Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: akinjgb0wTqDxA7t/6g9vYNadq3FIr3vcIM7/KIEqps=
Subject key identifier: D8:A1:12:4F:B1:8A:C5:00:E2:EE:20:1E:A1:4E:88:4F:1F:E5:5E:EF
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 01988C8F1B569C9732BAC0A7AAB82989E0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 1166
Signing time: Sat 09 Aug 2025 02:00:45 +0000
Manifest this update: Sat 09 Aug 2025 02:00:45 +0000
Manifest next update: Sun 10 Aug 2025 02:00:45 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: kApktyGpnZcOUGUjKbg68noBYABirc/4Oa6a4ygvzbg=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:1b:56:9c:97:32:ba:c0:a7:aa:b8:29:89:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Aug 9 02:00:45 2025 GMT
Not After : Aug 10 02:00:45 2025 GMT
Subject: CN=d8a1124fb18ac500e2ee201ea14e884f1fe55eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:7f:80:9b:26:22:27:8a:eb:ff:6e:55:26:
4e:3d:61:98:a6:8c:0b:90:e9:d1:e0:84:47:18:6c:
02:b2:5d:85:41:f3:39:de:11:a1:cb:42:51:e6:e8:
3e:0f:d8:6b:c4:20:38:39:ec:03:34:19:b4:63:83:
f1:2e:9a:e3:31:5a:00:b3:c9:77:41:83:06:9a:91:
d4:af:6f:f0:13:20:b3:05:52:2b:de:14:a0:72:48:
79:90:62:4e:4c:03:9b:a0:61:04:0b:98:fe:1e:5c:
b4:a5:ab:5f:ac:cc:6d:83:73:ea:c3:84:e9:b3:e2:
5a:fa:17:7e:a4:15:7c:b3:87:46:04:fb:d6:9d:46:
18:cd:58:f0:9e:3a:b8:14:52:a8:3a:2b:c8:ab:10:
4c:dc:7b:50:96:9f:31:81:36:05:a8:43:b8:f4:11:
95:1f:be:f0:96:00:bf:23:fe:1c:4a:37:a9:7e:d0:
a0:b2:4e:8b:37:49:12:84:46:78:ac:9f:1e:9d:ff:
db:cc:06:2c:8b:33:5c:6b:60:f9:64:8d:a3:26:29:
c0:92:d5:7e:4d:48:52:00:50:70:50:93:88:af:ad:
f3:75:f3:0b:9e:dc:37:81:98:a0:a1:a5:ab:2b:a7:
f2:83:3b:a1:fb:2e:9c:0d:3e:07:83:99:90:ef:48:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A1:12:4F:B1:8A:C5:00:E2:EE:20:1E:A1:4E:88:4F:1F:E5:5E:EF
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:65:a0:5b:35:09:79:7d:69:a6:1f:87:4a:c4:3b:b0:35:
9c:31:cb:a2:4f:b7:65:23:66:e2:d2:eb:90:1d:96:1f:44:54:
95:8a:c7:6d:5a:84:1e:5c:af:8a:62:b6:0a:55:09:50:0a:b7:
a2:c6:27:85:17:e9:f5:32:b9:f7:d8:b1:d3:91:b6:5c:73:de:
62:24:71:1b:1f:de:50:97:ea:ca:32:62:6a:10:46:15:15:cf:
57:ed:4a:92:d1:d6:f5:05:cd:eb:11:56:d5:e7:7d:c2:71:f9:
bf:7a:8c:5d:b3:0d:dc:94:00:35:42:00:ac:8d:b2:9d:b9:e1:
4d:49:fb:c3:a2:b7:05:02:24:05:e2:72:5d:2e:b0:02:c7:20:
e4:b7:f3:46:07:4a:70:d0:4e:e2:81:4b:ae:b8:0c:78:d2:f8:
07:3e:ca:94:47:85:9f:59:39:60:e0:80:60:1b:79:07:5e:f9:
36:ff:ee:84:b1:6f:2d:a0:46:b7:7e:87:ec:f4:62:27:6b:bc:
fa:18:e3:22:94:24:20:2f:02:f1:46:4b:59:62:89:e9:e4:c4:
61:46:8c:96:c5:bb:05:1b:b6:e3:8d:34:d1:63:86:33:a1:92:
73:75:09:8e:ef:9b:5b:45:e9:7a:13:24:b6:c8:c1:e0:41:99:
a8:ff:cb:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMjxtWnJcyusCnqrgpieD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjUwODA5MDIwMDQ1WhcNMjUwODEwMDIwMDQ1WjAzMTEwLwYDVQQD
EyhkOGExMTI0ZmIxOGFjNTAwZTJlZTIwMWVhMTRlODg0ZjFmZTU1ZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/J/gJsmIieK6/9uVSZOPWGYpowL
kOnR4IRHGGwCsl2FQfM53hGhy0JR5ug+D9hrxCA4OewDNBm0Y4PxLprjMVoAs8l3
QYMGmpHUr2/wEyCzBVIr3hSgckh5kGJOTAOboGEEC5j+Hly0patfrMxtg3Pqw4Tp
s+Ja+hd+pBV8s4dGBPvWnUYYzVjwnjq4FFKoOivIqxBM3HtQlp8xgTYFqEO49BGV
H77wlgC/I/4cSjepftCgsk6LN0kShEZ4rJ8enf/bzAYsizNca2D5ZI2jJinAktV+
TUhSAFBwUJOIr63zdfMLntw3gZigoaWrK6fygzuh+y6cDT4Hg5mQ70gfGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNihEk+xisUA4u4gHqFOiE8f5V7vMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQ5loFs1
CXl9aaYfh0rEO7A1nDHLok+3ZSNm4tLrkB2WH0RUlYrHbVqEHlyvimK2ClUJUAq3
osYnhRfp9TK599ix05G2XHPeYiRxGx/eUJfqyjJiahBGFRXPV+1KktHW9QXN6xFW
1ed9wnH5v3qMXbMN3JQANUIArI2ynbnhTUn7w6K3BQIkBeJyXS6wAscg5LfzRgdK
cNBO4oFLrrgMeNL4Bz7KlEeFn1k5YOCAYBt5B175Nv/uhLFvLaBGt36H7PRiJ2u8
+hjjIpQkIC8C8UZLWWKJ6eTEYUaMlsW7BRu244000WOGM6GSc3UJju+bW0XpehMk
tsjB4EGZqP/LoA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:38:12 2025 by rpki-client