Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: vC8tlc3j+kfdn31n4SGyN5VF7zZZ7vF/JBz5XVRyuik=
Subject key identifier: 96:FF:B6:DC:09:0A:FF:CC:66:21:0C:C3:FA:16:DA:3C:C3:16:C3:38
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 0197B89015ADF5D9075A1621F349E65E4AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 0FB3
Signing time: Sat 28 Jun 2025 22:02:19 +0000
Manifest this update: Sat 28 Jun 2025 22:02:19 +0000
Manifest next update: Sun 29 Jun 2025 22:02:19 +0000
Files and hashes: 1: 79lt-80txKIWQWCp9jNMLc2IHAs.roa (hash: 8V+u82sHy+GzDpyon/8u7WM8JnJcqgS9AiUeL6z8Iug=)
2: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: Z2FJBWGqF4DFezLM2G4lRpsQdqUrP0ZnJsUYkofZw8A=)
3: AQ7FmuvDz62F8uKHQpuKMEYydQQ.roa (hash: M9DqKPgllLnW8MX9RGkl/xHC2u96Nyjw3cSwX+kD68U=)
4: Vf1RDh-x6BtkmqUI8kQeJAmyoeQ.roa (hash: 1PUOdlU3yqRdUd5Mz1TUUvBo/uRT6+wW9qnbLMW13lU=)
5: lXo95w5iGY2qlCwar4Vb6ngfmUQ.roa (hash: K7cw6ymMs8oJcHolnWrjFvAyiZlrz4VloYZ/Ck1llmM=)
6: nUxTi5H5Wi_nGNCH8VXylwgxdJ0.roa (hash: xSWU06TWSLqiugEcuWmt4LzGgEiH/rhkdBHL5vVX0+0=)
7: omuf2rqv4Sp9P-8ZJZ916fSowyA.roa (hash: UlQgwX4zh3WqyryliD1lENPsPKINDm9DlFR8/vawBBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:15:ad:f5:d9:07:5a:16:21:f3:49:e6:5e:4a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Jun 28 22:02:19 2025 GMT
Not After : Jun 29 22:02:19 2025 GMT
Subject: CN=96ffb6dc090affcc66210cc3fa16da3cc316c338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:a2:fd:ff:d0:de:2b:43:4c:64:a3:1f:73:
5a:bf:8a:73:99:3f:c7:2d:45:22:48:73:2f:57:90:
3b:9e:e1:df:a7:46:1e:ff:9b:3c:7d:7a:ab:a8:66:
14:bd:92:3c:65:02:2c:6a:16:06:bf:25:86:fe:6c:
60:15:b2:df:ca:e0:d5:7a:70:d7:af:7d:02:d8:05:
6b:2a:11:90:d4:85:7e:b1:88:d1:a5:2e:20:e2:01:
bb:d2:81:3e:8c:1f:a8:95:8c:f3:7f:c9:19:cf:01:
c4:0e:84:8b:59:70:a7:6b:fb:51:9e:47:d8:4e:45:
4d:52:73:33:b9:73:b9:e6:1c:5d:8b:6b:a5:9b:1d:
a2:77:f0:61:dd:66:0f:63:2e:c1:b9:cc:24:4f:33:
11:24:e9:53:b6:9e:50:c8:7c:b9:8a:8e:11:ed:12:
06:cc:6d:e4:75:79:6c:2d:86:a5:b3:c0:cf:d5:37:
5f:10:e2:94:2e:a3:53:cf:4f:f7:bf:b4:07:d7:7a:
66:7c:ba:9b:8a:fb:cd:e5:20:fc:7d:4e:4c:f3:6e:
a5:a1:13:7f:2b:aa:33:3f:0b:c8:2e:3b:9b:1d:58:
a2:92:41:84:3a:b2:c5:12:48:60:b8:68:4c:50:63:
83:ba:77:d2:22:3e:19:82:6c:3c:7e:74:8f:0f:37:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:B6:DC:09:0A:FF:CC:66:21:0C:C3:FA:16:DA:3C:C3:16:C3:38
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f0:a5:a6:8d:88:58:a7:da:d2:b7:64:e7:3f:4d:af:1c:cf:
61:b4:89:05:1f:7d:bf:5f:5e:5d:ec:e8:ef:31:c9:7b:3d:6e:
fc:af:76:b3:87:45:e9:02:b1:93:ff:e6:5d:85:13:72:07:fa:
91:71:08:78:81:f7:42:65:8c:be:49:13:95:08:5e:af:3e:94:
64:7c:7f:0b:7e:81:63:e3:e4:85:80:e9:5a:36:12:ee:d8:98:
34:78:db:4f:7f:f7:ae:b9:b2:ce:fa:03:77:4b:3d:01:05:5b:
44:21:af:9a:de:f9:1f:39:5b:21:d8:9f:67:3a:5f:9e:45:eb:
01:e2:67:6f:bd:b7:26:c4:48:41:f3:db:47:7e:c8:a7:48:29:
2a:5a:6d:4c:a3:68:20:83:4b:d5:ea:8c:28:1f:b0:88:6e:96:
3c:f0:b2:19:b1:b5:c6:85:a6:fc:c2:34:8c:56:8f:ce:9b:77:
41:54:55:a3:cb:65:ff:21:9e:98:28:b7:87:02:86:21:16:66:
07:56:1c:4b:25:06:fe:64:df:63:f0:4b:e2:00:c6:39:55:07:
91:2a:c7:a4:ba:5c:81:16:ef:c7:75:a6:8a:08:1f:31:1e:2c:
6d:2b:0a:bc:e2:f8:ab:78:99:f0:98:24:d2:30:1e:a5:e1:0c:
2d:55:30:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kBWt9dkHWhYh80nmXkqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw
YTY4YjgwHhcNMjUwNjI4MjIwMjE5WhcNMjUwNjI5MjIwMjE5WjAzMTEwLwYDVQQD
Eyg5NmZmYjZkYzA5MGFmZmNjNjYyMTBjYzNmYTE2ZGEzY2MzMTZjMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq2i/f/Q3itDTGSjH3Nav4pzmT/H
LUUiSHMvV5A7nuHfp0Ye/5s8fXqrqGYUvZI8ZQIsahYGvyWG/mxgFbLfyuDVenDX
r30C2AVrKhGQ1IV+sYjRpS4g4gG70oE+jB+olYzzf8kZzwHEDoSLWXCna/tRnkfY
TkVNUnMzuXO55hxdi2ulmx2id/Bh3WYPYy7BucwkTzMRJOlTtp5QyHy5io4R7RIG
zG3kdXlsLYals8DP1TdfEOKULqNTz0/3v7QH13pmfLqbivvN5SD8fU5M826loRN/
K6ozPwvILjubHViikkGEOrLFEkhguGhMUGODunfSIj4Zgmw8fnSPDzcovQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb/ttwJCv/MZiEMw/oW2jzDFsM4MB8GA1UdIwQY
MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt
MzEzZWZlYjBiMTlkLzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk
LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvClpo2I
WKfa0rdk5z9NrxzPYbSJBR99v19eXezo7zHJez1u/K92s4dF6QKxk//mXYUTcgf6
kXEIeIH3QmWMvkkTlQherz6UZHx/C36BY+PkhYDpWjYS7tiYNHjbT3/3rrmyzvoD
d0s9AQVbRCGvmt75HzlbIdifZzpfnkXrAeJnb723JsRIQfPbR37Ip0gpKlptTKNo
IINL1eqMKB+wiG6WPPCyGbG1xoWm/MI0jFaPzpt3QVRVo8tl/yGemCi3hwKGIRZm
B1YcSyUG/mTfY/BL4gDGOVUHkSrHpLpcgRbvx3WmiggfMR4sbSsKvOL4q3iZ8Jgk
0jAepeEMLVUwNg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:42 2025 by rpki-client