Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
File: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft (raw, json)
Hash identifier: a1RKERwZjx6kdJdhtNMJtzKyTZPgrKZw3sWhptxOrE0=
Subject key identifier: 1F:AD:44:00:29:24:F8:60:EA:5C:2E:DF:2F:B3:68:8F:EC:16:61:3A
Authority key identifier: 67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
Certificate issuer: /CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Certificate serial: 0198D773520F4CFBAC467E0A41D596A18515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
Manifest number: 04F7
Signing time: Sat 23 Aug 2025 15:01:55 +0000
Manifest this update: Sat 23 Aug 2025 15:01:55 +0000
Manifest next update: Sun 24 Aug 2025 15:01:55 +0000
Files and hashes: 1: 7DC3Mg4t-WOxhXbaIPH6MtGSfT0.roa (hash: Y7dInOrS0ZTrLRgU8acVZK7oVPUrhKyIbJiSvV0jVfY=)
2: Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl (hash: uEg6wYJpH+zzslTgx7SXoPPy/oriOAUaVyo7tZzzbsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:52:0f:4c:fb:ac:46:7e:0a:41:d5:96:a1:85:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6743e5de39c21f8a78be6a457a3b86d5822bc17c
Validity
Not Before: Aug 23 15:01:55 2025 GMT
Not After : Aug 24 15:01:55 2025 GMT
Subject: CN=1fad44002924f860ea5c2edf2fb3688fec16613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:87:c0:30:9c:56:c4:19:bd:0b:2d:17:c7:
e7:18:f0:31:83:02:23:0a:4d:d2:ba:f8:b9:e6:df:
4b:be:47:56:ea:eb:72:58:bc:db:e2:80:2c:46:46:
6e:1b:70:c0:60:6c:56:20:1d:ef:7f:95:fd:36:84:
d0:df:56:a4:dd:b6:1f:0b:c1:80:42:13:7d:a3:93:
b3:f3:22:de:dd:9f:c0:0d:42:f2:c6:cb:86:e9:bb:
fa:cb:cc:22:4f:97:cf:5e:75:1b:9d:0a:d7:04:aa:
1a:72:83:76:19:27:01:15:dc:11:63:5f:3d:a3:e9:
0a:89:ce:38:be:e5:0b:36:78:72:d9:f6:bf:fc:db:
2a:f3:3e:82:d7:ff:0c:bf:10:17:13:e1:14:53:34:
00:c5:2f:2b:45:57:aa:05:92:69:ce:be:20:19:3b:
e0:89:ed:e2:87:c5:c7:28:9b:df:34:07:b6:87:62:
86:ad:e1:ab:37:c8:3e:f8:8a:a7:a4:18:2b:ae:f1:
9f:aa:24:27:74:41:eb:ea:b4:7f:6e:b1:49:3a:8a:
14:cd:3a:67:b4:91:0e:eb:23:bf:10:d5:5d:70:cb:
62:7f:55:d0:ae:02:86:15:82:46:dc:b8:4e:b4:da:
c7:da:a5:78:01:9d:da:3a:8b:0e:9c:14:46:7c:e4:
1f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AD:44:00:29:24:F8:60:EA:5C:2E:DF:2F:B3:68:8F:EC:16:61:3A
X509v3 Authority Key Identifier:
keyid:67:43:E5:DE:39:C2:1F:8A:78:BE:6A:45:7A:3B:86:D5:82:2B:C1:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/39e5c5-431c-4375-b7e1-7aae52176d8b/1/Z0Pl3jnCH4p4vmpFejuG1YIrwXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f0:ce:8f:a9:c5:fa:d2:cf:d6:40:f8:93:0a:a3:23:a9:56:
8f:49:e4:7a:84:3b:4d:bf:a0:f0:c8:94:bd:aa:68:4e:ad:21:
20:5c:80:36:cc:49:c8:72:10:f2:66:a5:7c:78:0c:1b:a6:8a:
0b:20:03:52:b8:06:ff:12:c0:77:06:2f:5a:a2:6e:fe:ca:6a:
fd:90:ed:61:e5:58:7a:f5:e5:de:c5:eb:18:04:2e:8c:83:8b:
ba:49:50:28:d5:f0:40:5b:9e:e1:fb:25:a7:ff:b0:6a:24:f0:
91:b9:31:2c:a0:a9:13:64:97:4a:62:ac:f7:ca:fb:69:c5:0d:
e5:9d:1d:4c:e5:1f:e7:da:80:6e:21:15:51:bf:5f:f2:0f:e0:
39:04:65:df:cc:76:ab:bf:ae:94:49:76:62:47:9e:c2:fa:9c:
3d:20:f8:56:86:03:21:50:02:66:22:ba:77:8b:ad:2b:f4:da:
fc:de:b1:ab:20:1d:49:04:b7:a4:17:9f:35:72:08:84:b8:60:
8d:63:e3:a3:d8:29:d8:6f:83:f9:0a:46:ea:cb:21:68:70:da:
c9:e8:30:a1:2a:b3:5f:7b:c3:c0:b2:99:27:b8:a2:30:36:37:
09:7c:7d:7b:b0:8c:98:dd:2b:df:60:f1:c3:31:3e:92:18:4a:
3d:f4:52:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXc1IPTPusRn4KQdWWoYUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDNlNWRlMzljMjFmOGE3OGJlNmE0NTdhM2I4NmQ1ODIy
YmMxN2MwHhcNMjUwODIzMTUwMTU1WhcNMjUwODI0MTUwMTU1WjAzMTEwLwYDVQQD
EygxZmFkNDQwMDI5MjRmODYwZWE1YzJlZGYyZmIzNjg4ZmVjMTY2MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+aHwDCcVsQZvQstF8fnGPAxgwIj
Ck3Suvi55t9LvkdW6utyWLzb4oAsRkZuG3DAYGxWIB3vf5X9NoTQ31ak3bYfC8GA
QhN9o5Oz8yLe3Z/ADULyxsuG6bv6y8wiT5fPXnUbnQrXBKoacoN2GScBFdwRY189
o+kKic44vuULNnhy2fa//Nsq8z6C1/8MvxAXE+EUUzQAxS8rRVeqBZJpzr4gGTvg
ie3ih8XHKJvfNAe2h2KGreGrN8g++IqnpBgrrvGfqiQndEHr6rR/brFJOooUzTpn
tJEO6yO/ENVdcMtif1XQrgKGFYJG3LhOtNrH2qV4AZ3aOosOnBRGfOQfxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+tRAApJPhg6lwu3y+zaI/sFmE6MB8GA1UdIwQY
MBaAFGdD5d45wh+KeL5qRXo7htWCK8F8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEt
N2FhZTUyMTc2ZDhiLzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zOWU1YzUtNDMxYy00Mzc1LWI3ZTEtN2FhZTUyMTc2ZDhi
LzEvWjBQbDNqbkNINHA0dm1wRmVqdUcxWUlyd1h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvDOj6nF
+tLP1kD4kwqjI6lWj0nkeoQ7Tb+g8MiUvapoTq0hIFyANsxJyHIQ8malfHgMG6aK
CyADUrgG/xLAdwYvWqJu/spq/ZDtYeVYevXl3sXrGAQujIOLuklQKNXwQFue4fsl
p/+waiTwkbkxLKCpE2SXSmKs98r7acUN5Z0dTOUf59qAbiEVUb9f8g/gOQRl38x2
q7+ulEl2YkeewvqcPSD4VoYDIVACZiK6d4utK/Ta/N6xqyAdSQS3pBefNXIIhLhg
jWPjo9gp2G+D+QpG6sshaHDayegwoSqzX3vDwLKZJ7iiMDY3CXx9e7CMmN0r32Dx
wzE+khhKPfRSMQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:33:39 2025 by rpki-client