Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: KNEQSRb03wCE1T5cBvy3//rh2CaS9gZyTivcPY+04ZY=
Subject key identifier: 44:2A:28:82:4F:9B:4C:80:19:97:DC:4A:2F:02:E2:CD:B5:73:54:A7
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 0198D473EA77A2DD4CF66F1F24EDE3D9A4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0B9C
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: w8xpGQbUwtU+I0qJC5bLMwLBwAQtrwCzLciFKw4zcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ea:77:a2:dd:4c:f6:6f:1f:24:ed:e3:d9:a4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=442a28824f9b4c801997dc4a2f02e2cdb57354a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:01:10:e7:28:4d:9d:a2:27:98:cf:b9:b9:
62:c2:bd:ac:a2:70:9c:d2:33:84:cd:fd:69:c1:d2:
d2:e8:fb:d1:f5:68:ce:a8:d4:f6:bb:df:31:e2:06:
3a:82:2a:cf:6f:97:94:6b:f5:e0:4e:9a:75:c3:e6:
68:f5:0b:da:ff:76:cd:30:d6:45:c4:db:1d:ed:72:
26:76:ae:94:ce:f0:1c:36:eb:09:70:70:9e:32:59:
02:a6:98:e3:f1:84:e1:11:d7:a1:59:e8:30:fb:d0:
10:b3:2e:79:85:92:64:0a:87:42:2e:31:c9:1e:33:
c2:bf:8d:95:ca:c5:18:45:a3:72:f2:41:4c:d7:a9:
03:0e:5e:2e:93:78:93:5d:65:f1:fc:c6:01:71:dd:
f2:84:f7:7d:1b:4d:48:30:56:5f:07:3b:94:5a:59:
b9:e6:36:e2:a4:7b:55:8d:b6:22:e3:20:ad:c0:32:
50:d2:a8:81:96:93:3b:fc:5b:b9:d6:77:e2:6d:fe:
45:e2:6f:88:90:3e:84:13:41:3b:e7:02:9c:99:0a:
b8:02:28:d2:a9:97:00:8f:7d:4b:5b:e2:27:0a:c1:
8d:15:dd:f2:6b:6e:f9:49:22:1a:59:8f:42:70:34:
7b:4a:40:7c:11:ca:c8:d6:23:ae:05:aa:d8:0b:99:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:28:82:4F:9B:4C:80:19:97:DC:4A:2F:02:E2:CD:B5:73:54:A7
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:29:57:dc:04:f4:12:42:77:92:db:6c:84:5b:b7:cc:0c:6b:
69:97:96:b5:87:e5:25:98:8e:68:db:49:26:d3:e8:2e:0b:d0:
57:6c:eb:63:df:12:ac:00:8d:a2:ba:27:6a:1e:b8:4e:f9:4b:
50:6b:81:7b:22:1f:e8:67:9a:a6:b5:6b:c0:68:5e:a7:c8:a8:
df:12:2a:3a:ba:60:3b:67:16:0e:55:de:49:12:2d:6c:e5:7d:
38:a8:58:63:95:5e:74:d1:05:1a:0e:71:98:e6:e3:b6:44:37:
f8:c9:7d:0b:16:10:41:33:40:cb:b9:d9:2b:d8:6d:7b:45:83:
1a:b9:db:66:24:28:ab:54:0b:69:69:71:fc:65:fc:92:90:4d:
99:89:99:84:bd:97:93:96:3f:35:6f:0a:02:60:cd:8c:44:e7:
7b:70:dd:43:2a:bb:60:3f:f3:48:76:04:e2:65:22:f9:34:5b:
59:d8:6c:02:23:c6:26:dc:55:b4:0c:c4:a5:71:de:79:69:16:
64:6d:bd:c5:d1:e4:b2:b3:a5:9e:16:4c:d7:83:87:6b:93:df:
8f:60:f5:57:ac:45:3b:6c:8c:5c:e8:2c:0c:4d:31:cb:25:b2:
c7:3f:d5:14:48:35:93:19:3d:c2:83:99:39:5d:e5:68:6d:44:
55:a7:dd:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc+p3ot1M9m8fJO3j2aS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjVkOGI3ZjE5ZTJmYjc1Y2I3Zjk1Nzg5ZDkxMThmNmIx
Yjk3MDUwHhcNMjUwODIzMDEwMzQyWhcNMjUwODI0MDEwMzQyWjAzMTEwLwYDVQQD
Eyg0NDJhMjg4MjRmOWI0YzgwMTk5N2RjNGEyZjAyZTJjZGI1NzM1NGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJMBEOcoTZ2iJ5jPubliwr2sonCc
0jOEzf1pwdLS6PvR9WjOqNT2u98x4gY6girPb5eUa/XgTpp1w+Zo9Qva/3bNMNZF
xNsd7XImdq6UzvAcNusJcHCeMlkCppjj8YThEdehWegw+9AQsy55hZJkCodCLjHJ
HjPCv42VysUYRaNy8kFM16kDDl4uk3iTXWXx/MYBcd3yhPd9G01IMFZfBzuUWlm5
5jbipHtVjbYi4yCtwDJQ0qiBlpM7/Fu51nfibf5F4m+IkD6EE0E75wKcmQq4AijS
qZcAj31LW+InCsGNFd3ya275SSIaWY9CcDR7SkB8EcrI1iOuBarYC5msaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQqKIJPm0yAGZfcSi8C4s21c1SnMB8GA1UdIwQY
MBaAFGUl2Lfxni+3XLf5V4nZEY9rG5cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUt
NDY2MDNkZTgwNWVjLzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUtNDY2MDNkZTgwNWVj
LzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGilX3AT0
EkJ3kttshFu3zAxraZeWtYflJZiOaNtJJtPoLgvQV2zrY98SrACNoronah64TvlL
UGuBeyIf6GeaprVrwGhep8io3xIqOrpgO2cWDlXeSRItbOV9OKhYY5VedNEFGg5x
mObjtkQ3+Ml9CxYQQTNAy7nZK9hte0WDGrnbZiQoq1QLaWlx/GX8kpBNmYmZhL2X
k5Y/NW8KAmDNjETne3DdQyq7YD/zSHYE4mUi+TRbWdhsAiPGJtxVtAzEpXHeeWkW
ZG29xdHksrOlnhZM14OHa5Pfj2D1V6xFO2yMXOgsDE0xyyWyxz/VFEg1kxk9woOZ
OV3laG1EVafd2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:43 2025 by rpki-client