Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: LMdYBxKSkIpdCMFMpXu6yv8fGRJ3CkYj36mpz3TWyA4=
Subject key identifier: E8:AD:24:21:80:94:11:7E:4C:2C:FC:65:A5:56:6B:CF:4A:16:C8:0E
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 0198D5162A9FAD4BAAC247CF2F6714B84647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0DCC
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: W5reCW7CCufiCDRhaZ54mg0S2tPps8Y3eEy8zB9QhS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2a:9f:ad:4b:aa:c2:47:cf:2f:67:14:b8:46:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=e8ad24218094117e4c2cfc65a5566bcf4a16c80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:5a:ff:3d:82:76:99:b1:00:0e:8b:b1:94:
c8:a4:6f:74:3b:34:16:b6:03:39:d2:86:7c:bc:92:
a6:ce:f4:6f:de:c8:f5:32:98:2c:2f:07:92:59:2b:
8a:ae:da:4f:f6:ec:39:3c:9e:55:7d:75:10:3f:fe:
66:6b:ef:1d:5f:7e:05:ec:2c:db:29:da:c7:96:1c:
19:ac:56:34:6a:e0:ae:46:b3:b8:8a:78:51:e6:35:
f2:c7:cd:1f:f7:85:70:44:e8:1a:35:f0:2f:d5:65:
c5:21:97:87:36:db:45:12:4c:44:61:52:7a:aa:e2:
35:d0:82:11:6b:d4:c1:02:94:72:2a:0f:61:7c:44:
be:cc:83:fd:0f:b2:32:0c:9d:b0:a7:32:11:7d:84:
e1:b3:1c:1d:e6:4e:54:32:5b:06:38:05:b2:9e:d0:
e9:fd:db:23:9a:05:1e:bc:5b:ea:a1:78:5f:e8:66:
b6:64:e2:0c:c2:73:72:c5:a2:69:95:8a:aa:f1:0a:
2d:fa:68:b1:b5:16:2c:29:a3:87:fe:ba:2a:57:ce:
96:b8:c0:2f:14:2d:6e:d4:47:ae:f5:ba:5c:69:7e:
77:93:d3:9b:e9:0e:5a:b3:ff:4c:d3:7e:dd:e5:f5:
ef:d6:37:4b:e9:a4:95:c2:18:5a:17:50:16:69:3d:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:24:21:80:94:11:7E:4C:2C:FC:65:A5:56:6B:CF:4A:16:C8:0E
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b6:7e:82:80:c2:5f:8b:4b:9c:9f:03:99:da:59:54:e5:d5:
83:af:fb:6d:55:46:74:f3:ff:2e:48:07:c6:c2:a0:1c:ee:07:
96:2f:98:e0:e3:9c:a7:cb:41:db:e6:0f:ff:7e:77:df:f8:e4:
f7:d6:07:b5:52:29:73:6b:5e:2a:ea:3b:ac:b2:ab:0f:fa:f3:
db:b0:ab:e0:43:14:a9:2b:51:5e:04:77:59:26:b8:76:f8:96:
9e:10:93:ad:7a:d8:7c:b0:bd:d9:64:57:21:b0:9d:a3:36:c3:
17:1f:24:97:fb:da:08:ad:1b:65:b1:44:da:d2:0b:ef:b4:5e:
a8:ae:5d:f4:ce:31:35:a1:b1:8d:a4:2b:eb:f1:31:19:43:08:
2e:59:76:45:e1:a9:48:63:8d:51:de:7c:13:fc:97:24:9a:5b:
3f:ca:ca:89:b7:c8:72:96:c4:91:be:51:61:68:7e:bd:a2:35:
12:c2:5e:be:91:a6:1b:43:e1:8a:9d:a6:72:bb:fa:1d:3c:fc:
34:d5:bc:c3:a3:45:7f:ad:70:a8:4e:52:c6:73:5f:b9:85:06:
b9:84:0b:3b:6e:a8:03:84:67:44:06:f9:6d:c1:24:bf:87:74:
f3:0e:91:06:1b:55:7b:8d:00:1c:79:93:16:6a:57:4c:81:f8:
c3:31:2d:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiqfrUuqwkfPL2cUuEZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2RhZjEyMmUzYTg3YWNhYTZmZGI2MmMzNWEyNTJhMTk5
YTU4ZDkwHhcNMjUwODIzMDQwMDU2WhcNMjUwODI0MDQwMDU2WjAzMTEwLwYDVQQD
EyhlOGFkMjQyMTgwOTQxMTdlNGMyY2ZjNjVhNTU2NmJjZjRhMTZjODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojla/z2CdpmxAA6LsZTIpG90OzQW
tgM50oZ8vJKmzvRv3sj1MpgsLweSWSuKrtpP9uw5PJ5VfXUQP/5ma+8dX34F7Czb
KdrHlhwZrFY0auCuRrO4inhR5jXyx80f94VwROgaNfAv1WXFIZeHNttFEkxEYVJ6
quI10IIRa9TBApRyKg9hfES+zIP9D7IyDJ2wpzIRfYThsxwd5k5UMlsGOAWyntDp
/dsjmgUevFvqoXhf6Ga2ZOIMwnNyxaJplYqq8Qot+mixtRYsKaOH/roqV86WuMAv
FC1u1Eeu9bpcaX53k9Ob6Q5as/9M037d5fXv1jdL6aSVwhhaF1AWaT1tIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOitJCGAlBF+TCz8ZaVWa89KFsgOMB8GA1UdIwQY
MBaAFGQ9rxIuOoesqm/bYsNaJSoZmljZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYt
ZGNkNWU5NDc4MDg0LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9lZDNkNGEtNzA0Zi00YWE0LTgyMWYtZGNkNWU5NDc4MDg0
LzEvWkQydkVpNDZoNnlxYjl0aXcxb2xLaG1hV05rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7Z+goDC
X4tLnJ8DmdpZVOXVg6/7bVVGdPP/LkgHxsKgHO4Hli+Y4OOcp8tB2+YP/3533/jk
99YHtVIpc2teKuo7rLKrD/rz27Cr4EMUqStRXgR3WSa4dviWnhCTrXrYfLC92WRX
IbCdozbDFx8kl/vaCK0bZbFE2tIL77ReqK5d9M4xNaGxjaQr6/ExGUMILll2ReGp
SGONUd58E/yXJJpbP8rKibfIcpbEkb5RYWh+vaI1EsJevpGmG0Phip2mcrv6HTz8
NNW8w6NFf61wqE5SxnNfuYUGuYQLO26oA4RnRAb5bcEkv4d08w6RBhtVe40AHHmT
FmpXTIH4wzEtSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:31 2025 by rpki-client