Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: 3ZtW4MToHmJduVdXmclo0UXwUf/Ks07HageR8HcZq8c=
Subject key identifier: D2:98:C5:D4:C4:1B:F3:6C:7B:8A:F4:84:C1:7D:6E:1A:F0:28:96:CF
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 0198D8BCE313138572DD57809BD29E219904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0D81
Signing time: Sat 23 Aug 2025 21:01:53 +0000
Manifest this update: Sat 23 Aug 2025 21:01:53 +0000
Manifest next update: Sun 24 Aug 2025 21:01:53 +0000
Files and hashes: 1: c0UDF77YneOEpDbpE_XbzKIY8Uk.roa (hash: foV69gLO281sdub8JnH51RHuvFTq6y1JtigYK6aR0Ho=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: sB14tvPlwJT0cvTqVoNBqnlzrgA8qwhHUqqXkhVHI0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:e3:13:13:85:72:dd:57:80:9b:d2:9e:21:99:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Aug 23 21:01:53 2025 GMT
Not After : Aug 24 21:01:53 2025 GMT
Subject: CN=d298c5d4c41bf36c7b8af484c17d6e1af02896cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:27:5c:1e:63:34:6a:30:32:cd:89:80:3a:
87:55:c0:1d:f5:a3:be:58:6e:32:d1:db:8c:8b:87:
74:4f:a5:68:a7:a4:6a:48:bf:4a:2a:61:33:59:d5:
b7:3d:3a:e3:37:19:69:de:84:a4:57:fb:d8:bc:42:
52:2d:0f:e7:2a:6f:2c:7e:a1:2c:a2:ec:ed:d9:5c:
11:58:ce:58:96:20:12:5b:c6:1f:20:8a:44:cf:75:
1d:f6:65:89:bd:43:91:9c:91:3c:a9:ee:88:03:79:
2f:64:38:1e:13:7a:40:c9:e6:aa:04:6f:07:25:54:
9e:6e:eb:13:34:35:1b:12:8e:95:8b:f8:b1:9a:f5:
77:74:d6:bc:4e:b9:db:0b:e4:68:1f:11:3a:87:21:
b7:44:6b:40:2d:7b:2d:ec:74:2b:3d:18:b0:90:71:
15:20:ea:95:b3:01:98:63:ee:97:d6:42:83:80:16:
fe:e2:1a:4c:d0:00:7f:9f:41:59:ca:b1:69:99:40:
1e:34:9b:48:ac:d2:64:8b:dc:fb:6b:ac:7a:cd:36:
3b:7b:f0:3a:60:6f:28:57:b0:f8:c2:22:b2:73:01:
6f:de:f5:54:01:44:95:e9:36:76:81:6c:3d:dc:13:
83:c5:5d:66:ad:a6:da:5d:2e:26:c4:d3:f5:a9:25:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:98:C5:D4:C4:1B:F3:6C:7B:8A:F4:84:C1:7D:6E:1A:F0:28:96:CF
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:eb:93:05:c2:f8:3a:8d:22:bd:47:b7:5f:74:32:a0:e2:94:
71:fb:eb:2e:05:45:c1:1c:26:78:77:4f:87:17:bb:85:4f:ff:
eb:30:df:56:ac:95:ad:6c:3c:c9:b7:7d:e2:9a:fe:f2:41:87:
99:fd:ca:3f:a3:2c:2f:ba:96:85:1c:3d:40:a4:d6:c0:cc:34:
9f:d1:61:21:68:91:28:91:56:95:c6:0a:e8:a6:7d:be:b2:b0:
04:b2:5e:e8:77:fd:d6:b1:7c:d1:26:38:65:ca:9f:f1:15:73:
4c:79:d5:c4:ee:c4:af:42:b5:a4:ef:2b:7e:a1:6e:88:d0:23:
43:51:87:74:0e:0f:c7:53:85:b2:44:7c:79:06:98:2b:71:18:
8f:ee:33:df:6c:57:bf:98:27:9c:22:f3:b4:b2:81:be:eb:e2:
f9:32:ea:bc:c6:fe:b8:66:1b:87:06:ea:77:6a:5f:3b:a1:77:
c6:ab:43:9b:4f:32:e1:51:46:69:52:ba:1d:e8:78:93:31:91:
fe:88:6e:0d:9e:fd:14:d7:ce:e4:f8:ee:da:30:24:0b:70:55:
70:c4:3c:36:79:33:85:24:49:fe:81:88:ae:a4:24:98:c1:16:
d9:fe:1c:69:44:25:75:f3:73:2a:52:f1:96:57:66:4d:41:1a:
bb:dd:b2:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvOMTE4Vy3VeAm9KeIZkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjYzZWZhMjY5YTE0MTE3NTRlMWNkYWFiODQ4ZmIwNmZh
MDg0MTEwHhcNMjUwODIzMjEwMTUzWhcNMjUwODI0MjEwMTUzWjAzMTEwLwYDVQQD
EyhkMjk4YzVkNGM0MWJmMzZjN2I4YWY0ODRjMTdkNmUxYWYwMjg5NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd4nXB5jNGowMs2JgDqHVcAd9aO+
WG4y0duMi4d0T6Vop6RqSL9KKmEzWdW3PTrjNxlp3oSkV/vYvEJSLQ/nKm8sfqEs
ouzt2VwRWM5YliASW8YfIIpEz3Ud9mWJvUORnJE8qe6IA3kvZDgeE3pAyeaqBG8H
JVSebusTNDUbEo6Vi/ixmvV3dNa8TrnbC+RoHxE6hyG3RGtALXst7HQrPRiwkHEV
IOqVswGYY+6X1kKDgBb+4hpM0AB/n0FZyrFpmUAeNJtIrNJki9z7a6x6zTY7e/A6
YG8oV7D4wiKycwFv3vVUAUSV6TZ2gWw93BODxV1mrabaXS4mxNP1qSV+QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKYxdTEG/Nse4r0hMF9bhrwKJbPMB8GA1UdIwQY
MBaAFM22PvommhQRdU4c2quEj7BvoIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYt
NDM4ODM0ODdlNDkyLzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYtNDM4ODM0ODdlNDky
LzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+uTBcL4
Oo0ivUe3X3QyoOKUcfvrLgVFwRwmeHdPhxe7hU//6zDfVqyVrWw8ybd94pr+8kGH
mf3KP6MsL7qWhRw9QKTWwMw0n9FhIWiRKJFWlcYK6KZ9vrKwBLJe6Hf91rF80SY4
Zcqf8RVzTHnVxO7Er0K1pO8rfqFuiNAjQ1GHdA4Px1OFskR8eQaYK3EYj+4z32xX
v5gnnCLztLKBvuvi+TLqvMb+uGYbhwbqd2pfO6F3xqtDm08y4VFGaVK6Heh4kzGR
/ohuDZ79FNfO5Pju2jAkC3BVcMQ8NnkzhSRJ/oGIrqQkmMEW2f4caUQldfNzKlLx
lldmTUEau92yZg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:25 2025 by rpki-client