Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: 6cOPudbiGS6W+qRKpT5C5xN3L98CAg/BFcdp04VQZOs=
Subject key identifier: C0:68:2F:6D:AA:01:A6:36:3A:E7:D1:0B:A5:3E:B5:EB:EA:79:77:2E
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 0198D7737933128DEF93C36E511F556BCAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0CA6
Signing time: Sat 23 Aug 2025 15:02:05 +0000
Manifest this update: Sat 23 Aug 2025 15:02:05 +0000
Manifest next update: Sun 24 Aug 2025 15:02:05 +0000
Files and hashes: 1: HlHW7XBX8ZvIde3YcV5P6ReshMk.roa (hash: 6qh5uJT+VrASAo+GezCNr4MsU+LUfxw3LvGNNOPJtbA=)
2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: uCe6kktkODyP2qTz1nifNpn9g1y5x7Qqsp9JCioBKGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:79:33:12:8d:ef:93:c3:6e:51:1f:55:6b:ca:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Aug 23 15:02:05 2025 GMT
Not After : Aug 24 15:02:05 2025 GMT
Subject: CN=c0682f6daa01a6363ae7d10ba53eb5ebea79772e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:7d:b6:c4:c7:b1:f6:54:16:19:83:ee:2e:
ef:f9:6b:5b:c1:ea:2d:3e:a0:a9:76:dd:8c:4e:cc:
c5:5a:54:d2:80:fd:c7:73:8a:4b:24:a9:21:0b:e0:
fb:e6:46:f7:5d:06:36:e7:14:cb:dd:ae:e1:26:8e:
99:6c:2e:10:8d:07:86:2f:83:7b:58:a6:98:a5:d3:
f9:21:f9:30:f9:a5:ed:18:1d:75:06:0f:a3:58:db:
1d:67:c4:7a:4c:bf:78:d9:b8:de:c4:15:29:2c:9b:
af:7a:d4:0d:7f:79:1d:b8:a2:55:c8:b9:06:36:a3:
a2:36:4d:88:19:0b:01:54:79:cd:d2:b8:a3:e2:46:
6c:ce:9c:b0:3b:22:42:af:47:63:12:5d:33:72:ab:
fb:13:5a:dc:d3:ab:58:b8:da:b1:32:da:f5:01:12:
8e:de:69:3d:85:3f:14:44:4e:43:06:2c:66:f7:6f:
35:ea:04:6d:ed:2d:3e:62:ff:95:7c:98:ea:20:d2:
7b:e0:9f:91:43:ba:23:ec:dc:e0:54:bd:54:e4:b4:
27:af:37:97:b2:45:aa:1a:93:81:60:09:c8:68:f0:
17:b4:e5:8f:d9:d5:a4:21:08:21:23:8d:9d:f8:25:
0f:43:48:05:36:20:e8:19:54:a3:16:9e:a0:cb:74:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:2F:6D:AA:01:A6:36:3A:E7:D1:0B:A5:3E:B5:EB:EA:79:77:2E
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:56:20:9d:86:d2:57:36:e8:ab:b0:cb:75:44:4f:bc:bc:9b:
c4:40:2d:d2:93:d4:23:a6:f3:57:2e:0a:49:39:e4:32:ae:bf:
6f:91:9d:bd:c9:4e:d0:a8:3c:c5:b6:44:cf:1a:d1:7c:6f:b5:
fb:60:4a:83:93:dc:3a:33:03:de:8b:dc:33:cd:3f:d8:e7:76:
c8:17:e5:9d:3a:ca:c1:61:d1:27:be:97:b9:2d:da:e0:92:2b:
24:42:b2:ba:e5:4a:19:e5:3f:64:d4:3d:a3:f8:92:6e:5a:9c:
8d:7b:53:75:4a:83:ae:60:d3:83:60:bd:03:10:84:6b:02:80:
bd:1e:f0:25:10:0f:f2:83:56:e5:a4:80:4b:59:5c:08:92:1f:
13:83:65:a9:b5:ba:24:7c:d6:a7:bd:32:1d:8a:15:31:64:aa:
e8:06:f5:a2:aa:bc:10:60:c8:fa:4c:cd:be:e9:3d:ea:b9:39:
6f:5b:c4:da:4f:21:68:04:7c:d7:c7:c0:3b:28:78:1d:79:3c:
f3:9d:81:13:fd:35:f2:ee:37:60:16:a8:1c:6c:5a:c3:e2:0a:
21:5c:41:95:d0:13:29:29:68:fc:c7:7e:a9:8f:e6:a1:ef:1c:
db:b6:39:0e:d4:4a:65:2c:ac:d4:dc:5f:a9:82:03:18:0e:48:
16:15:d5:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc3kzEo3vk8NuUR9Va8qpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MDFhZGVkYmM5YzhmMWM2Y2YyMzg5ZmM3Zjc0MWVkZjRm
MTlmMmMwHhcNMjUwODIzMTUwMjA1WhcNMjUwODI0MTUwMjA1WjAzMTEwLwYDVQQD
EyhjMDY4MmY2ZGFhMDFhNjM2M2FlN2QxMGJhNTNlYjVlYmVhNzk3NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c99tsTHsfZUFhmD7i7v+Wtbweot
PqCpdt2MTszFWlTSgP3Hc4pLJKkhC+D75kb3XQY25xTL3a7hJo6ZbC4QjQeGL4N7
WKaYpdP5Ifkw+aXtGB11Bg+jWNsdZ8R6TL942bjexBUpLJuvetQNf3kduKJVyLkG
NqOiNk2IGQsBVHnN0rij4kZszpywOyJCr0djEl0zcqv7E1rc06tYuNqxMtr1ARKO
3mk9hT8URE5DBixm92816gRt7S0+Yv+VfJjqINJ74J+RQ7oj7NzgVL1U5LQnrzeX
skWqGpOBYAnIaPAXtOWP2dWkIQghI42d+CUPQ0gFNiDoGVSjFp6gy3SbQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBoL22qAaY2OufRC6U+tevqeXcuMB8GA1UdIwQY
MBaAFGQBre28nI8cbPI4n8f3Qe308Z8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEt
MzU2YzA5NmJjNmY5LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5
LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVYgnYbS
Vzboq7DLdURPvLybxEAt0pPUI6bzVy4KSTnkMq6/b5GdvclO0Kg8xbZEzxrRfG+1
+2BKg5PcOjMD3ovcM80/2Od2yBflnTrKwWHRJ76XuS3a4JIrJEKyuuVKGeU/ZNQ9
o/iSblqcjXtTdUqDrmDTg2C9AxCEawKAvR7wJRAP8oNW5aSAS1lcCJIfE4NlqbW6
JHzWp70yHYoVMWSq6Ab1oqq8EGDI+kzNvuk96rk5b1vE2k8haAR818fAOyh4HXk8
852BE/018u43YBaoHGxaw+IKIVxBldATKSlo/Md+qY/moe8c27Y5DtRKZSys1Nxf
qYIDGA5IFhXV6w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:58 2025 by rpki-client