Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: wR+vnSbnuBOYZay3bhc9BHSZREYLMJm5bLHkEtPN0dQ=
Subject key identifier: BF:9F:F5:F6:E1:65:3B:87:C0:95:83:49:EE:3A:AC:DC:00:7C:B8:02
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 0198D583D2A9BB872041BA41402B3FB7FEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 01AC
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: bbMYXM9PmdCpj57xI6TZqurU7TBmOIB8lRLGwgMr8yY=)
2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d2:a9:bb:87:20:41:ba:41:40:2b:3f:b7:fe:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=bf9ff5f6e1653b87c0958349ee3aacdc007cb802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4f:28:43:1d:ce:6c:32:0e:cc:2b:09:f1:55:
50:dd:24:89:d3:42:d7:fb:b6:98:6e:17:d6:50:7e:
de:98:1d:98:08:00:48:9a:91:0f:74:b0:37:0f:9e:
19:e5:61:fd:25:f7:74:0d:ec:0d:c8:f7:9b:70:49:
0f:56:9a:0e:f6:65:c9:7c:77:f4:81:34:59:af:cd:
6a:33:bc:9a:ab:e4:a8:f3:ec:f0:b1:f6:a9:28:5f:
b9:20:c6:bb:e7:78:a1:64:3d:f5:7f:ee:13:c1:3e:
0b:59:af:f5:2f:ce:4f:fd:67:f2:d1:4e:8a:2d:70:
a8:bb:d0:2d:b8:2c:12:3b:46:72:7d:2a:e0:14:ee:
81:02:3f:a0:6f:c4:fc:cb:14:b7:3b:95:bc:2f:f3:
65:7b:d9:df:99:79:fb:ac:a2:89:f7:51:bf:fc:3a:
66:f2:b2:2e:ff:42:01:d3:db:ee:f2:f5:e3:c1:ad:
07:77:2e:f3:7d:d9:60:7e:a9:c4:d4:8f:fe:7f:b6:
08:74:63:48:69:38:29:c8:fe:21:28:2b:51:df:d5:
55:02:9d:cd:b5:a1:06:e9:50:2e:ad:6a:b0:96:f2:
d6:68:35:b9:99:1d:1c:a3:57:06:98:8a:87:90:ac:
68:f0:fc:3a:df:9f:ea:50:1f:7a:68:1a:73:07:74:
a8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9F:F5:F6:E1:65:3B:87:C0:95:83:49:EE:3A:AC:DC:00:7C:B8:02
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a9:14:69:fa:2f:55:97:31:8e:3a:a1:9f:4b:3c:ef:05:5a:
78:af:76:0d:95:72:dc:c5:3e:f3:8f:ae:12:7e:8b:da:a1:68:
68:38:f1:08:8d:b1:3e:49:bb:7b:9f:c5:3f:f9:f8:90:f4:c7:
19:29:39:da:2b:3e:1a:b3:92:49:73:0c:02:83:a8:eb:1b:7d:
53:fc:59:0f:6d:67:e3:e6:7c:8a:86:8c:7a:48:8d:bc:49:be:
22:55:e2:e5:11:6c:ed:71:05:b0:fb:2b:54:9c:fb:a8:fa:3c:
f3:e6:b0:5a:94:cd:56:25:b2:16:9e:78:9f:70:52:7a:dc:8f:
47:4e:9a:76:4a:6c:d3:0a:f3:20:7d:ec:21:f8:e7:da:10:5f:
c8:6f:86:4c:4f:24:13:15:30:85:2b:b5:d2:b4:12:61:a9:d2:
dd:2b:f9:1c:ec:0f:d5:8a:59:8f:2d:68:76:a1:3d:77:69:52:
12:77:59:ba:02:d4:97:2e:93:cd:7e:dd:52:da:77:c3:8e:e6:
d1:a1:07:1e:4b:eb:8f:e8:95:ba:32:39:90:98:94:4a:9d:f2:
12:0d:f3:5f:43:80:22:5e:dd:48:d7:49:3a:1f:81:29:dc:65:
72:f7:3b:30:8f:0b:77:65:c6:f6:1f:ce:c1:f8:a1:db:ec:ef:
b6:52:b7:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9Kpu4cgQbpBQCs/t/7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl
NThhOTIwHhcNMjUwODIzMDYwMDQyWhcNMjUwODI0MDYwMDQyWjAzMTEwLwYDVQQD
EyhiZjlmZjVmNmUxNjUzYjg3YzA5NTgzNDllZTNhYWNkYzAwN2NiODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5E8oQx3ObDIOzCsJ8VVQ3SSJ00LX
+7aYbhfWUH7emB2YCABImpEPdLA3D54Z5WH9Jfd0DewNyPebcEkPVpoO9mXJfHf0
gTRZr81qM7yaq+So8+zwsfapKF+5IMa753ihZD31f+4TwT4LWa/1L85P/Wfy0U6K
LXCou9AtuCwSO0ZyfSrgFO6BAj+gb8T8yxS3O5W8L/Nle9nfmXn7rKKJ91G//Dpm
8rIu/0IB09vu8vXjwa0Hdy7zfdlgfqnE1I/+f7YIdGNIaTgpyP4hKCtR39VVAp3N
taEG6VAurWqwlvLWaDW5mR0co1cGmIqHkKxo8Pw635/qUB96aBpzB3SoxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+f9fbhZTuHwJWDSe46rNwAfLgCMB8GA1UdIwQY
MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt
OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk
LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6kUafov
VZcxjjqhn0s87wVaeK92DZVy3MU+84+uEn6L2qFoaDjxCI2xPkm7e5/FP/n4kPTH
GSk52is+GrOSSXMMAoOo6xt9U/xZD21n4+Z8ioaMekiNvEm+IlXi5RFs7XEFsPsr
VJz7qPo88+awWpTNViWyFp54n3BSetyPR06adkps0wrzIH3sIfjn2hBfyG+GTE8k
ExUwhSu10rQSYanS3Sv5HOwP1YpZjy1odqE9d2lSEndZugLUly6TzX7dUtp3w47m
0aEHHkvrj+iVujI5kJiUSp3yEg3zX0OAIl7dSNdJOh+BKdxlcvc7MI8Ld2XG9h/O
wfih2+zvtlK3MQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:01 2025 by rpki-client