Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
File: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft (raw, json)
Hash identifier: svOIQe6NYeFaOjJ95+Ak8LV+oKHJ7DwBxNwOgd4DoME=
Subject key identifier: 18:53:A3:36:BF:50:5F:83:43:BE:FD:10:AD:E8:FC:41:F2:AC:70:4E
Authority key identifier: CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
Certificate issuer: /CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Certificate serial: 0198D6602AA7AD66DCB6F3DCB0F43A2F4F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
Manifest number: 111F
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: cTuB-ABZUf0AWR__0VF3CDRNo30.roa (hash: YL1vZUc95MXZVuCPTTh8OWx5ow2ebJPHUlFFR9eeynk=)
2: z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl (hash: SMAzCtjZa7srOr2rQKdWGB2phkWeIFd78/BzYxguf0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2a:a7:ad:66:dc:b6:f3:dc:b0:f4:3a:2f:4f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfba043e1c4b52447a8e367bbc1307519fa5fae0
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=1853a336bf505f8343befd10ade8fc41f2ac704e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:c4:bf:fe:e0:54:e8:4e:0a:22:da:2b:52:
c5:9a:c0:13:f2:18:57:8a:31:c5:c9:76:fe:54:97:
19:db:ff:b7:bc:41:4c:62:2c:45:9c:32:d1:c6:eb:
85:1e:15:4c:1f:67:fc:07:48:3d:0b:2f:d6:16:f5:
5a:35:af:28:41:ae:02:2b:7a:b3:00:5b:6a:3a:7e:
01:8b:51:1b:55:a4:ff:e5:98:fd:73:f5:ee:c7:ff:
29:f6:16:d9:b2:81:78:64:01:94:58:2c:41:d6:47:
c8:9a:2d:85:2e:ec:47:f4:5d:50:df:97:95:ed:2f:
88:37:9c:ae:6a:2b:ab:86:89:2b:b9:c6:45:cd:22:
60:46:37:85:8a:0d:bd:5d:5e:b2:f6:5e:1a:4b:38:
47:2a:65:e5:82:64:aa:70:56:97:cc:96:0d:6b:f5:
86:41:19:85:e4:39:f7:db:9e:3a:9d:f8:ac:d5:1e:
de:a6:6e:60:3c:89:6e:9b:4f:fb:7c:a6:0a:77:49:
ee:06:97:6f:01:f3:48:bd:5c:2a:9a:dc:82:00:0b:
c3:c4:f3:dd:bc:88:5a:a8:2f:18:13:67:e0:8c:33:
ad:21:33:4f:7d:10:f3:52:c9:4d:d1:68:86:b3:0e:
fd:26:e4:a6:7d:6b:f5:20:4c:39:c3:6e:78:cc:98:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:A3:36:BF:50:5F:83:43:BE:FD:10:AD:E8:FC:41:F2:AC:70:4E
X509v3 Authority Key Identifier:
keyid:CF:BA:04:3E:1C:4B:52:44:7A:8E:36:7B:BC:13:07:51:9F:A5:FA:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f33d8-cceb-4506-a2ef-c0ca80a05e2a/1/z7oEPhxLUkR6jjZ7vBMHUZ-l-uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:00:ca:c8:38:b2:71:65:29:39:77:d9:77:ac:e3:8c:cf:ed:
f8:f9:3f:e4:4f:60:16:f8:97:b1:17:4e:61:7b:09:c0:7e:fd:
45:78:38:7a:9d:26:29:1b:95:99:3d:5d:b7:ca:15:16:07:8c:
c7:50:33:0e:16:5f:c6:3e:cf:c0:d1:10:3a:ff:32:92:d5:8e:
6d:81:93:c9:22:73:75:25:67:58:6a:0e:2d:e6:5d:cc:f3:0d:
68:cd:c4:58:77:bd:42:e0:a4:6f:66:dc:e4:ac:ed:74:03:03:
15:74:26:4a:5f:41:13:73:31:f3:f9:84:90:2b:ff:6e:31:00:
16:36:fe:80:4b:05:be:c4:07:05:58:dd:b8:1d:7b:11:0a:fa:
07:17:79:7d:b5:41:79:6e:3f:88:94:1d:69:e7:3a:91:1b:b7:
f3:5a:3f:c6:c1:a9:95:ca:89:4c:06:a9:be:2b:b4:3e:35:be:
f7:e1:1d:d3:2b:87:c3:4e:68:fc:f2:77:11:3c:fd:82:13:89:
0b:30:66:2b:a0:82:ff:a6:fe:bc:2f:42:ef:f9:cc:db:fa:b6:
f5:2b:03:d0:aa:d3:d9:f2:65:fc:71:fe:30:87:1c:2e:2d:74:
22:4a:70:e9:1a:85:bc:14:4f:1d:a9:19:b1:11:d3:a1:a0:67:
16:8b:6b:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCqnrWbctvPcsPQ6L09DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYmEwNDNlMWM0YjUyNDQ3YThlMzY3YmJjMTMwNzUxOWZh
NWZhZTAwHhcNMjUwODIzMTAwMTIzWhcNMjUwODI0MTAwMTIzWjAzMTEwLwYDVQQD
EygxODUzYTMzNmJmNTA1ZjgzNDNiZWZkMTBhZGU4ZmM0MWYyYWM3MDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCjEv/7gVOhOCiLaK1LFmsAT8hhX
ijHFyXb+VJcZ2/+3vEFMYixFnDLRxuuFHhVMH2f8B0g9Cy/WFvVaNa8oQa4CK3qz
AFtqOn4Bi1EbVaT/5Zj9c/Xux/8p9hbZsoF4ZAGUWCxB1kfImi2FLuxH9F1Q35eV
7S+IN5yuaiurhokrucZFzSJgRjeFig29XV6y9l4aSzhHKmXlgmSqcFaXzJYNa/WG
QRmF5Dn32546nfis1R7epm5gPIlum0/7fKYKd0nuBpdvAfNIvVwqmtyCAAvDxPPd
vIhaqC8YE2fgjDOtITNPfRDzUslN0WiGsw79JuSmfWv1IEw5w254zJg2iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhToza/UF+DQ779EK3o/EHyrHBOMB8GA1UdIwQY
MBaAFM+6BD4cS1JEeo42e7wTB1GfpfrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYt
YzBjYTgwYTA1ZTJhLzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZjMzZDgtY2NlYi00NTA2LWEyZWYtYzBjYTgwYTA1ZTJh
LzEvejdvRVBoeExVa1I2ampaN3ZCTUhVWi1sLXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgDKyDiy
cWUpOXfZd6zjjM/t+Pk/5E9gFviXsRdOYXsJwH79RXg4ep0mKRuVmT1dt8oVFgeM
x1AzDhZfxj7PwNEQOv8yktWObYGTySJzdSVnWGoOLeZdzPMNaM3EWHe9QuCkb2bc
5KztdAMDFXQmSl9BE3Mx8/mEkCv/bjEAFjb+gEsFvsQHBVjduB17EQr6Bxd5fbVB
eW4/iJQdaec6kRu381o/xsGplcqJTAapviu0PjW+9+Ed0yuHw05o/PJ3ETz9ghOJ
CzBmK6CC/6b+vC9C7/nM2/q29SsD0KrT2fJl/HH+MIccLi10Ikpw6RqFvBRPHakZ
sRHToaBnFotrYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:09:06 2025 by rpki-client