Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: qlGAX5y2ADyYpG8nAWVSQ1sbG2pq73VOscJ1Yqf5YJw=
Subject key identifier: 61:70:AC:52:E3:CC:53:EC:2B:7F:31:29:28:D4:35:26:67:6E:E8:DE
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 0198D73B3EEF16C5E8FC1D43349EAAE00D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 1309
Signing time: Sat 23 Aug 2025 14:00:40 +0000
Manifest this update: Sat 23 Aug 2025 14:00:40 +0000
Manifest next update: Sun 24 Aug 2025 14:00:40 +0000
Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: yymPMzkV/ZVoYplPiZ/uwqEDuWilHSib2mMtgsl1e4A=)
2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:3e:ef:16:c5:e8:fc:1d:43:34:9e:aa:e0:0d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: Aug 23 14:00:40 2025 GMT
Not After : Aug 24 14:00:40 2025 GMT
Subject: CN=6170ac52e3cc53ec2b7f312928d43526676ee8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:24:22:29:fd:72:8b:16:ea:d0:39:ca:3e:b0:
3c:e4:2d:89:f9:af:70:f1:46:86:25:a1:a0:4b:7b:
34:ca:e1:20:e3:e3:31:be:92:0c:df:85:c3:aa:36:
18:1d:4b:ec:cf:94:80:b7:0c:03:17:7e:8d:45:64:
03:dd:42:7f:78:48:a9:a8:fc:4d:5b:f5:cc:39:9c:
b4:8f:ce:8a:07:89:21:9e:75:eb:fb:4d:66:f1:c0:
f5:a1:2a:e4:24:89:6e:1a:3f:9c:41:65:42:e1:37:
4b:5f:c8:fc:b9:96:39:61:e8:fa:b3:35:89:da:28:
d6:e5:1e:94:8c:63:36:30:d4:52:e6:17:7c:15:1e:
16:71:dd:8e:20:91:88:40:07:cc:9b:07:fb:d9:f0:
5e:f0:50:29:51:e1:7d:5e:54:15:b4:ec:47:28:d3:
75:df:e3:18:6f:7a:66:9b:7e:4e:b3:01:d0:d1:34:
cb:53:43:e4:d6:a8:c6:21:14:48:c8:ac:30:2c:4c:
d5:a5:c7:a2:df:47:a4:0e:50:c0:e1:bb:9f:6d:28:
74:83:17:9c:96:31:64:4e:18:00:da:db:c6:85:e6:
84:98:5a:6a:b8:4d:4c:c8:68:b6:f4:f5:94:19:98:
ea:f3:98:6b:6a:3f:e7:0e:a6:66:3d:64:46:68:37:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:70:AC:52:E3:CC:53:EC:2B:7F:31:29:28:D4:35:26:67:6E:E8:DE
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:13:52:1a:23:6e:5d:e9:1c:1b:15:05:fd:5f:b7:0e:f7:55:
aa:ef:3d:3f:b3:f6:e9:60:31:36:0f:cf:68:10:d5:a2:5e:0d:
c6:1c:bf:57:41:aa:20:61:ba:e7:6e:e1:21:a2:c3:39:c5:f7:
2b:52:5e:e1:7c:17:51:14:5e:ac:c4:38:bc:2c:87:1b:8c:d9:
57:d2:dc:41:1a:72:22:dc:4c:01:c2:33:9f:70:33:6b:94:6e:
13:cc:ec:1b:b4:b5:c8:19:0f:c9:b7:ce:1d:86:4b:a3:84:4c:
13:f6:64:d6:d6:1d:9f:20:8d:02:d8:93:a4:7c:61:6d:ec:8f:
a2:ac:67:c6:72:8a:ff:aa:ed:52:94:9b:f2:68:5a:10:d7:09:
10:64:5f:5a:68:7f:b5:4d:69:51:07:94:86:72:7f:d6:8b:8d:
08:50:9c:d1:85:6c:05:29:73:7d:ed:b1:8e:59:60:29:c8:3c:
d4:ae:1f:81:f5:9b:7b:ef:1f:f6:1e:0b:bd:3d:78:f2:f2:f8:
a0:ae:3b:aa:f7:37:d9:ac:d2:f7:ec:a9:78:0c:4a:cc:bb:1f:
59:b2:ee:35:f4:b7:db:b0:68:39:69:1a:d5:34:1d:b1:3d:dc:
5f:21:29:6a:41:e3:91:86:6c:b7:50:52:2a:ca:c2:87:18:8a:
d2:30:5f:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOz7vFsXo/B1DNJ6q4A15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk
OGMzOWEwHhcNMjUwODIzMTQwMDQwWhcNMjUwODI0MTQwMDQwWjAzMTEwLwYDVQQD
Eyg2MTcwYWM1MmUzY2M1M2VjMmI3ZjMxMjkyOGQ0MzUyNjY3NmVlOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCQiKf1yixbq0DnKPrA85C2J+a9w
8UaGJaGgS3s0yuEg4+MxvpIM34XDqjYYHUvsz5SAtwwDF36NRWQD3UJ/eEipqPxN
W/XMOZy0j86KB4khnnXr+01m8cD1oSrkJIluGj+cQWVC4TdLX8j8uZY5Yej6szWJ
2ijW5R6UjGM2MNRS5hd8FR4Wcd2OIJGIQAfMmwf72fBe8FApUeF9XlQVtOxHKNN1
3+MYb3pmm35OswHQ0TTLU0Pk1qjGIRRIyKwwLEzVpcei30ekDlDA4bufbSh0gxec
ljFkThgA2tvGheaEmFpquE1MyGi29PWUGZjq85hraj/nDqZmPWRGaDeA4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFwrFLjzFPsK38xKSjUNSZnbujeMB8GA1UdIwQY
MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt
MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh
LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBNSGiNu
XekcGxUF/V+3DvdVqu89P7P26WAxNg/PaBDVol4Nxhy/V0GqIGG6527hIaLDOcX3
K1Je4XwXURRerMQ4vCyHG4zZV9LcQRpyItxMAcIzn3Aza5RuE8zsG7S1yBkPybfO
HYZLo4RME/Zk1tYdnyCNAtiTpHxhbeyPoqxnxnKK/6rtUpSb8mhaENcJEGRfWmh/
tU1pUQeUhnJ/1ouNCFCc0YVsBSlzfe2xjllgKcg81K4fgfWbe+8f9h4LvT148vL4
oK47qvc32azS9+ypeAxKzLsfWbLuNfS327BoOWka1TQdsT3cXyEpakHjkYZst1BS
KsrChxiK0jBfdQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:35 2025 by rpki-client