Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: DVxZ9J4aATIsgoaDPGKG07tcjXF+kR7d5oSw5sl7L9g=
Subject key identifier: 89:2E:5B:21:D2:85:74:0E:94:D8:CE:28:CE:83:FB:89:04:81:BB:39
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 0198D5F1394064DE94756ACD671E7ABFEF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:12 +0000
Manifest this update: Sat 23 Aug 2025 08:00:12 +0000
Manifest next update: Sun 24 Aug 2025 08:00:12 +0000
Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: D+dedGaZC9o4jxlm65M3RNvbYCH9uU6q/L5iQYo/bY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:39:40:64:de:94:75:6a:cd:67:1e:7a:bf:ef:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Aug 23 08:00:12 2025 GMT
Not After : Aug 24 08:00:12 2025 GMT
Subject: CN=892e5b21d285740e94d8ce28ce83fb890481bb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:de:ea:a4:64:51:3b:70:0b:5a:11:de:0a:
0b:62:e3:85:77:e8:5a:70:02:b2:49:67:6a:10:e0:
99:70:b9:ab:64:ec:cf:1b:ed:cb:54:d0:48:c4:3b:
2b:1e:fc:af:80:64:6b:29:2c:26:eb:3f:46:0f:4b:
bb:9c:95:fb:02:e3:87:b5:04:0c:ce:a8:2c:b5:a6:
32:99:3d:96:6f:96:32:a1:a4:7e:db:25:ca:cb:0d:
d9:11:31:42:e1:06:fd:2f:e9:32:35:81:26:ad:fa:
22:ba:84:f6:50:22:81:50:3e:bd:a8:d3:b1:13:12:
1d:4f:8d:4b:21:43:81:53:19:0c:80:c2:7b:75:72:
5c:6e:cf:c8:ff:68:58:3a:f4:9e:d1:6b:49:ed:09:
67:45:e5:6d:3e:32:10:c4:67:44:da:e8:1e:8d:ea:
e2:d2:4e:6d:11:aa:48:6c:6a:33:3e:6d:f7:0d:40:
be:76:e6:44:37:c7:cc:4a:81:38:9e:c7:69:64:e8:
35:ae:0b:5f:f3:07:1f:c2:4e:a2:d9:91:71:01:63:
37:b5:e1:58:bf:a9:7c:a2:93:d2:34:3d:8a:48:a6:
46:34:d5:29:66:0d:b1:36:19:85:84:d3:69:4c:97:
fb:9d:e6:1b:77:b2:59:f8:44:a0:75:ec:03:8f:65:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2E:5B:21:D2:85:74:0E:94:D8:CE:28:CE:83:FB:89:04:81:BB:39
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a5:7c:65:a7:aa:02:31:71:26:da:96:ec:ee:e8:c3:10:51:
25:4f:03:cf:5c:0d:f7:4d:cb:3a:74:d8:2b:2b:70:41:3e:46:
02:b0:77:cc:cd:ac:58:58:a1:d1:8b:7b:c6:e9:6c:24:cf:11:
95:ce:34:5a:a2:2a:76:00:86:e9:09:8e:8b:65:fc:aa:05:07:
66:70:2c:19:11:38:6e:0b:d3:ac:f2:81:69:ca:30:31:36:b0:
63:b8:39:80:97:87:b1:46:3d:92:b7:9a:a7:4b:c7:f8:b2:03:
75:8e:d4:2b:08:43:17:ef:4d:2a:fe:57:7b:ba:97:73:0b:50:
25:96:76:8b:08:39:89:47:56:d3:db:13:49:b8:bc:fa:27:29:
a7:75:63:33:1b:56:d0:5f:a8:71:f0:a4:16:82:d8:58:1e:ea:
f2:65:b4:2d:54:0d:02:3f:84:34:00:45:6c:8f:d6:3c:56:52:
b1:d1:f0:31:68:c6:ad:af:f7:5a:e1:35:07:da:1d:91:90:98:
b5:50:02:13:8f:c8:64:4a:07:25:8a:fe:9c:ed:e6:5d:5a:fd:
6b:8f:1a:36:59:75:5f:d2:32:68:1e:86:bc:f6:52:96:e5:10:
e6:0f:d9:67:b6:cc:af:f2:84:93:b6:3d:e1:d9:25:7a:22:0a:
7e:14:7d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8TlAZN6UdWrNZx56v+9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTUwZTRlNThkNmFjMjdmODBmMDlhNWVkMmYzMDI4Yjgx
YWU4Y2EwHhcNMjUwODIzMDgwMDEyWhcNMjUwODI0MDgwMDEyWjAzMTEwLwYDVQQD
Eyg4OTJlNWIyMWQyODU3NDBlOTRkOGNlMjhjZTgzZmI4OTA0ODFiYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMze6qRkUTtwC1oR3goLYuOFd+ha
cAKySWdqEOCZcLmrZOzPG+3LVNBIxDsrHvyvgGRrKSwm6z9GD0u7nJX7AuOHtQQM
zqgstaYymT2Wb5YyoaR+2yXKyw3ZETFC4Qb9L+kyNYEmrfoiuoT2UCKBUD69qNOx
ExIdT41LIUOBUxkMgMJ7dXJcbs/I/2hYOvSe0WtJ7QlnReVtPjIQxGdE2ugejeri
0k5tEapIbGozPm33DUC+duZEN8fMSoE4nsdpZOg1rgtf8wcfwk6i2ZFxAWM3teFY
v6l8opPSND2KSKZGNNUpZg2xNhmFhNNpTJf7neYbd7JZ+ESgdewDj2XbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkuWyHShXQOlNjOKM6D+4kEgbs5MB8GA1UdIwQY
MBaAFGSVDk5Y1qwn+A8Jpe0vMCi4GujKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYt
ZTY2ZDQxMWZhNmEwLzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zMDAyMTEtMDkwOS00MjA2LTkxMzYtZTY2ZDQxMWZhNmEw
LzEvWkpVT1RsaldyQ2Y0RHdtbDdTOHdLTGdhNk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqV8Zaeq
AjFxJtqW7O7owxBRJU8Dz1wN903LOnTYKytwQT5GArB3zM2sWFih0Yt7xulsJM8R
lc40WqIqdgCG6QmOi2X8qgUHZnAsGRE4bgvTrPKBacowMTawY7g5gJeHsUY9krea
p0vH+LIDdY7UKwhDF+9NKv5Xe7qXcwtQJZZ2iwg5iUdW09sTSbi8+icpp3VjMxtW
0F+ocfCkFoLYWB7q8mW0LVQNAj+ENABFbI/WPFZSsdHwMWjGra/3WuE1B9odkZCY
tVACE4/IZEoHJYr+nO3mXVr9a48aNll1X9IyaB6GvPZSluUQ5g/ZZ7bMr/KEk7Y9
4dkleiIKfhR9OA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:51 2025 by rpki-client