Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: lmomxOvraioz8oARKp7sUjfxsNGlfhYCiW2NQcU0aUA=
Subject key identifier: A8:B6:58:65:85:0F:39:AD:DC:5D:86:19:60:18:55:4B:3D:FC:2B:FA
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 0198D515D0062F429EE4AEE2019F47C4C042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: E_L2oklniQj05pWuM0xgBEBv9Z0.roa (hash: vggfw58sjlCL17O/pPVvpJxnAr4298gihw1aekiLNHY=)
2: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: 1pmy0Vase6IEKDAHDEp9BSHB6/qn6wM0bKO2+dsIZrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d0:06:2f:42:9e:e4:ae:e2:01:9f:47:c4:c0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=a8b65865850f39addc5d86196018554b3dfc2bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:d6:9d:48:fe:a5:21:ab:ae:bf:3c:06:d7:
4d:31:ab:9b:35:c0:0d:fc:c2:22:84:2b:f4:93:6f:
24:da:20:c8:ba:b7:02:86:e3:58:ae:6d:5c:83:27:
ec:f9:9e:ab:90:2a:9f:eb:c1:18:ca:db:b9:28:b4:
23:34:79:c0:d9:1a:46:d6:3e:2c:5c:b7:59:b3:66:
70:de:4b:a5:63:c3:3c:39:93:5b:45:3c:c9:26:b1:
ba:f3:1f:e4:64:c0:62:8b:47:99:85:ef:9e:6a:a0:
7a:b3:73:08:dd:0b:3c:1a:a3:1a:db:1e:31:51:ff:
6c:6b:e3:e4:25:18:66:ac:f7:d5:a5:f6:1e:9f:8c:
44:ff:9a:71:86:87:eb:25:94:27:7e:2e:8b:cc:f2:
dc:3f:4f:92:4c:2d:8e:be:78:ab:10:7b:a9:31:d5:
80:fd:af:f3:76:eb:56:e4:b0:30:2c:a1:67:00:c8:
5f:ac:5a:93:f5:26:2a:26:5a:91:5a:e1:ff:20:a5:
5c:ac:ae:11:42:25:0f:e9:61:ef:16:2a:4a:0a:0e:
c5:a9:b2:19:3e:a2:2a:d5:ba:4a:08:6c:6f:61:94:
5a:d9:cd:b3:d8:13:d8:e1:38:87:bc:66:e1:88:c3:
ae:6e:69:96:41:c7:8b:e2:fd:d1:13:c3:7d:a5:3d:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B6:58:65:85:0F:39:AD:DC:5D:86:19:60:18:55:4B:3D:FC:2B:FA
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ad:eb:bd:86:3e:e9:5a:ff:2c:21:39:d7:5c:01:ab:00:11:
d1:48:4f:2b:c6:44:7e:af:71:ae:29:48:ed:d9:08:39:3d:ae:
ff:57:cb:55:7a:25:70:52:f0:ff:fa:61:e9:2d:3e:0f:f6:c8:
3b:d4:fa:be:1f:a1:0d:2b:73:81:91:d8:a5:88:0c:67:7d:e0:
aa:9e:64:58:04:d3:31:cd:1a:df:88:16:d8:d8:c3:2f:da:e8:
b8:ee:21:7b:7b:87:35:27:46:68:45:30:f3:7b:71:c3:31:4d:
7e:e8:57:fd:0d:05:be:0e:60:92:04:c5:c4:d9:4a:3c:c0:98:
da:d8:33:eb:7d:01:5e:e2:45:12:18:15:de:7d:ba:bd:d2:54:
a6:d7:d4:5a:fc:cd:05:e1:6d:54:9e:91:c7:c5:5b:e0:87:6c:
39:37:46:89:01:59:09:c8:2f:62:08:57:49:7f:12:72:a5:75:
d4:1f:6d:b6:31:03:48:52:3d:92:8f:e5:b1:b1:ed:67:98:56:
ef:ab:aa:51:27:53:2a:d8:72:bd:bb:f2:cc:ea:e9:52:b2:15:
57:44:a8:5d:d8:91:8c:8d:9a:0c:c8:59:aa:96:32:6d:d4:a4:
ec:80:80:7d:51:d4:86:e0:f1:2a:eb:66:f1:1f:26:22:9f:c2:
62:f6:9a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFdAGL0Ke5K7iAZ9HxMBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh
Yjc4NzYwHhcNMjUwODIzMDQwMDMzWhcNMjUwODI0MDQwMDMzWjAzMTEwLwYDVQQD
EyhhOGI2NTg2NTg1MGYzOWFkZGM1ZDg2MTk2MDE4NTU0YjNkZmMyYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucHWnUj+pSGrrr88BtdNMaubNcAN
/MIihCv0k28k2iDIurcChuNYrm1cgyfs+Z6rkCqf68EYytu5KLQjNHnA2RpG1j4s
XLdZs2Zw3kulY8M8OZNbRTzJJrG68x/kZMBii0eZhe+eaqB6s3MI3Qs8GqMa2x4x
Uf9sa+PkJRhmrPfVpfYen4xE/5pxhofrJZQnfi6LzPLcP0+STC2OvnirEHupMdWA
/a/zdutW5LAwLKFnAMhfrFqT9SYqJlqRWuH/IKVcrK4RQiUP6WHvFipKCg7FqbIZ
PqIq1bpKCGxvYZRa2c2z2BPY4TiHvGbhiMOubmmWQceL4v3RE8N9pT0dWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi2WGWFDzmt3F2GGWAYVUs9/Cv6MB8GA1UdIwQY
MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt
MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx
LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOq3rvYY+
6Vr/LCE511wBqwAR0UhPK8ZEfq9xrilI7dkIOT2u/1fLVXolcFLw//ph6S0+D/bI
O9T6vh+hDStzgZHYpYgMZ33gqp5kWATTMc0a34gW2NjDL9rouO4he3uHNSdGaEUw
83txwzFNfuhX/Q0Fvg5gkgTFxNlKPMCY2tgz630BXuJFEhgV3n26vdJUptfUWvzN
BeFtVJ6Rx8Vb4IdsOTdGiQFZCcgvYghXSX8ScqV11B9ttjEDSFI9ko/lsbHtZ5hW
76uqUSdTKthyvbvyzOrpUrIVV0SoXdiRjI2aDMhZqpYybdSk7ICAfVHUhuDxKutm
8R8mIp/CYvaa9w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client