Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json)
Hash identifier: XhCAnWTS2YPKKXriiaHohZb8IBIqsrrGcYmQsQtdzpM=
Subject key identifier: 4D:EB:E8:89:51:B2:96:C9:9A:D5:2A:E7:FE:01:18:7B:25:AF:7A:C8
Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d
Certificate serial: 0198D47319B512869D79BA1950D81DD8662E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
Manifest number: 0561
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: nFYFIFZ3JkkMfseUfewrtXvSSRa8KLTQ/ww5eA1NGSQ=)
2: e9CofsvHtUd9nOdIWFYukSYHblY.roa (hash: bRaoXZzCxY/+WP3cSFPKma8SeEgItuQDnpy+HQsr3lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:19:b5:12:86:9d:79:ba:19:50:d8:1d:d8:66:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=4debe88951b296c99ad52ae7fe01187b25af7ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:23:fc:28:93:16:7f:94:63:40:69:7e:d2:
ce:72:75:99:de:4c:78:55:01:33:8d:1c:ac:0a:66:
9c:ce:f4:7e:fb:c4:48:6b:36:fb:96:38:03:f9:03:
fe:be:71:92:51:e9:a0:ca:c8:ee:fa:fe:7c:1b:5a:
94:62:0b:ea:d6:eb:c1:a0:e6:20:9f:52:5d:2a:83:
76:bf:25:73:99:f0:44:cf:4a:bd:c7:1a:0f:89:f6:
fc:3d:17:9f:a0:ef:ea:7e:0c:12:7b:45:a5:30:5c:
c2:fd:cb:b5:1b:c9:f5:bc:56:cf:f1:c0:d5:5f:55:
af:39:3a:b9:c1:96:03:8e:9f:d1:a0:25:7b:6e:b3:
fc:fa:15:83:a5:fd:34:50:a5:0d:81:39:3d:c1:b4:
28:44:51:fe:cc:10:90:1d:d4:00:8f:ae:70:2c:42:
cc:c6:be:88:e3:86:bc:84:9a:7a:96:79:b0:8a:f0:
76:b3:1a:c0:f2:84:1c:80:aa:cd:4c:95:90:50:9f:
11:24:11:98:4e:19:ce:82:30:dc:f0:f7:93:ef:99:
a9:03:54:5d:c9:aa:39:2c:3c:cc:ef:9e:e2:c9:73:
83:5b:74:76:ca:b8:6e:07:60:a7:c6:02:54:98:95:
97:70:3c:54:9d:7a:98:b0:85:39:cc:0c:bc:5d:ab:
99:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:E8:89:51:B2:96:C9:9A:D5:2A:E7:FE:01:18:7B:25:AF:7A:C8
X509v3 Authority Key Identifier:
keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:8b:07:35:52:e0:eb:54:7e:b2:1f:e0:25:f6:62:af:8a:
a6:32:1c:05:a5:8e:91:3a:fb:06:04:76:7f:b4:b0:81:13:72:
9f:e9:e8:db:ef:e9:5c:b2:05:75:4f:ab:db:a1:17:14:1c:8f:
ca:d0:69:ff:6d:e3:7e:11:ab:e3:8e:3e:fa:fc:21:62:9d:9e:
72:0f:b6:33:19:e3:ea:09:03:a8:68:9d:a2:55:f9:31:88:f6:
e5:85:22:21:4e:60:f9:6b:1f:15:8d:55:36:0e:3a:21:52:9f:
b0:bc:8a:c1:10:a3:e7:e7:b7:cd:d9:36:d1:5a:93:09:46:04:
17:d2:9a:73:80:44:2a:e8:3b:bf:e9:51:e1:d6:bb:92:23:79:
27:d3:53:f1:48:4b:ee:f4:60:e1:41:d1:3f:96:19:25:f6:17:
6d:5d:15:24:2c:77:81:c9:74:2b:15:82:aa:49:ac:08:95:fa:
a1:1d:b3:89:c5:ca:97:e9:a8:f3:85:a2:da:01:e4:3e:6d:ef:
5f:a9:8a:80:8c:dd:a1:63:61:a9:c5:5d:30:eb:f7:f0:57:75:
ee:73:2c:f3:e7:49:5d:28:e7:53:66:87:45:69:b9:52:08:e3:
63:fa:db:1c:72:6d:4c:cc:c6:5a:c2:b6:a8:77:de:9c:b1:2d:
0c:e8:3c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcxm1EoadeboZUNgd2GYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ODQ2Yjg0Yzc3OTA1MTIyODFmODBjMjQ4MWJlNGIzMGE2
NWQwOGQwHhcNMjUwODIzMDEwMjQ5WhcNMjUwODI0MDEwMjQ5WjAzMTEwLwYDVQQD
Eyg0ZGViZTg4OTUxYjI5NmM5OWFkNTJhZTdmZTAxMTg3YjI1YWY3YWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHEj/CiTFn+UY0BpftLOcnWZ3kx4
VQEzjRysCmaczvR++8RIazb7ljgD+QP+vnGSUemgysju+v58G1qUYgvq1uvBoOYg
n1JdKoN2vyVzmfBEz0q9xxoPifb8PRefoO/qfgwSe0WlMFzC/cu1G8n1vFbP8cDV
X1WvOTq5wZYDjp/RoCV7brP8+hWDpf00UKUNgTk9wbQoRFH+zBCQHdQAj65wLELM
xr6I44a8hJp6lnmwivB2sxrA8oQcgKrNTJWQUJ8RJBGYThnOgjDc8PeT75mpA1Rd
yao5LDzM757iyXODW3R2yrhuB2CnxgJUmJWXcDxUnXqYsIU5zAy8XauZkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3r6IlRspbJmtUq5/4BGHslr3rIMB8GA1UdIwQY
MBaAFGeEa4THeQUSKB+Awkgb5LMKZdCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQt
ODVhMGQxMjM5OTIzLzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQtODVhMGQxMjM5OTIz
LzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpuLBzVS
4OtUfrIf4CX2Yq+KpjIcBaWOkTr7BgR2f7SwgRNyn+no2+/pXLIFdU+r26EXFByP
ytBp/23jfhGr444++vwhYp2ecg+2Mxnj6gkDqGidolX5MYj25YUiIU5g+WsfFY1V
Ng46IVKfsLyKwRCj5+e3zdk20VqTCUYEF9Kac4BEKug7v+lR4da7kiN5J9NT8UhL
7vRg4UHRP5YZJfYXbV0VJCx3gcl0KxWCqkmsCJX6oR2zicXKl+mo84Wi2gHkPm3v
X6mKgIzdoWNhqcVdMOv38Fd17nMs8+dJXSjnU2aHRWm5UgjjY/rbHHJtTMzGWsK2
qHfenLEtDOg89A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:40 2025 by rpki-client