Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: g0orlPFBir6XvRNeb1acGcn7ALbZmUSdX6fPZdulduI=
Subject key identifier: CE:AA:EF:7D:88:EB:DD:CC:41:4C:A2:E1:E3:C9:1C:83:23:3B:6C:09
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 0198D6605C92B1D7A1847D03EA861C7AFC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 090C
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: /vnGfsLpFw9DkQ0RtBIBn4B5K5+6fta/hXbMDIz3CKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5c:92:b1:d7:a1:84:7d:03:ea:86:1c:7a:fc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=ceaaef7d88ebddcc414ca2e1e3c91c83233b6c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:f9:86:86:1a:e1:27:13:c6:4e:ea:4a:57:
b8:b6:07:2e:0b:d4:56:ac:a6:39:1e:06:d5:98:43:
b6:03:2b:17:15:1c:fd:ff:44:25:26:8f:51:83:6f:
8e:e5:3c:32:82:f1:56:af:24:a8:bb:a2:68:0a:f2:
4e:86:19:6f:96:2f:6f:29:4a:94:05:ea:ec:18:e7:
d8:ed:5f:cf:57:77:72:d9:ce:7c:ed:67:62:ca:f3:
b9:68:ee:28:9e:b2:61:9c:a6:be:74:d7:ee:23:37:
17:90:92:83:56:7d:cd:a8:0d:f4:18:5d:13:6d:e7:
10:79:4e:9e:a7:31:57:c7:34:72:93:f0:19:01:96:
c5:cd:0d:7e:9e:e9:bb:6d:48:fb:1a:73:66:dd:07:
e0:4a:f3:d0:0b:2c:d5:2d:02:94:a1:63:2b:ab:e3:
d4:36:f7:ef:8f:85:8b:7c:54:06:1c:85:4c:a9:72:
eb:a8:a2:c2:90:d5:98:24:7d:e5:33:ed:0b:4e:e2:
61:60:a7:de:70:f6:f3:c2:ca:76:a7:0a:99:1b:9c:
7e:d3:9a:1e:13:38:6e:33:c5:fe:d2:cf:c9:ce:57:
02:5c:6b:91:fd:57:e2:f0:32:49:99:21:0e:3c:f4:
8f:05:0c:29:fd:f5:35:24:9f:6f:09:6f:7a:66:88:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:EF:7D:88:EB:DD:CC:41:4C:A2:E1:E3:C9:1C:83:23:3B:6C:09
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:86:83:43:37:7c:55:9b:1d:da:2c:6a:c5:03:fc:fe:29:00:
a8:30:2a:90:a4:e5:70:87:8a:55:9e:79:4f:be:82:8d:47:8e:
32:a7:d1:1f:28:c2:6a:d5:f7:96:37:70:1e:54:28:13:cd:45:
70:d0:05:98:94:88:15:87:22:10:df:29:b2:bd:b5:04:22:7b:
78:96:4e:b5:d0:33:aa:12:71:fc:6d:89:05:2d:8d:a6:f4:9f:
4d:44:f1:27:89:93:9a:23:84:11:7a:0d:23:11:37:9c:34:bf:
cd:17:5a:21:a3:e7:5c:0d:fc:aa:12:5b:3f:fa:e3:fc:5a:09:
6c:92:e4:68:c1:ea:32:cf:30:ce:1b:da:b7:93:6f:25:05:f4:
10:d1:d3:2b:68:0c:9e:75:85:a4:b4:e3:ea:d4:81:bf:77:98:
77:96:f8:d8:e3:7c:f7:0a:c6:c6:e5:ce:76:3b:15:13:83:d6:
75:23:3d:5e:85:5e:05:d1:fb:2c:95:1f:74:08:2c:15:38:df:
72:c4:32:62:64:9e:1c:dd:f7:ad:31:5a:20:ef:e1:30:ec:b1:
2e:54:2b:55:9f:db:31:dc:d5:c4:fe:01:df:a5:a0:1d:1b:d8:
e5:dc:af:a1:c6:e5:a1:72:1d:b5:42:40:e5:53:1a:63:95:4a:
f8:63:d5:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYFySsdehhH0D6oYcevxBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1
MGVmMGYwHhcNMjUwODIzMTAwMTM2WhcNMjUwODI0MTAwMTM2WjAzMTEwLwYDVQQD
EyhjZWFhZWY3ZDg4ZWJkZGNjNDE0Y2EyZTFlM2M5MWM4MzIzM2I2YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBP5hoYa4ScTxk7qSle4tgcuC9RW
rKY5HgbVmEO2AysXFRz9/0QlJo9Rg2+O5TwygvFWrySou6JoCvJOhhlvli9vKUqU
BersGOfY7V/PV3dy2c587WdiyvO5aO4onrJhnKa+dNfuIzcXkJKDVn3NqA30GF0T
becQeU6epzFXxzRyk/AZAZbFzQ1+num7bUj7GnNm3QfgSvPQCyzVLQKUoWMrq+PU
Nvfvj4WLfFQGHIVMqXLrqKLCkNWYJH3lM+0LTuJhYKfecPbzwsp2pwqZG5x+05oe
EzhuM8X+0s/JzlcCXGuR/Vfi8DJJmSEOPPSPBQwp/fU1JJ9vCW96ZoixGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6q732I693MQUyi4ePJHIMjO2wJMB8GA1UdIwQY
MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt
MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj
LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoaDQzd8
VZsd2ixqxQP8/ikAqDAqkKTlcIeKVZ55T76CjUeOMqfRHyjCatX3ljdwHlQoE81F
cNAFmJSIFYciEN8psr21BCJ7eJZOtdAzqhJx/G2JBS2NpvSfTUTxJ4mTmiOEEXoN
IxE3nDS/zRdaIaPnXA38qhJbP/rj/FoJbJLkaMHqMs8wzhvat5NvJQX0ENHTK2gM
nnWFpLTj6tSBv3eYd5b42ON89wrGxuXOdjsVE4PWdSM9XoVeBdH7LJUfdAgsFTjf
csQyYmSeHN33rTFaIO/hMOyxLlQrVZ/bMdzVxP4B36WgHRvY5dyvocbloXIdtUJA
5VMaY5VK+GPVug==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:37 2025 by rpki-client