Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: g84AuS/VWaY2+tO3W0mHJsQshFGA23OnoTcEMKzzrEE=
Subject key identifier: 12:BC:9F:A1:85:11:8D:09:2C:4C:BD:C7:EC:83:0E:45:76:52:67:6C
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 0198D47318FB6785E69C88C75E688DB5D160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: g1RDiTAwnQCowhblkIMOfK0tcQvUWj1Qp8P+MTotlrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:18:fb:67:85:e6:9c:88:c7:5e:68:8d:b5:d1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=12bc9fa185118d092c4cbdc7ec830e457652676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:23:86:0e:9a:29:10:86:b0:52:85:ec:f7:
60:bf:32:2a:90:69:f6:32:75:86:fe:08:0a:1a:01:
5c:3a:fb:ec:45:b9:dc:3b:2e:ba:d6:ab:81:44:24:
b3:07:fb:66:6d:7b:7f:36:5c:08:ca:b1:fc:0a:2a:
bb:1b:37:99:5e:45:19:75:64:60:7c:9a:0d:c4:81:
11:4d:cc:3a:08:c8:d6:ad:5a:7d:bf:cb:47:44:e2:
92:61:a1:56:f9:7c:4d:c7:87:f7:eb:bc:46:39:84:
0f:8f:de:4f:de:0d:1b:0e:bf:69:98:20:cd:80:2d:
d7:9a:36:03:b8:9b:bd:f8:18:f2:c8:7e:85:ae:79:
ee:a7:f7:f1:11:a8:58:84:fa:45:a4:4c:06:c2:1f:
1c:34:fa:e9:d8:81:39:90:2a:63:3d:8d:ea:51:24:
f6:d3:a2:77:67:93:ea:a8:d2:22:fb:81:06:d7:66:
36:23:74:80:8e:41:49:61:d5:88:53:76:a2:6b:74:
08:0b:04:6b:20:be:5d:ae:0d:dd:77:77:3d:04:4f:
75:7d:98:aa:c3:e9:50:1e:7a:63:c1:62:71:a6:34:
cb:de:5d:e8:bd:57:69:61:5d:a0:19:5b:19:73:25:
d3:51:dd:f4:04:91:64:d6:da:b4:22:bd:9d:a1:ae:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:9F:A1:85:11:8D:09:2C:4C:BD:C7:EC:83:0E:45:76:52:67:6C
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:a1:94:cd:c9:74:60:21:b0:bc:69:5a:a8:75:9c:17:c4:
a5:54:95:e1:13:75:1c:08:ca:f8:30:b0:9b:cb:e2:ba:3f:99:
4f:92:c9:5e:f1:be:66:1d:cd:58:5a:8a:bd:7f:cf:16:f8:25:
dd:0c:0a:b1:94:df:bd:a1:bf:42:31:78:84:cd:9d:76:d0:bf:
69:1e:2b:fe:4c:a0:5a:54:f0:47:79:64:a1:6d:eb:b4:72:e2:
84:0d:0d:cf:06:0c:68:f3:c9:bd:78:48:a0:04:d8:d2:dd:2e:
49:c9:86:51:26:4e:e8:8b:c6:c7:85:12:40:2a:37:16:52:49:
5e:59:b3:70:54:dc:5f:79:54:09:e0:bf:6c:91:d3:28:9f:36:
fe:f5:b4:4d:d2:6a:c4:c7:b2:bb:5a:c0:f5:b2:bc:1e:06:96:
c2:9d:b2:94:7e:f2:89:2f:36:c9:f9:24:8f:a2:44:1b:59:3f:
d4:7a:f0:34:93:8d:2c:54:5a:95:90:27:27:ed:6e:03:21:4b:
e6:2c:ff:1f:63:a2:06:25:3d:c4:f5:de:5b:05:fe:ad:9c:62:
18:57:57:e6:73:14:67:dc:c7:07:b5:fb:b9:a7:b0:40:4a:51:
03:f9:26:39:cc:ac:26:8f:96:20:3f:08:b6:a3:30:f1:29:67:
99:6b:e8:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcxj7Z4XmnIjHXmiNtdFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm
ZDg1NWIwHhcNMjUwODIzMDEwMjQ5WhcNMjUwODI0MDEwMjQ5WjAzMTEwLwYDVQQD
EygxMmJjOWZhMTg1MTE4ZDA5MmM0Y2JkYzdlYzgzMGU0NTc2NTI2NzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Mjhg6aKRCGsFKF7PdgvzIqkGn2
MnWG/ggKGgFcOvvsRbncOy661quBRCSzB/tmbXt/NlwIyrH8Ciq7GzeZXkUZdWRg
fJoNxIERTcw6CMjWrVp9v8tHROKSYaFW+XxNx4f367xGOYQPj95P3g0bDr9pmCDN
gC3XmjYDuJu9+BjyyH6Frnnup/fxEahYhPpFpEwGwh8cNPrp2IE5kCpjPY3qUST2
06J3Z5PqqNIi+4EG12Y2I3SAjkFJYdWIU3aia3QICwRrIL5drg3dd3c9BE91fZiq
w+lQHnpjwWJxpjTL3l3ovVdpYV2gGVsZcyXTUd30BJFk1tq0Ir2doa6/eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBK8n6GFEY0JLEy9x+yDDkV2UmdsMB8GA1UdIwQY
MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt
NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew
LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1ehlM3J
dGAhsLxpWqh1nBfEpVSV4RN1HAjK+DCwm8viuj+ZT5LJXvG+Zh3NWFqKvX/PFvgl
3QwKsZTfvaG/QjF4hM2ddtC/aR4r/kygWlTwR3lkoW3rtHLihA0NzwYMaPPJvXhI
oATY0t0uScmGUSZO6IvGx4USQCo3FlJJXlmzcFTcX3lUCeC/bJHTKJ82/vW0TdJq
xMeyu1rA9bK8HgaWwp2ylH7yiS82yfkkj6JEG1k/1HrwNJONLFRalZAnJ+1uAyFL
5iz/H2OiBiU9xPXeWwX+rZxiGFdX5nMUZ9zHB7X7uaewQEpRA/kmOcysJo+WID8I
tqMw8SlnmWvoVQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:25 2025 by rpki-client