Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
File: 1ZTpX6WbUrWZ26QG17dvODypD6g.mft (raw, json)
Hash identifier: a36r8tEPqDgw9ISZo1Kos49uLI+dQXX2rp4AY7R3cMc=
Subject key identifier: AF:8D:69:FB:5A:4F:64:73:E1:DF:F7:79:04:6A:6B:7A:84:71:8D:96
Authority key identifier: D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
Certificate issuer: /CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Certificate serial: 0198D73B2657823C3D48C1B664D4C3EF529C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
Manifest number: 0DF3
Signing time: Sat 23 Aug 2025 14:00:34 +0000
Manifest this update: Sat 23 Aug 2025 14:00:34 +0000
Manifest next update: Sun 24 Aug 2025 14:00:34 +0000
Files and hashes: 1: 1ZTpX6WbUrWZ26QG17dvODypD6g.crl (hash: tnUNhG6/poJMCrk0hJMlA3dqfyrKIpVy2M7SIUfehgk=)
2: z4wMvnR06etPJrAf1XPqDyyKG9U.roa (hash: 8KNgBhE6X84KnuAvLvDQHDciy51ch4R+wm0a94sf8fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:26:57:82:3c:3d:48:c1:b6:64:d4:c3:ef:52:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d594e95fa59b52b599dba406d7b76f383ca90fa8
Validity
Not Before: Aug 23 14:00:34 2025 GMT
Not After : Aug 24 14:00:34 2025 GMT
Subject: CN=af8d69fb5a4f6473e1dff779046a6b7a84718d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:f6:93:3a:3b:96:5a:78:40:7b:86:dc:88:
80:81:98:5c:e7:34:19:a5:4f:f4:d4:70:a0:66:51:
10:1a:de:7f:43:d3:3f:da:23:02:d9:15:30:fb:88:
6c:21:1c:91:77:2e:63:16:70:7f:f8:68:8e:39:78:
30:76:6a:d9:77:e2:2f:6c:48:d3:e5:5a:cc:fe:fc:
46:6f:92:b5:5b:dc:1f:66:ff:06:2c:ce:67:ef:56:
73:89:1e:5c:31:04:9c:6c:23:e4:09:9e:6b:67:ff:
47:4d:97:fd:df:70:0a:2f:95:16:9c:4a:e5:d6:7f:
f4:70:86:2f:c5:0e:19:8c:eb:22:c2:3d:30:d4:ae:
cc:59:84:b6:b5:d1:28:2a:0e:98:01:4b:e0:b8:22:
3d:31:12:88:c6:51:d7:f6:14:97:65:77:8f:fb:61:
68:80:d7:37:4f:ab:bc:d4:17:67:6b:99:02:ad:10:
f3:17:7e:c3:37:bc:26:a6:a0:6c:da:91:d4:f0:97:
c0:71:9e:75:59:fb:a8:ff:47:0d:05:f6:00:be:1c:
9c:ee:b5:05:8c:03:0f:f9:6d:48:e3:be:7b:c3:64:
ed:09:ab:19:ba:db:37:93:b3:04:a6:d0:56:3a:05:
33:ed:f4:cc:d1:10:cb:a5:5f:6c:49:e7:60:1e:ce:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:69:FB:5A:4F:64:73:E1:DF:F7:79:04:6A:6B:7A:84:71:8D:96
X509v3 Authority Key Identifier:
keyid:D5:94:E9:5F:A5:9B:52:B5:99:DB:A4:06:D7:B7:6F:38:3C:A9:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZTpX6WbUrWZ26QG17dvODypD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eedbcd-ab18-4ab3-b5dd-e3b0b41e25c5/1/1ZTpX6WbUrWZ26QG17dvODypD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:24:3a:e6:96:64:0a:36:e0:dc:d6:67:8d:b6:8e:7a:f0:a2:
75:e3:4c:79:62:24:2d:2f:31:46:5f:77:f3:cd:96:fc:97:34:
be:e9:52:f8:87:16:d2:d4:80:20:97:1d:f1:3f:0c:c5:e5:c3:
ca:1a:0e:36:4a:b8:46:34:57:a9:ab:ca:d7:36:b6:e0:22:e4:
16:ea:06:63:64:7f:a3:df:68:34:86:60:5f:67:6d:d8:fd:05:
07:5e:25:97:63:99:db:c5:05:71:fc:61:f6:20:4e:0f:93:66:
19:dd:14:cb:8a:4c:59:95:8b:76:e8:42:d4:55:7a:3a:36:df:
8b:a8:3f:0d:f2:71:4f:c4:57:33:38:29:c4:0d:cd:71:d5:2d:
a8:cb:21:c1:b6:81:a3:d8:ed:3f:93:b0:63:65:ba:b2:66:c6:
88:1b:6c:82:d3:d5:08:cc:99:93:20:bc:fe:37:d8:16:04:04:
03:db:88:19:b4:ce:40:7d:4d:e2:1e:ce:06:16:32:b2:ef:e1:
d0:5f:86:5a:a0:12:d3:ee:ec:08:e4:ee:6f:8c:20:be:cf:73:
8e:3a:27:75:8d:ba:39:30:9f:f1:59:1c:fe:b4:e6:00:8a:a2:
10:d6:2b:e3:e8:6f:5c:91:be:a1:41:10:68:3b:d3:6c:df:05:
55:47:03:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOyZXgjw9SMG2ZNTD71KcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTRlOTVmYTU5YjUyYjU5OWRiYTQwNmQ3Yjc2ZjM4M2Nh
OTBmYTgwHhcNMjUwODIzMTQwMDM0WhcNMjUwODI0MTQwMDM0WjAzMTEwLwYDVQQD
EyhhZjhkNjlmYjVhNGY2NDczZTFkZmY3NzkwNDZhNmI3YTg0NzE4ZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfH2kzo7llp4QHuG3IiAgZhc5zQZ
pU/01HCgZlEQGt5/Q9M/2iMC2RUw+4hsIRyRdy5jFnB/+GiOOXgwdmrZd+IvbEjT
5VrM/vxGb5K1W9wfZv8GLM5n71ZziR5cMQScbCPkCZ5rZ/9HTZf933AKL5UWnErl
1n/0cIYvxQ4ZjOsiwj0w1K7MWYS2tdEoKg6YAUvguCI9MRKIxlHX9hSXZXeP+2Fo
gNc3T6u81Bdna5kCrRDzF37DN7wmpqBs2pHU8JfAcZ51Wfuo/0cNBfYAvhyc7rUF
jAMP+W1I4757w2TtCasZuts3k7MEptBWOgUz7fTM0RDLpV9sSedgHs6QyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+NaftaT2Rz4d/3eQRqa3qEcY2WMB8GA1UdIwQY
MBaAFNWU6V+lm1K1mdukBte3bzg8qQ+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQt
ZTNiMGI0MWUyNWM1LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9lZWRiY2QtYWIxOC00YWIzLWI1ZGQtZTNiMGI0MWUyNWM1
LzEvMVpUcFg2V2JVcldaMjZRRzE3ZHZPRHlwRDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiQ65pZk
Cjbg3NZnjbaOevCideNMeWIkLS8xRl93882W/Jc0vulS+IcW0tSAIJcd8T8MxeXD
yhoONkq4RjRXqavK1za24CLkFuoGY2R/o99oNIZgX2dt2P0FB14ll2OZ28UFcfxh
9iBOD5NmGd0Uy4pMWZWLduhC1FV6Ojbfi6g/DfJxT8RXMzgpxA3NcdUtqMshwbaB
o9jtP5OwY2W6smbGiBtsgtPVCMyZkyC8/jfYFgQEA9uIGbTOQH1N4h7OBhYysu/h
0F+GWqAS0+7sCOTub4wgvs9zjjondY26OTCf8Vkc/rTmAIqiENYr4+hvXJG+oUEQ
aDvTbN8FVUcDRA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:31 2025 by rpki-client