Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: C29dWtyTm7yNmGeXUqMP4wMQ8qjkgjEmVcg5W/w98kc=
Subject key identifier: B5:BF:15:7F:27:EB:3D:A1:A0:4F:B1:11:B6:59:D9:1C:9B:40:91:55
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 0198D4E00346ACBF75BD085A4C34D874EF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 0419
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: XUif8Fp6VkJ59YlmaG0GsIuw841ANTJRhC53YUOH1lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:03:46:ac:bf:75:bd:08:5a:4c:34:d8:74:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=b5bf157f27eb3da1a04fb111b659d91c9b409155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:d0:1f:af:8a:39:6f:54:a3:29:62:9f:4f:
44:33:2c:be:17:2e:08:4c:4f:e3:3c:82:45:31:d8:
6c:64:20:77:ed:81:61:0e:5f:b5:b1:4a:f4:e3:e5:
09:30:b3:69:b4:fa:ae:25:a9:92:30:76:d1:8a:0c:
46:50:93:24:a9:bf:1c:9a:d7:3a:83:b3:4e:d4:24:
6b:2d:29:7d:d7:eb:de:c1:c5:76:43:dc:a3:86:e6:
ad:48:63:82:69:27:6c:0b:81:56:47:61:96:32:7f:
ea:c5:3a:5f:91:f1:99:00:da:56:3d:4f:1d:1c:53:
6b:b1:13:e2:90:fd:db:2e:6b:8b:78:d4:5e:a7:28:
24:22:37:da:ad:98:df:96:93:cd:39:5c:8e:01:2f:
fa:d2:0b:e8:03:a9:90:07:f5:25:85:ca:53:87:ba:
b2:0d:93:ab:79:6b:b0:ac:49:81:05:7d:fe:32:2b:
1a:7a:31:51:2f:ef:e2:5b:0c:75:a3:ee:64:ae:1d:
61:8f:83:46:f7:44:b4:10:60:d8:69:07:5c:f8:be:
c3:ef:a5:25:10:54:61:4b:a2:63:08:98:6d:52:d1:
41:ba:67:7d:9a:a0:89:f1:fb:52:9f:e2:90:bb:2b:
4f:cc:95:3f:de:c3:5c:bc:1f:08:5f:cc:28:f1:a2:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:15:7F:27:EB:3D:A1:A0:4F:B1:11:B6:59:D9:1C:9B:40:91:55
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:24:6a:3b:59:60:b7:e9:8d:16:70:91:98:5e:8f:e8:41:
41:b4:fd:ec:b8:f6:4d:40:b4:eb:b9:88:01:d3:92:ee:3a:49:
78:cc:f3:5b:25:42:87:ea:4a:00:60:ff:12:a6:8d:af:0d:74:
85:00:e9:53:0f:19:2c:6d:ba:ed:aa:32:8f:95:e8:c1:32:ea:
0a:7f:da:fd:7d:28:e2:a0:e5:08:f6:ec:a4:cd:6a:9c:b2:10:
3c:4b:b3:e7:46:41:64:1f:06:83:7b:9d:70:6b:67:4b:9d:d8:
f2:f9:8e:91:70:1b:94:65:16:13:3f:17:77:ab:49:09:83:cc:
bd:46:6e:e7:89:ae:d0:c7:ea:06:5f:f3:ba:ae:19:96:f8:78:
e7:64:9b:09:a9:29:2d:28:86:e5:20:25:b1:7c:cb:87:a1:88:
7b:32:ce:06:b5:51:a3:9c:24:27:2b:28:14:31:f4:09:68:4c:
24:f8:ee:6f:1b:a2:9c:d9:7b:4b:0d:74:25:eb:eb:76:5e:ab:
bb:b0:62:07:d5:08:a1:4d:c8:3c:85:e4:07:c6:77:93:8e:3a:
bc:76:d8:62:c1:c6:7b:57:0b:04:87:21:72:43:05:53:9b:88:
07:cd:3a:a8:c0:3d:29:1c:68:0b:9a:f5:b7:17:4a:11:90:cf:
4f:0e:7e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ANGrL91vQhaTDTYdO8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWQzOTQ2NDEzZGQxMTE2MWI0NmM3ZGY2YWQzNjJhOTkz
OGQ1ZDQwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD
EyhiNWJmMTU3ZjI3ZWIzZGExYTA0ZmIxMTFiNjU5ZDkxYzliNDA5MTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGbQH6+KOW9Uoylin09EMyy+Fy4I
TE/jPIJFMdhsZCB37YFhDl+1sUr04+UJMLNptPquJamSMHbRigxGUJMkqb8cmtc6
g7NO1CRrLSl91+vewcV2Q9yjhuatSGOCaSdsC4FWR2GWMn/qxTpfkfGZANpWPU8d
HFNrsRPikP3bLmuLeNRepygkIjfarZjflpPNOVyOAS/60gvoA6mQB/UlhcpTh7qy
DZOreWuwrEmBBX3+MisaejFRL+/iWwx1o+5krh1hj4NG90S0EGDYaQdc+L7D76Ul
EFRhS6JjCJhtUtFBumd9mqCJ8ftSn+KQuytPzJU/3sNcvB8IX8wo8aIWYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLW/FX8n6z2hoE+xEbZZ2RybQJFVMB8GA1UdIwQY
MBaAFAmdOUZBPdERYbRsffatNiqZONXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3Yzkt
Y2Y1MmFhOWQ2Y2NjLzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3YzktY2Y1MmFhOWQ2Y2Nj
LzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciokajtZ
YLfpjRZwkZhej+hBQbT97Lj2TUC067mIAdOS7jpJeMzzWyVCh+pKAGD/EqaNrw10
hQDpUw8ZLG267aoyj5XowTLqCn/a/X0o4qDlCPbspM1qnLIQPEuz50ZBZB8Gg3ud
cGtnS53Y8vmOkXAblGUWEz8Xd6tJCYPMvUZu54mu0MfqBl/zuq4Zlvh452SbCakp
LSiG5SAlsXzLh6GIezLOBrVRo5wkJysoFDH0CWhMJPjubxuinNl7Sw10Jevrdl6r
u7BiB9UIoU3IPIXkB8Z3k446vHbYYsHGe1cLBIchckMFU5uIB806qMA9KRxoC5r1
txdKEZDPTw5+rg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:57:37 2025 by rpki-client