Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: 0j0fDQCsN4RdJBOlRPf2JhfTThFa4CVMhkUQAr7DttM=
Subject key identifier: 4C:74:6B:9C:DA:E0:C2:93:80:22:7B:23:E7:F4:76:4A:90:DD:8B:81
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0198D660C6A884400B42D51C2D69AD843CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 0AAF
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: Af5nEVqMxSuDyxv8syZduZzpXVePka4iQD1IjETbj2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c6:a8:84:40:0b:42:d5:1c:2d:69:ad:84:3c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=4c746b9cdae0c29380227b23e7f4764a90dd8b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:8c:0c:5a:65:00:d1:5d:17:7a:cc:bf:f6:
93:8f:36:36:01:dc:ab:ae:6e:2d:0c:c2:af:a4:b8:
7e:12:38:25:ea:78:98:bc:e0:73:88:b5:ca:15:34:
ba:b0:b3:ac:61:e1:1f:7b:b6:4e:65:e9:d7:92:6b:
9f:2d:42:a2:7e:8e:99:46:22:46:6f:6b:23:6f:69:
ec:9f:d5:9d:ec:3b:f0:97:be:29:2d:1d:81:fa:34:
fd:ab:11:2a:d1:27:af:f4:b1:d9:97:12:dd:30:5e:
af:0d:ec:a2:cd:3d:49:fa:fb:cc:7c:6a:1d:f7:da:
f0:03:f6:1f:3e:6f:b7:dc:c2:7a:bc:4c:ec:d5:b3:
8f:0f:75:49:82:4f:a7:d4:9e:01:d3:35:19:d9:e1:
08:30:68:a6:5e:d2:9d:53:78:e8:8e:02:16:41:73:
37:66:bb:fa:7d:bf:ec:df:e5:81:a7:d1:47:b5:cf:
69:ca:27:e3:70:63:f8:aa:3a:7a:5a:d1:f3:06:ae:
3f:15:f4:c5:45:a4:e5:b0:96:f4:8a:69:62:03:51:
99:63:df:d2:bb:b9:7a:cc:96:b7:36:39:b2:41:e9:
62:75:ab:d2:5b:df:63:ef:96:31:de:d5:89:19:2a:
15:f5:d0:5b:8a:f6:a3:8e:a5:6c:08:3f:7e:d8:71:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:74:6B:9C:DA:E0:C2:93:80:22:7B:23:E7:F4:76:4A:90:DD:8B:81
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:44:d5:79:d4:97:04:c8:5b:a9:a1:bb:9c:4e:b8:78:b0:
0c:13:7c:7e:da:ea:7c:f7:08:7a:7c:a0:ec:db:77:2c:de:6b:
53:12:f4:1f:c5:4f:36:cd:44:7e:4f:76:4b:13:04:40:fa:58:
d2:55:7b:24:8a:b3:61:2f:6a:89:af:48:8b:1b:c4:81:6a:48:
04:c6:ba:53:d3:b4:20:82:3f:0a:25:9c:e5:8f:02:5f:f3:1d:
78:d6:a2:57:0a:c7:f9:ce:7a:25:7c:a6:2b:29:7e:90:56:5f:
f8:4b:e4:4d:c9:ec:00:53:db:55:cd:01:19:5b:7d:df:13:0b:
e8:0d:6c:d2:67:ed:76:67:20:d3:d4:76:57:8d:15:13:a5:95:
d8:a2:db:16:cb:6d:17:2c:04:0a:3d:8e:6d:cb:c7:30:58:42:
3b:d0:fb:f2:ec:91:53:53:3d:42:1d:09:39:22:e2:a2:bc:72:
8e:4e:5b:2b:cc:fd:36:de:70:73:eb:b8:99:9d:51:34:85:d9:
72:9f:a3:87:82:15:f2:73:90:11:d3:be:ff:70:b0:85:5f:d4:
33:98:b4:06:aa:4f:fb:7c:94:46:22:4e:68:06:eb:c3:48:e8:
a5:30:98:7b:6f:cd:e3:41:6a:bb:69:84:20:44:21:f8:ab:44:
42:53:d3:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMaohEALQtUcLWmthDztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk
ZjRmNjAwHhcNMjUwODIzMTAwMjAzWhcNMjUwODI0MTAwMjAzWjAzMTEwLwYDVQQD
Eyg0Yzc0NmI5Y2RhZTBjMjkzODAyMjdiMjNlN2Y0NzY0YTkwZGQ4YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYGMDFplANFdF3rMv/aTjzY2Adyr
rm4tDMKvpLh+Ejgl6niYvOBziLXKFTS6sLOsYeEfe7ZOZenXkmufLUKifo6ZRiJG
b2sjb2nsn9Wd7Dvwl74pLR2B+jT9qxEq0Sev9LHZlxLdMF6vDeyizT1J+vvMfGod
99rwA/YfPm+33MJ6vEzs1bOPD3VJgk+n1J4B0zUZ2eEIMGimXtKdU3jojgIWQXM3
Zrv6fb/s3+WBp9FHtc9pyifjcGP4qjp6WtHzBq4/FfTFRaTlsJb0imliA1GZY9/S
u7l6zJa3NjmyQelidavSW99j75Yx3tWJGSoV9dBbivajjqVsCD9+2HF9GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx0a5za4MKTgCJ7I+f0dkqQ3YuBMB8GA1UdIwQY
MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt
Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm
LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcZE1XnU
lwTIW6mhu5xOuHiwDBN8ftrqfPcIenyg7Nt3LN5rUxL0H8VPNs1Efk92SxMEQPpY
0lV7JIqzYS9qia9IixvEgWpIBMa6U9O0III/CiWc5Y8CX/MdeNaiVwrH+c56JXym
Kyl+kFZf+EvkTcnsAFPbVc0BGVt93xML6A1s0mftdmcg09R2V40VE6WV2KLbFstt
FywECj2ObcvHMFhCO9D78uyRU1M9Qh0JOSLiorxyjk5bK8z9Nt5wc+u4mZ1RNIXZ
cp+jh4IV8nOQEdO+/3CwhV/UM5i0BqpP+3yURiJOaAbrw0jopTCYe2/N40Fqu2mE
IEQh+KtEQlPTcA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:47 2025 by rpki-client