Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: fXFsJbvV8F+Kphw3NlWgCml0/6MrGi5bH+QwVdnwZU4=
Subject key identifier: A4:42:DE:6B:88:0F:FD:16:62:54:43:3B:17:49:9E:4D:06:11:A0:45
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 0198D54E206800DB1F2FFB73350539BDAE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0DB0
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: aJy112NE0JrEOPAKCwetPQsUINqExE2ryrrgMHZXql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:20:68:00:db:1f:2f:fb:73:35:05:39:bd:ae:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=a442de6b880ffd166254433b17499e4d0611a045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:53:b8:f7:1c:73:63:69:7a:e5:1b:22:64:
5b:2e:65:51:a3:35:7f:4b:5c:a1:61:63:97:e7:7c:
ce:10:dd:b9:ef:75:3c:62:df:62:46:b7:ca:8d:e1:
38:58:2d:84:87:5d:cf:79:f6:44:4b:53:a3:95:b0:
48:fd:6e:9a:88:08:d5:bb:18:b4:50:48:77:fb:b3:
a8:54:ae:cc:87:d7:0f:1c:c0:87:00:a1:cb:92:4b:
d8:16:89:a6:a1:af:1c:a5:02:53:cc:16:11:ef:c0:
bd:f7:4d:0e:f5:7c:6f:4b:21:c1:a8:4c:8a:ef:3e:
59:cc:a0:19:bd:a4:fd:62:ba:f2:d7:02:47:20:67:
e5:77:ea:e7:cd:f7:7b:49:78:e3:57:10:fd:e6:54:
ba:46:22:b1:65:c7:ed:75:44:33:b2:03:59:e6:02:
33:ca:d7:0d:e9:48:31:0d:f6:ba:16:f4:5c:6a:79:
ef:06:b6:ef:da:73:33:80:3c:27:c8:8e:d9:bb:b6:
75:80:e1:5e:b7:0f:ff:da:89:99:ae:63:bd:89:91:
ce:87:4a:5a:51:db:91:a4:a6:cf:6a:99:8d:46:ca:
97:95:20:5f:4a:38:76:ab:3b:01:05:b6:25:6b:f5:
0d:ca:b4:3f:39:09:90:72:23:44:a2:2a:53:2a:fa:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:DE:6B:88:0F:FD:16:62:54:43:3B:17:49:9E:4D:06:11:A0:45
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:98:57:53:5d:07:35:00:76:70:85:6a:f2:36:0a:a1:d1:b8:
d2:d4:aa:76:c5:f5:c1:0b:25:db:1e:d5:32:6e:0d:ce:9c:4d:
65:7e:0f:6a:a9:7c:cc:9b:bb:83:24:f2:93:72:f4:d6:5b:8a:
2a:5e:d7:95:ae:c9:b9:96:8a:2d:96:dd:3a:c2:00:13:66:86:
09:32:c6:8a:ec:dc:f4:a3:42:4f:5c:39:60:b3:ec:8d:3f:49:
2b:d1:90:8e:24:1a:d8:5b:55:3b:c5:31:b8:99:25:84:69:47:
76:f2:8c:16:d4:51:22:2d:d0:bb:ba:d5:bd:5b:ec:89:00:bb:
0f:27:07:2e:6b:f7:69:0d:3b:21:8d:79:83:1a:3d:6b:e1:75:
1a:05:ab:d7:f4:bb:72:00:e7:b2:98:5a:27:3f:89:ff:a2:21:
d5:89:c2:d8:b9:c1:f7:f6:27:f6:a3:a5:07:05:84:ea:64:34:
2a:80:8e:ff:77:11:e0:df:95:53:90:60:1d:ac:f2:ab:54:40:
94:4e:e9:c8:09:5e:c3:e8:e7:3b:86:b4:75:45:f2:d2:e6:1c:
1f:12:c6:6c:61:6a:45:1c:4e:7c:86:ce:48:87:d5:78:56:53:
02:00:10:f2:c6:19:ca:28:21:99:cc:e3:9e:7f:a7:6d:02:b0:
41:60:c9:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTiBoANsfL/tzNQU5va4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Y2I0ZjZjZDg0ODlmZGRkMTczOTcwYTBlZjQ0ZDRlMTU0
N2E0MDUwHhcNMjUwODIzMDUwMjAzWhcNMjUwODI0MDUwMjAzWjAzMTEwLwYDVQQD
EyhhNDQyZGU2Yjg4MGZmZDE2NjI1NDQzM2IxNzQ5OWU0ZDA2MTFhMDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQJTuPccc2NpeuUbImRbLmVRozV/
S1yhYWOX53zOEN2573U8Yt9iRrfKjeE4WC2Eh13PefZES1OjlbBI/W6aiAjVuxi0
UEh3+7OoVK7Mh9cPHMCHAKHLkkvYFommoa8cpQJTzBYR78C9900O9XxvSyHBqEyK
7z5ZzKAZvaT9Yrry1wJHIGfld+rnzfd7SXjjVxD95lS6RiKxZcftdUQzsgNZ5gIz
ytcN6UgxDfa6FvRcannvBrbv2nMzgDwnyI7Zu7Z1gOFetw//2omZrmO9iZHOh0pa
UduRpKbPapmNRsqXlSBfSjh2qzsBBbYla/UNyrQ/OQmQciNEoipTKvoolwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRC3muID/0WYlRDOxdJnk0GEaBFMB8GA1UdIwQY
MBaAFGXLT2zYSJ/d0XOXCg70TU4VR6QFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2It
MDgyZDkyNGMyZjMzLzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83MzZhNGEtMzllMC00MTE5LWI0Y2ItMDgyZDkyNGMyZjMz
LzEvWmN0UGJOaEluOTNSYzVjS0R2Uk5UaFZIcEFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQphXU10H
NQB2cIVq8jYKodG40tSqdsX1wQsl2x7VMm4NzpxNZX4Paql8zJu7gyTyk3L01luK
Kl7Xla7JuZaKLZbdOsIAE2aGCTLGiuzc9KNCT1w5YLPsjT9JK9GQjiQa2FtVO8Ux
uJklhGlHdvKMFtRRIi3Qu7rVvVvsiQC7DycHLmv3aQ07IY15gxo9a+F1GgWr1/S7
cgDnsphaJz+J/6Ih1YnC2LnB9/Yn9qOlBwWE6mQ0KoCO/3cR4N+VU5BgHazyq1RA
lE7pyAlew+jnO4a0dUXy0uYcHxLGbGFqRRxOfIbOSIfVeFZTAgAQ8sYZyighmczj
nn+nbQKwQWDJ7w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:46 2025 by rpki-client