Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: YkuVNTF/qvKAQp1aInceEfyQvnWFKeSHYy1QMXuGZmI=
Subject key identifier: F4:99:74:4D:FF:8A:4B:58:B6:41:98:D0:75:14:2D:29:EF:3C:AE:D2
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 0198D4E0E0C744DCB14336B957D7733209A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:44 +0000
Manifest this update: Sat 23 Aug 2025 03:02:44 +0000
Manifest next update: Sun 24 Aug 2025 03:02:44 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: OqHSnssRXvBpVsTbYyDqMZh6Ylviqwu7XrQD8tsVm1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e0:c7:44:dc:b1:43:36:b9:57:d7:73:32:09:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Aug 23 03:02:44 2025 GMT
Not After : Aug 24 03:02:44 2025 GMT
Subject: CN=f499744dff8a4b58b64198d075142d29ef3caed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7f:f7:58:5e:0d:fa:36:9c:42:6b:66:aa:e4:
5d:0c:ef:c1:74:c1:e7:1d:71:b4:90:22:03:ac:c7:
0a:3e:5f:ec:56:cf:bf:fe:e6:85:b7:59:84:7d:00:
b6:85:52:56:90:89:fe:dd:97:7b:9c:5d:d5:69:78:
c2:63:de:5d:0b:ee:fb:87:14:69:1f:5d:10:85:29:
35:13:5f:2f:8c:9e:bb:30:83:02:ed:ac:65:98:6c:
77:b7:3f:2e:ff:b9:ad:fb:fe:3c:7e:f6:7e:56:60:
b1:89:68:42:0b:db:7f:9c:4d:c8:da:c1:03:05:31:
ac:88:c4:9d:99:66:d7:2b:36:77:bd:a4:53:05:c1:
27:0d:84:06:c4:b0:78:c1:38:a6:a1:7d:38:f1:87:
6a:a9:f8:f5:ab:f6:d5:64:fd:f4:0f:1f:0e:57:85:
60:52:cf:a2:e5:4e:91:ef:f7:0f:fc:55:cd:24:d7:
4c:d2:7b:31:26:36:a5:6a:57:11:27:ce:b1:1a:95:
04:55:35:6e:cb:61:00:7c:e5:00:af:db:02:f7:88:
a8:cf:4b:a3:e8:aa:13:42:94:5d:20:db:1f:b9:f0:
bd:be:af:a3:c7:04:c2:5c:dd:4c:ed:ec:05:03:33:
20:d1:81:e3:3d:ec:ba:2d:9e:48:b6:99:cb:37:04:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:99:74:4D:FF:8A:4B:58:B6:41:98:D0:75:14:2D:29:EF:3C:AE:D2
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:95:9a:18:e5:83:d6:8a:e6:ca:ed:2a:b2:68:4a:af:2a:d7:
7e:a9:5b:ed:64:c1:c2:08:f9:14:c0:84:51:11:e6:98:2b:a1:
64:5c:81:4d:71:9c:fd:3d:73:ad:36:cf:12:d7:77:79:7e:5f:
d6:cf:f7:3d:ae:e1:a2:cd:aa:4f:72:ce:99:b9:f9:aa:02:c5:
e5:08:6e:5a:ea:28:48:7b:f1:3f:e8:1d:b8:c4:81:c6:9e:25:
37:ef:3f:cd:19:6c:a7:d3:2f:2a:cd:02:46:f0:0b:37:9d:d7:
11:72:0d:f3:71:0b:92:6a:be:52:47:76:4a:a7:c2:48:6b:06:
bd:27:c5:53:bb:e8:2c:c2:11:94:7f:d5:98:db:59:15:64:35:
7d:b9:30:ce:ef:5f:78:b9:d2:67:4a:3d:f4:6a:74:1c:14:bf:
d5:cb:82:48:00:c5:61:15:f5:13:c3:c3:38:9e:1e:82:3d:bb:
41:31:48:06:89:ce:b3:30:05:93:8b:bb:d7:12:cd:fc:03:b5:
e1:8d:0c:c7:f8:0e:12:06:39:bb:e7:bc:c9:d8:86:4f:a5:fe:
90:f6:62:63:13:f8:aa:df:46:ba:ac:a7:16:eb:50:77:aa:a4:
1a:be:ba:9a:3f:2a:80:47:87:64:2d:3c:c7:40:f6:f7:5c:92:
4d:4c:ba:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ODHRNyxQza5V9dzMgmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDE2NzgxYmNhNjRjMmIyMzY0MzRlZGVmZmU2ZTQ1MmU3
MTYyZDQwHhcNMjUwODIzMDMwMjQ0WhcNMjUwODI0MDMwMjQ0WjAzMTEwLwYDVQQD
EyhmNDk5NzQ0ZGZmOGE0YjU4YjY0MTk4ZDA3NTE0MmQyOWVmM2NhZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3/3WF4N+jacQmtmquRdDO/BdMHn
HXG0kCIDrMcKPl/sVs+//uaFt1mEfQC2hVJWkIn+3Zd7nF3VaXjCY95dC+77hxRp
H10QhSk1E18vjJ67MIMC7axlmGx3tz8u/7mt+/48fvZ+VmCxiWhCC9t/nE3I2sED
BTGsiMSdmWbXKzZ3vaRTBcEnDYQGxLB4wTimoX048Ydqqfj1q/bVZP30Dx8OV4Vg
Us+i5U6R7/cP/FXNJNdM0nsxJjalalcRJ86xGpUEVTVuy2EAfOUAr9sC94ioz0uj
6KoTQpRdINsfufC9vq+jxwTCXN1M7ewFAzMg0YHjPey6LZ5ItpnLNwRMLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSZdE3/iktYtkGY0HUULSnvPK7SMB8GA1UdIwQY
MBaAFGfRZ4G8pkwrI2Q07e/+bkUucWLUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEt
YWQ1OTU1N2UyOGMyLzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lNDc1MTAtMjk0Zi00ZjA1LWFiZTEtYWQ1OTU1N2UyOGMy
LzEvWjlGbmdieW1UQ3NqWkRUdDdfNXVSUzV4WXRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZWaGOWD
1ormyu0qsmhKryrXfqlb7WTBwgj5FMCEURHmmCuhZFyBTXGc/T1zrTbPEtd3eX5f
1s/3Pa7hos2qT3LOmbn5qgLF5QhuWuooSHvxP+gduMSBxp4lN+8/zRlsp9MvKs0C
RvALN53XEXIN83ELkmq+Ukd2SqfCSGsGvSfFU7voLMIRlH/VmNtZFWQ1fbkwzu9f
eLnSZ0o99Gp0HBS/1cuCSADFYRX1E8PDOJ4egj27QTFIBonOszAFk4u71xLN/AO1
4Y0Mx/gOEgY5u+e8ydiGT6X+kPZiYxP4qt9GuqynFutQd6qkGr66mj8qgEeHZC08
x0D291ySTUy6ew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:28 2025 by rpki-client