Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: ifHu7gLKv+K+dSLUZ+YTyLbrH6tlxYgBaqF0DZBnDpw=
Subject key identifier: D5:B6:4F:AB:D0:71:CF:E7:6B:99:49:8E:6C:86:C3:E4:F8:9C:3D:82
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 0198D472C63B64183FDF93F3123D295F1C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 11A8
Signing time: Sat 23 Aug 2025 01:02:28 +0000
Manifest this update: Sat 23 Aug 2025 01:02:28 +0000
Manifest next update: Sun 24 Aug 2025 01:02:28 +0000
Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: U6phZy66OzcQVGvbzVxmhS8xI8ZnTsS5+GsbBrSupxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:c6:3b:64:18:3f:df:93:f3:12:3d:29:5f:1c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Aug 23 01:02:28 2025 GMT
Not After : Aug 24 01:02:28 2025 GMT
Subject: CN=d5b64fabd071cfe76b99498e6c86c3e4f89c3d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f3:a4:67:63:16:98:a0:ae:98:cf:3b:91:39:
e7:18:62:a2:af:f2:c2:f6:5f:7d:bd:76:2d:92:d7:
20:c5:ec:d1:86:6f:a8:1f:c4:e6:2d:f7:fb:9f:e8:
ef:4c:3a:24:f1:f8:2e:5e:9e:ce:32:e7:0d:52:50:
63:b6:01:a5:05:76:79:97:5d:03:53:89:c3:a7:5e:
ed:14:04:1e:fd:1c:2b:62:13:39:79:c3:63:f1:43:
52:a2:13:12:bb:65:04:15:38:5f:89:42:06:d8:cf:
b9:8a:8b:72:ec:95:e4:c6:82:53:d7:e8:6f:7f:e2:
ce:0b:33:c8:8d:67:33:70:9e:8d:77:bf:7e:a9:72:
3e:92:fc:de:48:a8:54:d6:6e:c2:90:ef:f5:6c:1b:
7a:6a:f7:0d:ee:3d:8f:6a:0a:10:93:a9:09:b9:30:
21:75:5d:f3:f0:e9:c4:56:a6:5e:5d:ac:7f:3e:ec:
70:a6:d9:3f:5f:1d:df:82:08:29:7e:91:24:2d:5e:
3f:41:35:e3:bf:12:64:df:ca:01:38:3a:0a:e7:63:
59:f7:9c:b4:7b:55:2f:13:74:bf:a3:cf:e1:a2:07:
75:a6:b0:41:d4:e5:fc:be:1d:b2:de:c4:0e:1a:9c:
44:e4:38:f2:42:10:78:6a:ee:da:c9:d3:17:6f:80:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B6:4F:AB:D0:71:CF:E7:6B:99:49:8E:6C:86:C3:E4:F8:9C:3D:82
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:91:54:3e:0e:1d:66:f2:8b:92:68:35:26:35:43:36:bf:77:
61:de:01:d5:54:ca:7a:39:ff:d4:76:f3:bb:24:b7:e3:63:a8:
48:a3:e0:29:1f:c8:ce:76:8f:ea:ee:7d:38:6e:0a:81:9f:b3:
3a:19:ab:72:31:4d:d2:49:4a:d3:73:4a:37:d0:90:62:32:22:
f4:0f:25:ed:bc:c4:90:df:b6:98:64:34:13:b6:b3:96:42:d0:
a2:57:e2:09:fc:86:7b:eb:11:8e:a2:97:91:34:1b:5c:cd:95:
7d:c2:0c:e6:ea:7b:54:d6:ce:51:1e:fe:7a:88:7b:11:9f:d1:
65:eb:9b:95:5a:60:f0:11:ee:b8:b5:ae:7b:92:a7:25:03:c5:
38:7d:34:39:96:93:ad:9c:8d:6e:ef:4c:ef:e7:a4:5e:5d:4c:
7d:35:a0:b1:5e:0c:84:51:5c:77:fb:c8:d1:71:36:80:3a:35:
c7:d2:79:04:8d:d9:90:b7:0c:8a:e1:89:d3:2e:2e:49:a9:91:
34:3d:41:ad:92:ed:2f:c9:34:3f:03:69:3e:09:ca:98:67:a2:
42:e2:c5:08:28:8c:3e:d2:cc:c0:51:55:13:2b:57:55:09:4d:
96:3d:7e:18:2d:8f:97:79:d8:3f:33:51:e7:ef:0c:f5:18:73:
c0:64:c6:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcsY7ZBg/35PzEj0pXxw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZWFjZTcxNGMyOTU2OGVmMTk3MDA3YjE0MWQxMjc1OGNj
NDE1ZDUwHhcNMjUwODIzMDEwMjI4WhcNMjUwODI0MDEwMjI4WjAzMTEwLwYDVQQD
EyhkNWI2NGZhYmQwNzFjZmU3NmI5OTQ5OGU2Yzg2YzNlNGY4OWMzZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvOkZ2MWmKCumM87kTnnGGKir/LC
9l99vXYtktcgxezRhm+oH8TmLff7n+jvTDok8fguXp7OMucNUlBjtgGlBXZ5l10D
U4nDp17tFAQe/RwrYhM5ecNj8UNSohMSu2UEFThfiUIG2M+5ioty7JXkxoJT1+hv
f+LOCzPIjWczcJ6Nd79+qXI+kvzeSKhU1m7CkO/1bBt6avcN7j2PagoQk6kJuTAh
dV3z8OnEVqZeXax/Puxwptk/Xx3fgggpfpEkLV4/QTXjvxJk38oBODoK52NZ95y0
e1UvE3S/o8/hogd1prBB1OX8vh2y3sQOGpxE5DjyQhB4au7aydMXb4DbIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW2T6vQcc/na5lJjmyGw+T4nD2CMB8GA1UdIwQY
MBaAFM/qznFMKVaO8ZcAexQdEnWMxBXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMt
OGZkMzk0YjUzNTdjLzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYzFiZWYtZTcyYi00YTQ1LTk0NjMtOGZkMzk0YjUzNTdj
LzEvei1yT2NVd3BWbzd4bHdCN0ZCMFNkWXpFRmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJFUPg4d
ZvKLkmg1JjVDNr93Yd4B1VTKejn/1HbzuyS342OoSKPgKR/IznaP6u59OG4KgZ+z
OhmrcjFN0klK03NKN9CQYjIi9A8l7bzEkN+2mGQ0E7azlkLQolfiCfyGe+sRjqKX
kTQbXM2VfcIM5up7VNbOUR7+eoh7EZ/RZeublVpg8BHuuLWue5KnJQPFOH00OZaT
rZyNbu9M7+ekXl1MfTWgsV4MhFFcd/vI0XE2gDo1x9J5BI3ZkLcMiuGJ0y4uSamR
ND1BrZLtL8k0PwNpPgnKmGeiQuLFCCiMPtLMwFFVEytXVQlNlj1+GC2Pl3nYPzNR
5+8M9RhzwGTGCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:41 2025 by rpki-client