Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier: l5jKjVMwCzFND8O6e9p84S9VvPoHRUDvk7t+ykRx/+Y=
Subject key identifier: 0D:5E:A6:E0:79:0B:0A:71:B1:77:2B:0B:05:1B:3F:23:CF:95:97:B0
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 0198D5F134E5E69507451CF1450974B404E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number: 0159
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=)
2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: cCcPEQ2abDM60nFXH/iTMO+MoT67U11nGcZfgBqDBtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:34:e5:e6:95:07:45:1c:f1:45:09:74:b4:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=0d5ea6e0790b0a71b1772b0b051b3f23cf9597b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:45:15:da:d4:5a:00:02:74:28:b3:5e:da:
cb:3d:00:e4:7f:bc:25:af:64:f5:43:a2:59:3c:8c:
f7:71:2f:31:96:6f:f2:2d:bf:7d:75:6f:c2:c9:e5:
d2:b0:35:b9:45:7d:20:5e:ba:b9:5d:ef:f1:5f:f3:
f1:1a:8e:15:cd:f4:5b:e1:ba:b3:a9:40:81:9d:42:
75:1b:89:d7:30:3e:c1:fb:08:05:79:13:51:a4:ee:
95:49:d2:8a:47:c6:64:bc:58:a7:c6:27:88:8a:d0:
a4:ce:6d:23:9f:1d:42:0f:06:cb:9a:d5:bf:25:ad:
54:9c:97:e8:53:22:5b:6b:96:c7:4d:c3:dd:96:2b:
2c:d6:6b:bf:12:a3:b9:24:81:68:63:72:3a:35:b0:
9d:97:59:d9:2a:3c:e9:8e:b5:7c:00:2d:58:92:2c:
c3:5a:a0:83:f9:df:00:be:42:d0:93:5c:da:8d:2d:
44:00:36:77:ac:ff:d0:df:fb:2c:0d:6a:f7:7a:5d:
37:46:f7:d9:a8:da:ab:14:70:82:20:cd:ab:98:5c:
49:1b:9e:59:8b:f4:59:1c:8f:d9:01:9b:67:14:3d:
18:4a:63:48:14:10:14:14:7e:cc:ec:2a:a8:22:ad:
d6:15:64:e5:86:5f:8b:6d:9d:a7:aa:e4:0b:23:b7:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:A6:E0:79:0B:0A:71:B1:77:2B:0B:05:1B:3F:23:CF:95:97:B0
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:df:c2:de:3d:73:ee:d1:2c:c7:86:95:43:85:16:75:1b:98:
95:ef:8d:da:08:25:28:84:1e:09:fe:cb:82:40:ff:0d:28:a9:
7e:09:89:ba:ad:e2:b2:30:21:85:a7:92:39:6b:da:25:05:bf:
b2:d2:f2:a3:9d:f3:fe:e6:c1:2c:58:e3:4c:97:75:e2:3f:20:
08:62:6a:bc:dc:34:ac:10:e0:6b:76:6a:f2:fd:34:81:8a:b3:
3d:cc:29:e5:19:7c:6a:58:d2:2b:17:62:ac:62:47:17:40:c1:
da:3c:53:4f:85:ed:4c:94:9a:4f:e7:49:c9:5d:75:ef:44:c8:
a4:6c:d8:13:4e:6b:4f:b5:6f:a7:7e:ea:c1:26:30:f1:e0:f4:
12:63:03:5f:36:26:04:50:5a:a2:5e:39:ed:52:96:42:bd:37:
18:16:c8:6b:5d:d4:39:82:ce:a4:b9:cf:3e:04:1c:6f:9a:cb:
43:b7:34:bf:ea:be:52:e0:33:d0:38:3f:51:d7:bb:93:0e:71:
77:55:b0:41:6c:54:92:5c:6c:06:d5:0f:4d:f0:d7:bb:dd:55:
ef:bc:33:a1:8c:cc:aa:d8:7c:65:3a:e3:03:00:29:98:f8:c9:
f9:80:6c:07:6c:23:b1:93:f3:4d:75:d9:4b:5f:90:26:5a:21:
c7:2f:28:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8TTl5pUHRRzxRQl0tATgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1
ZWNiMGIwHhcNMjUwODIzMDgwMDExWhcNMjUwODI0MDgwMDExWjAzMTEwLwYDVQQD
EygwZDVlYTZlMDc5MGIwYTcxYjE3NzJiMGIwNTFiM2YyM2NmOTU5N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp45FFdrUWgACdCizXtrLPQDkf7wl
r2T1Q6JZPIz3cS8xlm/yLb99dW/CyeXSsDW5RX0gXrq5Xe/xX/PxGo4VzfRb4bqz
qUCBnUJ1G4nXMD7B+wgFeRNRpO6VSdKKR8ZkvFinxieIitCkzm0jnx1CDwbLmtW/
Ja1UnJfoUyJba5bHTcPdliss1mu/EqO5JIFoY3I6NbCdl1nZKjzpjrV8AC1YkizD
WqCD+d8AvkLQk1zajS1EADZ3rP/Q3/ssDWr3el03RvfZqNqrFHCCIM2rmFxJG55Z
i/RZHI/ZAZtnFD0YSmNIFBAUFH7M7CqoIq3WFWTlhl+LbZ2nquQLI7ckHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1epuB5CwpxsXcrCwUbPyPPlZewMB8GA1UdIwQY
MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt
ZTEyZDE2ZjQ0MTUzLzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz
LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9/C3j1z
7tEsx4aVQ4UWdRuYle+N2gglKIQeCf7LgkD/DSipfgmJuq3isjAhhaeSOWvaJQW/
stLyo53z/ubBLFjjTJd14j8gCGJqvNw0rBDga3Zq8v00gYqzPcwp5Rl8aljSKxdi
rGJHF0DB2jxTT4XtTJSaT+dJyV1170TIpGzYE05rT7Vvp37qwSYw8eD0EmMDXzYm
BFBaol457VKWQr03GBbIa13UOYLOpLnPPgQcb5rLQ7c0v+q+UuAz0Dg/Ude7kw5x
d1WwQWxUklxsBtUPTfDXu91V77wzoYzMqth8ZTrjAwApmPjJ+YBsB2wjsZPzTXXZ
S1+QJlohxy8o4g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:56 2025 by rpki-client