Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json)
Hash identifier: /IV3NUvrpnAZojadjz7Of2VIwZLtVQgd2hAG9UVR1Pc=
Subject key identifier: 8B:DA:1C:01:69:26:2A:84:EA:7F:7A:9E:13:62:7C:D9:73:BC:B6:88
Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Certificate serial: 0198D4E05E57C12E752CBA9B75F1581378E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:10 +0000
Manifest this update: Sat 23 Aug 2025 03:02:10 +0000
Manifest next update: Sun 24 Aug 2025 03:02:10 +0000
Files and hashes: 1: c0nmn1z_CeUl_DCW_vWwY1kdQJM.roa (hash: wRoePPTw0QAoUH4ArBeWw9mmFYBdS/sgugaB1c1wFFw=)
2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: leRzdANYiPEX48ZqldHvwdLA6c32RB3iOadIUY3QQgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5e:57:c1:2e:75:2c:ba:9b:75:f1:58:13:78:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455
Validity
Not Before: Aug 23 03:02:10 2025 GMT
Not After : Aug 24 03:02:10 2025 GMT
Subject: CN=8bda1c0169262a84ea7f7a9e13627cd973bcb688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e6:29:2b:a6:48:c2:ef:7b:dd:7c:b1:7e:e0:
d0:15:b6:9b:56:df:52:ef:80:fc:66:4b:d5:0a:77:
0c:5b:64:f3:f8:73:f4:47:4a:3b:57:f5:1e:05:d9:
b8:43:45:40:16:65:83:65:aa:9d:29:49:a4:e5:c0:
47:0c:fe:59:1e:36:08:0c:82:1f:4c:a2:35:73:9d:
23:db:86:40:aa:e0:1c:83:ce:43:12:68:52:25:83:
d8:25:06:f8:d1:6f:0b:e2:5b:40:c1:33:b3:e9:61:
63:d5:00:0a:0e:6b:69:f2:91:af:f5:f4:08:de:93:
1b:4c:01:71:c2:58:31:3c:c5:d6:59:a7:ac:e9:77:
99:2d:0e:f2:0e:37:14:46:05:62:2a:05:0d:4e:8c:
99:e5:ca:f4:b0:a1:2f:2e:90:4f:b2:4e:1a:19:85:
83:87:38:39:dc:fc:73:5b:62:c4:23:d3:95:53:8a:
9f:b9:99:6c:e2:68:f2:2b:09:6e:cc:a7:35:79:b2:
d0:c5:37:c8:02:c1:d7:85:ba:e7:cb:8e:9d:25:d3:
09:7c:de:ca:e9:ce:36:8c:2e:ca:ac:22:7e:de:f6:
2d:32:7b:82:31:c1:45:3f:d2:04:2f:ca:76:1d:a3:
9e:d9:21:70:11:02:d4:0d:f0:87:58:50:79:7c:b6:
c2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DA:1C:01:69:26:2A:84:EA:7F:7A:9E:13:62:7C:D9:73:BC:B6:88
X509v3 Authority Key Identifier:
keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a6:9a:fd:b4:b2:58:e3:04:43:00:a5:62:2b:e6:55:96:03:
24:29:bc:19:26:b4:e2:ee:5e:ab:38:e8:b6:57:ee:2a:45:fa:
2c:bc:ef:7d:1b:52:3b:d4:75:37:ca:25:6b:bb:e2:87:26:00:
ed:8a:38:b3:1c:91:bc:79:e4:c7:f2:a3:60:7e:d4:1c:b2:39:
e6:7c:a6:1b:0e:f2:19:5a:25:c3:37:38:93:a4:6c:16:a1:d4:
42:89:1e:ca:3d:9b:cc:3d:76:1a:1e:13:b5:2c:05:94:99:c1:
07:8d:cb:e5:4b:14:a4:3b:dc:ba:e1:6f:14:e7:1d:5d:59:fc:
01:1f:f5:55:e1:68:2e:82:1a:59:d3:23:80:60:be:a5:b8:8d:
1d:e4:8b:0f:28:f4:e4:61:dd:2f:e1:5a:5d:42:84:44:83:14:
38:8f:77:45:fd:40:44:e3:09:80:9a:30:ff:ea:31:c5:34:8e:
4e:cf:ef:61:48:0f:ab:a0:86:f2:35:03:c0:94:68:49:e6:aa:
33:8e:6b:00:df:0d:8f:5f:87:ec:26:31:99:cb:13:8f:71:c2:
7f:78:45:81:63:a0:87:35:e0:78:9e:ed:da:fc:4b:d5:0c:da:
59:af:40:98:82:16:64:cf:08:d9:1b:16:74:f3:2d:81:6b:c8:
89:ab:55:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4F5XwS51LLqbdfFYE3jmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY4ZDZkZWMzOTIwYmM3M2YwOTdmZGY1NmNhZjEwYjUy
ZGI0NTUwHhcNMjUwODIzMDMwMjEwWhcNMjUwODI0MDMwMjEwWjAzMTEwLwYDVQQD
Eyg4YmRhMWMwMTY5MjYyYTg0ZWE3ZjdhOWUxMzYyN2NkOTczYmNiNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOYpK6ZIwu973XyxfuDQFbabVt9S
74D8ZkvVCncMW2Tz+HP0R0o7V/UeBdm4Q0VAFmWDZaqdKUmk5cBHDP5ZHjYIDIIf
TKI1c50j24ZAquAcg85DEmhSJYPYJQb40W8L4ltAwTOz6WFj1QAKDmtp8pGv9fQI
3pMbTAFxwlgxPMXWWaes6XeZLQ7yDjcURgViKgUNToyZ5cr0sKEvLpBPsk4aGYWD
hzg53PxzW2LEI9OVU4qfuZls4mjyKwluzKc1ebLQxTfIAsHXhbrny46dJdMJfN7K
6c42jC7KrCJ+3vYtMnuCMcFFP9IEL8p2HaOe2SFwEQLUDfCHWFB5fLbC/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvaHAFpJiqE6n96nhNifNlzvLaIMB8GA1UdIwQY
MBaAFM6/jW3sOSC8c/CX/fVsrxC1LbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEt
YjVlNTcwMGZjNzc0LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEtYjVlNTcwMGZjNzc0
LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6aa/bSy
WOMEQwClYivmVZYDJCm8GSa04u5eqzjotlfuKkX6LLzvfRtSO9R1N8ola7vihyYA
7Yo4sxyRvHnkx/KjYH7UHLI55nymGw7yGVolwzc4k6RsFqHUQokeyj2bzD12Gh4T
tSwFlJnBB43L5UsUpDvcuuFvFOcdXVn8AR/1VeFoLoIaWdMjgGC+pbiNHeSLDyj0
5GHdL+FaXUKERIMUOI93Rf1AROMJgJow/+oxxTSOTs/vYUgPq6CG8jUDwJRoSeaq
M45rAN8Nj1+H7CYxmcsTj3HCf3hFgWOghzXgeJ7t2vxL1QzaWa9AmIIWZM8I2RsW
dPMtgWvIiatVig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:00 2025 by rpki-client