Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: nNZcR2Hb4wF32vHeWrtAPm/E/Bgo+NFpyDEfemEZtdY=
Subject key identifier: DF:F2:A7:7D:24:D7:7F:B6:94:85:8C:E3:C7:A0:6E:88:AB:E3:0D:75
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 0198D54EC388CF8447DEA437AA73FC6CE364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 1384
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: 6X7yDNjWCTRZGPNpN26bHro5/7YaDwfK4ShvLUL1Nmc=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c3:88:cf:84:47:de:a4:37:aa:73:fc:6c:e3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=dff2a77d24d77fb694858ce3c7a06e88abe30d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:2c:c6:7a:1d:d1:1e:78:a8:7b:e2:a9:b5:
98:f3:76:38:e8:ae:f6:7f:f4:d0:78:cf:0c:44:bc:
dd:f3:32:9b:d6:0d:0c:63:a3:12:87:68:5a:07:74:
af:34:97:13:8f:3e:c1:bd:75:91:2c:3c:a5:58:30:
13:90:3c:13:92:42:b0:84:a1:fb:9b:4c:b4:dc:3a:
91:4f:1c:c8:e3:cb:26:eb:47:76:c6:76:98:1d:e4:
45:30:c5:e0:2d:3c:27:63:d1:44:47:da:08:da:55:
88:4a:a3:3e:43:43:7b:a0:14:fc:72:04:7a:58:cf:
4f:da:55:ea:34:b9:d9:07:1c:2c:e7:24:a3:f2:1a:
a8:a4:cf:e7:8f:b2:d6:9e:88:74:7a:48:d1:f0:4c:
6a:a0:f9:ac:e0:54:63:9f:84:23:08:47:67:f6:c8:
24:e5:ca:ca:13:96:aa:bb:22:ae:4b:e6:17:4f:12:
ea:50:0a:70:62:dd:40:23:3b:4f:21:ff:4c:65:bd:
2b:8d:07:a4:b5:17:83:b2:c1:f4:12:f6:3e:ed:f5:
0a:5b:2e:a8:f3:4d:37:63:0a:9b:0b:48:f7:a1:d2:
ec:3a:b6:e1:0a:39:e7:7a:2e:8d:37:26:f8:3c:ae:
df:d7:a7:35:3a:b2:44:41:12:17:92:12:2a:7c:ef:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F2:A7:7D:24:D7:7F:B6:94:85:8C:E3:C7:A0:6E:88:AB:E3:0D:75
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:40:80:a5:b1:c9:7d:19:16:48:05:03:b0:b3:72:ef:9b:32:
2f:60:89:a6:eb:ae:49:f7:d6:52:7e:2a:b8:6f:50:aa:38:53:
39:13:e5:20:db:6a:f7:cb:b8:1c:e3:32:37:93:b7:12:bd:43:
52:e7:89:7d:0e:bb:91:68:6d:5a:0a:1a:56:b1:24:a7:67:b5:
98:69:e4:19:4d:f2:4f:17:be:5d:a5:2c:87:bb:51:77:3e:d1:
ed:d5:08:b1:c2:c8:72:9a:74:eb:b0:9e:52:80:c6:a0:b4:09:
e4:ff:5e:fa:ea:59:67:76:43:98:43:cd:d3:41:56:20:1b:64:
e1:4b:1b:2e:b2:24:6f:c4:5c:9b:86:d0:66:f9:be:2b:e0:85:
1f:02:e6:68:67:7a:fb:9a:f7:c1:a5:ee:c5:53:f0:2e:e7:69:
2a:08:c1:7f:84:9b:f8:ab:53:f4:36:96:fd:95:cc:df:56:b9:
89:ee:cb:8f:92:c9:75:85:c8:95:54:6a:78:a5:dd:23:83:05:
93:c3:58:7a:1b:54:9e:86:f0:89:f9:fb:2b:01:8b:5a:34:bd:
fd:7c:98:ef:70:f5:cb:58:18:07:e1:fa:af:a2:3a:b6:f9:3f:
2a:98:77:24:37:d7:93:69:d5:af:0d:10:bb:0c:8f:20:71:1d:
29:a1:24:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTsOIz4RH3qQ3qnP8bONkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1
MDc0MmEwHhcNMjUwODIzMDUwMjQ1WhcNMjUwODI0MDUwMjQ1WjAzMTEwLwYDVQQD
EyhkZmYyYTc3ZDI0ZDc3ZmI2OTQ4NThjZTNjN2EwNmU4OGFiZTMwZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVEsxnod0R54qHviqbWY83Y46K72
f/TQeM8MRLzd8zKb1g0MY6MSh2haB3SvNJcTjz7BvXWRLDylWDATkDwTkkKwhKH7
m0y03DqRTxzI48sm60d2xnaYHeRFMMXgLTwnY9FER9oI2lWISqM+Q0N7oBT8cgR6
WM9P2lXqNLnZBxws5ySj8hqopM/nj7LWnoh0ekjR8ExqoPms4FRjn4QjCEdn9sgk
5crKE5aquyKuS+YXTxLqUApwYt1AIztPIf9MZb0rjQektReDssH0EvY+7fUKWy6o
8003YwqbC0j3odLsOrbhCjnnei6NNyb4PK7f16c1OrJEQRIXkhIqfO81owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/yp30k13+2lIWM48egboir4w11MB8GA1UdIwQY
MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA20CApbHJ
fRkWSAUDsLNy75syL2CJpuuuSffWUn4quG9QqjhTORPlINtq98u4HOMyN5O3Er1D
UueJfQ67kWhtWgoaVrEkp2e1mGnkGU3yTxe+XaUsh7tRdz7R7dUIscLIcpp067Ce
UoDGoLQJ5P9e+upZZ3ZDmEPN00FWIBtk4UsbLrIkb8Rcm4bQZvm+K+CFHwLmaGd6
+5r3waXuxVPwLudpKgjBf4Sb+KtT9DaW/ZXM31a5ie7Lj5LJdYXIlVRqeKXdI4MF
k8NYehtUnobwifn7KwGLWjS9/XyY73D1y1gYB+H6r6I6tvk/Kph3JDfXk2nVrw0Q
uwyPIHEdKaEkRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:55 2025 by rpki-client