Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: Fx8UKMVj5Lr9S4Axqgdi9Dx/rmCZ7WeWD4A/mvWlBkU=
Subject key identifier: 1C:9E:B6:45:E8:C4:84:CA:AF:A3:5A:8B:F1:E8:BF:17:21:E3:FC:D4
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 0198D5BB8AE2CDF1AE9B717DD03CDFE00091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 01FE
Signing time: Sat 23 Aug 2025 07:01:34 +0000
Manifest this update: Sat 23 Aug 2025 07:01:34 +0000
Manifest next update: Sun 24 Aug 2025 07:01:34 +0000
Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: wSPBnifOaydqupAr/1Vi3VDXsotXxDjt29sFSNPwCJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8a:e2:cd:f1:ae:9b:71:7d:d0:3c:df:e0:00:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Aug 23 07:01:34 2025 GMT
Not After : Aug 24 07:01:34 2025 GMT
Subject: CN=1c9eb645e8c484caafa35a8bf1e8bf1721e3fcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:c9:e2:5a:8c:38:e6:be:78:60:a3:96:ac:
ea:77:26:90:75:bc:f6:66:f0:0c:69:7d:df:2e:ce:
ef:ab:cf:75:6b:ea:13:6d:d4:c4:74:78:f9:27:ee:
da:8d:94:1f:88:ee:74:c1:b7:7f:7e:5a:dc:39:d2:
4c:df:0f:05:59:58:ed:81:63:7e:79:eb:23:b4:77:
1d:55:4d:be:45:7a:6a:59:c8:f2:30:39:f8:7f:7a:
4a:e7:6a:80:e9:0a:65:a2:bf:b1:e1:0e:1f:60:2d:
34:c1:b6:23:a1:7a:bf:65:98:c8:d6:5d:f6:e0:25:
5a:75:64:4c:d4:7a:e8:b4:9a:3d:25:b8:ab:61:0f:
03:2b:91:c4:4f:0a:33:03:d8:8c:9e:06:4a:e0:6d:
ad:b9:db:2a:69:ad:c2:8a:00:90:7f:30:70:aa:39:
8f:08:f9:41:21:22:95:c8:a6:50:d4:4a:8e:a1:dc:
63:52:cb:98:f9:1c:53:dc:8d:4c:9f:bb:8b:7f:6d:
a7:19:a1:44:19:30:ee:ea:4a:f9:78:fa:41:49:d1:
5c:0b:43:b1:91:d3:4d:4d:ea:61:4b:cf:05:2f:ea:
46:ef:46:fc:cf:6c:1c:1e:4f:b8:df:80:3b:20:51:
e8:f5:eb:cc:18:47:b4:2e:83:8e:be:f7:18:0a:80:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9E:B6:45:E8:C4:84:CA:AF:A3:5A:8B:F1:E8:BF:17:21:E3:FC:D4
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bb:60:a0:de:6e:67:e1:8e:9d:17:68:63:20:2f:af:84:ea:
36:b3:60:7f:6e:ae:ab:c9:de:b6:7b:94:ed:d1:90:d3:59:c2:
a1:92:11:08:8c:64:2d:8e:68:04:6a:fe:ca:fe:61:27:66:1d:
13:17:32:3b:27:d4:40:47:77:95:8a:83:99:d3:3f:23:cb:6b:
f7:4a:ea:64:f4:6f:7d:d0:7f:2f:40:99:b0:c8:1e:6a:75:49:
1b:c6:ea:0b:2a:78:20:72:39:8e:17:a3:29:7b:b4:dc:01:a3:
e8:c7:2d:59:90:22:a6:93:cb:5f:32:1c:ca:e3:e6:0b:51:46:
86:3f:9f:bb:24:2f:65:a1:1f:b4:db:9b:e0:1b:7b:d4:0b:6b:
2c:94:31:ee:a4:be:14:a7:f1:e8:7e:8d:a4:f6:0b:4c:f2:eb:
bd:1f:35:31:a3:14:ea:43:b5:f5:78:e6:80:6e:c3:af:b0:e5:
4f:1a:64:d1:fa:5c:43:1f:36:0d:f4:88:ad:62:f3:70:49:ef:
1b:71:6d:b9:ce:17:d8:96:3d:62:2a:a2:4a:41:0d:29:2c:7b:
99:0a:fd:eb:93:c8:3e:43:e8:72:da:88:0e:f8:ba:f4:0d:8b:
94:4a:cb:87:89:be:96:17:9c:a7:98:be:c6:0b:bd:77:b2:3c:
a4:2b:eb:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4rizfGum3F90Dzf4ACRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTgxNmNhZmZmYTU2MjYzZGQwZDc0ODE5Yzk0ZDU0MDJm
MWJiNmQwHhcNMjUwODIzMDcwMTM0WhcNMjUwODI0MDcwMTM0WjAzMTEwLwYDVQQD
EygxYzllYjY0NWU4YzQ4NGNhYWZhMzVhOGJmMWU4YmYxNzIxZTNmY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV7J4lqMOOa+eGCjlqzqdyaQdbz2
ZvAMaX3fLs7vq891a+oTbdTEdHj5J+7ajZQfiO50wbd/flrcOdJM3w8FWVjtgWN+
eesjtHcdVU2+RXpqWcjyMDn4f3pK52qA6Qplor+x4Q4fYC00wbYjoXq/ZZjI1l32
4CVadWRM1HrotJo9JbirYQ8DK5HETwozA9iMngZK4G2tudsqaa3CigCQfzBwqjmP
CPlBISKVyKZQ1EqOodxjUsuY+RxT3I1Mn7uLf22nGaFEGTDu6kr5ePpBSdFcC0Ox
kdNNTephS88FL+pG70b8z2wcHk+434A7IFHo9evMGEe0LoOOvvcYCoDPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByetkXoxITKr6Nai/Hovxch4/zUMB8GA1UdIwQY
MBaAFMyYFsr/+lYmPdDXSBnJTVQC8bttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUt
MDllYjAwMTNmYzI0LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUtMDllYjAwMTNmYzI0
LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7tgoN5u
Z+GOnRdoYyAvr4TqNrNgf26uq8netnuU7dGQ01nCoZIRCIxkLY5oBGr+yv5hJ2Yd
ExcyOyfUQEd3lYqDmdM/I8tr90rqZPRvfdB/L0CZsMgeanVJG8bqCyp4IHI5jhej
KXu03AGj6MctWZAippPLXzIcyuPmC1FGhj+fuyQvZaEftNub4Bt71AtrLJQx7qS+
FKfx6H6NpPYLTPLrvR81MaMU6kO19XjmgG7Dr7DlTxpk0fpcQx82DfSIrWLzcEnv
G3Ftuc4X2JY9YiqiSkENKSx7mQr965PIPkPoctqIDvi69A2LlErLh4m+lhecp5i+
xgu9d7I8pCvrMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:12 2025 by rpki-client