Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: yzx08aHcAQgsqc5ferwgs9+1WrWIqHZ+EZRSgEDSI6Y=
Subject key identifier: CC:44:59:08:8A:F2:FF:A8:ED:83:30:25:E2:A6:7B:33:35:88:68:C2
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 0198D65F8F293C9A9B77082A63571F07AF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:43 +0000
Manifest this update: Sat 23 Aug 2025 10:00:43 +0000
Manifest next update: Sun 24 Aug 2025 10:00:43 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: N7kbh0+xj/+n7iebQdO8r0LLmBHxO68i2n32NdqC24k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8f:29:3c:9a:9b:77:08:2a:63:57:1f:07:af:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Aug 23 10:00:43 2025 GMT
Not After : Aug 24 10:00:43 2025 GMT
Subject: CN=cc4459088af2ffa8ed833025e2a67b33358868c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:a3:a0:f1:95:2a:c3:76:d2:5f:20:3b:61:
d9:01:35:41:2c:8f:50:b9:62:28:2a:80:8a:28:01:
e7:05:47:97:ff:81:bb:d6:af:cf:7f:3b:3f:99:97:
46:1c:94:38:85:7e:b3:d9:f5:54:c6:2a:1b:23:c1:
df:26:20:89:41:49:7f:13:9f:4b:32:87:a3:01:06:
fd:4b:cd:67:27:8a:88:c7:21:8b:82:79:f8:aa:22:
62:d4:76:0b:53:1b:61:8d:91:57:11:f9:2b:2a:69:
bc:22:95:b7:ae:d1:8b:44:1a:b3:58:ad:ba:4e:ec:
c8:17:e5:83:9c:9f:20:77:63:ea:b9:84:d1:e5:ed:
b3:15:b8:7c:ab:6e:bb:75:7a:05:1f:e7:79:c4:3b:
e2:48:23:ed:29:62:05:38:73:c0:56:2b:72:d7:4a:
ed:19:fa:f9:e6:7d:b9:ed:34:1f:5e:2e:ad:df:6d:
82:36:94:9d:a4:16:67:60:e4:77:72:bd:17:32:70:
39:31:96:22:a7:b7:af:1e:a7:b7:ee:9f:cd:71:22:
21:54:14:72:78:96:1a:33:a1:b0:0b:70:ca:91:91:
ae:ad:a4:bf:31:51:d0:5a:c6:60:6f:c6:e5:c7:22:
68:a7:94:0c:86:81:d9:46:1b:40:7f:12:c0:31:33:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:44:59:08:8A:F2:FF:A8:ED:83:30:25:E2:A6:7B:33:35:88:68:C2
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ac:66:d2:f5:a2:b8:83:5e:c8:e7:f3:21:2a:ad:84:f9:54:
ba:4a:83:64:9d:68:c1:bf:b2:87:41:c9:a5:b8:a4:4e:ad:6a:
5c:3c:d9:84:e8:e1:53:2e:87:86:13:bf:b5:6c:e2:7d:45:2a:
8e:0a:66:4c:f1:7b:11:22:0e:58:5e:27:75:ae:0d:1e:91:53:
dd:11:55:61:1f:22:67:1a:da:10:4c:2c:03:6b:6c:17:f4:85:
7c:b8:38:7a:30:76:8f:34:5d:79:a2:66:11:c9:f8:fa:68:f6:
bc:e8:95:71:55:d1:32:1c:b2:74:60:ec:73:a0:9e:35:33:61:
89:cb:1e:ad:44:f1:8c:09:d6:8b:05:88:ac:59:f8:1d:f0:82:
08:04:26:11:af:c1:be:e4:37:99:91:ea:b3:df:2d:ec:ef:e5:
1b:b4:17:d7:4d:5c:84:8d:81:69:83:72:16:da:9d:ac:3f:50:
26:51:98:bd:a2:9c:b9:04:f4:98:8a:46:5e:80:ca:46:2b:07:
f3:67:57:3c:1b:1c:0e:ce:7f:ad:7a:e0:e3:0e:a2:82:2c:00:
fd:6d:02:6c:53:98:6f:28:fd:28:67:33:ae:03:05:c7:5a:73:
ab:7c:3f:58:b9:a3:34:2a:d3:6d:4f:a8:05:23:26:d0:fa:2b:
5e:05:12:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX48pPJqbdwgqY1cfB69OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjUwODIzMTAwMDQzWhcNMjUwODI0MTAwMDQzWjAzMTEwLwYDVQQD
EyhjYzQ0NTkwODhhZjJmZmE4ZWQ4MzMwMjVlMmE2N2IzMzM1ODg2OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmOjoPGVKsN20l8gO2HZATVBLI9Q
uWIoKoCKKAHnBUeX/4G71q/Pfzs/mZdGHJQ4hX6z2fVUxiobI8HfJiCJQUl/E59L
MoejAQb9S81nJ4qIxyGLgnn4qiJi1HYLUxthjZFXEfkrKmm8IpW3rtGLRBqzWK26
TuzIF+WDnJ8gd2PquYTR5e2zFbh8q267dXoFH+d5xDviSCPtKWIFOHPAVity10rt
Gfr55n257TQfXi6t322CNpSdpBZnYOR3cr0XMnA5MZYip7evHqe37p/NcSIhVBRy
eJYaM6GwC3DKkZGuraS/MVHQWsZgb8blxyJop5QMhoHZRhtAfxLAMTOUPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxEWQiK8v+o7YMwJeKmezM1iGjCMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6xm0vWi
uINeyOfzISqthPlUukqDZJ1owb+yh0HJpbikTq1qXDzZhOjhUy6HhhO/tWzifUUq
jgpmTPF7ESIOWF4nda4NHpFT3RFVYR8iZxraEEwsA2tsF/SFfLg4ejB2jzRdeaJm
Ecn4+mj2vOiVcVXRMhyydGDsc6CeNTNhicserUTxjAnWiwWIrFn4HfCCCAQmEa/B
vuQ3mZHqs98t7O/lG7QX101chI2BaYNyFtqdrD9QJlGYvaKcuQT0mIpGXoDKRisH
82dXPBscDs5/rXrg4w6igiwA/W0CbFOYbyj9KGczrgMFx1pzq3w/WLmjNCrTbU+o
BSMm0PorXgUSlA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:52 2025 by rpki-client