Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier: YMb5R+LEh+bNazduvQReWWZ2PFkBvL4r4NeWo2JX1Oo=
Subject key identifier: B6:D9:D2:FE:6C:2A:DF:00:1F:E0:08:2F:2E:03:25:44:3D:4B:FB:77
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 0198D515C496E690A488286D95F86E981190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number: 0D0F
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: GqoN5MHdL2rKfQ1kcNPGQ7PV5OMmzWwh5yhWRfGUE00=)
2: zHaHHwpWkvwMR4EBkRKLj2nL7g4.roa (hash: dEmOAj28ftGGpyQRnDV2quElsA9Yrv1JJIOo7l9XjEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c4:96:e6:90:a4:88:28:6d:95:f8:6e:98:11:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=b6d9d2fe6c2adf001fe0082f2e0325443d4bfb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:25:8a:10:6c:a2:f0:12:83:27:e3:1b:66:
16:c5:9c:31:4d:ef:68:eb:03:fb:4b:e3:54:05:62:
e4:c1:48:f5:5b:b7:55:c8:0d:20:59:96:89:10:46:
e1:23:4d:2e:94:24:c5:11:59:44:6d:51:a8:e7:24:
9a:3e:0a:c0:67:88:1e:9e:56:7b:39:fe:b4:b7:84:
75:bf:af:b5:86:88:6a:39:c2:f6:9c:00:75:2a:90:
e2:6e:49:ec:7b:07:9a:cf:8a:c4:a9:6a:ff:a5:a2:
d0:a5:48:08:27:e7:b2:ee:96:e9:62:23:e9:59:1d:
36:6b:61:87:ad:96:07:73:b9:0b:a3:22:af:70:3b:
d4:30:63:02:6c:a6:77:ba:fe:a9:51:92:7b:fc:fe:
06:f1:52:59:85:c8:89:8a:56:9b:06:83:86:01:6f:
d9:2a:8a:17:6b:33:56:d2:14:44:0b:6b:15:d4:33:
a1:a3:04:d5:90:c0:fe:f7:e4:84:83:8c:33:a8:b3:
3a:fa:b2:19:c5:c8:15:c4:1c:f2:c3:59:6d:d6:77:
3d:ca:fc:5d:80:48:32:43:76:d6:40:12:23:50:22:
99:1c:ef:03:c3:c3:8d:2e:2b:52:e1:de:f8:34:2d:
8f:09:21:ff:9c:e0:05:44:8e:fd:6e:d1:b5:97:5c:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:D2:FE:6C:2A:DF:00:1F:E0:08:2F:2E:03:25:44:3D:4B:FB:77
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:38:68:43:3f:2d:f3:5c:9a:a5:d4:a8:1b:51:7f:9e:d3:b4:
50:b8:c9:9e:28:f5:c7:09:f6:53:6c:af:8b:4e:9b:ef:4b:ca:
93:2d:f2:5e:dc:df:8f:aa:83:d8:6e:22:1f:aa:81:29:9d:b1:
ab:33:5c:80:67:38:a0:2e:c2:c7:ad:d8:d0:a7:3c:37:5c:d6:
9b:8d:12:eb:e5:1c:89:2b:b1:50:bd:36:2a:87:ba:0a:59:49:
88:76:dc:a4:b5:a5:a5:c1:62:51:d0:4c:f9:32:0e:dd:c1:8d:
8f:8c:04:70:57:0c:e1:03:32:8a:0e:a5:84:c5:d7:28:11:5c:
d7:a9:71:5c:46:46:9f:cb:8f:30:6d:4a:2a:43:5f:00:d5:8f:
c2:4f:d6:6b:0b:b3:ff:64:f3:a5:a4:c5:c6:22:e1:2c:e5:e9:
07:6a:9f:67:d2:29:d0:7e:ac:f8:6f:3a:6e:01:39:d7:d6:a2:
9e:cb:00:31:87:d8:61:62:c3:b5:7c:65:d6:2e:b1:86:a3:66:
ea:6e:e3:2d:db:e6:23:58:7b:61:32:d7:78:97:0a:1c:7e:99:
aa:02:9d:e4:af:ff:6c:40:cf:04:61:2c:aa:19:1c:5f:18:11:
9f:12:b4:70:2c:4e:1b:67:62:e4:03:13:b7:3a:c6:89:d9:fc:
7e:97:8c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFcSW5pCkiChtlfhumBGQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmM2Y3MDA1MDNmNDA3MjBhODJmNzZlZjE1Y2RhNjIwMjJm
MWY5YTkwHhcNMjUwODIzMDQwMDMwWhcNMjUwODI0MDQwMDMwWjAzMTEwLwYDVQQD
EyhiNmQ5ZDJmZTZjMmFkZjAwMWZlMDA4MmYyZTAzMjU0NDNkNGJmYjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT8lihBsovASgyfjG2YWxZwxTe9o
6wP7S+NUBWLkwUj1W7dVyA0gWZaJEEbhI00ulCTFEVlEbVGo5ySaPgrAZ4genlZ7
Of60t4R1v6+1hohqOcL2nAB1KpDibknseweaz4rEqWr/paLQpUgIJ+ey7pbpYiPp
WR02a2GHrZYHc7kLoyKvcDvUMGMCbKZ3uv6pUZJ7/P4G8VJZhciJilabBoOGAW/Z
KooXazNW0hREC2sV1DOhowTVkMD+9+SEg4wzqLM6+rIZxcgVxBzyw1lt1nc9yvxd
gEgyQ3bWQBIjUCKZHO8Dw8ONLitS4d74NC2PCSH/nOAFRI79btG1l1wUrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbZ0v5sKt8AH+AILy4DJUQ9S/t3MB8GA1UdIwQY
MBaAFK8/cAUD9AcgqC927xXNpiAi8fmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcno5d0JRUDBCeUNvTDNidkZjMm1JQ0x4LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83YjdmMjYtZjg0MS00NzAwLWFhZmIt
ZWFkMDYzNDE5MmNkLzEvcno5d0JRUDBCeUNvTDNidkZjMm1JQ0x4LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83YjdmMjYtZjg0MS00NzAwLWFhZmItZWFkMDYzNDE5MmNk
LzEvcno5d0JRUDBCeUNvTDNidkZjMm1JQ0x4LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjhoQz8t
81yapdSoG1F/ntO0ULjJnij1xwn2U2yvi06b70vKky3yXtzfj6qD2G4iH6qBKZ2x
qzNcgGc4oC7Cx63Y0Kc8N1zWm40S6+UciSuxUL02Koe6CllJiHbcpLWlpcFiUdBM
+TIO3cGNj4wEcFcM4QMyig6lhMXXKBFc16lxXEZGn8uPMG1KKkNfANWPwk/Wawuz
/2TzpaTFxiLhLOXpB2qfZ9Ip0H6s+G86bgE519ainssAMYfYYWLDtXxl1i6xhqNm
6m7jLdvmI1h7YTLXeJcKHH6ZqgKd5K//bEDPBGEsqhkcXxgRnxK0cCxOG2di5AMT
tzrGidn8fpeMMA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:56 2025 by rpki-client