Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: YaGzZa7y85F6LJ9Pp3utHRx8whzrhlr7uvz7AenEfrs=
Subject key identifier: 2B:F3:FC:62:7B:99:38:D4:93:91:62:4B:B6:53:03:63:92:78:B1:B2
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 019889FBF4BDBFB3CA7F9B02C7F33E061691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 1444
Signing time: Fri 08 Aug 2025 14:00:47 +0000
Manifest this update: Fri 08 Aug 2025 14:00:47 +0000
Manifest next update: Sat 09 Aug 2025 14:00:47 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: ErKeTVYw4MgW3dyPcuPlX4xwIfjRnQ112dILhEzKEvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:f4:bd:bf:b3:ca:7f:9b:02:c7:f3:3e:06:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Aug 8 14:00:47 2025 GMT
Not After : Aug 9 14:00:47 2025 GMT
Subject: CN=2bf3fc627b9938d49391624bb65303639278b1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:2f:00:5b:ad:b4:3a:20:83:e1:68:b4:1e:
d5:2a:1b:76:ff:83:14:73:4a:3b:06:52:45:ac:38:
0e:bc:d6:26:78:13:29:55:bc:39:4f:44:ab:f4:e4:
2f:7a:2b:48:60:92:38:51:10:4d:d1:f7:9c:8c:23:
a5:88:70:f3:f5:66:c1:b8:6d:dc:38:1f:7f:fe:36:
e8:42:07:7d:36:28:a2:c4:1e:73:d7:93:bb:fa:bb:
61:e6:4b:dc:ae:7e:f9:e8:17:4c:c7:95:1f:2b:98:
f4:a9:b7:10:6d:7c:62:d1:fa:ba:89:b6:17:fb:7c:
42:b2:8d:ca:b2:90:d9:30:b6:90:76:d5:ce:db:ad:
d6:09:f6:c2:8d:33:06:1b:d1:da:6d:5e:4f:8c:09:
1f:3d:d1:6c:89:56:27:03:87:18:58:08:8d:8e:c5:
d6:58:78:10:14:c4:ef:0d:ab:96:e8:ae:57:4a:15:
85:1c:b9:00:e2:13:4e:3a:b2:7d:00:08:47:33:3c:
77:29:d1:2e:6f:67:ed:37:91:db:07:cf:6d:ba:b4:
85:85:94:5d:4a:5e:81:27:36:9a:c6:65:02:cc:0a:
b5:fc:85:75:69:70:05:5c:2f:9a:40:12:1e:89:ba:
c5:1a:df:93:ef:6e:ce:84:ac:49:9c:1d:7a:50:ae:
09:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:FC:62:7B:99:38:D4:93:91:62:4B:B6:53:03:63:92:78:B1:B2
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6d:20:64:77:c9:63:4c:f1:33:c1:6e:90:6b:ab:e1:49:48:
87:32:9f:4c:3c:57:19:d7:ec:82:cf:b2:26:77:b1:b7:19:38:
7e:9f:60:26:4b:62:5c:2e:1c:76:d6:41:1f:b8:c2:8b:9d:44:
90:33:dc:14:8e:2a:48:c4:c9:f8:2d:b4:0d:b2:5e:f4:e2:1c:
55:29:b4:77:9e:da:bf:f7:c6:94:cc:2e:c4:a0:97:70:9c:68:
d8:2d:d5:7c:4b:a2:6c:9b:88:be:43:48:77:75:b2:8e:36:bf:
d6:b1:0e:0e:26:12:01:c6:85:f9:82:b6:00:6b:cf:14:43:ef:
bd:d6:e7:8f:38:3b:fe:e9:47:ed:a6:fd:dd:15:75:ad:36:55:
5a:c4:94:93:a0:4e:78:d1:5e:cf:2c:41:65:a3:fc:b5:64:13:
f3:97:fa:19:63:52:e6:99:b0:f7:d0:0c:7e:41:f2:f4:3d:c1:
c2:8c:76:b2:a2:12:90:42:31:95:fd:43:3d:df:cb:33:b0:d6:
a4:87:1b:40:60:1f:5d:59:17:d3:7b:d1:0b:9c:04:8a:9f:8b:
10:f6:41:b4:08:43:72:68:b9:86:58:32:d1:43:af:c1:c5:e1:
79:a3:00:8d:7e:e8:7c:a0:30:21:75:50:ff:63:7b:94:1f:14:
5f:6a:a5:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJ+/S9v7PKf5sCx/M+BhaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGU4NWJiZDQ3OGY1ZTg0MmY0YzRmOGQ4NTIyNWQxMDBl
MGY0ZGYwHhcNMjUwODA4MTQwMDQ3WhcNMjUwODA5MTQwMDQ3WjAzMTEwLwYDVQQD
EygyYmYzZmM2MjdiOTkzOGQ0OTM5MTYyNGJiNjUzMDM2MzkyNzhiMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUMvAFuttDogg+FotB7VKht2/4MU
c0o7BlJFrDgOvNYmeBMpVbw5T0Sr9OQveitIYJI4URBN0fecjCOliHDz9WbBuG3c
OB9//jboQgd9NiiixB5z15O7+rth5kvcrn756BdMx5UfK5j0qbcQbXxi0fq6ibYX
+3xCso3KspDZMLaQdtXO263WCfbCjTMGG9HabV5PjAkfPdFsiVYnA4cYWAiNjsXW
WHgQFMTvDauW6K5XShWFHLkA4hNOOrJ9AAhHMzx3KdEub2ftN5HbB89turSFhZRd
Sl6BJzaaxmUCzAq1/IV1aXAFXC+aQBIeibrFGt+T727OhKxJnB16UK4JIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvz/GJ7mTjUk5FiS7ZTA2OSeLGyMB8GA1UdIwQY
MBaAFM/ehbvUePXoQvTE+NhSJdEA4PTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgt
ZjkzZDFmODE1YjdkLzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgtZjkzZDFmODE1Yjdk
LzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGW0gZHfJ
Y0zxM8FukGur4UlIhzKfTDxXGdfsgs+yJnextxk4fp9gJktiXC4cdtZBH7jCi51E
kDPcFI4qSMTJ+C20DbJe9OIcVSm0d57av/fGlMwuxKCXcJxo2C3VfEuibJuIvkNI
d3Wyjja/1rEODiYSAcaF+YK2AGvPFEPvvdbnjzg7/ulH7ab93RV1rTZVWsSUk6BO
eNFezyxBZaP8tWQT85f6GWNS5pmw99AMfkHy9D3Bwox2sqISkEIxlf1DPd/LM7DW
pIcbQGAfXVkX03vRC5wEip+LEPZBtAhDcmi5hlgy0UOvwcXheaMAjX7ofKAwIXVQ
/2N7lB8UX2qlgg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:33:13 2025 by rpki-client