Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: MKI76MWOMBmNdOaQseSIrcsjdL/cuW0Zgv3Dwoeg7xo=
Subject key identifier: 0B:4C:07:5E:2B:8E:6B:1D:AC:36:D4:82:54:5C:46:AE:D4:98:D4:3D
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 019874192229534A19D2855FFFF59F28053C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 08:01:00 +0000
Manifest this update: Mon 04 Aug 2025 08:01:00 +0000
Manifest next update: Tue 05 Aug 2025 08:01:00 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: w6ZgV20P+nBef1nB5vGUvM9HwEB31e6lxoIEwPW+5NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:22:29:53:4a:19:d2:85:5f:ff:f5:9f:28:05:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Aug 4 08:01:00 2025 GMT
Not After : Aug 5 08:01:00 2025 GMT
Subject: CN=0b4c075e2b8e6b1dac36d482545c46aed498d43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:a4:b1:74:bf:be:3c:8a:de:48:8f:12:14:
47:86:2a:80:00:60:3f:f6:b1:45:3f:7b:c9:be:89:
b4:17:84:b0:57:6a:92:e1:46:1b:18:00:ce:00:c6:
10:22:d7:45:6d:5a:ce:44:7e:ac:24:ad:e9:83:6a:
e7:35:17:1b:b0:35:57:b3:a8:d2:61:0d:2b:49:53:
a3:89:0f:4f:1a:9d:3c:2c:e6:39:78:7f:9a:89:0b:
79:fb:02:cb:d8:26:f8:bc:a4:d8:66:ea:f6:ea:6d:
38:5f:f6:8d:29:9a:8f:c0:7a:5d:0e:db:49:df:b1:
06:e8:3e:a2:ed:49:24:94:5e:43:1f:b3:9f:c2:c0:
7d:48:d7:81:89:ee:dd:d0:b4:57:46:6e:eb:82:4a:
8e:46:37:2d:85:c6:54:bc:eb:c5:51:3a:e2:9e:26:
b7:c8:24:88:30:c5:f4:aa:33:0d:9c:00:b2:c0:ab:
ea:ac:77:5c:26:cb:16:74:91:80:34:7d:76:0a:0a:
41:1f:4f:b8:84:78:89:63:2a:ee:29:5d:63:26:db:
e1:79:af:b6:a7:95:e7:68:35:95:b6:54:1b:e5:ac:
c0:05:7c:80:a1:4e:7c:24:58:b3:0e:46:78:2e:01:
36:61:f5:ee:bb:6e:f6:a2:e7:72:9d:a4:9f:dc:06:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:07:5E:2B:8E:6B:1D:AC:36:D4:82:54:5C:46:AE:D4:98:D4:3D
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:f0:cd:80:64:9c:21:c2:0a:3b:36:32:bf:df:05:ab:9e:
b3:99:c3:84:3f:ae:a6:9d:51:cb:84:55:26:ee:62:90:34:a5:
bc:47:86:99:01:38:2c:02:b4:d8:76:19:fe:73:d1:57:1b:f3:
56:c2:32:81:6f:60:8d:01:74:10:09:37:65:37:fc:bc:68:21:
74:da:9e:d4:37:6a:c8:74:43:f3:98:20:d8:3a:e8:15:61:e1:
cd:b7:17:14:92:66:58:56:ee:81:bd:8b:ef:74:4a:db:bf:83:
81:d8:0e:55:b5:d5:b9:17:f5:8c:ff:79:a0:f9:bb:87:57:8b:
3f:57:6b:46:de:a2:d6:a2:2e:14:63:af:04:65:3b:3c:d0:1f:
78:c2:f3:2c:01:8d:2a:c3:fe:59:29:e5:9f:d9:68:24:c5:11:
4d:49:16:17:90:ea:79:04:0a:b4:18:ad:4e:b2:72:f0:19:f6:
fe:32:e4:28:55:1f:c5:f2:94:7b:23:9e:19:e8:4f:07:ad:6e:
2f:4c:50:40:6a:fc:1f:85:74:cf:79:d5:55:83:18:99:9b:ba:
3c:a4:25:f0:c0:a1:97:ba:4e:d0:0b:64:0c:33:d0:95:b5:19:
3e:9a:c4:10:fc:3a:6f:23:d8:94:2a:15:5a:74:3f:aa:87:62:
6d:19:2e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GSIpU0oZ0oVf//WfKAU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmE4OGMyMmIxZTdjNTJkZTcxYTM3NjQzZGVhM2MzZmNk
ZDQ5NTQwHhcNMjUwODA0MDgwMTAwWhcNMjUwODA1MDgwMTAwWjAzMTEwLwYDVQQD
EygwYjRjMDc1ZTJiOGU2YjFkYWMzNmQ0ODI1NDVjNDZhZWQ0OThkNDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjquksXS/vjyK3kiPEhRHhiqAAGA/
9rFFP3vJvom0F4SwV2qS4UYbGADOAMYQItdFbVrORH6sJK3pg2rnNRcbsDVXs6jS
YQ0rSVOjiQ9PGp08LOY5eH+aiQt5+wLL2Cb4vKTYZur26m04X/aNKZqPwHpdDttJ
37EG6D6i7UkklF5DH7OfwsB9SNeBie7d0LRXRm7rgkqORjcthcZUvOvFUTrinia3
yCSIMMX0qjMNnACywKvqrHdcJssWdJGANH12CgpBH0+4hHiJYyruKV1jJtvhea+2
p5XnaDWVtlQb5azABXyAoU58JFizDkZ4LgE2YfXuu272oudynaSf3AbFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtMB14rjmsdrDbUglRcRq7UmNQ9MB8GA1UdIwQY
MBaAFMz6iMIrHnxS3nGjdkPeo8P83UlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2Yjkt
ODI3YjY0M2FmM2Q3LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xYWUyYjAtZDkzYS00NjNjLWE2YjktODI3YjY0M2FmM2Q3
LzEvelBxSXdpc2VmRkxlY2FOMlE5Nmp3X3pkU1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO3wzYBk
nCHCCjs2Mr/fBaues5nDhD+upp1Ry4RVJu5ikDSlvEeGmQE4LAK02HYZ/nPRVxvz
VsIygW9gjQF0EAk3ZTf8vGghdNqe1DdqyHRD85gg2DroFWHhzbcXFJJmWFbugb2L
73RK27+DgdgOVbXVuRf1jP95oPm7h1eLP1drRt6i1qIuFGOvBGU7PNAfeMLzLAGN
KsP+WSnln9loJMURTUkWF5DqeQQKtBitTrJy8Bn2/jLkKFUfxfKUeyOeGehPB61u
L0xQQGr8H4V0z3nVVYMYmZu6PKQl8MChl7pO0AtkDDPQlbUZPprEEPw6byPYlCoV
WnQ/qodibRkuyQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:17 2025 by rpki-client