Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier: VygJRKufd4m/NPxK3v3EdxJ3C2fVYAtWbaDolKOfAKE=
Subject key identifier: C6:FD:2E:62:38:9F:A7:11:3C:28:AF:57:01:25:C2:E2:CA:CF:F7:74
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial: 019875D0B659246C9A696A8ACCDC67954113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number: 05C5
Signing time: Mon 04 Aug 2025 16:01:09 +0000
Manifest this update: Mon 04 Aug 2025 16:01:09 +0000
Manifest next update: Tue 05 Aug 2025 16:01:09 +0000
Files and hashes: 1: R9FIW-YXitjJpX1Q3jcy6-oEIFI.roa (hash: UPbldeCj6tFYKOIutM8BR+cGGez6vIB0/3ZKKmpjUZo=)
2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: ijdV0vtv4IMab7r/r8ft668Qul7VI26sKoo80jZqSZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d0:b6:59:24:6c:9a:69:6a:8a:cc:dc:67:95:41:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Validity
Not Before: Aug 4 16:01:09 2025 GMT
Not After : Aug 5 16:01:09 2025 GMT
Subject: CN=c6fd2e62389fa7113c28af570125c2e2cacff774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1f:82:49:af:da:9d:d1:12:c4:b3:ce:50:8b:
9f:a7:e2:ab:3f:e2:cc:71:67:e1:91:d4:07:48:50:
3d:4c:f2:7e:5c:e8:f6:08:cc:e8:a4:a6:46:95:bd:
47:ea:79:26:30:b8:73:f7:a4:27:f6:a9:fe:04:f2:
3a:66:39:3a:e5:33:99:d2:a6:40:30:50:16:e6:93:
81:85:3c:93:ce:72:16:25:ad:60:0f:11:96:5f:f7:
19:bd:51:bf:e1:3f:ac:66:50:87:33:40:64:77:af:
3c:5c:ef:db:43:60:87:3e:e0:f4:dd:1a:61:6b:3c:
72:4b:63:6f:22:15:5d:2c:30:80:fe:62:ff:98:b1:
07:2a:5a:b7:48:2b:a9:30:2f:7f:f0:5b:13:56:45:
81:01:f8:e8:d8:9b:e4:5b:e3:79:9f:54:0b:de:ee:
ca:25:93:2f:41:7d:d0:d7:a5:b9:b9:22:42:05:68:
6c:5c:6d:a9:d8:01:39:b9:b8:0e:a6:3a:bc:4a:50:
d3:c0:ed:81:55:4b:05:0c:cd:6b:4d:f4:d1:bb:16:
33:8c:b3:68:1d:76:b8:84:cb:f8:ec:29:82:a9:94:
4c:eb:2c:7b:fe:f6:c3:06:cf:fe:1b:60:5e:3c:c1:
e8:75:4c:e2:a7:b4:aa:06:b0:ca:c2:2b:c8:ed:f2:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:2E:62:38:9F:A7:11:3C:28:AF:57:01:25:C2:E2:CA:CF:F7:74
X509v3 Authority Key Identifier:
keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5d:ef:5f:c6:45:0e:00:99:25:13:6e:97:24:58:6f:6a:64:
9e:13:25:6b:5c:e3:62:c6:45:62:52:0a:a0:64:d0:b1:a6:dc:
ff:5a:1f:d2:70:ab:91:8b:5b:2b:df:90:9f:49:02:a5:52:4f:
47:45:eb:3d:4f:04:ed:df:dd:c4:dc:85:3b:df:6e:c3:81:d8:
af:44:3c:da:7d:55:b9:39:48:df:37:ab:39:50:3f:49:d3:55:
90:ad:ef:8d:98:27:93:ee:13:c4:88:72:8b:21:a1:2d:11:87:
0f:92:19:df:ab:7d:7f:b0:07:52:4a:83:46:57:7f:0c:25:b2:
b0:bc:1a:be:fd:dd:fa:b0:2b:38:50:e7:05:c0:38:e4:f8:10:
8f:db:87:56:17:14:9e:4a:6e:6d:ab:ea:8e:56:21:3e:91:7d:
ee:cc:93:b8:14:5d:83:fe:7c:91:5c:1b:4a:e2:fd:8f:c5:4b:
04:f1:2b:d4:a1:f5:6b:90:ec:85:f6:57:e4:6b:38:7c:29:a9:
e6:a3:cf:7c:c6:8f:9d:1e:f4:44:9f:f8:88:90:bc:63:f5:e6:
9d:ea:13:7c:0b:19:f7:69:04:33:a3:93:b7:ee:56:19:0a:05:
3b:0f:17:4f:db:c8:fd:d1:36:78:84:8d:1d:27:dd:2f:4c:bd:
27:c6:a4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10LZZJGyaaWqKzNxnlUETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDM0ZmQ4NTkyMjNhZTc2ZThkNzg2NDhhOTM3Mjk1ZThl
Y2Q3OWEwHhcNMjUwODA0MTYwMTA5WhcNMjUwODA1MTYwMTA5WjAzMTEwLwYDVQQD
EyhjNmZkMmU2MjM4OWZhNzExM2MyOGFmNTcwMTI1YzJlMmNhY2ZmNzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR+CSa/andESxLPOUIufp+KrP+LM
cWfhkdQHSFA9TPJ+XOj2CMzopKZGlb1H6nkmMLhz96Qn9qn+BPI6Zjk65TOZ0qZA
MFAW5pOBhTyTznIWJa1gDxGWX/cZvVG/4T+sZlCHM0Bkd688XO/bQ2CHPuD03Rph
azxyS2NvIhVdLDCA/mL/mLEHKlq3SCupMC9/8FsTVkWBAfjo2JvkW+N5n1QL3u7K
JZMvQX3Q16W5uSJCBWhsXG2p2AE5ubgOpjq8SlDTwO2BVUsFDM1rTfTRuxYzjLNo
HXa4hMv47CmCqZRM6yx7/vbDBs/+G2BePMHodUzip7SqBrDKwivI7fKHUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMb9LmI4n6cRPCivVwElwuLKz/d0MB8GA1UdIwQY
MBaAFM1DT9hZIjrnbo14ZIqTcpXo7NeaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVOUDJGa2lPdWR1alhoa2lwTnlsZWpzMTVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zZDE4ZGMtNzNjNi00YzZmLThjMjgt
NWE1NzIzNGRkYjc2LzEvelVOUDJGa2lPdWR1alhoa2lwTnlsZWpzMTVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zZDE4ZGMtNzNjNi00YzZmLThjMjgtNWE1NzIzNGRkYjc2
LzEvelVOUDJGa2lPdWR1alhoa2lwTnlsZWpzMTVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtF3vX8ZF
DgCZJRNulyRYb2pknhMla1zjYsZFYlIKoGTQsabc/1of0nCrkYtbK9+Qn0kCpVJP
R0XrPU8E7d/dxNyFO99uw4HYr0Q82n1VuTlI3zerOVA/SdNVkK3vjZgnk+4TxIhy
iyGhLRGHD5IZ36t9f7AHUkqDRld/DCWysLwavv3d+rArOFDnBcA45PgQj9uHVhcU
nkpubavqjlYhPpF97syTuBRdg/58kVwbSuL9j8VLBPEr1KH1a5DshfZX5Gs4fCmp
5qPPfMaPnR70RJ/4iJC8Y/XmneoTfAsZ92kEM6OTt+5WGQoFOw8XT9vI/dE2eISN
HSfdL0y9J8akbw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:54:23 2025 by rpki-client