Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File: Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier: PnNp85BBAPA2KwYI25zLnTl0WM3rGYibi3KKMrScHjE=
Subject key identifier: 29:60:74:08:6C:D8:E0:B3:73:E0:EE:B5:DD:22:4C:75:22:15:ED:FC
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial: 0198D4726CB7BB0BC444B8F2016DDA935A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:05 +0000
Manifest this update: Sat 23 Aug 2025 01:02:05 +0000
Manifest next update: Sun 24 Aug 2025 01:02:05 +0000
Files and hashes: 1: 21cAYiN5jMpqkJRdEkHSMeQVgkY.roa (hash: KwzUXQv1pIgCUyqyYd3vxndo9n20A9iWRxEC49c1pqI=)
2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: +oRdO56segH5AOXgj1cvsyPoub1zF0xy3AOFHoQY7Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6c:b7:bb:0b:c4:44:b8:f2:01:6d:da:93:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Validity
Not Before: Aug 23 01:02:05 2025 GMT
Not After : Aug 24 01:02:05 2025 GMT
Subject: CN=296074086cd8e0b373e0eeb5dd224c752215edfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:20:c6:90:f7:a5:9e:4a:80:87:0d:35:20:
38:29:a0:da:c1:6a:8d:51:d0:9f:c9:a4:6d:ad:49:
1b:91:66:60:66:0e:80:e4:52:4f:34:59:27:d8:9b:
f5:77:c9:f4:68:30:96:d1:71:ae:99:6e:10:e0:9b:
a0:57:68:92:77:37:3d:8b:11:d5:f0:a8:eb:55:21:
dd:c7:3c:f7:21:15:97:6b:a1:62:21:7f:a4:2f:d3:
7d:dc:75:ef:af:80:8a:fb:5e:93:56:3d:a0:74:e8:
1c:18:99:ce:d0:ec:71:75:fa:a7:94:da:fd:cd:ca:
f3:2d:37:aa:bb:5d:76:dc:74:a5:c7:12:45:79:1a:
bf:a1:01:16:d3:e9:a5:3b:05:7e:99:04:42:ed:f9:
2f:ad:8b:2b:8a:fb:2d:78:c9:46:64:8f:3c:a2:0d:
c4:57:e0:2b:b3:3a:c1:f1:71:02:87:dd:ed:1a:d9:
f8:4e:2d:2d:2f:19:59:b7:bf:d7:24:d0:43:a8:3f:
d4:ac:0e:2b:80:e8:b1:48:45:1a:3d:eb:b0:7f:46:
e0:ba:34:0b:60:9f:dc:dc:06:35:a4:06:73:95:77:
ec:7c:a5:3e:ad:ec:59:a9:e4:64:37:af:1c:ca:f3:
3a:b0:ee:4f:00:72:90:ab:d0:eb:47:7b:1b:b5:5c:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:60:74:08:6C:D8:E0:B3:73:E0:EE:B5:DD:22:4C:75:22:15:ED:FC
X509v3 Authority Key Identifier:
keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:16:4c:d5:23:71:9e:9f:ea:1e:e6:0a:0a:96:41:c8:31:87:
36:8b:fb:a8:3e:d4:2d:ed:93:c3:f3:5b:97:d8:77:0f:fb:56:
c1:f8:e6:03:fa:72:cd:91:6b:5e:ba:cf:36:ea:ea:f7:76:66:
9a:fd:19:c9:70:4d:4f:2b:41:88:09:4d:32:7c:95:a6:cf:10:
32:ae:cd:4a:db:80:52:6d:ab:f6:30:6b:04:c4:0b:3d:a0:e1:
5e:1f:5e:f1:d6:93:cc:dd:1d:1b:88:db:36:44:9a:a9:50:ef:
96:6a:c7:f3:c1:18:14:bc:ac:16:0a:34:b0:30:77:f1:79:d1:
30:fd:25:42:d2:f8:1b:17:b9:0c:df:7d:4c:ff:33:57:a9:4c:
fb:9f:17:25:8a:0b:7a:3e:07:ee:98:68:2b:4a:74:19:7e:5b:
f4:36:4a:3e:0f:22:a9:c8:76:f2:64:f2:d8:07:68:dc:67:79:
08:5c:25:79:ab:48:a9:08:b6:12:96:b2:bf:89:d5:d0:8e:34:
b2:13:1d:23:dd:f5:c2:2c:d3:38:18:ff:80:df:da:a9:a3:8e:
00:c4:f9:ea:32:27:88:97:10:6c:77:b9:7f:6b:f8:22:ad:1e:
ab:8d:28:03:ee:8f:4f:bc:c3:aa:45:38:8c:ad:1c:98:ca:87:
49:e8:67:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcmy3uwvERLjyAW3ak1qdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjI0NGRlMDE5MGE2ZGQ1YTg5OWEyYjM3YjAwMmI5YWU2
MzJjODYwHhcNMjUwODIzMDEwMjA1WhcNMjUwODI0MDEwMjA1WjAzMTEwLwYDVQQD
EygyOTYwNzQwODZjZDhlMGIzNzNlMGVlYjVkZDIyNGM3NTIyMTVlZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocsgxpD3pZ5KgIcNNSA4KaDawWqN
UdCfyaRtrUkbkWZgZg6A5FJPNFkn2Jv1d8n0aDCW0XGumW4Q4JugV2iSdzc9ixHV
8KjrVSHdxzz3IRWXa6FiIX+kL9N93HXvr4CK+16TVj2gdOgcGJnO0OxxdfqnlNr9
zcrzLTequ1123HSlxxJFeRq/oQEW0+mlOwV+mQRC7fkvrYsrivsteMlGZI88og3E
V+ArszrB8XECh93tGtn4Ti0tLxlZt7/XJNBDqD/UrA4rgOixSEUaPeuwf0bgujQL
YJ/c3AY1pAZzlXfsfKU+rexZqeRkN68cyvM6sO5PAHKQq9DrR3sbtVzfvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClgdAhs2OCzc+Dutd0iTHUiFe38MB8GA1UdIwQY
MBaAFGdiRN4BkKbdWomaKzewArmuYyyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYt
Y2UzMmQ2NmYzMGE4LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYtY2UzMmQ2NmYzMGE4
LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxZM1SNx
np/qHuYKCpZByDGHNov7qD7ULe2Tw/Nbl9h3D/tWwfjmA/pyzZFrXrrPNurq93Zm
mv0ZyXBNTytBiAlNMnyVps8QMq7NStuAUm2r9jBrBMQLPaDhXh9e8daTzN0dG4jb
NkSaqVDvlmrH88EYFLysFgo0sDB38XnRMP0lQtL4Gxe5DN99TP8zV6lM+58XJYoL
ej4H7phoK0p0GX5b9DZKPg8iqch28mTy2Ado3Gd5CFwleatIqQi2Epayv4nV0I40
shMdI931wizTOBj/gN/aqaOOAMT56jIniJcQbHe5f2v4Iq0eq40oA+6PT7zDqkU4
jK0cmMqHSehnZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:10 2025 by rpki-client