Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: 4vLZmU7OsXFq37kPwJey42U+Aw/Ka4wMGDJOh8UXaeY=
Subject key identifier: D2:83:48:0B:F9:CB:76:69:CC:1B:AA:EF:D9:A4:27:0F:E7:F7:B0:AB
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 0198D54DEB080025BB7E448B22E5441DFE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 10FF
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=)
2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: kgzXqNUR706WpOUhM4nddzPabtSJFAP9EZ5RkM+2Oto=)
3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:eb:08:00:25:bb:7e:44:8b:22:e5:44:1d:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=d283480bf9cb7669cc1baaefd9a4270fe7f7b0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:6a:ef:95:8c:69:31:d1:13:3e:ba:3b:5f:
f9:9f:32:95:f1:59:a1:ea:6f:c8:9f:15:1f:dd:5c:
a1:89:ce:ce:87:f0:77:a7:2d:70:fc:21:eb:8f:f0:
5f:66:3a:38:ea:9f:f2:ce:a0:4e:eb:44:54:51:0d:
ba:d4:b1:8a:1a:18:a2:32:95:98:6a:2a:b9:cd:ff:
7f:a1:e3:ec:05:77:60:a2:18:af:68:92:f8:2b:50:
4c:15:a6:2e:80:22:2e:1f:d1:23:90:ee:32:a1:b9:
00:57:9b:b5:26:21:51:ae:dd:6c:bc:6c:61:c8:a3:
ef:e2:42:e7:52:0e:d6:39:9d:32:c1:70:4e:48:d6:
b1:32:c1:95:9b:17:24:9f:29:60:95:21:24:64:e1:
45:62:86:72:69:3d:56:26:6b:58:c8:f1:3e:d2:36:
4a:ed:fc:37:51:ca:aa:bf:b7:10:a2:f2:ab:b5:bf:
ec:d3:f8:08:e3:b9:ea:da:4b:79:af:07:cb:f0:3f:
3f:81:92:e9:99:38:a8:a0:3c:a3:21:b2:3c:c9:61:
4a:57:73:87:14:48:32:a3:65:1d:34:ea:7f:52:6a:
f6:c5:e3:56:f3:40:0b:5c:6e:61:9c:d2:b5:37:d0:
af:83:1f:93:2e:cc:a8:56:6b:cb:1d:a5:2f:d2:5c:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:83:48:0B:F9:CB:76:69:CC:1B:AA:EF:D9:A4:27:0F:E7:F7:B0:AB
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d2:29:7b:53:14:8c:74:ae:6c:ec:87:a1:fd:cc:81:bd:03:
45:30:e8:bf:aa:49:14:75:2e:79:aa:43:d8:4d:46:65:53:74:
dc:49:60:b6:21:1e:5b:7c:0b:12:68:a4:2c:52:40:8f:6c:23:
5c:55:e7:97:1b:75:dd:e9:4e:4e:f4:14:0e:1e:8a:65:3f:f1:
88:32:1c:6a:fb:d2:a4:26:9f:3c:23:60:79:8d:9f:c2:2e:b7:
59:cd:f8:29:eb:de:d8:22:07:96:1d:e9:81:65:57:e8:56:ff:
dc:15:bc:a3:33:2d:67:25:8d:0c:18:87:6e:76:6b:39:19:a8:
9a:1a:8b:b3:57:c9:d9:fb:21:6d:f2:84:68:4e:13:6a:03:3c:
8f:71:b9:7b:ea:18:8c:3f:21:4c:3b:49:30:a6:49:98:4d:8a:
fd:11:c4:1f:01:e9:b5:37:cf:7d:98:73:aa:bb:5f:95:a3:30:
ae:db:db:c5:83:95:f3:b4:e4:4d:d1:13:0c:48:ff:dd:e9:ed:
42:de:34:26:b8:94:a0:71:6f:cb:33:bf:32:9f:f9:40:24:c5:
49:c7:bc:f1:9d:4c:88:06:0d:a9:b9:32:5f:2a:d9:4c:e0:87:
59:a4:53:99:18:f3:a7:86:90:8d:f5:ec:8b:a2:6e:b0:df:87:
e0:ac:ec:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTesIACW7fkSLIuVEHf6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWE1MzU5MzVhNGJjNzg2YzFkZDc1YjdmMTA4N2YxM2Yz
ZTA4NzQwHhcNMjUwODIzMDUwMTUwWhcNMjUwODI0MDUwMTUwWjAzMTEwLwYDVQQD
EyhkMjgzNDgwYmY5Y2I3NjY5Y2MxYmFhZWZkOWE0MjcwZmU3ZjdiMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkJq75WMaTHREz66O1/5nzKV8Vmh
6m/InxUf3Vyhic7Oh/B3py1w/CHrj/BfZjo46p/yzqBO60RUUQ261LGKGhiiMpWY
aiq5zf9/oePsBXdgohivaJL4K1BMFaYugCIuH9EjkO4yobkAV5u1JiFRrt1svGxh
yKPv4kLnUg7WOZ0ywXBOSNaxMsGVmxcknylglSEkZOFFYoZyaT1WJmtYyPE+0jZK
7fw3Ucqqv7cQovKrtb/s0/gI47nq2kt5rwfL8D8/gZLpmTiooDyjIbI8yWFKV3OH
FEgyo2UdNOp/Umr2xeNW80ALXG5hnNK1N9Cvgx+TLsyoVmvLHaUv0lzOvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKDSAv5y3ZpzBuq79mkJw/n97CrMB8GA1UdIwQY
MBaAFM1aU1k1pLx4bB3XW38Qh/E/Pgh0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUt
MDVjMTNmODkwYjljLzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iOWFhZDUtY2ZlMi00NDgwLWFjNWUtMDVjMTNmODkwYjlj
LzEvelZwVFdUV2t2SGhzSGRkYmZ4Q0g4VDgtQ0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9Ipe1MU
jHSubOyHof3Mgb0DRTDov6pJFHUueapD2E1GZVN03ElgtiEeW3wLEmikLFJAj2wj
XFXnlxt13elOTvQUDh6KZT/xiDIcavvSpCafPCNgeY2fwi63Wc34Keve2CIHlh3p
gWVX6Fb/3BW8ozMtZyWNDBiHbnZrORmomhqLs1fJ2fshbfKEaE4TagM8j3G5e+oY
jD8hTDtJMKZJmE2K/RHEHwHptTfPfZhzqrtflaMwrtvbxYOV87TkTdETDEj/3ent
Qt40JriUoHFvyzO/Mp/5QCTFSce88Z1MiAYNqbkyXyrZTOCHWaRTmRjzp4aQjfXs
i6JusN+H4Kzs+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:46 2025 by rpki-client