Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: kkbzPOofLwpaMEsSWTJNynnCq2pa2Z2gilvddt+pie0=
Subject key identifier: E3:8D:88:37:C1:9E:3E:B3:16:61:38:C1:58:B3:04:0D:71:4B:C0:65
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 0198D5BC4ED646EEB6C61DF397E54EE0E7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: dENFBFZOzeatp/KaGMyjU168Qv9irLMagHnoyl1TBQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4e:d6:46:ee:b6:c6:1d:f3:97:e5:4e:e0:e7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=e38d8837c19e3eb3166138c158b3040d714bc065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:b7:0a:61:ba:9a:68:ea:b2:8b:f0:dd:f8:
54:75:35:b5:0c:cd:fc:4c:53:86:2b:6f:fa:0e:49:
48:f7:6d:6b:3a:cf:ca:bf:d9:0c:dd:f4:a9:25:45:
cd:27:88:dd:f8:fe:e5:df:a5:95:07:9c:ad:fa:64:
a2:93:cd:78:bf:7c:e8:06:13:b5:07:f5:a3:5e:d8:
8c:d9:cd:55:d6:49:55:f5:52:b6:b0:be:e0:20:0c:
00:6b:ee:d7:d6:bf:e8:8e:7c:13:01:a0:83:38:c7:
77:c3:43:68:ee:32:e5:58:9d:ec:97:06:15:71:f3:
f3:80:48:b3:a4:80:97:ed:22:61:72:9c:56:fc:95:
5c:1c:c3:07:22:6e:ff:bc:3b:90:cd:96:ae:a9:12:
28:50:7b:21:66:78:6a:49:e8:f1:44:a9:cc:4c:21:
07:5d:6e:d2:df:03:9f:eb:24:db:10:9a:49:da:b6:
c3:f5:00:40:06:a9:b8:65:07:18:d0:98:95:db:5b:
bd:c5:ab:f2:92:d8:52:50:bf:d3:fa:6f:d7:ad:98:
5f:67:c2:cb:40:49:8e:be:40:39:a6:6e:92:1b:30:
d1:7c:c3:48:b7:93:70:ae:b8:34:22:69:68:95:1b:
0a:e4:8a:ec:f9:a1:1f:34:33:c1:a6:9e:d7:76:44:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:88:37:C1:9E:3E:B3:16:61:38:C1:58:B3:04:0D:71:4B:C0:65
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:67:69:29:5f:19:ad:b9:48:e6:12:ed:7b:e7:16:95:1c:06:
d6:43:a4:a7:b2:48:7f:73:72:83:e3:4b:d7:6a:d9:25:a2:cc:
3d:57:34:db:c3:d2:a5:88:6c:03:99:78:a4:c9:a3:6b:e1:cc:
68:f6:30:bc:0e:25:8d:4b:c5:1b:f1:5f:a5:52:7a:14:0e:6b:
a6:6f:5c:dc:9a:29:e2:d3:95:cc:8f:18:20:fc:a2:51:bc:9f:
4c:55:c8:d2:f9:6b:b2:56:99:61:03:ad:84:e1:aa:af:0e:77:
53:f0:d6:46:de:2e:df:da:41:67:cf:0b:1e:a5:5b:3b:1a:11:
4c:6c:47:23:5a:26:23:a3:3a:57:07:44:04:b3:7c:11:ce:9d:
62:a5:7b:cd:af:88:62:a3:8c:ed:8b:70:7d:a3:f2:69:36:08:
c5:bb:e0:37:fd:76:e5:77:ac:73:29:0f:c2:86:b6:1f:a4:92:
f8:c7:8c:38:c6:8b:f4:bf:bd:22:c0:0c:bd:08:d6:5a:60:c9:
94:93:b4:a2:28:dc:6c:23:c9:f9:7f:1c:ac:04:7d:0d:41:dc:
b7:4b:ed:f7:30:1d:1a:ae:b8:98:78:bc:34:8b:03:90:1b:83:
cb:93:d6:fd:80:d9:a7:54:36:17:8c:cb:24:2a:58:bc:56:a6:
84:f4:f3:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvE7WRu62xh3zl+VO4OfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzdlZjJiNzY2NTk0ODkyZDc4OTI4Y2JlNzgxNzc5ZmRj
ZTY3ZDAwHhcNMjUwODIzMDcwMjI0WhcNMjUwODI0MDcwMjI0WjAzMTEwLwYDVQQD
EyhlMzhkODgzN2MxOWUzZWIzMTY2MTM4YzE1OGIzMDQwZDcxNGJjMDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6a3CmG6mmjqsovw3fhUdTW1DM38
TFOGK2/6DklI921rOs/Kv9kM3fSpJUXNJ4jd+P7l36WVB5yt+mSik814v3zoBhO1
B/WjXtiM2c1V1klV9VK2sL7gIAwAa+7X1r/ojnwTAaCDOMd3w0No7jLlWJ3slwYV
cfPzgEizpICX7SJhcpxW/JVcHMMHIm7/vDuQzZauqRIoUHshZnhqSejxRKnMTCEH
XW7S3wOf6yTbEJpJ2rbD9QBABqm4ZQcY0JiV21u9xavykthSUL/T+m/XrZhfZ8LL
QEmOvkA5pm6SGzDRfMNIt5Nwrrg0ImlolRsK5Irs+aEfNDPBpp7XdkTiPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOONiDfBnj6zFmE4wVizBA1xS8BlMB8GA1UdIwQY
MBaAFM/H7yt2ZZSJLXiSjL54F3n9zmfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjct
OGNkNTViMDNkMjJkLzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jZDBiMmMtMjllMi00NzM3LTllYjctOGNkNTViMDNkMjJk
LzEvejhmdkszWmxsSWt0ZUpLTXZuZ1hlZjNPWjlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWdpKV8Z
rblI5hLte+cWlRwG1kOkp7JIf3Nyg+NL12rZJaLMPVc028PSpYhsA5l4pMmja+HM
aPYwvA4ljUvFG/FfpVJ6FA5rpm9c3Jop4tOVzI8YIPyiUbyfTFXI0vlrslaZYQOt
hOGqrw53U/DWRt4u39pBZ88LHqVbOxoRTGxHI1omI6M6VwdEBLN8Ec6dYqV7za+I
YqOM7YtwfaPyaTYIxbvgN/125XescykPwoa2H6SS+MeMOMaL9L+9IsAMvQjWWmDJ
lJO0oijcbCPJ+X8crAR9DUHct0vt9zAdGq64mHi8NIsDkBuDy5PW/YDZp1Q2F4zL
JCpYvFamhPTz/g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:42 2025 by rpki-client