Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: RSUHI/CYQ8NkEYn72kjtspB9ZY9cN0wQt5FYVZcXtVQ=
Subject key identifier: 13:68:33:0B:05:D8:F7:F2:8B:44:F3:D5:60:57:0E:6F:B1:74:73:65
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 0198D660DCF558AFE688189BFCEAB6DBD200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 138A
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: 7piP3HxjBZHPgCoblkivClXzzKGkYadKLbUiU1T0Dn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:dc:f5:58:af:e6:88:18:9b:fc:ea:b6:db:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=1368330b05d8f7f28b44f3d560570e6fb1747365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:b2:d6:bc:41:0d:a7:68:e0:2f:24:ed:7b:
eb:c5:91:0e:c5:88:ee:67:bb:65:6d:b9:70:c2:e6:
59:ad:1c:91:f9:8c:fa:b3:7f:ca:88:59:22:d4:58:
1e:d1:d7:44:ef:8f:c6:4f:eb:f9:b7:cf:eb:6e:19:
25:fe:32:ac:b2:4e:3e:83:a0:48:14:cf:9f:33:47:
a3:d9:7c:bf:dd:8a:c0:1f:57:72:2e:d9:f9:0f:87:
d4:7e:82:12:3e:03:fa:64:70:b1:58:fe:d4:01:58:
3c:de:4f:6e:21:f5:c1:84:c0:18:63:a0:4b:d7:fd:
aa:cc:a6:ce:f4:dd:d2:1b:13:b4:13:fb:16:88:46:
58:49:d7:9c:93:5d:f3:aa:7a:51:3d:15:89:12:b0:
1e:3f:6a:60:e0:43:d2:64:94:b8:3a:6a:c5:69:b9:
6c:98:c8:03:68:07:4f:e2:6d:71:01:18:a5:e0:26:
5e:3e:23:f0:7d:8e:02:cb:32:51:7a:6c:93:e2:24:
ee:d8:28:8e:d0:74:62:2d:82:a5:88:94:d0:2a:53:
87:67:50:bd:fa:68:78:e4:73:ca:28:26:5b:a1:87:
af:fd:8f:1d:e6:7d:ff:91:9d:df:71:90:d3:58:17:
13:f8:25:2d:bf:04:6f:be:a8:51:4d:e4:fb:db:69:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:68:33:0B:05:D8:F7:F2:8B:44:F3:D5:60:57:0E:6F:B1:74:73:65
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cf:d2:af:c5:70:61:d1:65:e0:d2:84:61:21:a8:a8:6f:ee:
2d:05:97:72:13:01:1f:54:a5:29:89:fc:1e:a4:1b:34:f3:3a:
d7:ec:2f:7d:76:17:53:b9:41:00:07:46:45:93:b0:6b:a5:0a:
0b:4f:21:00:f6:4e:60:40:61:38:20:26:05:ef:be:89:54:d0:
01:b4:1d:a2:65:18:08:a5:7f:75:1d:13:99:97:7b:dc:f2:9a:
79:33:5c:48:13:8f:2a:36:12:61:04:96:51:9b:54:e4:19:6c:
d8:43:61:02:40:2c:c4:8c:59:26:3c:b9:96:4e:38:ce:19:4b:
ec:a0:70:50:42:62:b5:3c:72:6e:10:e8:88:e6:30:b6:f9:ff:
1e:88:c1:fe:4a:70:44:7a:15:6e:2b:81:5d:f2:92:5d:ac:07:
9b:91:2b:42:f4:70:74:78:9f:47:98:d5:4a:33:42:d9:d4:09:
96:c6:f0:63:cf:1f:6d:92:3c:07:3c:54:9a:d9:a5:3e:1b:13:
f7:f3:39:6b:14:05:33:13:03:eb:bc:4e:17:3d:37:aa:3b:c6:
42:fc:5e:98:31:5f:15:d0:f8:5e:55:4f:15:7a:fb:dc:ee:26:
49:e8:09:0c:f6:2d:db:99:02:53:7e:d9:72:03:33:c1:0d:d3:
6e:e3:92:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYNz1WK/miBib/Oq229IAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx
YjRhMjAwHhcNMjUwODIzMTAwMjA4WhcNMjUwODI0MTAwMjA4WjAzMTEwLwYDVQQD
EygxMzY4MzMwYjA1ZDhmN2YyOGI0NGYzZDU2MDU3MGU2ZmIxNzQ3MzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ6y1rxBDado4C8k7XvrxZEOxYju
Z7tlbblwwuZZrRyR+Yz6s3/KiFki1Fge0ddE74/GT+v5t8/rbhkl/jKssk4+g6BI
FM+fM0ej2Xy/3YrAH1dyLtn5D4fUfoISPgP6ZHCxWP7UAVg83k9uIfXBhMAYY6BL
1/2qzKbO9N3SGxO0E/sWiEZYSdeck13zqnpRPRWJErAeP2pg4EPSZJS4OmrFabls
mMgDaAdP4m1xARil4CZePiPwfY4CyzJRemyT4iTu2CiO0HRiLYKliJTQKlOHZ1C9
+mh45HPKKCZboYev/Y8d5n3/kZ3fcZDTWBcT+CUtvwRvvqhRTeT722lUEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBNoMwsF2Pfyi0Tz1WBXDm+xdHNlMB8GA1UdIwQY
MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt
ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl
LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw8/Sr8Vw
YdFl4NKEYSGoqG/uLQWXchMBH1SlKYn8HqQbNPM61+wvfXYXU7lBAAdGRZOwa6UK
C08hAPZOYEBhOCAmBe++iVTQAbQdomUYCKV/dR0TmZd73PKaeTNcSBOPKjYSYQSW
UZtU5Bls2ENhAkAsxIxZJjy5lk44zhlL7KBwUEJitTxybhDoiOYwtvn/HojB/kpw
RHoVbiuBXfKSXawHm5ErQvRwdHifR5jVSjNC2dQJlsbwY88fbZI8BzxUmtmlPhsT
9/M5axQFMxMD67xOFz03qjvGQvxemDFfFdD4XlVPFXr73O4mSegJDPYt25kCU37Z
cgMzwQ3TbuOSfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:53:42 2025 by rpki-client