Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: SUUEyshUaCGDW8Ky9QMlBA90B6Y7I7Hpl9yTIWBrQ6E=
Subject key identifier: 36:90:E5:49:2E:BB:B9:B7:7A:CD:A7:9A:30:8B:7F:6C:CD:1F:B4:00
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 0198D583CB5D688569015623E70CFD68212B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1392
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: 9nSYu6wPBSKFz/pqWdtQ/jrwvRC6MLf7ae/uKZ5r3Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:cb:5d:68:85:69:01:56:23:e7:0c:fd:68:21:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=3690e5492ebbb9b77acda79a308b7f6ccd1fb400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:51:71:88:23:6f:32:c5:55:13:41:72:1c:
fe:66:42:80:f6:a6:92:2d:c6:26:55:76:33:87:a7:
a9:23:9c:7d:52:ef:f9:33:b3:93:d4:c4:a2:80:5a:
e5:25:a2:62:d9:f9:91:fe:e2:30:18:bc:58:60:71:
5e:8b:7c:d3:3d:02:00:9d:19:4d:f7:91:74:b0:39:
f4:c1:24:4e:7d:df:5e:7a:df:8f:db:99:78:6e:b3:
7d:7e:19:e9:5b:10:d5:09:45:68:ca:11:f7:97:ad:
9c:cd:a2:25:1d:95:e3:b4:22:7a:42:27:ca:d5:04:
77:82:15:8c:f7:22:93:b8:bb:18:c6:b2:fc:42:3e:
17:19:ef:cf:53:7a:61:bd:b2:e1:1d:d3:76:12:f5:
32:29:8d:ad:68:0f:d0:d6:54:38:20:f3:c4:25:88:
8a:56:68:c0:ef:63:9f:56:33:49:66:17:36:ac:bc:
4f:68:5b:c4:df:e9:65:1d:2f:fb:57:01:59:93:e5:
cc:06:09:65:d5:c4:1c:d7:7c:8e:9d:d0:3b:0d:1e:
88:91:9c:71:bc:3f:8c:32:94:da:bd:b4:ef:a7:f4:
8f:da:e3:a9:fa:80:db:2f:f3:4f:3c:33:8f:e2:78:
64:d1:ba:8c:b8:c1:e0:60:7f:98:cc:a7:4a:94:f9:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:90:E5:49:2E:BB:B9:B7:7A:CD:A7:9A:30:8B:7F:6C:CD:1F:B4:00
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4b:3d:53:38:36:45:5a:47:0f:19:b3:33:0f:26:e6:e9:00:
ca:b8:a0:7a:11:29:55:5f:02:5e:40:8e:29:28:de:4a:d3:5e:
a2:91:78:6f:49:72:73:3c:87:b4:6f:30:5b:b9:c3:cb:42:79:
c5:78:df:ba:8b:4e:cd:ad:8a:b0:0d:45:9e:0a:8a:1a:07:fc:
30:f2:9d:35:90:3c:9c:98:67:26:4f:8f:37:8f:80:9b:37:3a:
66:1a:2e:d3:86:52:db:e1:82:7e:97:4b:80:a7:4a:84:a7:f5:
07:71:e2:bd:1c:39:a3:61:39:48:d7:93:38:11:31:94:17:b3:
6c:c5:d3:59:ea:5f:4a:9c:8d:85:8b:80:db:cd:10:e0:c7:f1:
d1:b5:83:89:4e:96:02:6a:ab:d5:ec:cf:ab:c1:7a:b6:0d:7f:
c0:64:69:db:3a:be:68:52:fe:f0:d7:63:3e:7f:60:98:0e:03:
9b:7a:bc:f4:aa:fe:cd:68:a1:62:9f:26:30:86:c9:5b:19:67:
d5:7b:f2:2b:4e:fc:21:5a:8e:2d:3e:e5:6e:a2:21:84:f5:8d:
0f:db:94:ac:7d:4f:ee:5a:92:52:aa:4f:3e:38:a8:b6:23:3e:
51:c1:44:a1:9c:8a:27:71:71:6b:56:7c:88:91:2b:a8:e7:14:
60:3e:84:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg8tdaIVpAVYj5wz9aCErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjUwODIzMDYwMDQwWhcNMjUwODI0MDYwMDQwWjAzMTEwLwYDVQQD
EygzNjkwZTU0OTJlYmJiOWI3N2FjZGE3OWEzMDhiN2Y2Y2NkMWZiNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A1RcYgjbzLFVRNBchz+ZkKA9qaS
LcYmVXYzh6epI5x9Uu/5M7OT1MSigFrlJaJi2fmR/uIwGLxYYHFei3zTPQIAnRlN
95F0sDn0wSROfd9eet+P25l4brN9fhnpWxDVCUVoyhH3l62czaIlHZXjtCJ6QifK
1QR3ghWM9yKTuLsYxrL8Qj4XGe/PU3phvbLhHdN2EvUyKY2taA/Q1lQ4IPPEJYiK
VmjA72OfVjNJZhc2rLxPaFvE3+llHS/7VwFZk+XMBgll1cQc13yOndA7DR6IkZxx
vD+MMpTavbTvp/SP2uOp+oDbL/NPPDOP4nhk0bqMuMHgYH+YzKdKlPmv3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaQ5Ukuu7m3es2nmjCLf2zNH7QAMB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0s9Uzg2
RVpHDxmzMw8m5ukAyrigehEpVV8CXkCOKSjeStNeopF4b0lyczyHtG8wW7nDy0J5
xXjfuotOza2KsA1FngqKGgf8MPKdNZA8nJhnJk+PN4+Amzc6Zhou04ZS2+GCfpdL
gKdKhKf1B3HivRw5o2E5SNeTOBExlBezbMXTWepfSpyNhYuA280Q4Mfx0bWDiU6W
Amqr1ezPq8F6tg1/wGRp2zq+aFL+8NdjPn9gmA4Dm3q89Kr+zWihYp8mMIbJWxln
1XvyK078IVqOLT7lbqIhhPWND9uUrH1P7lqSUqpPPjiotiM+UcFEoZyKJ3Fxa1Z8
iJErqOcUYD6Eng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:41 2025 by rpki-client