Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
File: Z31OosAWzieXr3rrc30TKHVmnxI.mft (raw, json)
Hash identifier: HZGoAti1Cd/SkEjuBqHjxnb3v4Qm/RLYPIqDVVN50sw=
Subject key identifier: D8:07:F1:C4:76:5C:89:54:94:16:88:8C:35:11:16:01:45:D2:78:82
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 0198D884CB930773D9C587F2615D7DD362EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
Manifest number: 0B5A
Signing time: Sat 23 Aug 2025 20:00:38 +0000
Manifest this update: Sat 23 Aug 2025 20:00:38 +0000
Manifest next update: Sun 24 Aug 2025 20:00:38 +0000
Files and hashes: 1: Z31OosAWzieXr3rrc30TKHVmnxI.crl (hash: qbRv6tvqqElKl/NXZhoOmBtf4w0SOqVf2xA/ZlNAENk=)
2: dWBxYutd_7kq_EDB_JG4WIKLpyo.roa (hash: xSMt2hTKh36QhaSaerON9NeweGqlZocu9OE/cvG7CnM=)
3: sRhEXZaGwXqtptay-RphiAgSVt4.roa (hash: Ig5fF+EKhddnEzfin5M+0IE9DvCIWQxASy6NfoLnblk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:cb:93:07:73:d9:c5:87:f2:61:5d:7d:d3:62:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Aug 23 20:00:38 2025 GMT
Not After : Aug 24 20:00:38 2025 GMT
Subject: CN=d807f1c4765c89549416888c3511160145d27882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a2:d9:82:ef:c6:32:2a:84:2b:11:78:79:bc:
d6:59:a7:68:e0:7c:36:bf:cb:21:c4:a4:07:db:bb:
1b:ae:3b:e1:de:5a:49:2e:90:7f:21:c4:d6:bc:20:
a3:94:52:61:39:70:9e:9f:3e:db:6e:bc:db:5b:4a:
f6:a4:c3:f9:04:0f:93:cd:48:fe:94:cb:20:10:3c:
06:e5:33:bf:6d:d7:40:f6:ed:f8:ba:af:4b:be:ff:
22:4a:e1:4c:c8:a4:56:2c:e5:94:67:ca:c0:e7:37:
af:78:e7:e6:ea:a6:c7:40:10:67:f8:30:41:5e:fc:
5d:40:e6:9b:8c:46:a5:39:37:61:eb:f8:e5:58:3f:
6b:da:14:e9:7f:e8:3b:be:4f:30:77:7a:f8:93:3c:
a5:6d:75:3d:dc:58:57:c4:2e:48:64:44:b2:63:41:
94:d4:15:b4:66:81:b1:18:e5:1d:12:07:95:77:41:
79:79:24:69:db:36:05:a1:bc:cd:06:f5:7e:11:5f:
f0:1e:f9:ae:32:9f:3e:15:51:51:63:22:c0:03:cb:
94:88:a1:2f:9b:62:30:65:c6:2f:99:7a:35:56:d3:
bf:31:d3:a9:23:06:1a:f5:d8:e7:36:e8:23:1b:59:
d0:01:ab:26:90:16:5a:2b:a8:69:4e:bf:8c:30:24:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:07:F1:C4:76:5C:89:54:94:16:88:8C:35:11:16:01:45:D2:78:82
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:06:51:bc:78:43:3b:bb:f6:3d:24:57:c7:53:ef:b2:b0:eb:
fd:48:e3:7a:d8:3f:35:e6:f0:eb:f8:ea:35:99:ea:57:5d:04:
81:ab:d4:cd:64:8b:19:7d:b3:37:08:b5:7b:64:69:10:2f:bf:
4b:0d:37:81:e0:e0:3a:9e:c2:f1:04:98:21:de:3d:54:88:81:
f1:ac:ce:44:ed:6f:79:59:b4:48:e8:8f:36:af:b3:b7:b3:3e:
cb:56:43:97:37:d5:80:32:95:53:7c:7d:f8:0e:ef:0d:03:44:
ac:30:09:f5:9a:a6:80:3f:83:82:89:7c:60:f7:ac:4b:c2:d4:
2f:63:5f:ba:80:c4:e1:b5:3e:f4:33:6f:b1:be:06:e9:e0:b4:
9c:ea:cf:9d:af:6f:e3:6c:10:9c:a9:18:e3:1c:06:c2:bc:ed:
be:f5:7f:68:1b:6c:eb:58:60:37:a7:5a:62:76:4d:4b:57:ba:
ed:2a:be:21:35:fd:db:34:9e:f1:bd:ec:5d:d7:25:fd:16:7b:
5a:d9:d5:03:91:a3:82:cf:aa:5e:4d:32:17:92:62:00:26:c4:
fe:02:39:e7:9b:b3:a0:50:1e:29:49:23:86:35:7b:2e:51:1e:
ec:df:36:44:85:04:46:fc:aa:0b:8b:69:df:4f:e4:8a:54:0d:
79:12:f4:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYhMuTB3PZxYfyYV1902LsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2Q0ZWEyYzAxNmNlMjc5N2FmN2FlYjczN2QxMzI4NzU2
NjlmMTIwHhcNMjUwODIzMjAwMDM4WhcNMjUwODI0MjAwMDM4WjAzMTEwLwYDVQQD
EyhkODA3ZjFjNDc2NWM4OTU0OTQxNjg4OGMzNTExMTYwMTQ1ZDI3ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaLZgu/GMiqEKxF4ebzWWado4Hw2
v8shxKQH27sbrjvh3lpJLpB/IcTWvCCjlFJhOXCenz7bbrzbW0r2pMP5BA+TzUj+
lMsgEDwG5TO/bddA9u34uq9Lvv8iSuFMyKRWLOWUZ8rA5zeveOfm6qbHQBBn+DBB
XvxdQOabjEalOTdh6/jlWD9r2hTpf+g7vk8wd3r4kzylbXU93FhXxC5IZESyY0GU
1BW0ZoGxGOUdEgeVd0F5eSRp2zYFobzNBvV+EV/wHvmuMp8+FVFRYyLAA8uUiKEv
m2IwZcYvmXo1VtO/MdOpIwYa9djnNugjG1nQAasmkBZaK6hpTr+MMCRQbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgH8cR2XIlUlBaIjDURFgFF0niCMB8GA1UdIwQY
MBaAFGd9TqLAFs4nl69663N9Eyh1Zp8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUt
YjhmM2YwOWVhYWRlLzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YWVlZTctNDVjMC00MjEzLTgwODUtYjhmM2YwOWVhYWRl
LzEvWjMxT29zQVd6aWVYcjNycmMzMFRLSFZtbnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAZRvHhD
O7v2PSRXx1PvsrDr/Ujjetg/Nebw6/jqNZnqV10EgavUzWSLGX2zNwi1e2RpEC+/
Sw03geDgOp7C8QSYId49VIiB8azORO1veVm0SOiPNq+zt7M+y1ZDlzfVgDKVU3x9
+A7vDQNErDAJ9ZqmgD+Dgol8YPesS8LUL2NfuoDE4bU+9DNvsb4G6eC0nOrPna9v
42wQnKkY4xwGwrztvvV/aBts61hgN6daYnZNS1e67Sq+ITX92zSe8b3sXdcl/RZ7
WtnVA5Gjgs+qXk0yF5JiACbE/gI555uzoFAeKUkjhjV7LlEe7N82RIUERvyqC4tp
30/kilQNeRL0WA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 23:51:34 2025 by rpki-client