Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: O2lIkRDKALMwO1IWiM0swuVyrVyQ4KmpNIeoP1Vprl4=
Subject key identifier: 8B:BA:93:82:6F:B5:34:03:31:7F:51:CD:9D:FD:B5:E6:DF:CE:05:55
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 01987D8B0D4EA8024864B70D3E46680A5B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 1663
Signing time: Wed 06 Aug 2025 04:02:01 +0000
Manifest this update: Wed 06 Aug 2025 04:02:01 +0000
Manifest next update: Thu 07 Aug 2025 04:02:01 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: vP0lXrsL45/pbO3B6XRKj/wLa+lu7B93TkjJQ8fjosc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:0d:4e:a8:02:48:64:b7:0d:3e:46:68:0a:5b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Aug 6 04:02:01 2025 GMT
Not After : Aug 7 04:02:01 2025 GMT
Subject: CN=8bba93826fb53403317f51cd9dfdb5e6dfce0555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:25:9e:d6:bd:38:04:38:f3:4a:3c:79:53:
c5:b9:50:2b:a2:6b:d3:41:99:ff:bc:bd:c8:05:54:
66:a5:df:de:55:3f:92:28:6d:d6:d1:11:ab:cf:f5:
49:5e:af:61:ad:c3:40:9b:52:5a:6d:aa:c1:ad:c2:
8e:83:12:16:d4:4a:56:64:bc:ff:58:59:36:bf:89:
cf:0c:73:3a:d2:be:d5:0b:12:fb:e4:ce:0e:dc:9b:
e0:be:d1:93:21:09:40:ef:2e:11:9a:cd:32:a9:8c:
d1:4d:6f:f5:ea:e3:30:48:55:c8:73:87:f0:3d:a4:
fc:e9:f7:57:04:ad:7d:74:ae:d3:e0:35:81:de:8b:
2b:f4:eb:4e:c5:2f:2e:66:df:17:b9:b1:28:e3:28:
db:ff:bd:37:d7:fb:30:aa:f2:2d:3c:3d:4d:de:34:
bb:ec:dc:96:bc:a5:29:26:81:50:bd:af:43:6f:42:
44:95:80:3c:3b:db:aa:fd:02:d5:9b:83:68:40:4f:
9c:2b:57:1a:f3:f4:a5:3a:25:e8:d8:19:e6:bd:68:
36:85:df:9c:70:8f:6d:9c:c8:88:c0:3b:da:36:1f:
e8:a9:38:fb:53:f7:2f:86:a0:16:65:ca:02:64:89:
d0:63:ef:21:78:c0:c2:be:27:c9:c9:83:13:26:52:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:93:82:6F:B5:34:03:31:7F:51:CD:9D:FD:B5:E6:DF:CE:05:55
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a3:ee:e6:56:16:b8:31:9b:7b:4f:3a:a8:2c:63:e9:f7:d6:
f5:1d:de:c7:43:0f:3d:20:b2:7f:1b:de:1e:cd:b8:ff:04:07:
c8:ed:81:17:cc:6b:a3:10:23:cf:ec:43:c9:35:dd:bb:cb:22:
c3:8d:a3:f8:32:ab:a5:be:c7:7d:99:38:de:bc:3d:9b:74:3b:
01:ca:01:a2:06:5f:6d:d6:d6:b7:51:0a:fb:f6:3e:f6:db:bd:
14:e3:91:d8:35:b9:ac:58:e5:f6:a3:fe:83:82:4f:ce:7b:dc:
a6:06:e2:89:8e:e4:72:25:f1:3c:48:9d:07:2c:71:9a:3f:3e:
7a:a1:91:54:8a:25:54:fb:db:24:2a:c9:28:de:74:ae:59:8b:
e6:f1:76:99:dd:ea:e3:e3:10:e0:c2:46:d9:00:b0:91:6b:13:
df:50:52:40:1d:bf:97:af:34:55:db:de:06:d0:0c:b7:3a:4c:
89:eb:fd:37:dc:15:b3:f3:00:a8:ba:e2:f9:9a:f6:31:4c:ef:
2e:d7:b3:e7:aa:5a:e2:af:b6:cc:43:86:27:d4:0c:a0:9d:12:
d4:b9:aa:d2:5f:e7:cf:e9:8a:7e:f7:fe:45:fc:53:57:fa:d8:
c7:5d:1f:ff:ec:f9:89:f3:8c:83:95:f6:90:9e:a4:11:bb:2e:
fd:a0:33:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9iw1OqAJIZLcNPkZoCluCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTU2NzEyMmE4OGNhOTg4OWExNzk4YjZjOTQyZGNjMGNi
Yzc1M2IwHhcNMjUwODA2MDQwMjAxWhcNMjUwODA3MDQwMjAxWjAzMTEwLwYDVQQD
Eyg4YmJhOTM4MjZmYjUzNDAzMzE3ZjUxY2Q5ZGZkYjVlNmRmY2UwNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pwlnta9OAQ480o8eVPFuVAromvT
QZn/vL3IBVRmpd/eVT+SKG3W0RGrz/VJXq9hrcNAm1JabarBrcKOgxIW1EpWZLz/
WFk2v4nPDHM60r7VCxL75M4O3JvgvtGTIQlA7y4Rms0yqYzRTW/16uMwSFXIc4fw
PaT86fdXBK19dK7T4DWB3osr9OtOxS8uZt8XubEo4yjb/7031/swqvItPD1N3jS7
7NyWvKUpJoFQva9Db0JElYA8O9uq/QLVm4NoQE+cK1ca8/SlOiXo2BnmvWg2hd+c
cI9tnMiIwDvaNh/oqTj7U/cvhqAWZcoCZInQY+8heMDCvifJyYMTJlJ9KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu6k4JvtTQDMX9RzZ39tebfzgVVMB8GA1UdIwQY
MBaAFM9VZxIqiMqYiaF5i2yULcwMvHU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAt
OGQ3MTVhYzIxN2UyLzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wYTk3ZjEtN2JmNS00MzY4LTgyNjAtOGQ3MTVhYzIxN2Uy
LzEvejFWbkVpcUl5cGlKb1htTGJKUXR6QXk4ZFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqPu5lYW
uDGbe086qCxj6ffW9R3ex0MPPSCyfxveHs24/wQHyO2BF8xroxAjz+xDyTXdu8si
w42j+DKrpb7HfZk43rw9m3Q7AcoBogZfbdbWt1EK+/Y+9tu9FOOR2DW5rFjl9qP+
g4JPznvcpgbiiY7kciXxPEidByxxmj8+eqGRVIolVPvbJCrJKN50rlmL5vF2md3q
4+MQ4MJG2QCwkWsT31BSQB2/l680VdveBtAMtzpMiev9N9wVs/MAqLri+Zr2MUzv
Ltez56pa4q+2zEOGJ9QMoJ0S1Lmq0l/nz+mKfvf+RfxTV/rYx10f/+z5ifOMg5X2
kJ6kEbsu/aAzog==
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:15:04 2025 by rpki-client