Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: VRIwqF9azHnwhbZi193GioqOiShTv6AnMyANnNA6fNc=
Subject key identifier: 07:EE:D2:CF:39:80:0E:2B:7D:2E:B2:E9:F6:91:D0:2C:4D:C5:57:03
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 0198D4A7A789D6480DCF1FE6D24C63DFE525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0BF7
Signing time: Sat 23 Aug 2025 02:00:13 +0000
Manifest this update: Sat 23 Aug 2025 02:00:13 +0000
Manifest next update: Sun 24 Aug 2025 02:00:13 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: 5TYSi7ChaO/1YvXwt8Pt4zcAUL4Ei1QcATQF1+6kScM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a7:89:d6:48:0d:cf:1f:e6:d2:4c:63:df:e5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Aug 23 02:00:13 2025 GMT
Not After : Aug 24 02:00:13 2025 GMT
Subject: CN=07eed2cf39800e2b7d2eb2e9f691d02c4dc55703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d2:60:3a:79:3b:17:43:22:0d:a2:76:74:a2:
30:18:68:e7:40:0f:5b:16:38:5e:4f:f9:15:aa:ba:
76:76:2d:04:d2:62:5f:37:e2:4b:15:1f:3a:d0:d0:
8e:6c:c9:c2:f6:77:bd:9a:7d:49:db:6a:13:b0:09:
cd:c4:ee:95:fe:a1:5f:cd:db:9e:87:79:76:21:86:
2a:f4:64:59:7b:94:d2:3f:a3:1f:86:9a:06:d1:c6:
58:3d:79:f5:64:98:7a:bb:5f:58:83:0f:63:9e:f6:
43:f6:33:ea:f4:85:24:9a:ec:1b:ff:cb:9c:c0:42:
08:a9:dd:bb:e3:31:84:59:17:87:d7:68:a3:9c:7a:
5e:c9:ca:20:83:43:c7:8e:45:8e:19:05:b1:39:0a:
62:72:c8:60:94:c1:3e:06:28:16:0b:9a:24:a2:c1:
71:76:e6:6f:33:a9:dc:ee:8a:89:3e:61:cf:eb:7e:
6e:2e:36:ca:a8:17:84:b2:6c:de:8d:bf:74:e1:3f:
27:47:c4:90:bb:89:38:ed:10:44:1c:24:0b:1a:d1:
44:89:ba:b7:e1:d5:27:3f:64:3e:75:ed:89:b1:44:
9f:25:7d:04:aa:54:c0:4e:0a:2b:69:76:fd:95:11:
6e:8d:3e:5b:5c:24:12:14:d6:a3:5a:48:f0:45:bc:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:D2:CF:39:80:0E:2B:7D:2E:B2:E9:F6:91:D0:2C:4D:C5:57:03
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cc:8e:81:83:94:7d:6c:84:99:e7:ae:42:49:88:fc:a9:71:
0a:44:64:ce:07:bc:8d:dc:4f:c1:0f:44:9d:8f:f0:b4:41:ea:
fc:68:b8:c5:01:d9:88:5b:88:aa:30:3f:26:d6:69:9b:82:f2:
b1:87:a6:65:7b:c0:d1:e1:6c:52:ab:e1:91:fb:6f:92:d5:47:
1a:12:e9:43:b7:73:d2:9c:aa:0e:f9:c9:8f:06:d0:29:c1:b5:
80:f0:34:e2:3b:93:57:36:95:4b:7e:f5:95:d7:00:3a:bf:46:
16:3f:1e:52:0d:c9:91:8c:0b:15:5f:af:0d:13:2e:f6:d4:ef:
be:a9:f9:12:82:dc:c8:ff:e9:b2:5a:4e:27:82:7d:36:e5:5f:
fd:75:c4:bd:fa:63:ef:bc:0b:80:ff:54:92:80:2c:75:24:16:
cf:cb:da:8b:e4:69:b5:65:4c:74:89:a7:7c:b5:c7:0b:6e:99:
36:16:bf:04:93:d3:08:3b:b9:b9:37:34:ea:00:12:85:c8:96:
03:90:bb:85:a0:b7:eb:3b:d6:f9:97:64:4d:05:dc:72:e9:f8:
eb:cf:14:60:f8:25:d5:cb:aa:e2:52:cc:7e:bd:a5:34:d9:2a:
2b:bd:52:e0:1e:44:b2:bf:3f:9e:cd:d3:b6:92:33:ec:f8:3c:
b6:fd:1b:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp6eJ1kgNzx/m0kxj3+UlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjUzMjY0OWE2YWVmNDcxNDg0MWI5YzhmNTQ2NjBkODg5
YjA2MjkwHhcNMjUwODIzMDIwMDEzWhcNMjUwODI0MDIwMDEzWjAzMTEwLwYDVQQD
EygwN2VlZDJjZjM5ODAwZTJiN2QyZWIyZTlmNjkxZDAyYzRkYzU1NzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tJgOnk7F0MiDaJ2dKIwGGjnQA9b
FjheT/kVqrp2di0E0mJfN+JLFR860NCObMnC9ne9mn1J22oTsAnNxO6V/qFfzdue
h3l2IYYq9GRZe5TSP6MfhpoG0cZYPXn1ZJh6u19Ygw9jnvZD9jPq9IUkmuwb/8uc
wEIIqd274zGEWReH12ijnHpeycogg0PHjkWOGQWxOQpicshglME+BigWC5okosFx
duZvM6nc7oqJPmHP635uLjbKqBeEsmzejb904T8nR8SQu4k47RBEHCQLGtFEibq3
4dUnP2Q+de2JsUSfJX0EqlTATgoraXb9lRFujT5bXCQSFNajWkjwRbzNkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfu0s85gA4rfS6y6faR0CxNxVcDMB8GA1UdIwQY
MBaAFMxlMmSaau9HFIQbnI9UZg2ImwYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2Mt
NjQ4ZjUwMWFmYWU1LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zMTBkMzQtZjVkOC00ZTk2LTliN2MtNjQ4ZjUwMWFmYWU1
LzEvekdVeVpKcHE3MGNVaEJ1Y2oxUm1EWWliQmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsyOgYOU
fWyEmeeuQkmI/KlxCkRkzge8jdxPwQ9EnY/wtEHq/Gi4xQHZiFuIqjA/JtZpm4Ly
sYemZXvA0eFsUqvhkftvktVHGhLpQ7dz0pyqDvnJjwbQKcG1gPA04juTVzaVS371
ldcAOr9GFj8eUg3JkYwLFV+vDRMu9tTvvqn5EoLcyP/pslpOJ4J9NuVf/XXEvfpj
77wLgP9UkoAsdSQWz8vai+RptWVMdImnfLXHC26ZNha/BJPTCDu5uTc06gAShciW
A5C7haC36zvW+ZdkTQXccun4688UYPgl1cuq4lLMfr2lNNkqK71S4B5Esr8/ns3T
tpIz7Pg8tv0bBg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:17 2025 by rpki-client