Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: nnPFLJYNJ/89OAF6+H1wuFmD2PAF2m8BMcch/W5y1+U=
Subject key identifier: 89:3D:9A:1D:3D:54:21:C9:85:BB:8D:26:1E:45:C2:D3:9F:59:25:AA
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 0198D66097CA73C0493F6DA1CA66388A2E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 10:01:50 +0000
Manifest this update: Sat 23 Aug 2025 10:01:50 +0000
Manifest next update: Sun 24 Aug 2025 10:01:50 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: W27RdCKc//xgqkiOaLQpXqRV+ddAdC3A0z2YgacsdpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:97:ca:73:c0:49:3f:6d:a1:ca:66:38:8a:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Aug 23 10:01:50 2025 GMT
Not After : Aug 24 10:01:50 2025 GMT
Subject: CN=893d9a1d3d5421c985bb8d261e45c2d39f5925aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:ac:6e:7b:fa:2b:0c:8b:1d:a8:3a:4e:08:f7:
c9:27:14:77:1c:59:29:dd:9e:e0:c2:05:ef:71:ca:
66:6d:a2:f7:e6:64:25:ff:38:dc:46:57:df:4c:1e:
6d:f4:0c:0d:8a:ed:48:bd:fd:ee:78:a4:73:47:11:
42:39:5a:e1:e2:a0:84:14:f2:01:d1:e1:5a:66:4f:
c1:e0:af:86:1b:19:13:da:cc:78:8c:53:6f:03:f8:
4c:fc:83:90:3a:e5:a6:73:ef:41:dd:b7:57:68:0f:
15:16:43:3e:7e:9b:5b:b4:7a:ca:db:2a:df:56:18:
12:5c:80:a9:ec:95:dd:c6:7f:9f:e5:9c:2b:bb:82:
17:69:3b:b8:4f:03:e6:50:e0:ac:c2:cd:89:18:1d:
52:10:26:bf:b0:de:4b:7f:07:b5:f7:bd:a9:47:81:
6a:85:9b:44:35:ce:20:a4:78:88:33:7e:7e:33:e4:
d8:f2:5e:54:20:48:18:4f:52:0b:7e:76:f0:f1:3f:
11:be:99:a7:74:52:26:67:df:df:d1:f9:fd:15:0b:
7e:45:fd:f4:5d:98:a5:9d:17:9f:3e:d6:65:d6:83:
2f:6f:cc:fe:ce:fd:ae:6d:47:a3:db:64:d1:d9:e2:
6a:1a:bd:06:7b:83:5c:00:bf:8e:ee:e3:86:21:42:
bf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:9A:1D:3D:54:21:C9:85:BB:8D:26:1E:45:C2:D3:9F:59:25:AA
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5a:fb:ac:51:5d:c7:88:fe:39:8c:74:82:79:c2:13:cf:db:
b1:07:0f:d9:25:f0:6d:a6:8d:80:c1:4f:24:c5:c5:ac:1c:c5:
a6:0f:ee:1f:d2:2d:c8:0b:fc:f4:85:5a:c9:6f:2a:fa:ac:1e:
eb:59:97:65:56:66:01:4c:46:1b:06:09:44:27:4d:7e:6c:57:
ed:c4:a8:27:62:1c:cd:cb:42:95:47:43:27:e0:17:f8:5f:72:
f8:68:b2:90:6e:83:5b:8f:37:b3:a6:0f:41:c0:fe:76:94:8e:
61:ec:ea:7c:93:8c:26:b5:09:0d:f4:3e:fb:c7:fe:63:2f:8e:
b7:a7:d6:f1:3f:e8:40:22:46:7b:b5:8e:95:20:49:d6:be:bf:
6a:e4:8e:85:88:13:49:98:02:8b:a0:0d:f5:d9:cf:b5:b7:92:
fe:26:f7:bd:9f:90:e9:1e:50:f2:50:34:6b:b9:2f:29:3f:f0:
89:1a:32:d0:7f:e7:37:13:79:11:52:10:65:32:70:8d:8d:13:
e0:dc:40:e5:41:66:a8:cc:ce:54:86:76:c5:4a:f3:20:af:87:
e9:47:c4:1c:58:2c:b7:c5:c0:3d:dc:0b:a0:bc:c0:45:60:82:
82:1a:4a:bd:f8:88:9b:65:a9:07:10:61:98:50:3b:3a:38:00:
e0:01:2b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYJfKc8BJP22hymY4ii4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmM2YzNkMjJjZjZiMTAxZDcxNDgwMDZkYTdhNzI4NGRj
YmIzMjAwHhcNMjUwODIzMTAwMTUwWhcNMjUwODI0MTAwMTUwWjAzMTEwLwYDVQQD
Eyg4OTNkOWExZDNkNTQyMWM5ODViYjhkMjYxZTQ1YzJkMzlmNTkyNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/qxue/orDIsdqDpOCPfJJxR3HFkp
3Z7gwgXvccpmbaL35mQl/zjcRlffTB5t9AwNiu1Ivf3ueKRzRxFCOVrh4qCEFPIB
0eFaZk/B4K+GGxkT2sx4jFNvA/hM/IOQOuWmc+9B3bdXaA8VFkM+fptbtHrK2yrf
VhgSXICp7JXdxn+f5Zwru4IXaTu4TwPmUOCsws2JGB1SECa/sN5Lfwe1972pR4Fq
hZtENc4gpHiIM35+M+TY8l5UIEgYT1ILfnbw8T8RvpmndFImZ9/f0fn9FQt+Rf30
XZilnRefPtZl1oMvb8z+zv2ubUej22TR2eJqGr0Ge4NcAL+O7uOGIUK/8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk9mh09VCHJhbuNJh5FwtOfWSWqMB8GA1UdIwQY
MBaAFGYsbD0iz2sQHXFIAG2npyhNy7MgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQt
ZjIxYjZhZTNiZTZjLzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zYTg4NmUtNGMyNi00MjVhLWExNGQtZjIxYjZhZTNiZTZj
LzEvWml4c1BTTFBheEFkY1VnQWJhZW5LRTNMc3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1r7rFFd
x4j+OYx0gnnCE8/bsQcP2SXwbaaNgMFPJMXFrBzFpg/uH9ItyAv89IVayW8q+qwe
61mXZVZmAUxGGwYJRCdNfmxX7cSoJ2IczctClUdDJ+AX+F9y+GiykG6DW483s6YP
QcD+dpSOYezqfJOMJrUJDfQ++8f+Yy+Ot6fW8T/oQCJGe7WOlSBJ1r6/auSOhYgT
SZgCi6AN9dnPtbeS/ib3vZ+Q6R5Q8lA0a7kvKT/wiRoy0H/nNxN5EVIQZTJwjY0T
4NxA5UFmqMzOVIZ2xUrzIK+H6UfEHFgst8XAPdwLoLzARWCCghpKvfiIm2WpBxBh
mFA7OjgA4AErCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:33 2025 by rpki-client