Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
File: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft (raw, json)
Hash identifier: Irw6saLGlBlZjvyHhYjIDGQbs4sNvTRORR9w7o0CgzM=
Subject key identifier: A7:D0:B0:FE:B2:5B:02:0F:1B:9E:4F:27:D4:8B:62:DF:5A:CA:D3:D3
Authority key identifier: 65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
Certificate issuer: /CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Certificate serial: 0198D473B81AA8AE70FB7BA5A853D8E4D411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
Manifest number: 1589
Signing time: Sat 23 Aug 2025 01:03:30 +0000
Manifest this update: Sat 23 Aug 2025 01:03:30 +0000
Manifest next update: Sun 24 Aug 2025 01:03:30 +0000
Files and hashes: 1: ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl (hash: 1s+usvY/ySPTiKASLafUHYfR8FQQynjJ/cVzUTD5Ek0=)
2: _4Ndkg3UKi9vHxY0SVHFR9i7YHI.roa (hash: gVwQ/KDnz7z975mDXEiOOePjhBe/QBZrgXsjy6HuzNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b8:1a:a8:ae:70:fb:7b:a5:a8:53:d8:e4:d4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65226ee5ea0406592df975c6f4c84f10f14d15cb
Validity
Not Before: Aug 23 01:03:30 2025 GMT
Not After : Aug 24 01:03:30 2025 GMT
Subject: CN=a7d0b0feb25b020f1b9e4f27d48b62df5acad3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:e8:77:a7:91:f6:ed:7d:e6:71:b5:ab:32:
41:3d:2b:25:5a:4e:49:a1:ec:67:26:d5:38:d0:b5:
35:97:47:96:24:28:a2:3e:6a:fd:af:81:e0:38:74:
15:99:28:89:03:65:c7:75:cb:58:18:4d:25:f9:5d:
fd:15:5b:d1:c8:24:eb:b0:59:7f:25:ae:ac:6b:76:
44:98:4b:ae:fe:d9:f1:93:6b:91:dc:d1:94:fe:d1:
3e:4a:e9:cb:07:f1:38:ab:3b:2f:37:69:64:80:4b:
78:1b:2e:02:ac:4c:b1:3c:02:54:84:56:f0:d5:11:
24:85:c4:36:c8:80:17:6b:a3:a4:f0:73:2f:28:92:
6b:c5:96:83:f2:a3:af:c0:3e:a5:8f:7f:10:d1:fd:
dc:1f:95:74:5a:32:31:db:3b:97:a2:1a:f1:ab:ad:
ad:77:85:da:bf:84:60:06:dc:16:4a:bc:4e:4b:3b:
5e:c4:00:68:25:b2:17:c8:5b:65:58:a1:18:91:1a:
f4:47:60:e9:35:ec:29:5d:50:ce:ab:92:fe:dc:e7:
bf:0a:0e:19:70:8b:c1:2f:05:5e:de:64:15:d0:0c:
3c:07:8c:7d:db:ab:d2:43:a6:b7:69:2c:cd:76:ad:
f8:51:9e:2d:84:47:09:00:06:b2:40:28:4c:61:5f:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D0:B0:FE:B2:5B:02:0F:1B:9E:4F:27:D4:8B:62:DF:5A:CA:D3:D3
X509v3 Authority Key Identifier:
keyid:65:22:6E:E5:EA:04:06:59:2D:F9:75:C6:F4:C8:4F:10:F1:4D:15:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/594fa8-d315-4a38-a631-dec02488c37c/1/ZSJu5eoEBlkt-XXG9MhPEPFNFcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:97:b5:72:b0:2f:15:41:6c:6c:47:f4:95:d8:5a:39:d8:a9:
0d:08:73:34:1d:3d:00:59:c5:7b:2e:42:d4:dc:4d:6c:a3:4e:
d5:65:8e:48:00:2a:2c:74:d8:0e:09:38:ee:6b:1e:eb:55:39:
4f:1a:d4:8d:7f:27:eb:40:1b:92:96:cb:a7:e0:0b:3b:8d:e2:
7f:69:56:66:61:3c:b0:8f:29:c2:04:15:d2:0f:a5:22:49:81:
5b:f7:b3:62:ed:65:0a:db:8c:18:ab:85:04:ba:69:00:64:db:
bd:eb:5d:94:3a:c2:33:79:01:45:70:d3:7b:80:91:94:80:85:
0f:ab:cf:d5:e4:d9:b6:6e:44:ca:c6:cd:f0:31:9d:b1:be:b7:
29:93:b0:59:73:d4:3a:cc:9d:9d:89:ee:ab:66:a3:70:b5:52:
44:42:8d:70:65:47:09:d7:6a:98:a2:24:c5:53:60:54:e7:1a:
cb:cc:79:aa:b2:cb:f5:73:98:29:dc:07:72:9b:ef:27:b9:67:
ac:ee:f7:ec:ec:2c:fa:19:a6:38:d5:d6:88:83:8e:d1:44:29:
41:22:a9:fd:1a:ca:ba:2c:a5:0f:6e:e4:7f:48:35:ae:dd:d8:
00:e5:68:99:0d:53:d7:c6:23:c5:49:0b:b1:c3:25:16:29:c3:
b0:a4:8c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc7gaqK5w+3ulqFPY5NQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjI2ZWU1ZWEwNDA2NTkyZGY5NzVjNmY0Yzg0ZjEwZjE0
ZDE1Y2IwHhcNMjUwODIzMDEwMzMwWhcNMjUwODI0MDEwMzMwWjAzMTEwLwYDVQQD
EyhhN2QwYjBmZWIyNWIwMjBmMWI5ZTRmMjdkNDhiNjJkZjVhY2FkM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v3od6eR9u195nG1qzJBPSslWk5J
oexnJtU40LU1l0eWJCiiPmr9r4HgOHQVmSiJA2XHdctYGE0l+V39FVvRyCTrsFl/
Ja6sa3ZEmEuu/tnxk2uR3NGU/tE+SunLB/E4qzsvN2lkgEt4Gy4CrEyxPAJUhFbw
1REkhcQ2yIAXa6Ok8HMvKJJrxZaD8qOvwD6lj38Q0f3cH5V0WjIx2zuXohrxq62t
d4Xav4RgBtwWSrxOSztexABoJbIXyFtlWKEYkRr0R2DpNewpXVDOq5L+3Oe/Cg4Z
cIvBLwVe3mQV0Aw8B4x926vSQ6a3aSzNdq34UZ4thEcJAAayQChMYV+CawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfQsP6yWwIPG55PJ9SLYt9aytPTMB8GA1UdIwQY
MBaAFGUibuXqBAZZLfl1xvTITxDxTRXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEt
ZGVjMDI0ODhjMzdjLzEvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi81OTRmYTgtZDMxNS00YTM4LWE2MzEtZGVjMDI0ODhjMzdj
LzEvWlNKdTVlb0VCbGt0LVhYRzlNaFBFUEZORmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipe1crAv
FUFsbEf0ldhaOdipDQhzNB09AFnFey5C1NxNbKNO1WWOSAAqLHTYDgk47mse61U5
TxrUjX8n60AbkpbLp+ALO43if2lWZmE8sI8pwgQV0g+lIkmBW/ezYu1lCtuMGKuF
BLppAGTbvetdlDrCM3kBRXDTe4CRlICFD6vP1eTZtm5EysbN8DGdsb63KZOwWXPU
OsydnYnuq2ajcLVSREKNcGVHCddqmKIkxVNgVOcay8x5qrLL9XOYKdwHcpvvJ7ln
rO737Ows+hmmONXWiIOO0UQpQSKp/RrKuiylD27kf0g1rt3YAOVomQ1T18YjxUkL
scMlFinDsKSMfg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:27 2025 by rpki-client