2bGhm4EERVoVgkTKxCJt22yYRYZzyJHBdtzPJkeGGeMRaCop
4vqLu+khkGZzpj3SdYdviVVHWsB3BOW+5LlMEs8fobaSI0pK7v6ngqWatrraKkbv
YsnGgp5SZkJTUy1VqLanOxiPq6Yzy6M6SWgTg+NaP0vyfaOzwX1v2atb2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM98dZZWng3ua5qo+HZVEJ+E4rGLMB8GA1UdIwQY
MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct
ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl
LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIUH5yLP
9VNbSP9/ao3oVvAAP8c0W6OJ1kydIFbSDCKVD8sgXZxXcOTHAuTQd1Ui7XEy3zfH
pBENJ7KHGagaPkjijJMSIp/8ZLhuhV24Zjxr0Hdla5tqvD0Ka1+k5Kx6xoac4WIY
yfCsdRFbHIrPObFn44w1ro1l3qqz84/rXHm9MpQz/7bwB9zqyCuZUibZjq3n1Mnl
sPKS6SwHuO4xfXXB4Kd5nVdSWZK06/oa3i3Ey0qYbLTwSecDE3Sm0cG6qbkEdd/Q
jlXvGaD8/2GZehrYz1F2QAu7iYsNbUZ7K1xLMA7e4QQj3FFAxTegI8qO5ofiTi+A
3FNv6wkUCDqfAw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:19:24 2025 by rpki-client