Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: SVyQ3+SRCY2xIpefrFc/zrBWkkfj08jg2ULn+5HCQLM=
Subject key identifier: FC:C7:A3:31:93:B2:90:EA:32:4F:EE:F8:C1:35:93:81:57:AE:E5:C1
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 0198D54DC65B2AF7CEC96F5D3780C6C1855F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 0357
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: y5ykiQCQunjIXa9MG5EhYV7i+gkeoSJZBeAI0j85aAY=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c6:5b:2a:f7:ce:c9:6f:5d:37:80:c6:c1:85:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=fcc7a33193b290ea324feef8c135938157aee5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:cc:fd:2b:84:4b:d9:1e:ad:32:67:30:1e:
e5:84:45:46:50:20:e7:56:c9:a3:a1:28:10:62:28:
51:a6:bf:b6:bc:1b:a9:d7:58:04:18:3c:fb:ed:73:
0e:b6:90:4f:8c:01:2d:95:31:e4:07:f5:0c:8f:d3:
1e:55:6b:2c:84:d6:98:04:a9:43:c1:4b:5c:4c:13:
48:9b:53:fa:59:42:84:80:73:5e:40:02:24:1e:4a:
fe:0d:47:db:9a:a3:b0:bb:29:c7:3e:2d:19:0b:3a:
aa:30:c2:4f:7f:de:59:54:48:9c:ae:5b:12:ca:80:
73:f7:ca:56:b0:a8:21:60:23:b7:ed:b0:ba:7d:df:
e4:89:6a:17:3a:71:6d:4e:88:cb:2c:c6:4b:6e:63:
30:5e:ec:fe:8f:f7:ee:88:c7:47:49:bb:a5:75:92:
23:42:f5:14:53:7c:d4:68:56:57:34:23:6a:78:6f:
1e:02:54:73:e0:bb:19:f2:86:7f:73:69:ad:79:f1:
f5:b4:a2:eb:a2:c6:8c:4c:21:6b:c3:4f:98:08:b1:
8e:e7:0f:b9:a1:5a:8e:ab:3a:cb:86:2b:76:67:35:
3f:04:de:29:88:1e:5c:c3:2d:c5:11:f7:9f:83:d1:
8d:15:af:6f:2e:78:79:13:46:1b:a5:9e:bc:12:82:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:A3:31:93:B2:90:EA:32:4F:EE:F8:C1:35:93:81:57:AE:E5:C1
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a3:33:1e:e9:c4:d1:01:5a:c2:eb:8b:47:1f:02:93:21:71:
15:89:a6:13:f5:51:26:20:54:2c:96:eb:7c:04:d9:b4:7b:16:
3c:49:7c:9e:e1:21:f4:1a:d1:30:91:3f:f2:58:a4:26:e1:e5:
c6:75:a5:5b:62:31:70:aa:08:79:8d:b0:58:a2:31:1e:13:ad:
e4:7c:2d:89:3a:54:0f:b2:8f:44:6e:11:dd:bb:83:cb:1c:6e:
f5:3f:66:4a:a2:26:65:dd:ad:1e:9f:ad:9c:cf:0f:24:82:04:
ba:ce:46:fc:c8:bb:76:a1:50:3c:ae:7a:b3:bb:3c:7a:19:71:
bf:a5:62:3a:b2:8c:bc:44:89:c4:7e:89:cb:1e:ad:c8:da:5f:
21:1f:b8:87:bd:53:06:7c:02:a7:58:e4:5a:90:5a:a6:54:ac:
e0:a0:77:2a:2a:b8:c4:8c:e5:b8:bc:50:1c:d2:47:0c:04:b6:
55:e1:38:2a:9c:6e:84:c5:81:b8:7d:f7:b7:d6:4e:4d:31:d9:
c0:47:c9:8f:dc:c7:bd:5f:76:09:b7:7b:69:f5:ee:2b:07:fb:
c1:8d:48:88:a1:64:6e:25:55:61:07:bc:86:94:b9:17:34:03:
83:be:06:d4:cf:f7:73:67:4c:32:b5:bb:6f:8a:a9:e6:74:1a:
5a:2e:4c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcZbKvfOyW9dN4DGwYVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2
N2VlZmEwHhcNMjUwODIzMDUwMTQwWhcNMjUwODI0MDUwMTQwWjAzMTEwLwYDVQQD
EyhmY2M3YTMzMTkzYjI5MGVhMzI0ZmVlZjhjMTM1OTM4MTU3YWVlNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0rM/SuES9kerTJnMB7lhEVGUCDn
VsmjoSgQYihRpr+2vBup11gEGDz77XMOtpBPjAEtlTHkB/UMj9MeVWsshNaYBKlD
wUtcTBNIm1P6WUKEgHNeQAIkHkr+DUfbmqOwuynHPi0ZCzqqMMJPf95ZVEicrlsS
yoBz98pWsKghYCO37bC6fd/kiWoXOnFtTojLLMZLbmMwXuz+j/fuiMdHSbuldZIj
QvUUU3zUaFZXNCNqeG8eAlRz4LsZ8oZ/c2mtefH1tKLrosaMTCFrw0+YCLGO5w+5
oVqOqzrLhit2ZzU/BN4piB5cwy3FEfefg9GNFa9vLnh5E0YbpZ68EoKWnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzHozGTspDqMk/u+ME1k4FXruXBMB8GA1UdIwQY
MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt
YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4
LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKMzHunE
0QFawuuLRx8CkyFxFYmmE/VRJiBULJbrfATZtHsWPEl8nuEh9BrRMJE/8likJuHl
xnWlW2IxcKoIeY2wWKIxHhOt5HwtiTpUD7KPRG4R3buDyxxu9T9mSqImZd2tHp+t
nM8PJIIEus5G/Mi7dqFQPK56s7s8ehlxv6ViOrKMvESJxH6Jyx6tyNpfIR+4h71T
BnwCp1jkWpBaplSs4KB3Kiq4xIzluLxQHNJHDAS2VeE4KpxuhMWBuH33t9ZOTTHZ
wEfJj9zHvV92Cbd7afXuKwf7wY1IiKFkbiVVYQe8hpS5FzQDg74G1M/3c2dMMrW7
b4qp5nQaWi5MXg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:54 2025 by rpki-client