Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: MoNfoA+QZ4BFOAWDSDdCVfhQYGVG2sBsLAZqo8aKlDY=
Subject key identifier: 09:0A:5F:F8:FE:7D:70:25:A1:B5:A8:D3:AA:87:49:16:8B:D7:74:DC
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 0198D54E607FA0445260040BADFD0916A223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 05:02:20 +0000
Manifest this update: Sat 23 Aug 2025 05:02:20 +0000
Manifest next update: Sun 24 Aug 2025 05:02:20 +0000
Files and hashes: 1: Nleevi_t1odK2SQMPlwz5kkpo1Y.roa (hash: DKM+JxDcrxSfZrM/04OPCw4rkiFmFEDYym5FUi8PCsQ=)
2: Vo2fmYOdwpsZlWnrLb9PR2qxUiU.roa (hash: ofRGxwyei53l51n5v+e08DV9i8dygPEuLXkTPl6qbNI=)
3: YCaEZB50rCphFHNs0SPFVykePLA.roa (hash: AXiMRnv2MY2eYU5zXOJ4Cp11rWQHmU+zWOZeXxL9Un4=)
4: r_bOLpGR44Uxr2yZR3U8n-cd72g.roa (hash: 77U0OrAigBGcas60BhBB6LRX9fbaZ0dNBtqvHrAGNSA=)
5: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: JAB3r18PqKT3wN5HcIf3MkPAjLvJxbZwyvg664wU7wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:60:7f:a0:44:52:60:04:0b:ad:fd:09:16:a2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Aug 23 05:02:20 2025 GMT
Not After : Aug 24 05:02:20 2025 GMT
Subject: CN=090a5ff8fe7d7025a1b5a8d3aa8749168bd774dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:34:9c:60:3f:2f:7e:2d:57:43:89:c1:ca:
d5:c8:1f:33:3c:6d:77:ae:75:0b:de:7c:cb:14:09:
30:cf:ec:4d:24:55:a9:b9:57:c2:eb:a2:08:e6:30:
97:47:b7:5a:be:8d:63:a9:77:23:98:6e:8a:b5:4c:
e3:c9:2a:32:d8:39:6b:b1:7a:d1:6b:94:41:99:6f:
8c:82:00:7b:26:c0:84:70:4b:e5:9c:ef:06:c1:fe:
0f:f7:2d:3f:94:f8:20:f3:c0:e1:23:5e:a8:5f:0f:
3a:5e:2e:26:02:99:49:ff:5e:21:5e:fe:26:49:fb:
d5:f3:11:a3:6c:86:b6:64:29:c8:ef:1e:18:b8:b6:
a7:a8:1b:5b:23:81:4c:3b:95:74:3e:ca:fe:05:d1:
77:da:8e:5b:c4:66:9f:37:a1:11:f8:95:8d:5a:25:
9e:54:ba:8a:24:ef:94:72:1a:cd:1c:79:ac:49:d4:
c1:c4:3d:db:03:86:5d:b3:c1:b0:51:f8:69:da:b0:
59:1d:d9:45:b9:b1:d2:99:ec:7f:9b:cf:7f:33:d8:
97:a4:39:40:e0:fd:5c:e6:d6:89:e5:2f:7d:73:c6:
2c:36:29:b6:a8:1d:8e:42:e2:3d:5f:d1:1e:9d:59:
58:1e:4d:1a:7f:6f:f6:a0:32:21:b4:68:97:32:80:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0A:5F:F8:FE:7D:70:25:A1:B5:A8:D3:AA:87:49:16:8B:D7:74:DC
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4a:d3:f7:7e:1f:03:51:87:3e:fb:ca:01:81:39:6c:5e:ee:
5e:4b:d5:12:74:a4:00:27:d0:77:70:aa:34:c9:cd:bc:a5:25:
fe:8b:a2:7c:f7:1e:fc:a7:aa:22:4c:da:4f:a5:5b:0f:b6:d2:
f3:28:77:c8:90:30:34:5b:c2:01:f7:71:2e:b1:b7:70:8e:c9:
2b:e0:9f:10:27:31:de:37:25:50:27:14:94:20:aa:ec:ed:7c:
33:9f:cb:eb:78:50:ea:5c:04:2d:1e:a0:59:d5:de:47:76:45:
29:c5:80:42:11:3d:18:64:eb:c7:d2:65:fd:d9:bd:d6:d0:08:
a2:33:09:31:cb:a3:7f:61:2d:32:76:d9:9f:9c:6b:b3:99:15:
e3:ff:e2:38:6d:3c:a1:86:6f:09:1c:80:2c:d0:f4:66:bb:29:
30:f3:83:6c:4a:32:89:db:5d:cc:2f:df:b6:2f:21:e7:40:70:
fc:c2:d8:26:a6:41:d4:0e:c0:15:f7:3f:c4:f9:c4:69:01:a4:
7f:40:f9:f4:01:8f:00:0b:73:c0:e5:d7:f9:c4:31:75:ca:81:
08:8f:00:e7:fd:6c:ce:1b:e9:a6:5d:07:95:e7:59:01:ee:30:
cc:9f:3f:47:e2:5d:46:ae:19:e8:c3:4e:ba:c5:40:a5:d4:bb:
d8:df:24:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmB/oERSYAQLrf0JFqIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2
ZDE0MTcwHhcNMjUwODIzMDUwMjIwWhcNMjUwODI0MDUwMjIwWjAzMTEwLwYDVQQD
EygwOTBhNWZmOGZlN2Q3MDI1YTFiNWE4ZDNhYTg3NDkxNjhiZDc3NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt00nGA/L34tV0OJwcrVyB8zPG13
rnUL3nzLFAkwz+xNJFWpuVfC66II5jCXR7davo1jqXcjmG6KtUzjySoy2DlrsXrR
a5RBmW+MggB7JsCEcEvlnO8Gwf4P9y0/lPgg88DhI16oXw86Xi4mAplJ/14hXv4m
SfvV8xGjbIa2ZCnI7x4YuLanqBtbI4FMO5V0Psr+BdF32o5bxGafN6ER+JWNWiWe
VLqKJO+UchrNHHmsSdTBxD3bA4Zds8GwUfhp2rBZHdlFubHSmex/m89/M9iXpDlA
4P1c5taJ5S99c8YsNim2qB2OQuI9X9EenVlYHk0af2/2oDIhtGiXMoArMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkKX/j+fXAlobWo06qHSRaL13TcMB8GA1UdIwQY
MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt
MjIzNzQyZWU0Mzc1LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1
LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0rT934f
A1GHPvvKAYE5bF7uXkvVEnSkACfQd3CqNMnNvKUl/ouifPce/KeqIkzaT6VbD7bS
8yh3yJAwNFvCAfdxLrG3cI7JK+CfECcx3jclUCcUlCCq7O18M5/L63hQ6lwELR6g
WdXeR3ZFKcWAQhE9GGTrx9Jl/dm91tAIojMJMcujf2EtMnbZn5xrs5kV4//iOG08
oYZvCRyALND0ZrspMPODbEoyidtdzC/fti8h50Bw/MLYJqZB1A7AFfc/xPnEaQGk
f0D59AGPAAtzwOXX+cQxdcqBCI8A5/1szhvppl0HledZAe4wzJ8/R+JdRq4Z6MNO
usVApdS72N8kUg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:09 2025 by rpki-client