Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: +HqDAapSy4bEgpLR6L9aImbbgjpPUJUG+wYIM9hldL8=
Subject key identifier: 34:72:96:C9:AF:6F:68:4B:AB:8D:42:C4:B2:69:EC:BB:08:5B:74:BA
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 0198D47364D907A58EBA8234F5F5DD2F1FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 1303
Signing time: Sat 23 Aug 2025 01:03:08 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Sun 24 Aug 2025 01:03:08 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: fkaQzjau1sHq21hBCQQPhCYvIhA6wktSdpYEgXxuQ1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:64:d9:07:a5:8e:ba:82:34:f5:f5:dd:2f:1f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 24 01:03:08 2025 GMT
Subject: CN=347296c9af6f684bab8d42c4b269ecbb085b74ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:4f:f6:dc:0b:64:45:35:d7:41:ed:8f:34:
c2:de:d1:a1:f1:c9:cb:6f:80:39:66:47:e8:0d:4f:
cd:d8:ee:0f:e6:f6:e4:53:f6:15:42:08:87:19:9a:
25:a7:53:6b:b8:43:52:f4:61:1b:7d:9a:04:4f:12:
18:e3:9f:42:62:6d:f1:33:63:34:0c:17:c9:ab:f6:
af:a4:ed:b5:8b:0a:9b:3c:97:f6:e2:d9:83:8b:0f:
27:46:32:71:ac:a8:eb:34:cf:04:5f:e7:2b:71:1b:
ab:c7:a8:d3:fd:d1:b9:6a:39:60:e7:e8:58:5c:56:
1c:33:e4:d9:c2:61:8f:80:dc:64:ce:5a:72:a8:fb:
b1:e2:a2:10:00:f0:0a:ca:b1:9c:fa:6e:25:cf:ad:
a9:c6:62:e4:ec:d4:01:3a:c2:31:d7:6a:43:bc:62:
9c:60:e9:02:4d:ff:58:c9:f2:27:7c:c2:20:6c:f8:
71:a4:2e:50:f4:2a:5c:d3:d9:01:c3:e6:65:72:ef:
16:11:a0:06:02:d1:28:13:99:a3:d0:4b:c2:df:de:
9c:d1:8e:57:cc:b1:2c:bc:7e:40:31:7a:35:c2:10:
8a:1a:e4:91:f5:52:d5:bf:27:73:b2:98:72:aa:13:
a1:8f:a7:f2:53:2a:6d:03:46:c6:3a:17:21:6f:6b:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:96:C9:AF:6F:68:4B:AB:8D:42:C4:B2:69:EC:BB:08:5B:74:BA
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9d:5d:8a:99:cb:a4:46:f6:29:b5:62:dd:e9:1a:e5:f5:31:
e0:05:89:c6:1c:e7:0b:ac:54:5d:e9:1e:36:01:05:f9:59:53:
f7:fd:42:a9:33:e0:c8:69:fd:6a:80:c8:98:4e:96:d3:b0:ff:
c6:cc:3c:b6:96:3d:23:3f:ec:2b:55:da:c0:59:45:21:26:60:
ac:96:ae:48:87:fb:c6:6b:85:0b:9b:14:60:a1:04:c5:9a:b8:
2f:96:65:5f:6a:2d:b5:ae:f2:7c:25:54:f8:27:86:9a:8e:98:
86:9e:a7:8f:ff:26:8a:88:e9:55:4b:24:9f:ff:ff:87:a5:cb:
67:a6:75:33:97:82:45:a0:fc:bb:74:1a:9e:e5:4a:65:b9:a2:
f7:89:22:52:5a:84:22:cf:47:de:d3:12:f7:2f:ad:a9:ee:45:
7f:96:d9:93:ab:21:38:7a:db:70:fd:4c:2f:13:40:e7:3d:6b:
38:52:a4:17:ca:ce:82:9c:fe:9f:bb:7f:6b:24:e2:6b:3b:ae:
7b:53:9f:80:df:7f:36:93:4c:89:45:33:fa:c0:a3:68:80:3d:
84:85:8a:57:3c:67:4e:97:af:30:29:18:c5:b6:8e:77:59:47:
cb:1a:0a:a8:6e:19:b5:cc:d5:91:06:19:cf:2e:fa:95:03:a0:
cd:af:8a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc2TZB6WOuoI09fXdLx+vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjVlY2Q2MTVmM2E2YzU2MzljNTFlOWUzMTk3NjczMTUy
MDc4YjgwHhcNMjUwODIzMDEwMzA4WhcNMjUwODI0MDEwMzA4WjAzMTEwLwYDVQQD
EygzNDcyOTZjOWFmNmY2ODRiYWI4ZDQyYzRiMjY5ZWNiYjA4NWI3NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQdP9twLZEU110HtjzTC3tGh8cnL
b4A5ZkfoDU/N2O4P5vbkU/YVQgiHGZolp1NruENS9GEbfZoETxIY459CYm3xM2M0
DBfJq/avpO21iwqbPJf24tmDiw8nRjJxrKjrNM8EX+crcRurx6jT/dG5ajlg5+hY
XFYcM+TZwmGPgNxkzlpyqPux4qIQAPAKyrGc+m4lz62pxmLk7NQBOsIx12pDvGKc
YOkCTf9YyfInfMIgbPhxpC5Q9Cpc09kBw+Zlcu8WEaAGAtEoE5mj0EvC396c0Y5X
zLEsvH5AMXo1whCKGuSR9VLVvydzsphyqhOhj6fyUyptA0bGOhchb2tfhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRylsmvb2hLq41CxLJp7LsIW3S6MB8GA1UdIwQY
MBaAFGRl7NYV86bFY5xR6eMZdnMVIHi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMt
NTRjN2M0ZWU1YmI1LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMtNTRjN2M0ZWU1YmI1
LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt51dipnL
pEb2KbVi3eka5fUx4AWJxhznC6xUXekeNgEF+VlT9/1CqTPgyGn9aoDImE6W07D/
xsw8tpY9Iz/sK1XawFlFISZgrJauSIf7xmuFC5sUYKEExZq4L5ZlX2otta7yfCVU
+CeGmo6Yhp6nj/8miojpVUskn///h6XLZ6Z1M5eCRaD8u3QanuVKZbmi94kiUlqE
Is9H3tMS9y+tqe5Ff5bZk6shOHrbcP1MLxNA5z1rOFKkF8rOgpz+n7t/ayTiazuu
e1OfgN9/NpNMiUUz+sCjaIA9hIWKVzxnTpevMCkYxbaOd1lHyxoKqG4ZtczVkQYZ
zy76lQOgza+KZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:08 2025 by rpki-client