
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
File: zWj3o5G3sWSe1JA0gtPpMe0049g.mft (raw, json)
Hash identifier: TNxXg0HbXqj5SuAmjmeKswRjo1IdO5B1gon8XhPrdrY=
Subject key identifier: 88:A6:F4:89:E3:77:36:A0:F5:42:A4:E4:A7:93:0F:63:68:2B:C8:93
Authority key identifier: CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
Certificate issuer: /CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Certificate serial: 0198D515AFBE115F176EF45672C689A56DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
Manifest number: 0F45
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: O1GYVhxFS0M7H20Hoh1Atb3eLaE.roa (hash: tCVke6K7TW9gUgASV8dTundK+jeF3bulXbwfPaxFtHY=)
2: SWAth1mKD6FwJVqaJWtV6D-F51Y.roa (hash: REJDhZOwFyr4wdpkCheBE0DhoqN625ViwDnudBYPico=)
3: Sc-FyfdVDPaQqHGz-GI3fsuN6cM.roa (hash: zSZi5viNxy6Qez2EVg97kMrTwqojW2kb2exfumMpwjg=)
4: hkuhpnMVVYRgPxAr-LQ10OakoTI.roa (hash: oAtibnQ6KN2VeS7D1IHVgfHz1J3VS/wtW0fPG2i0OP0=)
5: zWj3o5G3sWSe1JA0gtPpMe0049g.crl (hash: Payal/7pGDMkOSuFDaw/1I4zRpDUv7o/nSevHAU1HCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:af:be:11:5f:17:6e:f4:56:72:c6:89:a5:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd68f7a391b7b1649ed4903482d3e931ed34e3d8
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=88a6f489e37736a0f542a4e4a7930f63682bc893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:4d:92:f7:0d:33:66:37:af:06:68:d9:ce:
08:6e:0b:4b:90:38:83:d7:d2:6a:fc:00:f5:c0:1c:
0e:83:65:fa:fc:4a:b7:e7:68:9e:0f:75:82:7a:45:
3e:f3:37:ba:f7:73:0e:a8:d6:8a:d6:23:88:d7:14:
ef:b3:6d:88:30:24:a1:29:e3:96:56:9f:5c:6c:02:
6e:98:ab:e8:92:83:75:89:ee:d3:be:79:2b:ef:49:
93:6f:da:8f:f9:d9:79:a5:1c:73:e4:00:77:a1:33:
be:70:cf:2f:28:ec:40:e7:16:13:2e:34:87:dc:26:
76:a4:3d:43:58:28:7b:67:8c:d7:d8:f2:56:ad:c1:
3c:e6:06:03:b6:ae:e2:67:fb:27:06:e0:5e:3d:52:
24:d6:dc:2b:03:c6:50:d1:6f:0e:29:ee:6d:da:06:
7a:10:6d:80:bb:f6:1c:fd:91:24:fb:34:a8:30:7b:
f3:e6:5e:7d:05:dc:d0:45:1a:58:f1:0f:6d:c1:ee:
5a:41:ed:d4:ee:fe:97:04:a3:95:2f:c2:93:d7:7c:
2a:72:72:61:49:df:fb:0f:7e:51:fc:b8:8c:0f:45:
da:63:0f:a9:9c:2d:bf:81:1c:49:80:72:32:56:e7:
d1:5f:c4:be:e9:00:7e:3f:69:d9:33:85:ea:ba:96:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A6:F4:89:E3:77:36:A0:F5:42:A4:E4:A7:93:0F:63:68:2B:C8:93
X509v3 Authority Key Identifier:
keyid:CD:68:F7:A3:91:B7:B1:64:9E:D4:90:34:82:D3:E9:31:ED:34:E3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWj3o5G3sWSe1JA0gtPpMe0049g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8b05bf-33f1-4b5b-88a4-1673ad8c4012/1/zWj3o5G3sWSe1JA0gtPpMe0049g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9c:22:de:4b:ef:f8:4b:03:0e:ad:f5:c8:3f:07:f1:93:e8:
f0:03:86:b9:84:99:42:0d:24:ae:1e:4b:e6:eb:04:d2:19:00:
36:d8:0b:9f:45:16:2c:16:db:f8:2b:2e:99:d5:6d:32:20:8c:
a3:87:4b:50:87:5a:fc:59:20:7a:d6:c3:0e:84:12:b1:47:a9:
40:06:5f:51:48:d5:c0:15:ff:fa:9a:bc:89:a2:a1:35:2d:b3:
a0:16:ec:9a:92:90:c1:04:21:3c:65:a2:86:7b:67:e8:0f:9d:
d4:54:05:39:d7:22:12:81:22:b9:24:25:5f:d1:f0:4a:c1:61:
e9:53:cb:96:0b:44:0e:ad:04:43:3f:6e:11:4c:7a:a9:af:44:
8f:a1:31:55:72:1a:2b:77:2b:cd:b3:bb:e1:23:bb:f6:ca:51:
af:08:0a:16:d9:b8:84:c6:54:9d:77:b2:f2:75:e0:78:91:33:
8b:5d:f1:2a:61:68:88:c0:d3:61:a4:ce:c3:b9:17:26:5c:d0:
3c:54:4c:62:b3:4d:bb:f5:ee:39:b7:be:b3:1b:9e:b4:49:57:
d9:d6:bb:8f:a5:76:af:25:79:77:78:70:df:fe:06:04:a6:7d:
c5:ce:00:2e:14:7c:4e:3a:ad:aa:f1:e8:2d:ff:44:3c:6f:2e:
5f:cd:58:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFa++EV8XbvRWcsaJpW3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjhmN2EzOTFiN2IxNjQ5ZWQ0OTAzNDgyZDNlOTMxZWQz
NGUzZDgwHhcNMjUwODIzMDQwMDI0WhcNMjUwODI0MDQwMDI0WjAzMTEwLwYDVQQD
Eyg4OGE2ZjQ4OWUzNzczNmEwZjU0MmE0ZTRhNzkzMGY2MzY4MmJjODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ5NkvcNM2Y3rwZo2c4IbgtLkDiD
19Jq/AD1wBwOg2X6/Eq352ieD3WCekU+8ze693MOqNaK1iOI1xTvs22IMCShKeOW
Vp9cbAJumKvokoN1ie7Tvnkr70mTb9qP+dl5pRxz5AB3oTO+cM8vKOxA5xYTLjSH
3CZ2pD1DWCh7Z4zX2PJWrcE85gYDtq7iZ/snBuBePVIk1twrA8ZQ0W8OKe5t2gZ6
EG2Au/Yc/ZEk+zSoMHvz5l59BdzQRRpY8Q9twe5aQe3U7v6XBKOVL8KT13wqcnJh
Sd/7D35R/LiMD0XaYw+pnC2/gRxJgHIyVufRX8S+6QB+P2nZM4XqupaRJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIim9Injdzag9UKk5KeTD2NoK8iTMB8GA1UdIwQY
MBaAFM1o96ORt7FkntSQNILT6THtNOPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQt
MTY3M2FkOGM0MDEyLzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84YjA1YmYtMzNmMS00YjViLTg4YTQtMTY3M2FkOGM0MDEy
LzEveldqM281RzNzV1NlMUpBMGd0UHBNZTAwNDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5wi3kvv
+EsDDq31yD8H8ZPo8AOGuYSZQg0krh5L5usE0hkANtgLn0UWLBbb+CsumdVtMiCM
o4dLUIda/FkgetbDDoQSsUepQAZfUUjVwBX/+pq8iaKhNS2zoBbsmpKQwQQhPGWi
hntn6A+d1FQFOdciEoEiuSQlX9HwSsFh6VPLlgtEDq0EQz9uEUx6qa9Ej6ExVXIa
K3crzbO74SO79spRrwgKFtm4hMZUnXey8nXgeJEzi13xKmFoiMDTYaTOw7kXJlzQ
PFRMYrNNu/XuObe+sxuetElX2da7j6V2ryV5d3hw3/4GBKZ9xc4ALhR8TjqtqvHo
Lf9EPG8uX81Y+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:42 2025 by rpki-client