Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
File: zZeczxCv9fdzaU2fQ-XV20ctZIU.mft (raw, json)
Hash identifier: LFOlVFEdEJ2BHxBdjOkXSVViadYxHG5e3zzGo5vZVFU=
Subject key identifier: 86:25:0A:73:A1:E0:63:41:58:BB:ED:C0:CF:90:00:30:BD:2D:1B:9D
Authority key identifier: CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
Certificate issuer: /CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Certificate serial: 0198D54E2904844C3A144858A76422CF6B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: ugeI_SPpOI_az_dGl_P54hP9qpg.roa (hash: HZZ/y/qcvJFbb7qD1Pg6FgrRdOBnE2ywGhjLdlNi6S8=)
2: zZeczxCv9fdzaU2fQ-XV20ctZIU.crl (hash: 9GMyMcPOqnhr9kQoSCzeTJP/B7AM8ZMc2wdjkx0YrNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:29:04:84:4c:3a:14:48:58:a7:64:22:cf:6b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd979ccf10aff5f773694d9f43e5d5db472d6485
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=86250a73a1e0634158bbedc0cf900030bd2d1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:76:9e:21:3f:1e:7f:5f:45:a1:fc:9f:87:
d6:6c:33:9e:f8:33:12:4b:8d:c5:09:37:c2:a9:4f:
6c:59:2d:eb:e8:48:56:53:4d:0b:9f:1f:2b:c2:c3:
1f:e8:b6:fd:80:3a:dc:ed:1a:81:a8:3d:63:60:46:
eb:3e:4a:41:55:e5:8f:ae:ee:43:79:7d:15:f9:df:
01:13:0c:c2:96:2b:05:0b:71:c8:21:d2:71:0e:c6:
60:3b:83:51:3d:80:1c:ad:8a:0c:1f:0c:82:3a:a4:
ee:c4:ae:be:15:25:f5:29:e0:c6:2b:22:46:96:31:
5e:a2:6f:6c:fe:8f:d0:3f:80:47:2e:28:7f:2d:11:
74:fe:65:c0:eb:d5:b1:c4:7c:93:c0:62:52:e7:59:
de:fe:f7:b1:48:4c:a1:60:36:03:73:dc:1a:53:1c:
7d:dc:be:bf:dc:03:2a:c1:7f:6f:8a:93:19:c5:48:
8a:3a:eb:0f:39:05:86:0c:48:ab:74:fb:fe:e6:28:
a0:78:dc:c5:81:47:59:80:b2:42:e5:20:52:77:ad:
98:38:86:3f:9b:40:ff:8e:ce:e3:1e:f6:43:22:c3:
ec:7e:d1:27:25:e4:75:55:5d:b5:29:ae:b9:95:76:
19:94:1b:33:dc:ac:47:07:aa:ab:3f:78:55:ed:91:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:0A:73:A1:E0:63:41:58:BB:ED:C0:CF:90:00:30:BD:2D:1B:9D
X509v3 Authority Key Identifier:
keyid:CD:97:9C:CF:10:AF:F5:F7:73:69:4D:9F:43:E5:D5:DB:47:2D:64:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZeczxCv9fdzaU2fQ-XV20ctZIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5c6f3f-0bab-4fd0-bf94-7656da6ede09/1/zZeczxCv9fdzaU2fQ-XV20ctZIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6f:69:a4:f2:05:65:a3:78:37:2c:cf:ed:71:d0:6c:a5:eb:
32:b8:a4:4a:70:4c:12:b8:6c:b7:3d:a3:86:9d:5c:32:81:fd:
4b:ec:14:cd:70:29:66:ca:32:58:75:71:7c:68:62:f3:02:1f:
15:53:c9:0b:53:5e:d7:1c:db:d2:cc:01:9e:38:42:85:25:29:
2b:9c:bb:00:dc:68:13:a4:15:ef:35:b8:8f:67:b6:4c:be:7e:
59:e0:ea:b5:f3:7b:4b:dc:4f:88:04:cb:eb:16:bd:a5:f0:57:
29:5b:17:23:96:ba:22:4b:5d:02:e5:55:c0:f3:26:d9:e8:ac:
78:ee:d6:8d:3c:9f:26:51:35:c2:4a:89:5d:1f:21:17:8a:7e:
63:68:4f:e3:47:33:81:4d:9e:af:1a:33:d7:ae:9e:07:3d:fd:
5e:f6:71:fb:b2:7e:3a:d4:35:2c:82:63:88:1c:3a:82:b1:e4:
3c:03:f7:95:3f:ce:d1:7f:25:50:c8:88:b1:df:ae:1a:8c:bc:
59:bb:c1:52:bf:dc:6c:73:38:97:60:2b:1c:66:30:e0:18:98:
4a:a6:7e:11:57:92:f5:96:90:1f:f2:2d:51:ba:ac:b6:29:de:
58:eb:66:7a:ca:0c:ce:37:20:44:a6:da:a0:be:40:40:6f:c1:
38:d5:8c:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTikEhEw6FEhYp2Qiz2tEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTc5Y2NmMTBhZmY1Zjc3MzY5NGQ5ZjQzZTVkNWRiNDcy
ZDY0ODUwHhcNMjUwODIzMDUwMjA1WhcNMjUwODI0MDUwMjA1WjAzMTEwLwYDVQQD
Eyg4NjI1MGE3M2ExZTA2MzQxNThiYmVkYzBjZjkwMDAzMGJkMmQxYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P92niE/Hn9fRaH8n4fWbDOe+DMS
S43FCTfCqU9sWS3r6EhWU00Lnx8rwsMf6Lb9gDrc7RqBqD1jYEbrPkpBVeWPru5D
eX0V+d8BEwzClisFC3HIIdJxDsZgO4NRPYAcrYoMHwyCOqTuxK6+FSX1KeDGKyJG
ljFeom9s/o/QP4BHLih/LRF0/mXA69WxxHyTwGJS51ne/vexSEyhYDYDc9waUxx9
3L6/3AMqwX9vipMZxUiKOusPOQWGDEirdPv+5iigeNzFgUdZgLJC5SBSd62YOIY/
m0D/js7jHvZDIsPsftEnJeR1VV21Ka65lXYZlBsz3KxHB6qrP3hV7ZGHYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYlCnOh4GNBWLvtwM+QADC9LRudMB8GA1UdIwQY
MBaAFM2XnM8Qr/X3c2lNn0Pl1dtHLWSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQt
NzY1NmRhNmVkZTA5LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi81YzZmM2YtMGJhYi00ZmQwLWJmOTQtNzY1NmRhNmVkZTA5
LzEvelplY3p4Q3Y5ZmR6YVUyZlEtWFYyMGN0WklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm9ppPIF
ZaN4NyzP7XHQbKXrMrikSnBMErhstz2jhp1cMoH9S+wUzXApZsoyWHVxfGhi8wIf
FVPJC1Ne1xzb0swBnjhChSUpK5y7ANxoE6QV7zW4j2e2TL5+WeDqtfN7S9xPiATL
6xa9pfBXKVsXI5a6IktdAuVVwPMm2eiseO7WjTyfJlE1wkqJXR8hF4p+Y2hP40cz
gU2erxoz166eBz39XvZx+7J+OtQ1LIJjiBw6grHkPAP3lT/O0X8lUMiIsd+uGoy8
WbvBUr/cbHM4l2ArHGYw4BiYSqZ+EVeS9ZaQH/ItUbqstineWOtmesoMzjcgRKba
oL5AQG/BONWMHA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:56 2025 by rpki-client