Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: bvZRCKMJigNkIb3iuPxLm4Dprnk/DrbcEhJD6GDhEBo=
Subject key identifier: 57:8D:44:CF:C9:FC:E2:D6:F2:09:E2:B2:6A:61:B2:74:22:AC:09:82
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 01989FDED5F8E14B98579315FFCB5BA390C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 162E
Signing time: Tue 12 Aug 2025 20:00:37 +0000
Manifest this update: Tue 12 Aug 2025 20:00:37 +0000
Manifest next update: Wed 13 Aug 2025 20:00:37 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: oJp60OUZSI8QIDT5gvN7kM1/4+Fz+uSL0H2sU91FyhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:d5:f8:e1:4b:98:57:93:15:ff:cb:5b:a3:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Aug 12 20:00:37 2025 GMT
Not After : Aug 13 20:00:37 2025 GMT
Subject: CN=578d44cfc9fce2d6f209e2b26a61b27422ac0982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:29:07:d8:05:8a:e8:ec:a7:ef:8f:32:69:
66:6b:36:49:29:17:0d:57:5c:26:59:61:aa:88:e8:
43:a4:2b:a5:03:60:40:ae:38:20:01:3d:2d:5f:09:
e7:a0:dc:0e:07:f4:8f:08:58:3a:88:43:00:23:4a:
a4:a7:a8:52:0f:41:57:a8:b4:45:1a:5f:c9:a0:06:
ad:b8:e3:e2:28:b4:0c:5d:72:d6:bd:a5:84:bf:4f:
c0:40:a9:6a:08:e6:cd:93:2c:02:0d:ab:be:57:c3:
e8:b5:04:2d:57:4e:fd:34:26:26:2c:93:d1:c0:0d:
a6:82:5d:a4:ee:32:47:5c:48:7c:e6:f0:85:43:6a:
62:b7:ad:08:8d:28:b0:3e:3a:c6:4d:e2:2b:29:64:
de:a2:6d:db:a8:a5:fc:97:41:13:a8:2f:7c:d5:04:
49:7f:e2:c8:42:11:03:48:73:f6:07:67:86:9d:b2:
3d:7e:6c:b1:a5:ea:bb:78:f8:ab:39:fd:d0:ec:e6:
eb:f8:06:c7:4e:24:ca:e6:79:bd:80:06:8b:0e:d4:
27:93:85:9c:d9:d5:1f:ec:56:e6:df:8f:c3:97:40:
fb:b6:d2:48:bb:a1:c2:c5:8f:06:1d:ae:ec:84:69:
14:d4:ef:cf:ee:10:4b:67:de:35:af:a8:ee:52:d0:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:44:CF:C9:FC:E2:D6:F2:09:E2:B2:6A:61:B2:74:22:AC:09:82
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:14:ae:61:42:92:ce:77:79:7e:c7:5b:f0:8a:d2:02:bd:c6:
03:26:91:9a:dc:b7:61:54:11:9b:57:55:4e:a1:a7:a2:28:c5:
45:e5:28:1e:7b:8c:65:95:37:d4:03:ff:68:1a:21:59:97:62:
54:e9:05:0d:73:42:e1:c8:03:5f:98:32:01:ca:52:cc:d9:71:
5d:85:54:67:69:e0:39:ed:6b:da:90:0a:b1:a3:88:91:29:26:
ae:a1:f7:16:79:20:72:91:8b:f3:1f:59:ee:4f:e2:0f:f1:40:
f6:78:98:16:8a:7f:0a:de:66:e9:cf:2f:e4:c4:bc:41:ca:4a:
bc:34:48:25:a8:f9:b8:be:44:39:f8:9b:85:2b:a4:5f:2b:5d:
2b:33:34:77:58:44:a7:51:cc:d2:83:1f:73:af:28:4f:5c:87:
22:00:14:49:4f:f7:9b:11:4d:a1:b6:f2:9a:2d:8c:7c:fd:10:
12:5e:a5:1b:d5:6e:9d:77:f4:71:44:bc:43:56:86:40:71:19:
17:34:c3:d8:12:8e:8f:24:f8:ff:a6:62:27:1b:81:12:87:6b:
b5:31:a0:10:a7:b0:f0:e8:9a:01:1e:dd:de:50:8d:62:94:47:
68:00:23:ba:41:e8:86:eb:c4:81:24:19:52:af:e4:de:56:f1:
8f:de:c1:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZif3tX44UuYV5MV/8tbo5DIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWRlNWY0ZmVjMTZmNTE2ZjBiYzRkNjMxYzI2Mjc2NjNm
OTA1ZjMwHhcNMjUwODEyMjAwMDM3WhcNMjUwODEzMjAwMDM3WjAzMTEwLwYDVQQD
Eyg1NzhkNDRjZmM5ZmNlMmQ2ZjIwOWUyYjI2YTYxYjI3NDIyYWMwOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo14pB9gFiujsp++PMmlmazZJKRcN
V1wmWWGqiOhDpCulA2BArjggAT0tXwnnoNwOB/SPCFg6iEMAI0qkp6hSD0FXqLRF
Gl/JoAatuOPiKLQMXXLWvaWEv0/AQKlqCObNkywCDau+V8PotQQtV079NCYmLJPR
wA2mgl2k7jJHXEh85vCFQ2pit60IjSiwPjrGTeIrKWTeom3bqKX8l0ETqC981QRJ
f+LIQhEDSHP2B2eGnbI9fmyxpeq7ePirOf3Q7Obr+AbHTiTK5nm9gAaLDtQnk4Wc
2dUf7Fbm34/Dl0D7ttJIu6HCxY8GHa7shGkU1O/P7hBLZ941r6juUtDpXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeNRM/J/OLW8gnismphsnQirAmCMB8GA1UdIwQY
MBaAFM9d5fT+wW9RbwvE1jHCYnZj+QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2Njkt
NmZlMTQ5NGZiYzJjLzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2NjktNmZlMTQ5NGZiYzJj
LzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghSuYUKS
znd5fsdb8IrSAr3GAyaRmty3YVQRm1dVTqGnoijFReUoHnuMZZU31AP/aBohWZdi
VOkFDXNC4cgDX5gyAcpSzNlxXYVUZ2ngOe1r2pAKsaOIkSkmrqH3FnkgcpGL8x9Z
7k/iD/FA9niYFop/Ct5m6c8v5MS8QcpKvDRIJaj5uL5EOfibhSukXytdKzM0d1hE
p1HM0oMfc68oT1yHIgAUSU/3mxFNobbymi2MfP0QEl6lG9VunXf0cUS8Q1aGQHEZ
FzTD2BKOjyT4/6ZiJxuBEodrtTGgEKew8OiaAR7d3lCNYpRHaAAjukHohuvEgSQZ
Uq/k3lbxj97BaQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:20 2025 by rpki-client