Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: 30w+4bkXi8lI99H/pfGWCMcevl4In/cVCxX2VR571IU=
Subject key identifier: 43:60:1A:47:CA:AE:E5:0B:68:49:2C:09:1B:D8:13:12:70:BD:9C:55
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 0198D6603FADFD49191EBBC9D5760943B070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 1045
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: PXTvQpF78Za72vcguE66z/N1MejYgGW2ZUz7e/M3e4o=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3f:ad:fd:49:19:1e:bb:c9:d5:76:09:43:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=43601a47caaee50b68492c091bd8131270bd9c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:58:87:f8:06:ea:a8:44:33:7c:3c:92:48:
14:b3:72:c2:67:07:e9:fd:b6:9a:e5:82:79:4e:c8:
33:f1:2f:3d:7b:7b:f0:99:10:92:69:ca:27:52:55:
e4:d0:1c:df:66:57:68:e9:ea:34:33:93:31:bd:58:
9e:7a:2d:da:59:1f:3a:34:63:77:39:d9:d2:c7:f5:
6a:d3:66:ee:ef:e3:21:53:cd:c6:9a:c1:fa:83:57:
e7:ae:1a:fe:52:da:54:70:f5:26:e3:dc:98:a4:a5:
87:28:4f:0f:f9:ad:d8:5d:93:1f:bc:3d:a1:d5:93:
63:07:6f:08:a8:a5:13:ae:e0:cb:23:1e:bb:f9:af:
f8:67:b4:f6:f0:e5:e9:d0:12:76:3e:d6:b8:95:63:
dc:44:5f:20:15:24:80:79:a8:0a:d0:f1:be:6e:6e:
3b:94:30:65:8b:8d:13:68:bb:79:7d:0d:72:69:be:
94:ac:65:19:4e:75:fc:46:0a:97:60:cd:91:ab:ad:
e8:3e:f9:09:6c:18:e0:0d:56:67:87:64:19:ae:ea:
c9:fd:e6:3a:3c:25:32:4e:0d:4e:f4:2b:6b:7c:4b:
8b:cf:c4:7a:a2:e9:8f:cc:02:ce:5e:dc:66:34:9b:
95:60:db:fb:08:bb:c9:dd:82:11:39:11:f3:16:e2:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:60:1A:47:CA:AE:E5:0B:68:49:2C:09:1B:D8:13:12:70:BD:9C:55
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f6:79:ec:23:6c:58:94:13:a3:03:2a:8f:02:78:f4:f8:d0:
10:b2:28:2c:5d:44:89:51:61:b1:fc:73:84:b4:83:39:76:75:
bd:4b:27:0c:8e:67:37:fc:06:59:33:6d:54:97:31:a4:91:6f:
da:6d:68:8a:3a:14:5f:ec:a8:c9:a5:54:4e:4e:5a:2f:81:42:
a2:83:2c:70:21:71:ac:03:6d:79:12:5a:fb:a7:04:5e:49:13:
11:b4:81:58:dc:9c:21:6c:b7:a2:7e:60:b9:0b:84:a9:f3:46:
0c:79:1e:4c:07:35:8b:4f:c2:c5:be:40:05:04:d1:c9:09:50:
d7:cf:d5:63:35:35:7e:66:6e:42:7c:8c:66:20:d9:3b:6c:1f:
34:e3:8b:11:a7:95:52:83:3c:d3:8d:82:5e:8d:15:c0:e1:5b:
61:b1:08:70:65:f5:35:7f:ce:03:ca:ef:61:f4:99:38:0e:93:
cc:17:20:d1:d7:2d:5a:8f:50:92:99:7b:1a:f8:2c:aa:1b:02:
d5:93:72:38:84:54:55:c4:a9:d6:61:42:66:b7:4c:c8:55:bf:
df:e6:57:a9:91:45:7b:74:8d:33:fb:a7:fe:65:9e:2c:01:8b:
42:b8:a1:32:88:37:fb:84:1a:6c:c8:0d:90:e2:4d:6b:8d:e9:
cf:fa:8c:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYD+t/UkZHrvJ1XYJQ7BwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy
ZjhmN2IwHhcNMjUwODIzMTAwMTI4WhcNMjUwODI0MTAwMTI4WjAzMTEwLwYDVQQD
Eyg0MzYwMWE0N2NhYWVlNTBiNjg0OTJjMDkxYmQ4MTMxMjcwYmQ5YzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uJYh/gG6qhEM3w8kkgUs3LCZwfp
/baa5YJ5Tsgz8S89e3vwmRCSaconUlXk0BzfZldo6eo0M5MxvVieei3aWR86NGN3
OdnSx/Vq02bu7+MhU83GmsH6g1fnrhr+UtpUcPUm49yYpKWHKE8P+a3YXZMfvD2h
1ZNjB28IqKUTruDLIx67+a/4Z7T28OXp0BJ2Pta4lWPcRF8gFSSAeagK0PG+bm47
lDBli40TaLt5fQ1yab6UrGUZTnX8RgqXYM2Rq63oPvkJbBjgDVZnh2QZrurJ/eY6
PCUyTg1O9CtrfEuLz8R6oumPzALOXtxmNJuVYNv7CLvJ3YIRORHzFuJzyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENgGkfKruULaEksCRvYExJwvZxVMB8GA1UdIwQY
MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt
ZjNmN2JkMzFhMGZlLzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl
LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPZ57CNs
WJQTowMqjwJ49PjQELIoLF1EiVFhsfxzhLSDOXZ1vUsnDI5nN/wGWTNtVJcxpJFv
2m1oijoUX+yoyaVUTk5aL4FCooMscCFxrANteRJa+6cEXkkTEbSBWNycIWy3on5g
uQuEqfNGDHkeTAc1i0/Cxb5ABQTRyQlQ18/VYzU1fmZuQnyMZiDZO2wfNOOLEaeV
UoM8042CXo0VwOFbYbEIcGX1NX/OA8rvYfSZOA6TzBcg0dctWo9Qkpl7GvgsqhsC
1ZNyOIRUVcSp1mFCZrdMyFW/3+ZXqZFFe3SNM/un/mWeLAGLQrihMog3+4QabMgN
kOJNa43pz/qMVw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:25 2025 by rpki-client