Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: XTStq6AeygadxvEx99IBt3ILGjF9rYRmTwcXd++3mwo=
Subject key identifier: 15:8C:21:A4:C6:AE:ED:6A:FF:E0:43:43:4F:44:1E:D0:93:52:6A:EF
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 0198D65F20ED5C1954268ED1CA282FC06350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 023F
Signing time: Sat 23 Aug 2025 10:00:15 +0000
Manifest this update: Sat 23 Aug 2025 10:00:15 +0000
Manifest next update: Sun 24 Aug 2025 10:00:15 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: usN3ZK5SM23MDtcAhAeB/5kzXSBjQoQ8vedMcwg3Sr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:20:ed:5c:19:54:26:8e:d1:ca:28:2f:c0:63:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Aug 23 10:00:15 2025 GMT
Not After : Aug 24 10:00:15 2025 GMT
Subject: CN=158c21a4c6aeed6affe043434f441ed093526aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:99:4f:db:10:dd:7a:6c:0b:35:c5:fb:54:
74:52:35:84:89:3a:97:01:c9:f8:18:66:45:12:3b:
b4:d4:78:c5:1d:02:20:94:83:3f:b4:78:c0:8e:41:
da:a6:34:b0:ee:43:75:48:64:b0:ea:a2:95:49:2c:
74:44:e3:1e:67:61:5a:9e:4d:44:e9:95:3d:a0:83:
c6:bb:cb:80:ae:c9:49:ce:35:74:64:82:fc:f2:e9:
99:b5:16:ca:e8:e3:fc:7c:78:7a:4b:6a:1f:a4:f3:
be:5f:1e:63:ca:ef:f1:41:a9:a0:6b:b6:7b:ba:19:
8d:a9:f4:23:e0:1f:c7:d9:c6:80:79:12:db:54:55:
cf:0c:b4:ac:f6:ed:98:7b:93:54:3e:80:27:fe:86:
1d:9d:38:6a:9a:7e:4b:ca:2d:55:c6:67:ca:b1:c0:
52:82:c0:c2:0e:41:58:dd:e9:4a:34:ec:49:6d:7e:
99:e3:c5:41:4d:27:c8:61:14:c1:9a:e2:cc:d0:c0:
8e:08:1d:93:fb:45:72:a0:75:8a:0e:1b:5a:89:5d:
ff:d5:4e:03:09:2f:0c:2e:99:cf:fe:fc:06:c1:f9:
c4:c7:61:e7:8d:8e:e2:d9:b4:a7:b3:2b:be:5f:f3:
25:20:d2:a2:66:91:90:de:f7:89:0c:49:d6:17:a6:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:21:A4:C6:AE:ED:6A:FF:E0:43:43:4F:44:1E:D0:93:52:6A:EF
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7e:8d:f5:0b:ac:32:d7:3d:9b:64:b3:ea:64:12:7c:5d:d5:
60:07:22:8e:a1:28:60:11:a2:44:2d:62:8a:1e:79:a4:41:d4:
1d:4d:69:9f:6d:e0:14:56:52:3f:d9:ee:90:de:43:ba:43:4c:
cd:85:00:a8:4c:a2:d0:53:79:84:1f:3a:d8:51:e1:ea:ae:31:
a0:23:18:d5:41:c0:0b:8a:ae:f8:cf:e3:33:24:4b:5d:96:cd:
2c:5c:2f:c8:cb:d9:31:cd:ca:6e:7b:f9:67:b2:ab:de:3e:8f:
2c:f9:74:85:79:d9:6f:ab:3f:c1:28:10:e9:f5:3d:5a:2c:5f:
0e:88:be:d1:59:d2:75:5f:ed:2b:0c:ea:ce:d7:d3:16:a8:02:
86:c9:87:85:0e:a0:03:02:13:9f:e2:c1:d2:16:0e:12:ed:81:
a9:d9:a0:a1:4f:f6:49:3d:3e:20:a9:59:e8:b3:15:f9:a8:fa:
a7:40:31:b6:1d:29:d3:f3:d8:b2:6a:95:5f:6e:69:e3:79:a2:
1f:89:85:0d:c0:00:7f:90:80:71:83:1a:c6:a7:de:01:01:6d:
a8:87:8a:7c:fc:8b:a9:5a:53:a1:a3:f8:1b:01:eb:3d:ef:91:
6b:4b:53:40:30:65:5f:06:f8:94:dd:d9:22:18:d7:5e:9a:88:
34:59:34:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXyDtXBlUJo7RyigvwGNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj
NDE4NDMwHhcNMjUwODIzMTAwMDE1WhcNMjUwODI0MTAwMDE1WjAzMTEwLwYDVQQD
EygxNThjMjFhNGM2YWVlZDZhZmZlMDQzNDM0ZjQ0MWVkMDkzNTI2YWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAuZT9sQ3XpsCzXF+1R0UjWEiTqX
Acn4GGZFEju01HjFHQIglIM/tHjAjkHapjSw7kN1SGSw6qKVSSx0ROMeZ2Fank1E
6ZU9oIPGu8uArslJzjV0ZIL88umZtRbK6OP8fHh6S2ofpPO+Xx5jyu/xQamga7Z7
uhmNqfQj4B/H2caAeRLbVFXPDLSs9u2Ye5NUPoAn/oYdnThqmn5Lyi1VxmfKscBS
gsDCDkFY3elKNOxJbX6Z48VBTSfIYRTBmuLM0MCOCB2T+0VyoHWKDhtaiV3/1U4D
CS8MLpnP/vwGwfnEx2HnjY7i2bSnsyu+X/MlINKiZpGQ3veJDEnWF6YB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWMIaTGru1q/+BDQ09EHtCTUmrvMB8GA1UdIwQY
MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt
YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy
LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH6N9Qus
Mtc9m2Sz6mQSfF3VYAcijqEoYBGiRC1iih55pEHUHU1pn23gFFZSP9nukN5DukNM
zYUAqEyi0FN5hB862FHh6q4xoCMY1UHAC4qu+M/jMyRLXZbNLFwvyMvZMc3Kbnv5
Z7Kr3j6PLPl0hXnZb6s/wSgQ6fU9WixfDoi+0VnSdV/tKwzqztfTFqgChsmHhQ6g
AwITn+LB0hYOEu2BqdmgoU/2ST0+IKlZ6LMV+aj6p0Axth0p0/PYsmqVX25p43mi
H4mFDcAAf5CAcYMaxqfeAQFtqIeKfPyLqVpToaP4GwHrPe+Ra0tTQDBlXwb4lN3Z
IhjXXpqINFk0Uw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:09 2025 by rpki-client