Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: 4YLgL85inwjbA46WqomCGml/8sbsj7pLMpgHH+xCT08=
Subject key identifier: 67:87:79:8B:5D:0A:36:AA:96:14:F1:52:43:36:2E:75:20:CA:77:18
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 0199FC58F7C2487F00A3A721D1175E47DCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0403
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: jt7VZqWkcgjUuj47OKARI0j72gPXQL5kGpvify+3DAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f7:c2:48:7f:00:a3:a7:21:d1:17:5e:47:dc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=6787798b5d0a36aa9614f15243362e7520ca7718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:ee:3c:bb:ad:4b:e2:c5:13:ec:e3:a5:f2:
30:75:29:4c:66:ac:66:dc:ed:a2:c7:29:ca:8e:e7:
5a:c1:01:13:16:59:a2:04:dd:61:dd:43:29:bf:f8:
5b:92:75:68:cd:dd:00:63:45:e4:d4:06:83:e5:12:
40:17:21:46:eb:96:47:ec:d4:a2:5e:7f:d6:3b:0e:
0c:dd:6b:e8:78:4a:75:93:6a:a9:06:f2:26:05:77:
ac:87:cd:47:cf:31:89:dc:10:dc:2a:88:cd:c7:e7:
1d:07:10:ef:b4:6c:28:22:1f:80:27:93:44:44:c0:
6c:79:aa:b0:19:e3:d5:5b:14:1a:43:6d:25:d6:6a:
3f:f0:0d:fb:3e:08:29:26:9f:ee:29:80:38:4f:b9:
d9:53:2a:ce:9e:da:8c:89:a2:13:ed:49:a5:69:ff:
e3:2a:d4:c5:9d:31:0a:57:74:86:63:dc:34:d8:a3:
3f:c5:04:de:ad:8a:16:0c:06:00:05:2b:2b:13:7e:
2a:f7:16:52:f2:2c:fa:d6:40:99:81:b3:4b:b4:38:
a0:81:c3:77:73:c1:17:40:4b:c4:36:99:1e:cc:2e:
31:c9:9d:45:5d:89:69:c8:f9:01:ce:94:22:b2:15:
9d:ae:2a:7b:4f:6f:40:5d:e4:20:59:94:18:9a:ec:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:87:79:8B:5D:0A:36:AA:96:14:F1:52:43:36:2E:75:20:CA:77:18
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e9:e9:2b:b6:0b:f2:f8:50:46:2a:d6:fc:17:fd:ef:22:71:
e7:ed:9c:f0:81:37:ac:b6:8b:00:8a:0a:8c:61:c5:fa:79:13:
10:56:95:64:cb:8d:0d:e1:36:8e:4e:89:1e:b4:a3:32:ac:32:
d7:6f:44:cb:c4:58:43:33:d1:bc:6a:4e:c4:a1:63:93:5c:2e:
00:39:0a:e6:ac:5c:e1:81:ea:65:5e:9b:b2:37:37:7b:73:a2:
bd:18:19:9c:40:ec:e1:67:65:31:cc:41:a4:56:9d:bf:bb:de:
8e:ea:98:dd:84:79:36:8c:57:b4:5b:86:9c:ac:c7:97:3c:28:
bb:09:b6:d3:47:21:43:ae:2c:2c:4f:75:d6:97:cf:2d:34:d5:
d7:04:50:3a:7f:94:d6:f7:d1:51:6f:60:e1:a4:9a:0b:55:06:
04:9b:c3:0a:0e:19:9c:53:c5:e1:db:e1:0b:32:62:c1:64:85:
f1:79:f8:8a:d9:57:20:b0:6a:1a:a4:41:21:88:1b:80:0f:aa:
4d:d8:b6:58:d3:83:87:2c:99:86:6d:4d:3b:f0:fd:48:57:5a:
00:c5:81:87:51:c5:36:2f:54:2f:a6:1d:2b:c2:f3:64:47:4e:
56:6c:b4:0a:ad:53:4f:2e:cd:a3:d8:83:21:ee:9a:29:9b:58:
53:11:dc:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WPfCSH8Ao6ch0RdeR9zfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWJmMGYxOWE5OTRjN2Y2ODZkNTVhYmZjMTY4NzVkMzll
NWQ0ZTIwHhcNMjUxMDE5MTIwMTUzWhcNMjUxMDIwMTIwMTUzWjAzMTEwLwYDVQQD
Eyg2Nzg3Nzk4YjVkMGEzNmFhOTYxNGYxNTI0MzM2MmU3NTIwY2E3NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZbuPLutS+LFE+zjpfIwdSlMZqxm
3O2ixynKjudawQETFlmiBN1h3UMpv/hbknVozd0AY0Xk1AaD5RJAFyFG65ZH7NSi
Xn/WOw4M3WvoeEp1k2qpBvImBXesh81HzzGJ3BDcKojNx+cdBxDvtGwoIh+AJ5NE
RMBseaqwGePVWxQaQ20l1mo/8A37PggpJp/uKYA4T7nZUyrOntqMiaIT7Umlaf/j
KtTFnTEKV3SGY9w02KM/xQTerYoWDAYABSsrE34q9xZS8iz61kCZgbNLtDiggcN3
c8EXQEvENpkezC4xyZ1FXYlpyPkBzpQishWdrip7T29AXeQgWZQYmuzNEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeHeYtdCjaqlhTxUkM2LnUgyncYMB8GA1UdIwQY
MBaAFM9b8PGamUx/aG1Vq/wWh1055dTiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMt
MzQwZmFjM2Y2YmFmLzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMjM4NDctNmYzMC00ZGFmLWIyYTMtMzQwZmFjM2Y2YmFm
LzEvejF2dzhacVpUSDlvYlZXcl9CYUhYVG5sMU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOnpK7YL
8vhQRirW/Bf97yJx5+2c8IE3rLaLAIoKjGHF+nkTEFaVZMuNDeE2jk6JHrSjMqwy
129Ey8RYQzPRvGpOxKFjk1wuADkK5qxc4YHqZV6bsjc3e3OivRgZnEDs4WdlMcxB
pFadv7vejuqY3YR5NoxXtFuGnKzHlzwouwm200chQ64sLE911pfPLTTV1wRQOn+U
1vfRUW9g4aSaC1UGBJvDCg4ZnFPF4dvhCzJiwWSF8Xn4itlXILBqGqRBIYgbgA+q
Tdi2WNODhyyZhm1NO/D9SFdaAMWBh1HFNi9UL6YdK8LzZEdOVmy0Cq1TTy7No9iD
Ie6aKZtYUxHcwg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:31 2025 by rpki-client