
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: 7Uxgk3GFiWQTKROEp7hsKf7/1bOZt5kFgD3WxfRoneU=
Subject key identifier: B7:F3:87:00:AB:75:9D:89:D7:7B:AD:DA:3C:AC:74:26:78:F9:B1:1E
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0198D660CA3D0AFB4459803628B950A01C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0B0F
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: jrw9KkzH4/XsSvTMFVj9clQ0hDFhVccrlMBhfKV0YtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ca:3d:0a:fb:44:59:80:36:28:b9:50:a0:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=b7f38700ab759d89d77badda3cac742678f9b11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:25:f9:ce:4a:77:8e:22:de:ff:1a:fb:fa:
6c:d6:1f:c5:8c:71:0a:39:52:aa:a8:c5:70:55:4c:
e2:86:84:6a:cf:70:a4:88:ea:ad:f6:80:fc:d4:0d:
9c:70:fd:68:74:e9:c5:da:48:65:e2:d6:8c:46:f4:
60:f4:84:1c:ce:3c:4d:41:b3:59:0c:91:4c:2f:fb:
7e:fa:b8:dc:ac:9c:ac:6b:12:24:34:3b:b3:19:a4:
f9:e4:ee:8c:98:25:9e:52:2d:2c:22:70:38:b2:62:
46:f4:e0:fc:68:6a:bb:c8:6e:85:6c:cc:df:17:36:
60:c0:29:ca:52:a0:fd:65:35:81:e3:33:b3:2c:8c:
b1:2b:1a:0a:64:bb:eb:7a:48:fc:7e:3f:54:ec:be:
20:36:9b:33:ac:fd:51:db:47:13:f2:d7:13:19:78:
e0:26:4e:13:86:d7:53:69:ab:fa:00:d0:4c:6d:48:
8a:ce:b4:96:70:01:54:91:9a:d8:11:b2:77:a1:47:
dc:59:69:eb:2a:3f:0b:86:bd:54:98:69:98:d3:8e:
02:58:52:6d:db:45:cc:c5:2b:04:5f:87:84:cd:5b:
93:64:73:62:9f:e2:95:1a:71:c8:58:25:aa:a8:fa:
39:2a:2a:fb:e0:a1:37:45:86:8b:a5:e6:65:5e:47:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:87:00:AB:75:9D:89:D7:7B:AD:DA:3C:AC:74:26:78:F9:B1:1E
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:91:95:e3:ab:37:cc:3c:7e:91:5b:ef:a7:3a:a0:df:c3:3c:
c5:32:39:cb:ce:44:58:2b:a0:7d:22:eb:e7:76:21:e2:83:dd:
a4:aa:ee:ff:64:28:48:6b:c9:50:c6:fb:4d:ea:5a:e5:e7:b5:
15:66:4d:eb:dc:9e:fb:46:02:4e:2a:ae:68:50:7c:e6:d7:bf:
03:d7:60:39:88:c5:86:89:b0:d5:0d:52:00:e3:88:bd:5a:c4:
97:1d:3d:d7:43:ca:be:2b:24:ca:54:e0:6a:62:8f:8e:ad:16:
03:1f:db:6f:4c:c3:86:04:6e:fe:04:96:7b:74:90:17:3e:81:
d2:aa:36:5b:57:58:b8:6c:68:b9:f4:c0:91:87:be:1b:b3:c5:
66:21:87:fa:1f:a4:dd:9c:29:21:4b:70:82:6b:dd:71:99:26:
f2:0d:24:15:0a:f2:ea:ea:bd:ee:14:ff:3e:13:61:b2:e1:e6:
4a:23:dc:76:5d:fa:b9:64:94:62:6a:3b:bd:4d:f1:c5:4e:77:
ce:e8:e8:67:27:79:b7:43:4e:79:f5:aa:fa:de:e7:a4:41:29:
56:56:be:3b:f3:d3:6e:4c:dd:14:68:8d:0c:2a:b0:d9:c6:d2:
a1:6e:41:1e:a5:4a:b9:9d:17:2e:1a:52:e1:f9:41:f4:fe:3a:
b5:cd:ea:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMo9CvtEWYA2KLlQoByLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWJiMWFhMGM5M2I3OTE4YzJmZDI0MzNiNDFjMjFkNzlk
NDRkYWEwHhcNMjUwODIzMTAwMjA0WhcNMjUwODI0MTAwMjA0WjAzMTEwLwYDVQQD
EyhiN2YzODcwMGFiNzU5ZDg5ZDc3YmFkZGEzY2FjNzQyNjc4ZjliMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtogl+c5Kd44i3v8a+/ps1h/FjHEK
OVKqqMVwVUzihoRqz3CkiOqt9oD81A2ccP1odOnF2khl4taMRvRg9IQczjxNQbNZ
DJFML/t++rjcrJysaxIkNDuzGaT55O6MmCWeUi0sInA4smJG9OD8aGq7yG6FbMzf
FzZgwCnKUqD9ZTWB4zOzLIyxKxoKZLvrekj8fj9U7L4gNpszrP1R20cT8tcTGXjg
Jk4ThtdTaav6ANBMbUiKzrSWcAFUkZrYEbJ3oUfcWWnrKj8Lhr1UmGmY044CWFJt
20XMxSsEX4eEzVuTZHNin+KVGnHIWCWqqPo5Kir74KE3RYaLpeZlXkeY/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfzhwCrdZ2J13ut2jysdCZ4+bEeMB8GA1UdIwQY
MBaAFM8bsaoMk7eRjC/SQztBwh151E2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMmYyNmEtMTU0Ny00M2YzLWEyMzkt
YzlmMDlhZjcyOWNmLzEvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mMmYyNmEtMTU0Ny00M2YzLWEyMzktYzlmMDlhZjcyOWNm
LzEvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5GV46s3
zDx+kVvvpzqg38M8xTI5y85EWCugfSLr53Yh4oPdpKru/2QoSGvJUMb7Tepa5ee1
FWZN69ye+0YCTiquaFB85te/A9dgOYjFhomw1Q1SAOOIvVrElx0910PKviskylTg
amKPjq0WAx/bb0zDhgRu/gSWe3SQFz6B0qo2W1dYuGxoufTAkYe+G7PFZiGH+h+k
3ZwpIUtwgmvdcZkm8g0kFQry6uq97hT/PhNhsuHmSiPcdl36uWSUYmo7vU3xxU53
zujoZyd5t0NOefWq+t7npEEpVla+O/PTbkzdFGiNDCqw2cbSoW5BHqVKuZ0XLhpS
4flB9P46tc3q0w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:40 2025 by rpki-client