Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: 0dsC0JiwFQatVzQA9n4XrEwcz1FfzguLqSsVNFgy4XQ=
Subject key identifier: 12:A9:B1:3E:E4:90:D2:23:48:C1:00:0D:ED:26:CB:2A:72:09:FB:42
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 0197C9F044009AAB6C2BAC3A0981F8A73885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 0577
Signing time: Wed 02 Jul 2025 07:00:55 +0000
Manifest this update: Wed 02 Jul 2025 07:00:55 +0000
Manifest next update: Thu 03 Jul 2025 07:00:55 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: kNzyOnqbzaJOkNwsxPIpFa5gMZCtajcwgl4l9ucA3oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:44:00:9a:ab:6c:2b:ac:3a:09:81:f8:a7:38:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Jul 2 07:00:55 2025 GMT
Not After : Jul 3 07:00:55 2025 GMT
Subject: CN=12a9b13ee490d22348c1000ded26cb2a7209fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:0f:ae:2e:ce:e8:3f:fb:af:12:e3:72:89:
10:59:1d:35:bd:0f:45:20:ef:d8:cb:ab:09:0a:45:
e8:b1:5e:c6:40:93:cc:dc:21:0c:d1:c8:7e:61:b5:
ac:b7:ad:46:82:a7:1c:f5:db:b4:69:fd:47:52:3f:
85:38:8b:3a:f3:3d:bd:4b:b6:39:21:53:90:e7:ca:
9b:f1:ba:9e:66:09:30:eb:17:73:99:1a:b2:0d:8f:
03:4c:cd:18:b5:a7:4b:af:49:3a:98:44:9c:57:29:
d7:2a:34:90:54:34:0a:34:48:61:e5:e9:9a:2a:04:
eb:0b:a9:1f:3c:4e:69:b1:83:cd:e9:c3:47:56:ec:
68:a7:a7:87:6b:2a:67:bf:dc:15:78:df:de:92:2e:
af:1a:30:f1:6f:96:af:24:e3:1c:97:30:84:8e:ba:
13:c0:bc:55:0b:b7:08:f2:17:00:7d:0f:a5:68:04:
ed:f7:88:27:6e:af:19:64:94:74:39:fe:b2:23:fd:
53:86:30:0f:7f:98:b0:cb:99:d6:d2:96:6c:d0:4f:
44:39:65:21:c9:37:f3:29:f2:0f:36:db:c2:d4:32:
6c:3f:95:a6:f1:cb:f3:42:83:8b:1a:a4:1e:f7:36:
10:cf:48:8c:49:9d:ed:b7:11:8b:31:61:56:8c:32:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A9:B1:3E:E4:90:D2:23:48:C1:00:0D:ED:26:CB:2A:72:09:FB:42
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:fc:55:cf:40:1e:49:d0:79:20:b2:2b:55:ec:cd:93:11:6d:
79:c2:61:b5:c8:d7:56:07:46:f1:47:22:ce:cb:8e:0c:c8:48:
ad:e3:eb:4b:9e:ac:2c:a4:74:69:3a:84:ef:1d:45:d8:c3:5b:
3f:f0:01:22:aa:40:b0:33:87:fc:6a:13:a0:44:5c:a9:97:86:
8f:f6:f9:77:26:d4:b5:30:77:28:61:da:8b:03:d9:2e:c3:2d:
45:df:fd:25:23:bb:89:9b:14:2f:e7:77:7c:c5:c9:32:13:82:
6f:61:b5:e2:20:ed:16:e7:d5:2a:46:72:79:ff:9e:87:94:d3:
c1:63:06:d9:61:ed:81:00:93:c1:ac:ff:99:f5:50:4a:1f:c2:
4a:17:18:f2:22:2f:75:01:0b:cb:c5:44:71:b6:c5:0d:da:41:
b9:6e:3e:dc:54:fd:eb:3f:9f:7d:56:28:57:d5:19:31:90:41:
2d:72:94:20:e0:eb:86:d6:06:6e:93:35:fc:dd:54:1f:a0:b7:
af:41:99:a1:f1:47:38:6a:96:30:f4:8b:db:41:5d:d6:bd:2c:
29:19:68:31:97:d5:82:77:71:d4:af:93:7a:9a:29:a1:71:c1:
0e:70:a2:a4:5d:0d:f5:26:47:99:a3:06:d2:38:0b:fd:87:3e:
c0:51:bd:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJ8EQAmqtsK6w6CYH4pziFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2NkN2M0ZGM5NWNiM2UwZDRlODcwM2VmMDE0MDRmZTBh
NzA3ODAwHhcNMjUwNzAyMDcwMDU1WhcNMjUwNzAzMDcwMDU1WjAzMTEwLwYDVQQD
EygxMmE5YjEzZWU0OTBkMjIzNDhjMTAwMGRlZDI2Y2IyYTcyMDlmYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKUPri7O6D/7rxLjcokQWR01vQ9F
IO/Yy6sJCkXosV7GQJPM3CEM0ch+YbWst61Ggqcc9du0af1HUj+FOIs68z29S7Y5
IVOQ58qb8bqeZgkw6xdzmRqyDY8DTM0YtadLr0k6mEScVynXKjSQVDQKNEhh5ema
KgTrC6kfPE5psYPN6cNHVuxop6eHaypnv9wVeN/eki6vGjDxb5avJOMclzCEjroT
wLxVC7cI8hcAfQ+laATt94gnbq8ZZJR0Of6yI/1ThjAPf5iwy5nW0pZs0E9EOWUh
yTfzKfIPNtvC1DJsP5Wm8cvzQoOLGqQe9zYQz0iMSZ3ttxGLMWFWjDJ2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKpsT7kkNIjSMEADe0myypyCftCMB8GA1UdIwQY
MBaAFM0818Tclcs+DU6HA+8BQE/gpweAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81NzE5Y2MtZTgzZS00MzNkLTgwZDUt
ZmYyNmE5ODgzMzE0LzEvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81NzE5Y2MtZTgzZS00MzNkLTgwZDUtZmYyNmE5ODgzMzE0
LzEvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzfxVz0Ae
SdB5ILIrVezNkxFtecJhtcjXVgdG8UcizsuODMhIrePrS56sLKR0aTqE7x1F2MNb
P/ABIqpAsDOH/GoToERcqZeGj/b5dybUtTB3KGHaiwPZLsMtRd/9JSO7iZsUL+d3
fMXJMhOCb2G14iDtFufVKkZyef+eh5TTwWMG2WHtgQCTwaz/mfVQSh/CShcY8iIv
dQELy8VEcbbFDdpBuW4+3FT96z+ffVYoV9UZMZBBLXKUIODrhtYGbpM1/N1UH6C3
r0GZofFHOGqWMPSL20Fd1r0sKRloMZfVgndx1K+TepopoXHBDnCipF0N9SZHmaMG
0jgL/Yc+wFG9Lw==
-----END CERTIFICATE-----
Generated at Wed Jul 2 14:50:19 2025 by rpki-client