Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: s78ZiJkRgsKv66AHg28UVTt79R8b4kKZ3G9MnUCHyI4=
Subject key identifier: BE:BA:CE:EE:E9:BB:EB:92:A9:B4:DE:90:3A:67:CC:C4:39:BD:8E:98
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 0198D54E88298356DB32EB2E474FA3862B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 0FB0
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: jUvco9/T8gQcc9Vn5/5WEqFh+OV6jWvQR1bw+KwHC0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:88:29:83:56:db:32:eb:2e:47:4f:a3:86:2b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=bebaceeee9bbeb92a9b4de903a67ccc439bd8e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:16:20:ec:6e:a8:99:50:b5:89:22:43:8b:
26:eb:51:b7:96:90:7b:1b:7b:dc:d6:0d:e2:20:f5:
ca:df:5b:56:da:24:a4:0c:1f:e2:1a:19:e4:61:c3:
e2:6c:0d:44:71:ad:36:ab:2c:c8:ea:b1:63:d5:79:
68:41:4a:c9:c1:ff:67:55:42:aa:3d:2f:19:71:e7:
e9:e9:b5:58:01:21:fa:c8:00:50:13:a1:90:88:82:
5a:60:2e:de:ad:c5:ff:ec:79:6d:c8:83:5a:60:bf:
0e:1e:ed:72:5f:12:95:50:4b:96:c6:a3:15:7c:e9:
08:28:ce:f3:58:69:1b:ca:7f:14:79:45:8b:f9:66:
62:41:be:dd:f1:e1:f5:c3:05:05:aa:3e:69:c6:35:
d0:b5:ce:d5:9e:0e:24:d1:61:50:55:4d:40:83:de:
f1:a7:44:50:19:ed:9c:46:6d:04:f5:96:0b:bf:21:
44:7e:45:de:95:54:df:48:fa:11:c3:6a:b1:fc:f6:
3b:30:5a:fe:6e:30:ef:6c:af:08:1c:74:a6:5a:16:
63:8c:42:14:c8:94:71:9e:99:35:6c:0c:92:98:e7:
8c:6f:79:15:14:52:8c:98:23:5a:4b:19:96:f4:8a:
a6:cc:a7:a5:bd:6a:a0:97:74:1f:07:28:6d:dd:eb:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:CE:EE:E9:BB:EB:92:A9:B4:DE:90:3A:67:CC:C4:39:BD:8E:98
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:db:7f:4e:72:4a:05:9d:40:ec:64:20:23:5f:72:2b:3b:7e:
aa:46:02:55:ad:d3:a2:8b:1c:db:2e:1c:ef:9b:f8:3d:12:0e:
e3:e3:df:4c:55:45:84:d9:05:94:1d:1b:61:23:ec:9d:44:88:
1f:3f:80:fa:64:23:da:23:f0:e1:ba:58:6c:3a:de:f8:9e:46:
11:e0:91:24:77:63:ce:df:8c:ef:a5:8a:f7:e6:62:f0:5f:39:
ac:e9:16:c9:c0:a7:02:ef:46:97:c6:e6:67:3d:c1:be:0a:58:
5a:97:29:57:b8:66:35:eb:0f:ef:3f:2f:aa:eb:17:7a:d7:eb:
4c:5f:10:31:e2:94:f9:ae:e6:de:05:0d:88:f4:ff:de:52:9c:
e3:85:9c:b1:3a:85:32:08:7d:6b:ae:1f:21:4b:35:30:32:f0:
fa:21:19:11:45:20:37:c0:3b:a6:c9:ef:bf:b2:4f:e7:53:6e:
01:78:34:63:b9:43:46:d6:52:9b:3b:0b:85:d4:9f:13:34:dd:
7a:0f:8c:a5:86:da:9e:03:70:46:5d:0f:b8:c8:aa:9d:cf:54:
e0:c6:8b:53:30:49:1b:07:bc:00:c8:54:7e:61:36:90:e6:11:
ca:39:fd:7a:0d:a6:19:4b:e4:cf:bf:b5:75:25:67:68:f5:20:
3d:47:1f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTogpg1bbMusuR0+jhitUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjU5YWU1MjE5NTJkYTU1ZTAzZjc3OWI4ODUwMzFjMGM4
MDljZjkwHhcNMjUwODIzMDUwMjMwWhcNMjUwODI0MDUwMjMwWjAzMTEwLwYDVQQD
EyhiZWJhY2VlZWU5YmJlYjkyYTliNGRlOTAzYTY3Y2NjNDM5YmQ4ZTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3QWIOxuqJlQtYkiQ4sm61G3lpB7
G3vc1g3iIPXK31tW2iSkDB/iGhnkYcPibA1Eca02qyzI6rFj1XloQUrJwf9nVUKq
PS8Zcefp6bVYASH6yABQE6GQiIJaYC7ercX/7HltyINaYL8OHu1yXxKVUEuWxqMV
fOkIKM7zWGkbyn8UeUWL+WZiQb7d8eH1wwUFqj5pxjXQtc7Vng4k0WFQVU1Ag97x
p0RQGe2cRm0E9ZYLvyFEfkXelVTfSPoRw2qx/PY7MFr+bjDvbK8IHHSmWhZjjEIU
yJRxnpk1bAySmOeMb3kVFFKMmCNaSxmW9IqmzKelvWqgl3QfByht3euA6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL66zu7pu+uSqbTekDpnzMQ5vY6YMB8GA1UdIwQY
MBaAFGS1muUhlS2lXgP3ebiFAxwMgJz5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQt
NTFhZDAwZTU0MzMyLzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi82YTZiMjItZmU2Ny00MjAyLWFjOTQtNTFhZDAwZTU0MzMy
LzEvWkxXYTVTR1ZMYVZlQV9kNXVJVURIQXlBblBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9t/TnJK
BZ1A7GQgI19yKzt+qkYCVa3Toosc2y4c75v4PRIO4+PfTFVFhNkFlB0bYSPsnUSI
Hz+A+mQj2iPw4bpYbDre+J5GEeCRJHdjzt+M76WK9+Zi8F85rOkWycCnAu9Gl8bm
Zz3BvgpYWpcpV7hmNesP7z8vqusXetfrTF8QMeKU+a7m3gUNiPT/3lKc44WcsTqF
Mgh9a64fIUs1MDLw+iEZEUUgN8A7psnvv7JP51NuAXg0Y7lDRtZSmzsLhdSfEzTd
eg+MpYbangNwRl0PuMiqnc9U4MaLUzBJGwe8AMhUfmE2kOYRyjn9eg2mGUvkz7+1
dSVnaPUgPUcfLg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:31 2025 by rpki-client