Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: uWCE5Iy/CLWTRu18PMTFSRfjJB8PDtDqKcNLTLYpIlY=
Subject key identifier: 56:24:22:84:4E:BA:30:4E:FA:1B:F7:96:8B:3F:55:C2:D2:8F:5C:1D
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 0199FE7DC64A94A26B6C58B61DE071342463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 22:01:19 +0000
Manifest this update: Sun 19 Oct 2025 22:01:19 +0000
Manifest next update: Mon 20 Oct 2025 22:01:19 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: OQR/kWCA52wrBB3fiBdPWmnc3X6WWLfBclR6a7zLA3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:c6:4a:94:a2:6b:6c:58:b6:1d:e0:71:34:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Oct 19 22:01:19 2025 GMT
Not After : Oct 20 22:01:19 2025 GMT
Subject: CN=562422844eba304efa1bf7968b3f55c2d28f5c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:9f:73:c7:4f:07:63:04:54:77:fb:12:8b:
3a:bf:81:41:d5:bc:b2:ac:83:50:41:c8:a7:6f:8b:
63:3b:04:ff:8b:52:cc:0a:4c:56:99:29:65:4a:d6:
b2:e7:d1:09:ad:b6:d1:cd:ce:29:10:54:54:3e:c3:
3d:3c:e5:0b:ee:f8:10:36:c1:6b:49:22:a0:bb:e9:
79:62:ce:ee:db:3b:e9:fc:75:f4:6c:cf:3f:2c:a2:
35:00:55:bb:a2:01:6f:c4:9f:c6:5f:3c:54:28:da:
41:b4:ed:cc:f5:5d:0a:6f:e0:d0:ac:7e:30:f4:40:
bd:84:2a:81:2f:cd:50:e9:3a:bf:63:c4:01:67:21:
c3:e6:2c:25:7d:c8:05:8a:51:e2:20:e1:ce:c2:ce:
12:20:65:bd:9a:11:5c:ce:33:70:79:48:b0:15:27:
0f:69:46:0e:fb:35:25:e2:3e:9d:14:6d:58:9d:80:
ce:ca:39:d5:a5:4f:73:df:7a:ae:2d:88:63:10:f8:
11:93:d8:93:4d:c7:c4:fd:da:e1:a3:b5:80:1a:13:
88:b7:ab:d7:08:f7:79:24:7f:80:fc:ae:b0:5a:64:
d1:f1:b8:8e:9a:fd:6c:ba:c9:a7:2e:a1:7b:59:6f:
27:b4:99:ab:01:da:83:6b:64:c3:cd:4a:41:10:5e:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:24:22:84:4E:BA:30:4E:FA:1B:F7:96:8B:3F:55:C2:D2:8F:5C:1D
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0e:e7:49:5e:d7:3f:16:ad:2e:15:36:b0:41:bb:ea:34:d8:
32:f4:ff:3f:11:3e:c8:ca:fa:bd:eb:a2:9d:96:0d:2e:2f:7e:
3d:16:da:8c:20:c3:de:d7:e6:f2:8a:97:9c:ec:b9:07:67:b1:
ac:a2:55:af:21:ab:4e:ba:ea:f1:5f:ec:c8:58:a3:8d:2c:2b:
60:be:6f:dd:3a:43:81:4a:da:d3:ee:84:9c:13:3b:8f:60:36:
72:00:12:d4:09:b9:c1:31:04:29:26:79:87:35:c6:1b:5e:e3:
05:25:97:1d:0d:87:90:82:b5:03:ce:ee:e2:d7:45:1b:bc:31:
8a:9c:bc:4b:cd:75:a3:5c:6b:cf:64:33:83:12:43:8d:8c:71:
37:6d:49:89:f7:9c:63:4c:a3:18:94:ff:72:be:ad:16:ce:89:
da:bb:2c:d6:78:60:be:34:f1:bf:f8:9e:90:f1:0e:1b:4d:53:
0a:46:9f:9e:df:0c:51:ad:c1:22:46:e0:74:2c:50:5a:26:91:
75:ab:80:3b:07:73:99:df:8e:8a:e4:5a:b2:9a:57:f3:49:60:
ec:67:71:42:68:93:a2:03:47:07:31:28:3a:8a:ca:fb:50:ee:
87:b7:8f:fd:5d:71:28:46:5f:fa:eb:1f:18:a5:ec:bf:d3:ab:
b0:32:0b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fcZKlKJrbFi2HeBxNCRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4
MTg0Y2UwHhcNMjUxMDE5MjIwMTE5WhcNMjUxMDIwMjIwMTE5WjAzMTEwLwYDVQQD
Eyg1NjI0MjI4NDRlYmEzMDRlZmExYmY3OTY4YjNmNTVjMmQyOGY1YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S2fc8dPB2MEVHf7Eos6v4FB1byy
rINQQcinb4tjOwT/i1LMCkxWmSllStay59EJrbbRzc4pEFRUPsM9POUL7vgQNsFr
SSKgu+l5Ys7u2zvp/HX0bM8/LKI1AFW7ogFvxJ/GXzxUKNpBtO3M9V0Kb+DQrH4w
9EC9hCqBL81Q6Tq/Y8QBZyHD5iwlfcgFilHiIOHOws4SIGW9mhFczjNweUiwFScP
aUYO+zUl4j6dFG1YnYDOyjnVpU9z33quLYhjEPgRk9iTTcfE/drho7WAGhOIt6vX
CPd5JH+A/K6wWmTR8biOmv1susmnLqF7WW8ntJmrAdqDa2TDzUpBEF4JZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYkIoROujBO+hv3los/VcLSj1wdMB8GA1UdIwQY
MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt
OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk
LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ7nSV7X
PxatLhU2sEG76jTYMvT/PxE+yMr6veuinZYNLi9+PRbajCDD3tfm8oqXnOy5B2ex
rKJVryGrTrrq8V/syFijjSwrYL5v3TpDgUra0+6EnBM7j2A2cgAS1Am5wTEEKSZ5
hzXGG17jBSWXHQ2HkIK1A87u4tdFG7wxipy8S811o1xrz2QzgxJDjYxxN21Jifec
Y0yjGJT/cr6tFs6J2rss1nhgvjTxv/iekPEOG01TCkafnt8MUa3BIkbgdCxQWiaR
dauAOwdzmd+OiuRasppX80lg7GdxQmiTogNHBzEoOorK+1Duh7eP/V1xKEZf+usf
GKXsv9OrsDILdw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:11:51 2025 by rpki-client