Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: PZlKb3xLV7HMKpuam5w+6L3OgPaM7oMofoSPpiYEt9U=
Subject key identifier: 56:EA:FA:7F:01:F9:97:58:D7:27:F2:01:12:13:C9:17:8E:6B:3A:50
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 0198D5BBF037DE3D2725712D265FFD856209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: 5sSBs1QGp1gTfm7zgfbtnLnjV2xY1+22SYmv7MrjGDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f0:37:de:3d:27:25:71:2d:26:5f:fd:85:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=56eafa7f01f99758d727f2011213c9178e6b3a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:1e:ed:a2:c1:37:d3:46:23:1f:d3:75:6b:
7a:e6:47:f5:7f:58:09:c5:18:50:29:f3:15:ea:25:
47:2c:53:60:c5:c5:de:b5:dc:6f:4c:2d:f2:5a:e5:
68:5f:fb:fb:59:f0:ea:e2:78:42:38:f9:51:8b:22:
b4:9e:e9:55:41:4b:bc:ad:a5:b3:bb:85:73:c1:17:
c1:fe:91:92:8c:04:07:2b:47:df:7b:f8:2d:66:3d:
58:77:a2:28:9e:51:a7:70:29:c8:9e:03:b0:70:92:
31:9c:21:4c:53:81:8e:02:e8:63:a3:e9:61:da:6f:
01:0f:94:f4:d6:cd:b9:45:41:88:e9:22:66:28:06:
36:19:e0:46:38:ad:ac:9d:c4:cf:41:99:e0:d7:1e:
48:8b:dd:f2:87:25:02:3d:11:52:30:a7:01:2f:9f:
22:08:69:2b:c3:f5:37:a1:7b:82:95:2e:44:71:13:
b7:c1:e3:f0:c0:5f:bc:23:d5:e3:c3:d4:d2:76:64:
2e:11:8b:31:0e:9d:ce:c5:ff:46:ba:d9:a1:f3:6a:
36:1b:f7:cc:e9:4e:f1:21:d1:d0:bd:67:72:d3:6d:
45:e9:77:3b:0f:d7:e9:38:23:d9:20:d7:8e:80:5b:
aa:0d:ca:f4:00:84:41:e7:3f:8b:da:6f:30:30:b8:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:FA:7F:01:F9:97:58:D7:27:F2:01:12:13:C9:17:8E:6B:3A:50
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:61:71:6a:30:7b:17:6d:da:da:be:f6:a3:d4:20:11:5d:5d:
70:d9:e5:1c:37:41:14:3c:46:73:ba:8f:3c:87:12:2e:e2:f3:
d0:48:25:a3:44:78:d0:ee:d2:05:11:73:02:8b:f0:a7:b2:01:
79:b9:9d:5f:bf:fe:46:d3:e2:70:73:b5:67:20:79:3f:4b:47:
d2:8e:2a:56:e6:45:9c:e7:da:c4:d7:b7:fa:dd:93:8e:95:36:
ea:4f:7b:78:9d:fc:97:e3:d2:22:88:7c:c6:e9:ed:55:ec:12:
95:3a:d9:6b:e8:74:31:42:e5:15:58:0a:19:98:f3:0c:90:ad:
44:17:73:86:dc:6e:0b:67:d3:1c:c5:69:81:61:8a:50:76:2d:
0a:5e:22:0b:b7:d7:bf:60:81:75:c9:9c:56:a2:82:8a:41:3e:
8b:1d:9a:e7:ea:e3:c7:a6:73:33:2c:6f:dc:20:51:1f:6e:8e:
c6:50:b6:aa:8e:d4:2f:78:63:9f:8e:df:f0:b3:f6:f0:1b:3f:
40:67:6e:5b:be:da:d7:4b:6d:e6:c2:59:13:d6:02:fc:07:83:
2b:a1:68:0b:bf:40:b8:ff:73:81:e4:a8:2a:77:60:23:71:62:
ac:38:f2:29:4f:f3:b9:c9:a8:45:40:eb:0f:4f:ec:c1:e3:7f:
83:73:db:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/A33j0nJXEtJl/9hWIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTlmNzFlMTVjMGYzOGNlYmEyNTdkMzAzMDRlZDQ0YmVh
ODdjNTAwHhcNMjUwODIzMDcwMjAwWhcNMjUwODI0MDcwMjAwWjAzMTEwLwYDVQQD
Eyg1NmVhZmE3ZjAxZjk5NzU4ZDcyN2YyMDExMjEzYzkxNzhlNmIzYTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uEe7aLBN9NGIx/TdWt65kf1f1gJ
xRhQKfMV6iVHLFNgxcXetdxvTC3yWuVoX/v7WfDq4nhCOPlRiyK0nulVQUu8raWz
u4VzwRfB/pGSjAQHK0ffe/gtZj1Yd6IonlGncCnIngOwcJIxnCFMU4GOAuhjo+lh
2m8BD5T01s25RUGI6SJmKAY2GeBGOK2sncTPQZng1x5Ii93yhyUCPRFSMKcBL58i
CGkrw/U3oXuClS5EcRO3wePwwF+8I9Xjw9TSdmQuEYsxDp3Oxf9Gutmh82o2G/fM
6U7xIdHQvWdy021F6Xc7D9fpOCPZINeOgFuqDcr0AIRB5z+L2m8wMLhFiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbq+n8B+ZdY1yfyARITyReOazpQMB8GA1UdIwQY
MBaAFGSZ9x4VwPOM66JX0wME7US+qHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDct
NTc4NWIxNTczYTY5LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDctNTc4NWIxNTczYTY5
LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGFxajB7
F23a2r72o9QgEV1dcNnlHDdBFDxGc7qPPIcSLuLz0Eglo0R40O7SBRFzAovwp7IB
ebmdX7/+RtPicHO1ZyB5P0tH0o4qVuZFnOfaxNe3+t2TjpU26k97eJ38l+PSIoh8
xuntVewSlTrZa+h0MULlFVgKGZjzDJCtRBdzhtxuC2fTHMVpgWGKUHYtCl4iC7fX
v2CBdcmcVqKCikE+ix2a5+rjx6ZzMyxv3CBRH26OxlC2qo7UL3hjn47f8LP28Bs/
QGduW77a10tt5sJZE9YC/AeDK6FoC79AuP9zgeSoKndgI3FirDjyKU/zucmoRUDr
D0/sweN/g3PbXA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:36 2025 by rpki-client