Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: 8CrSWWub4W8KVAuVLThVGUGlh/+Vkkh4+rShIL6rl+g=
Subject key identifier: 18:64:81:B5:82:BA:74:3C:E2:D3:B0:E5:3A:01:1E:27:2D:20:04:96
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 0197B7450D0E9D7FDEF5942C8FF2594ED1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0BA3
Signing time: Sat 28 Jun 2025 16:00:45 +0000
Manifest this update: Sat 28 Jun 2025 16:00:45 +0000
Manifest next update: Sun 29 Jun 2025 16:00:45 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: AwrL9U4OoxSyV17G9r4Cw+PQgyv4e8wMb3IH2HFgL6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0d:0e:9d:7f:de:f5:94:2c:8f:f2:59:4e:d1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Jun 28 16:00:45 2025 GMT
Not After : Jun 29 16:00:45 2025 GMT
Subject: CN=186481b582ba743ce2d3b0e53a011e272d200496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:c9:8d:5d:3e:29:bd:aa:d0:3d:27:15:41:
b0:c1:ae:d2:4f:92:32:2b:03:c6:05:f4:0d:35:c8:
dd:12:07:7a:b1:02:36:ff:8e:c9:04:9a:97:e8:2c:
cc:d3:17:0f:a0:68:36:cc:c2:c4:46:92:a3:a7:1f:
9c:d2:0b:52:df:6e:86:af:d7:10:04:58:6b:44:6c:
b7:ef:be:37:e0:7f:a8:4f:2a:5a:ef:be:84:6a:3c:
30:eb:61:6b:dd:c8:64:82:1a:89:d0:f0:62:1b:c6:
1a:bf:be:7f:47:53:28:eb:86:9c:20:00:44:c8:03:
6f:72:76:b5:11:a1:d2:bb:71:93:82:69:c8:04:a7:
9d:bf:57:73:1b:94:07:b9:59:5f:ab:43:bc:fa:31:
e6:c6:c8:c9:f6:76:15:dc:e2:6a:96:54:7f:3f:aa:
c7:2d:b8:a8:33:84:7e:4b:50:81:a9:21:9a:d3:3f:
3d:9a:0a:17:44:63:62:16:99:80:8f:75:62:50:a2:
5d:73:0d:7e:d9:5a:40:f9:02:61:36:93:99:29:ac:
8c:1c:8f:6f:db:3b:12:e0:91:38:77:79:57:58:29:
c8:1b:c8:74:ed:d3:c0:83:88:60:e3:91:fa:1d:19:
de:c3:76:4a:ab:ba:a5:32:5d:14:a1:ac:d0:71:06:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:64:81:B5:82:BA:74:3C:E2:D3:B0:E5:3A:01:1E:27:2D:20:04:96
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4a:33:d4:28:04:67:e8:7a:48:c5:81:40:e1:93:61:6e:92:
dc:ef:d2:6d:c2:51:71:e3:e8:97:a3:9d:75:dd:88:75:61:24:
fd:3d:4a:84:f9:e9:61:2e:79:47:b9:64:7f:3f:0a:81:e0:b2:
2b:cb:6f:4e:a3:ad:6e:8e:e0:d6:62:c1:19:72:e4:f2:5f:7c:
19:67:54:bd:4e:d6:f9:5a:e6:c8:48:80:80:54:1d:1e:85:8b:
3b:7a:04:b9:be:fa:8a:64:1b:b8:d5:41:e9:3e:ab:42:19:5e:
9d:78:a6:c2:82:53:a5:c0:e6:b8:0b:57:c1:34:85:2a:f3:b5:
5e:f6:28:9d:b2:cb:6a:fa:2b:0d:4f:a4:89:b0:ff:fc:bd:33:
78:23:32:60:64:6d:e7:c7:6e:6c:43:0c:a6:2a:46:6e:d2:33:
38:47:5f:2e:b5:fa:41:eb:e8:1d:06:22:dd:7d:54:d1:a9:ab:
f2:ea:f1:89:39:c5:83:d0:d3:d4:dd:e5:f7:66:66:76:f0:99:
f8:da:b1:d4:bb:0c:2b:67:b6:10:46:16:6d:c9:2c:39:a4:a7:
bc:e3:02:b4:ac:e2:5b:6a:a6:69:00:84:90:66:84:f4:67:ac:
a7:1a:46:b8:2b:a3:16:83:f3:e7:e7:95:36:02:3d:68:29:6b:
61:26:6a:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RQ0OnX/e9ZQsj/JZTtGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMjBiY2FmNzIxMjNlMmQ5ZjVlMjc4ODZiMzgzOWI3NDI0
NDEwYjcwHhcNMjUwNjI4MTYwMDQ1WhcNMjUwNjI5MTYwMDQ1WjAzMTEwLwYDVQQD
EygxODY0ODFiNTgyYmE3NDNjZTJkM2IwZTUzYTAxMWUyNzJkMjAwNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNLJjV0+Kb2q0D0nFUGwwa7ST5Iy
KwPGBfQNNcjdEgd6sQI2/47JBJqX6CzM0xcPoGg2zMLERpKjpx+c0gtS326Gr9cQ
BFhrRGy377434H+oTypa776Eajww62Fr3chkghqJ0PBiG8Yav75/R1Mo64acIABE
yANvcna1EaHSu3GTgmnIBKedv1dzG5QHuVlfq0O8+jHmxsjJ9nYV3OJqllR/P6rH
LbioM4R+S1CBqSGa0z89mgoXRGNiFpmAj3ViUKJdcw1+2VpA+QJhNpOZKayMHI9v
2zsS4JE4d3lXWCnIG8h07dPAg4hg45H6HRnew3ZKq7qlMl0UoazQcQbc0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhkgbWCunQ84tOw5ToBHictIASWMB8GA1UdIwQY
MBaAFM0gvK9yEj4tn14niGs4ObdCRBC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYt
MGY4MmMxYmExODA2LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYtMGY4MmMxYmExODA2
LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFEoz1CgE
Z+h6SMWBQOGTYW6S3O/SbcJRcePol6Oddd2IdWEk/T1KhPnpYS55R7lkfz8KgeCy
K8tvTqOtbo7g1mLBGXLk8l98GWdUvU7W+VrmyEiAgFQdHoWLO3oEub76imQbuNVB
6T6rQhlenXimwoJTpcDmuAtXwTSFKvO1XvYonbLLavorDU+kibD//L0zeCMyYGRt
58dubEMMpipGbtIzOEdfLrX6QevoHQYi3X1U0amr8urxiTnFg9DT1N3l92ZmdvCZ
+Nqx1LsMK2e2EEYWbcksOaSnvOMCtKziW2qmaQCEkGaE9GespxpGuCujFoPz5+eV
NgI9aClrYSZqcA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:32 2025 by rpki-client