Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: YiYet0sAw+6HRzOlyA8DKSEozf//RkfvnuFPwXQ3Ifo=
Subject key identifier: CE:29:48:78:7F:37:42:DC:DC:67:2E:00:C7:A2:74:D3:BD:62:C6:71
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 0198D47399BA8274168D0CF6BBB34607AA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 0B2C
Signing time: Sat 23 Aug 2025 01:03:22 +0000
Manifest this update: Sat 23 Aug 2025 01:03:22 +0000
Manifest next update: Sun 24 Aug 2025 01:03:22 +0000
Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: lGDwTmyQeGTIotkvcAkTRY68CdAUR0JXPOGFxMTKC4I=)
2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:99:ba:82:74:16:8d:0c:f6:bb:b3:46:07:aa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Aug 23 01:03:22 2025 GMT
Not After : Aug 24 01:03:22 2025 GMT
Subject: CN=ce2948787f3742dcdc672e00c7a274d3bd62c671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:f3:24:eb:0c:8e:92:f8:90:22:fe:01:3e:
cd:7f:98:e5:4a:2d:e7:94:c9:68:dd:40:2d:35:f6:
24:f2:26:a4:9e:a5:3c:9a:64:eb:ff:f0:41:67:d0:
28:d3:d5:29:11:02:f2:8a:65:3f:23:f7:db:2e:08:
6f:a8:97:d7:c5:4c:08:a0:94:9a:90:15:48:7b:3b:
c9:7d:28:51:6d:6d:80:1f:2a:81:05:52:98:18:d9:
95:e4:4c:46:50:77:03:30:67:82:92:f4:64:a0:51:
ed:5a:6e:d2:9b:dc:d8:cf:af:1e:f9:8a:a2:36:52:
87:a8:f4:2c:1d:78:10:aa:59:03:5d:ce:c5:7d:5a:
35:81:25:39:76:e4:62:04:e0:a2:ef:08:4d:93:c0:
40:ab:dc:0c:52:f2:c2:d2:ec:33:65:96:88:22:c4:
9a:ea:df:16:e4:18:50:74:62:50:1c:22:f3:a4:a3:
67:43:9a:22:e8:e9:8f:c3:13:e5:f9:72:5d:0b:ab:
3a:b9:ff:93:d1:49:54:e0:98:57:6c:cc:9c:99:1f:
1e:97:35:d0:cb:b5:a4:81:5c:c8:fc:38:a6:78:87:
d6:a8:34:8e:59:cf:18:37:5e:63:b1:2f:54:e9:6b:
d8:d6:fc:48:7d:99:40:0d:94:a2:9a:e2:84:09:8c:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:48:78:7F:37:42:DC:DC:67:2E:00:C7:A2:74:D3:BD:62:C6:71
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d8:56:f4:20:25:df:40:3a:b4:75:81:88:03:87:89:44:76:
58:ea:11:11:12:11:7c:2d:9e:22:e0:bf:c0:90:d4:b4:f6:1a:
63:6e:b2:04:1e:18:03:8b:f4:aa:c4:bd:b9:d7:df:c0:cb:dd:
58:45:21:64:0c:be:93:3e:12:ee:80:2f:4e:99:33:e7:8c:12:
5f:15:da:90:a5:4c:d4:40:67:d3:72:7b:8d:22:06:41:29:65:
01:2d:df:b2:8a:70:2c:6b:e2:dc:35:ad:c3:f0:61:2e:17:55:
28:93:5e:06:0d:9f:6f:75:1e:d1:ca:12:8c:29:78:23:67:3f:
25:24:5f:ca:6b:13:6c:28:bd:d2:45:22:e4:1e:3f:7b:a5:80:
2e:80:28:96:44:37:9d:38:e7:a1:2c:29:c0:8c:ad:9c:b3:93:
a7:33:92:52:47:34:79:93:cc:f7:49:33:c0:2b:a5:4f:d0:47:
b2:e4:7c:e9:71:09:2f:a1:da:c3:09:98:b3:5d:4b:5c:70:a3:
e8:ba:3b:e1:dc:94:f9:b5:dc:67:cd:9b:52:16:5d:43:8a:78:
95:a9:e0:c5:a7:38:df:e7:3c:bf:b9:fb:ad:65:37:90:33:bb:
e6:50:b5:ae:16:99:98:af:8a:14:74:a4:21:0d:65:e3:9d:29:
64:46:08:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc5m6gnQWjQz2u7NGB6oTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDUzMTQ1MTY0ODNmZTI3YzA1MzBjY2I5NzA3YzM3NmQy
MGU3ZjAwHhcNMjUwODIzMDEwMzIyWhcNMjUwODI0MDEwMzIyWjAzMTEwLwYDVQQD
EyhjZTI5NDg3ODdmMzc0MmRjZGM2NzJlMDBjN2EyNzRkM2JkNjJjNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmzzJOsMjpL4kCL+AT7Nf5jlSi3n
lMlo3UAtNfYk8iaknqU8mmTr//BBZ9Ao09UpEQLyimU/I/fbLghvqJfXxUwIoJSa
kBVIezvJfShRbW2AHyqBBVKYGNmV5ExGUHcDMGeCkvRkoFHtWm7Sm9zYz68e+Yqi
NlKHqPQsHXgQqlkDXc7FfVo1gSU5duRiBOCi7whNk8BAq9wMUvLC0uwzZZaIIsSa
6t8W5BhQdGJQHCLzpKNnQ5oi6OmPwxPl+XJdC6s6uf+T0UlU4JhXbMycmR8elzXQ
y7WkgVzI/DimeIfWqDSOWc8YN15jsS9U6WvY1vxIfZlADZSimuKECYyW7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4pSHh/N0Lc3GcuAMeidNO9YsZxMB8GA1UdIwQY
MBaAFGdFMUUWSD/ifAUwzLlwfDdtIOfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2Mt
ODY1NDc4NmUyMGE5LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mYjQ4ZmQtNGVjNS00M2YxLTkzY2MtODY1NDc4NmUyMGE5
LzEvWjBVeFJSWklQLUo4QlRETXVYQjhOMjBnNV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNhW9CAl
30A6tHWBiAOHiUR2WOoRERIRfC2eIuC/wJDUtPYaY26yBB4YA4v0qsS9udffwMvd
WEUhZAy+kz4S7oAvTpkz54wSXxXakKVM1EBn03J7jSIGQSllAS3fsopwLGvi3DWt
w/BhLhdVKJNeBg2fb3Ue0coSjCl4I2c/JSRfymsTbCi90kUi5B4/e6WALoAolkQ3
nTjnoSwpwIytnLOTpzOSUkc0eZPM90kzwCulT9BHsuR86XEJL6HawwmYs11LXHCj
6Lo74dyU+bXcZ82bUhZdQ4p4langxac43+c8v7n7rWU3kDO75lC1rhaZmK+KFHSk
IQ1l450pZEYINw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:28 2025 by rpki-client