Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: pvk/xuPkQ3ZbpdYbjOqfr+/nbIoqhmcWmpoBFVHtP24=
Subject key identifier: 00:C7:CD:33:35:39:C7:87:F4:96:2E:9B:62:AC:EF:FD:87:D1:FB:CE
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 0199FDD974DAC59E6434AA9CC73B93C5DA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 0224
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: 9yysPrsTvaDRMls4-pX0957dwiw.roa (hash: aqJVPhU1WTAEqvaL619sknSOiWwAlubUTNbFFjISOrQ=)
2: BU0K-jq4yCTRDFgFmlLWawEJYAU.roa (hash: HyTY7vvT0OCEeAhfRH+8wyCsyeDuJjUYTouZKbB1WlU=)
3: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: buai+Yxc82Ud4SptucVqw74iGXyYD+QQnjQbxMV3pNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:74:da:c5:9e:64:34:aa:9c:c7:3b:93:c5:da:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=00c7cd333539c787f4962e9b62aceffd87d1fbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:31:5c:aa:f6:83:9c:92:a0:7b:a8:ce:43:
58:e2:3a:45:bd:c8:0e:73:17:d8:cc:78:f6:5f:87:
5a:8f:08:de:c6:38:bd:22:26:14:be:7d:f4:8f:9d:
5f:7b:09:9f:0f:4b:46:6c:1c:3a:15:39:c6:7f:91:
0b:db:97:59:2a:ed:fc:72:1e:66:bf:0c:b9:42:38:
3b:01:2a:b9:c5:15:d2:0c:60:2a:38:de:a9:8b:7a:
2f:de:0b:d4:59:8a:1d:1a:9a:e5:2b:81:d2:5d:f9:
0a:74:34:29:b3:5f:af:16:26:b5:6d:d0:4b:b4:e6:
4f:de:34:f4:be:63:8e:16:63:51:ea:88:25:2a:07:
91:f0:4c:00:22:2f:4c:02:f6:6c:cf:0f:1e:27:56:
91:78:c8:0f:3a:5b:50:27:65:1f:dc:02:dd:60:eb:
ff:48:08:21:c0:15:50:df:34:2c:47:c8:3c:5a:50:
31:46:9f:22:b9:04:23:e6:2b:47:48:ac:d2:6a:05:
23:d2:dd:15:d7:89:26:07:b9:ef:d7:19:e0:ab:33:
a1:9e:21:68:7b:71:94:a1:fd:de:16:c0:98:9c:e1:
49:a0:ed:c4:c2:4d:f7:43:0e:66:a3:7a:e6:07:9a:
d8:bd:b8:03:6c:81:6f:bb:ec:e1:86:20:99:60:b2:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:CD:33:35:39:C7:87:F4:96:2E:9B:62:AC:EF:FD:87:D1:FB:CE
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:5e:4d:07:19:b5:02:18:44:a9:7a:93:16:9c:2b:82:39:
b1:35:b0:7e:da:6b:ef:a3:c1:cb:33:5e:2c:63:60:75:25:65:
a2:95:10:28:5d:89:86:ad:bd:81:e1:93:dd:9e:b2:1f:db:20:
0a:c3:1b:55:a3:af:8a:2a:66:8b:0a:75:62:04:50:d8:0f:e4:
6b:da:eb:4b:2c:40:20:76:95:24:11:b0:92:f7:39:e8:ef:e3:
75:99:82:3b:53:5d:c6:62:1b:aa:c5:47:4d:d7:82:f0:1d:05:
e1:1f:da:2d:d5:7e:8a:c5:5e:e6:3c:ed:28:e4:39:e5:f4:6c:
c3:cf:6e:54:bd:2c:8a:37:d6:7c:1a:03:b9:b4:c9:0a:04:df:
ad:8f:81:86:a8:ac:9b:ee:c0:9d:5e:82:44:e9:6b:ec:92:6e:
63:60:3a:49:e2:4e:76:e8:55:41:3b:fc:b6:75:98:81:a3:74:
cb:fb:a0:23:ad:41:58:8b:4e:ae:e0:f8:fb:00:7b:ed:58:4f:
25:91:8f:2f:32:2a:c2:97:78:b5:8b:98:2c:3a:86:bf:af:b3:
fc:5b:0f:96:29:24:32:b8:df:40:33:df:c3:51:ca:46:48:81:
16:ba:bf:d2:6c:3f:9a:e7:7b:49:11:40:bb:45:84:7d:fe:d6:
49:0d:83:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92XTaxZ5kNKqcxzuTxdoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTg5ZDVmZTRiYjFjNWJkYjgzYTM1M2MyNzM3ZGM2MDQz
NDEzMjYwHhcNMjUxMDE5MTkwMTUwWhcNMjUxMDIwMTkwMTUwWjAzMTEwLwYDVQQD
EygwMGM3Y2QzMzM1MzljNzg3ZjQ5NjJlOWI2MmFjZWZmZDg3ZDFmYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4YxXKr2g5ySoHuozkNY4jpFvcgO
cxfYzHj2X4dajwjexji9IiYUvn30j51fewmfD0tGbBw6FTnGf5EL25dZKu38ch5m
vwy5Qjg7ASq5xRXSDGAqON6pi3ov3gvUWYodGprlK4HSXfkKdDQps1+vFia1bdBL
tOZP3jT0vmOOFmNR6oglKgeR8EwAIi9MAvZszw8eJ1aReMgPOltQJ2Uf3ALdYOv/
SAghwBVQ3zQsR8g8WlAxRp8iuQQj5itHSKzSagUj0t0V14kmB7nv1xngqzOhniFo
e3GUof3eFsCYnOFJoO3Ewk33Qw5mo3rmB5rYvbgDbIFvu+zhhiCZYLLJuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADHzTM1OceH9JYum2Ks7/2H0fvOMB8GA1UdIwQY
MBaAFGdYnV/kuxxb24OjU8JzfcYENBMmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWIt
ZjU4Y2I2NDgwYTdlLzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83MzNmOWMtYjExNS00OWM4LTk1OWItZjU4Y2I2NDgwYTdl
LzEvWjFpZFgtUzdIRnZiZzZOVHduTjl4Z1EwRXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0VeTQcZ
tQIYRKl6kxacK4I5sTWwftpr76PByzNeLGNgdSVlopUQKF2Jhq29geGT3Z6yH9sg
CsMbVaOviipmiwp1YgRQ2A/ka9rrSyxAIHaVJBGwkvc56O/jdZmCO1NdxmIbqsVH
TdeC8B0F4R/aLdV+isVe5jztKOQ55fRsw89uVL0sijfWfBoDubTJCgTfrY+Bhqis
m+7AnV6CROlr7JJuY2A6SeJOduhVQTv8tnWYgaN0y/ugI61BWItOruD4+wB77VhP
JZGPLzIqwpd4tYuYLDqGv6+z/FsPlikkMrjfQDPfw1HKRkiBFrq/0mw/mud7SRFA
u0WEff7WSQ2DoA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:16 2025 by rpki-client