Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: d4J742+nbnpdua/RhV3AIdTlLSHfhTZ5u7SN9nC73nc=
Subject key identifier: 41:14:74:51:65:82:86:D4:C9:20:80:12:E8:98:90:52:93:C6:D2:E2
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 0198D404DAB93B3FAA4BE76C2F4257305651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 05B4
Signing time: Fri 22 Aug 2025 23:02:24 +0000
Manifest this update: Fri 22 Aug 2025 23:02:24 +0000
Manifest next update: Sat 23 Aug 2025 23:02:24 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: aOucAaLUTzVNOKWQ/Txz9TDDTZCfx1XKwLO+zMKSUtk=)
2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:da:b9:3b:3f:aa:4b:e7:6c:2f:42:57:30:56:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Aug 22 23:02:24 2025 GMT
Not After : Aug 23 23:02:24 2025 GMT
Subject: CN=41147451658286d4c9208012e898905293c6d2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:e8:70:6e:22:25:9c:4a:54:7b:bc:23:33:
70:d2:15:49:fd:04:f7:17:57:57:b7:7e:0a:8c:a6:
bd:ed:4d:d5:c6:c1:58:da:ae:6b:58:00:38:85:7a:
02:70:de:0c:74:25:4e:f5:bf:6a:3a:e7:8b:bd:a9:
11:e6:52:cf:a8:f7:e2:b6:6b:99:30:49:1b:e0:72:
82:4d:0e:65:f5:b6:2f:c5:81:78:d6:ec:53:a9:62:
de:60:17:1f:21:29:d5:46:68:1f:be:3e:28:90:90:
b4:84:b6:48:82:85:5e:ec:a1:fc:10:5e:9b:71:d7:
89:76:59:15:15:b9:e0:af:bb:b3:e0:de:33:9b:bf:
c9:e8:ed:fe:36:fd:92:7d:35:4e:19:e3:9b:c6:8f:
1d:c0:a4:3a:f1:77:8c:82:4a:5c:67:c2:74:31:c1:
79:e4:a6:57:54:23:77:a0:cb:aa:c9:2c:a0:cf:11:
71:e3:3e:f2:57:ec:d6:44:b3:06:1c:4d:fc:01:0b:
45:97:ae:36:f7:27:7a:aa:a4:86:d1:83:41:88:b1:
87:ad:ca:14:0c:0a:7a:12:b1:29:4e:2c:05:34:6e:
a8:b8:cf:b3:e5:8d:c9:8e:55:e9:ac:1e:13:35:17:
69:fb:cf:77:0c:2d:6a:ce:e1:c2:2d:62:d5:14:26:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:74:51:65:82:86:D4:C9:20:80:12:E8:98:90:52:93:C6:D2:E2
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a1:b7:58:da:8f:a4:a4:6b:4b:a7:2c:26:75:87:e0:5f:b0:
c8:87:0b:c9:67:6f:d6:5e:bc:4c:9a:10:00:33:24:75:00:b3:
e4:2f:64:cc:f3:f5:1d:37:61:27:75:af:50:dd:bb:be:87:03:
36:6a:03:bb:68:6e:7d:8e:8d:6f:16:18:9f:fe:25:9c:8d:06:
21:c3:eb:a7:03:ed:af:33:32:c5:c5:f6:5b:87:b8:b4:bd:b1:
6a:b7:73:02:51:26:da:41:81:cb:92:c7:4a:65:e1:5f:dc:df:
76:84:9e:b1:db:94:ec:e9:90:48:0c:2c:5a:1b:2a:27:31:9d:
6b:89:4a:b7:f0:35:a3:06:e2:2d:33:9b:15:4d:f6:22:35:fe:
08:1e:31:e3:51:8a:dc:d1:6f:fa:9f:c9:04:27:8c:d2:c2:ec:
d2:3d:b7:b3:60:dd:6e:99:4a:53:86:bb:51:c3:fd:74:51:fa:
39:70:e9:86:7d:8c:45:0d:b3:74:85:e7:1d:ae:89:35:10:79:
c7:47:34:af:2f:73:c4:cc:66:08:68:16:82:8f:47:c0:e5:3e:
37:b2:d9:c7:e8:f9:97:bd:33:30:f5:3f:40:1f:72:04:7e:9c:
9e:8b:23:94:f0:94:30:08:9b:70:2c:c2:52:96:d0:13:45:32:
d0:ff:e7:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBNq5Oz+qS+dsL0JXMFZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTU2Y2IyZThiYmI0ZDQyOTcyOGUwMWUyMGZkM2M4ZTA1
ZjMzMjgwHhcNMjUwODIyMjMwMjI0WhcNMjUwODIzMjMwMjI0WjAzMTEwLwYDVQQD
Eyg0MTE0NzQ1MTY1ODI4NmQ0YzkyMDgwMTJlODk4OTA1MjkzYzZkMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDTocG4iJZxKVHu8IzNw0hVJ/QT3
F1dXt34KjKa97U3VxsFY2q5rWAA4hXoCcN4MdCVO9b9qOueLvakR5lLPqPfitmuZ
MEkb4HKCTQ5l9bYvxYF41uxTqWLeYBcfISnVRmgfvj4okJC0hLZIgoVe7KH8EF6b
cdeJdlkVFbngr7uz4N4zm7/J6O3+Nv2SfTVOGeObxo8dwKQ68XeMgkpcZ8J0McF5
5KZXVCN3oMuqySygzxFx4z7yV+zWRLMGHE38AQtFl6429yd6qqSG0YNBiLGHrcoU
DAp6ErEpTiwFNG6ouM+z5Y3JjlXprB4TNRdp+893DC1qzuHCLWLVFCZruwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEUdFFlgobUySCAEuiYkFKTxtLiMB8GA1UdIwQY
MBaAFNWVbLLou7TUKXKOAeIP08jgXzMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQt
OThkYWJlM2UyNjYyLzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQtOThkYWJlM2UyNjYy
LzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6G3WNqP
pKRrS6csJnWH4F+wyIcLyWdv1l68TJoQADMkdQCz5C9kzPP1HTdhJ3WvUN27vocD
NmoDu2hufY6NbxYYn/4lnI0GIcPrpwPtrzMyxcX2W4e4tL2xardzAlEm2kGBy5LH
SmXhX9zfdoSesduU7OmQSAwsWhsqJzGda4lKt/A1owbiLTObFU32IjX+CB4x41GK
3NFv+p/JBCeM0sLs0j23s2DdbplKU4a7UcP9dFH6OXDphn2MRQ2zdIXnHa6JNRB5
x0c0ry9zxMxmCGgWgo9HwOU+N7LZx+j5l70zMPU/QB9yBH6cnosjlPCUMAibcCzC
UpbQE0Uy0P/nbg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:40 2025 by rpki-client