Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
File: z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft (raw, json)
Hash identifier: pz2tNqQe/rMY+cK7iJjP1Lzl1gt23AKSAeYTveJdz54=
Subject key identifier: 02:A2:FE:68:D0:87:BC:FA:FD:4D:63:58:C4:89:2A:2B:86:86:51:43
Authority key identifier: CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
Certificate issuer: /CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Certificate serial: 0198D54EBB7203EECAFFDA3F64B9C1FE13EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
Manifest number: 41
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: ay2UhLb9gVwOGFcPuT7u3po7GlY.roa (hash: Nc0lcUmEx3NfjhiK/z5Wio+LmihCcurK5+zIFKzkR30=)
2: z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl (hash: RPVTAA8A0kXC+CtLC0UIOZEOtMeQ0mOxBwSrIUk3Mfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bb:72:03:ee:ca:ff:da:3f:64:b9:c1:fe:13:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc4c2ae338845efe7802deec234eae3f7b95f31
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=02a2fe68d087bcfafd4d6358c4892a2b86865143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:32:f1:da:35:4e:9c:1e:cf:4e:87:97:61:
33:04:c4:14:59:68:2e:ba:50:84:74:93:7b:41:05:
10:27:38:c6:f4:3a:85:bc:ed:c0:36:99:2d:3c:b3:
01:8a:3b:d0:52:df:3e:08:82:34:37:3f:61:34:6d:
85:ad:ef:d5:1f:55:08:71:e7:65:86:21:e9:a7:24:
12:e0:e8:30:66:ed:98:03:3f:b2:73:1e:c9:4d:e6:
de:35:c3:f5:76:ca:cc:3c:16:ce:5f:da:97:17:9a:
c1:62:10:71:01:61:77:d7:7f:53:f5:c3:ba:65:43:
37:ac:47:a4:a6:01:23:74:c6:5f:bc:5a:22:04:5d:
0e:2b:30:f5:61:19:88:25:45:56:06:d1:79:a1:ed:
c5:61:00:4f:ec:ba:3e:7d:ac:0b:d4:53:58:6d:1c:
de:6b:c6:75:eb:ca:86:6e:b7:a5:c9:02:56:62:d8:
0a:ca:c4:bf:a3:4f:c5:e0:51:cd:6a:c5:29:d0:06:
9c:27:77:80:97:53:31:6a:12:98:3f:c5:23:d0:83:
23:86:0e:97:14:68:54:41:6f:5d:1b:c2:d3:17:3f:
71:ec:b2:7b:b7:38:b3:1e:f7:9e:19:da:ed:80:27:
6b:ec:58:8f:80:b6:33:57:98:6a:de:3b:07:91:99:
ac:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:FE:68:D0:87:BC:FA:FD:4D:63:58:C4:89:2A:2B:86:86:51:43
X509v3 Authority Key Identifier:
keyid:CF:C4:C2:AE:33:88:45:EF:E7:80:2D:EE:C2:34:EA:E3:F7:B9:5F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8TCrjOIRe_ngC3uwjTq4_e5XzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/976925-2551-4b2b-900a-e111f322636a/1/z8TCrjOIRe_ngC3uwjTq4_e5XzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fb:a0:9f:e5:21:d1:99:fa:11:5a:2c:ad:bb:4e:5d:4a:e5:
f7:6e:e8:68:f6:b7:29:a7:00:b3:b9:77:84:1a:69:5d:09:ad:
25:88:df:9d:ee:de:2b:00:48:6e:2b:10:e6:71:13:4e:66:3e:
4c:03:3a:e6:3d:94:05:bd:a4:17:7e:44:48:ab:f9:68:b3:df:
de:c6:6c:1b:a4:18:fc:3f:ce:6a:e9:9b:dd:95:10:b6:60:c9:
2d:a3:06:29:76:92:2c:2d:89:8c:27:94:27:33:30:16:8f:fa:
0b:b1:06:f3:a1:d7:44:37:ce:0b:20:ea:68:ab:27:2e:3f:17:
c2:27:50:29:c4:91:18:c0:76:2d:3a:65:b3:38:83:f9:7d:80:
45:2c:72:f0:0c:6f:c0:ce:6a:1d:40:ae:dc:b2:a0:aa:61:16:
bb:2a:8f:b3:25:d6:38:36:2e:57:b9:01:de:ca:ad:4b:09:c3:
79:3e:ca:63:a6:d5:8d:02:77:d0:d2:31:71:3e:22:2e:00:44:
a1:cb:95:3f:57:e2:80:28:a6:38:d7:53:0d:37:9c:8e:22:52:
31:b3:e0:b5:40:f0:58:be:69:55:a9:4e:23:84:ee:62:31:ff:
ad:83:e9:6d:81:6d:5f:31:e5:4b:33:fb:f8:b8:2c:79:84:6b:
d4:11:73:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTrtyA+7K/9o/ZLnB/hPrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzRjMmFlMzM4ODQ1ZWZlNzgwMmRlZWMyMzRlYWUzZjdi
OTVmMzEwHhcNMjUwODIzMDUwMjQzWhcNMjUwODI0MDUwMjQzWjAzMTEwLwYDVQQD
EygwMmEyZmU2OGQwODdiY2ZhZmQ0ZDYzNThjNDg5MmEyYjg2ODY1MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GMy8do1Tpwez06Hl2EzBMQUWWgu
ulCEdJN7QQUQJzjG9DqFvO3ANpktPLMBijvQUt8+CII0Nz9hNG2Fre/VH1UIcedl
hiHppyQS4OgwZu2YAz+ycx7JTebeNcP1dsrMPBbOX9qXF5rBYhBxAWF3139T9cO6
ZUM3rEekpgEjdMZfvFoiBF0OKzD1YRmIJUVWBtF5oe3FYQBP7Lo+fawL1FNYbRze
a8Z168qGbrelyQJWYtgKysS/o0/F4FHNasUp0AacJ3eAl1MxahKYP8Uj0IMjhg6X
FGhUQW9dG8LTFz9x7LJ7tzizHveeGdrtgCdr7FiPgLYzV5hq3jsHkZmsVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKi/mjQh7z6/U1jWMSJKiuGhlFDMB8GA1UdIwQY
MBaAFM/Ewq4ziEXv54At7sI06uP3uV8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEt
ZTExMWYzMjI2MzZhLzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85NzY5MjUtMjU1MS00YjJiLTkwMGEtZTExMWYzMjI2MzZh
LzEvejhUQ3JqT0lSZV9uZ0MzdXdqVHE0X2U1WHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKPugn+Uh
0Zn6EVosrbtOXUrl927oaPa3KacAs7l3hBppXQmtJYjfne7eKwBIbisQ5nETTmY+
TAM65j2UBb2kF35ESKv5aLPf3sZsG6QY/D/Oaumb3ZUQtmDJLaMGKXaSLC2JjCeU
JzMwFo/6C7EG86HXRDfOCyDqaKsnLj8XwidQKcSRGMB2LTplsziD+X2ARSxy8Axv
wM5qHUCu3LKgqmEWuyqPsyXWODYuV7kB3sqtSwnDeT7KY6bVjQJ30NIxcT4iLgBE
ocuVP1figCimONdTDTecjiJSMbPgtUDwWL5pValOI4TuYjH/rYPpbYFtXzHlSzP7
+LgseYRr1BFzYQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:29 2025 by rpki-client