Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: LPZiDCUaZW4KSc48FoZW0WGkicNaqM+OqQHwgx5SfCE=
Subject key identifier: C7:6D:BA:95:15:7B:A3:5D:A3:6B:84:B9:C9:6D:BA:14:9E:0C:00:C7
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 0198D5F13608F12BD25CF13A292B541E9FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 1359
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: 3X5Bb8j3+RTrcEXfwUwzTLMAHVX/hUdbBXJHEoSrCZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:36:08:f1:2b:d2:5c:f1:3a:29:2b:54:1e:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=c76dba95157ba35da36b84b9c96dba149e0c00c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:d8:7a:9e:c9:f7:61:7f:73:d8:fc:43:d3:
f2:be:b3:be:b0:21:f1:e7:ca:90:3e:62:a5:6f:5a:
3a:82:cd:45:2e:11:5b:69:2d:c7:47:fe:a4:d7:60:
2b:29:fb:c5:f5:ec:29:b3:a7:64:16:42:17:aa:72:
d4:b8:7b:7a:27:27:23:0c:95:25:85:0f:f7:01:76:
36:ab:32:27:18:93:60:ec:5f:df:c3:89:cd:4d:c1:
1e:db:2d:59:f8:c2:63:1e:38:aa:ca:1a:71:7c:47:
d3:54:4d:b1:0e:02:2b:c4:f0:ae:e2:e4:dc:1e:5b:
a5:1e:3a:95:3a:d6:9c:12:68:8b:4a:c0:a2:b2:2a:
b1:0d:14:84:a7:e7:d0:82:49:72:4c:5d:1b:4e:c6:
75:66:ab:20:51:4b:63:47:2e:82:a8:00:b2:b4:1c:
a3:0d:f9:be:8c:ec:26:7d:6c:af:c5:26:b0:12:df:
e7:c7:b8:36:9d:0a:29:fa:e7:53:b4:d1:9f:4d:a2:
2b:3b:75:a1:9e:ed:98:c1:5c:77:2a:fe:e1:5f:02:
ac:cd:0f:16:a8:aa:bb:32:cc:eb:37:c5:58:68:52:
b7:94:68:9c:0e:e5:09:9d:0f:1e:c8:a5:7d:5c:88:
72:91:42:44:ce:b3:18:5b:94:6a:61:da:9b:b8:9c:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:BA:95:15:7B:A3:5D:A3:6B:84:B9:C9:6D:BA:14:9E:0C:00:C7
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:28:ee:2b:dc:48:ca:5f:0a:df:e9:81:c7:57:1a:4e:db:
2b:a4:85:90:17:cf:a1:ac:b9:8c:6f:39:30:69:e1:a4:e3:c3:
72:72:7f:d0:a1:62:6d:85:2f:d5:a4:c6:7a:eb:0b:02:b5:b8:
59:c0:3b:c6:3b:95:0e:af:db:f3:fe:bd:02:26:b3:6b:93:78:
6c:bd:85:4b:72:98:2f:dc:6d:fb:30:ef:f5:79:9c:15:a9:14:
a8:28:b2:51:6b:e9:e3:ad:6f:99:3b:ce:7a:c2:5b:71:b5:c2:
ca:44:a5:33:d9:92:8d:77:86:15:6b:93:4a:95:16:7b:39:8e:
e0:9a:f2:94:fd:dc:43:27:32:ac:6f:eb:f2:05:1c:6e:1e:6d:
43:19:26:65:e0:e0:28:bc:65:a9:d0:1f:32:b5:0e:06:b8:82:
4a:87:c2:f3:b5:08:61:70:a9:5e:16:b7:f3:7d:36:2c:f6:bd:
27:d6:54:a5:2e:14:6d:3a:d7:73:d7:2e:72:b4:49:2b:75:43:
ce:d1:ec:4a:56:7c:22:a4:78:60:ee:cc:f8:73:b6:0e:7e:77:
35:12:da:95:99:e9:45:96:f2:9e:96:d2:c3:b1:e6:13:b4:64:
f7:fe:7d:dc:31:13:6e:60:90:98:7c:69:95:b8:9e:ff:6a:3d:
68:b5:57:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8TYI8SvSXPE6KStUHp+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGRjMzA4ZmU2ZDg2MTIxMDI2Zjk3NDRhZGQ0MGUxMTcz
NTQzZGUwHhcNMjUwODIzMDgwMDExWhcNMjUwODI0MDgwMDExWjAzMTEwLwYDVQQD
EyhjNzZkYmE5NTE1N2JhMzVkYTM2Yjg0YjljOTZkYmExNDllMGMwMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nHYep7J92F/c9j8Q9PyvrO+sCHx
58qQPmKlb1o6gs1FLhFbaS3HR/6k12ArKfvF9ewps6dkFkIXqnLUuHt6JycjDJUl
hQ/3AXY2qzInGJNg7F/fw4nNTcEe2y1Z+MJjHjiqyhpxfEfTVE2xDgIrxPCu4uTc
HlulHjqVOtacEmiLSsCisiqxDRSEp+fQgklyTF0bTsZ1ZqsgUUtjRy6CqACytByj
Dfm+jOwmfWyvxSawEt/nx7g2nQop+udTtNGfTaIrO3Whnu2YwVx3Kv7hXwKszQ8W
qKq7MszrN8VYaFK3lGicDuUJnQ8eyKV9XIhykUJEzrMYW5RqYdqbuJwIJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdtupUVe6Ndo2uEucltuhSeDADHMB8GA1UdIwQY
MBaAFMxNwwj+bYYSECb5dErdQOEXNUPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQt
ZDIyNmEzYjFmNDJkLzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQtZDIyNmEzYjFmNDJk
LzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFIo7ivc
SMpfCt/pgcdXGk7bK6SFkBfPoay5jG85MGnhpOPDcnJ/0KFibYUv1aTGeusLArW4
WcA7xjuVDq/b8/69Aiaza5N4bL2FS3KYL9xt+zDv9XmcFakUqCiyUWvp461vmTvO
esJbcbXCykSlM9mSjXeGFWuTSpUWezmO4JrylP3cQycyrG/r8gUcbh5tQxkmZeDg
KLxlqdAfMrUOBriCSofC87UIYXCpXha38302LPa9J9ZUpS4UbTrXc9cucrRJK3VD
ztHsSlZ8IqR4YO7M+HO2Dn53NRLalZnpRZbynpbSw7HmE7Rk9/593DETbmCQmHxp
lbie/2o9aLVXFg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:54 2025 by rpki-client