Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: i6ENWDTrB4f7FPhy/1k8q7Z4KPSsYLwANPHgWCSaWj0=
Subject key identifier: 0F:F7:AB:65:F8:1C:78:C2:86:64:BD:DE:06:2D:C7:28:7F:A4:37:EB
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0198D6988EC3D86FBF2DF9C6BA4B332D1738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 11DE
Signing time: Sat 23 Aug 2025 11:02:58 +0000
Manifest this update: Sat 23 Aug 2025 11:02:58 +0000
Manifest next update: Sun 24 Aug 2025 11:02:58 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: NxyxXAOVrWf2nPcXFaezQ9SSvqP+OMzwxLVh9wY9P6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8e:c3:d8:6f:bf:2d:f9:c6:ba:4b:33:2d:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Aug 23 11:02:58 2025 GMT
Not After : Aug 24 11:02:58 2025 GMT
Subject: CN=0ff7ab65f81c78c28664bdde062dc7287fa437eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:33:fb:85:17:e6:48:32:56:a5:2f:1e:ed:
2f:df:77:07:5d:aa:d3:2c:40:62:ed:07:69:ab:eb:
2b:df:e3:bb:ed:67:a1:b6:d0:be:55:34:a4:30:16:
ff:17:59:7e:cb:a6:98:9c:34:09:03:7d:0f:fc:f8:
60:cc:8d:c3:15:79:c7:fe:3b:23:a9:13:71:b1:d4:
be:9f:cb:bb:35:3a:95:ed:c5:fb:0b:9d:63:e7:04:
42:f9:5f:6e:dc:6c:23:ed:3b:e4:9c:fe:a9:70:4f:
69:0d:30:1e:9d:9a:31:c5:ac:0b:37:e0:fb:8c:40:
8c:31:77:24:47:d8:c3:8f:50:7f:f0:2b:4c:1e:bf:
96:14:a5:e6:ac:09:c4:59:7f:a3:75:29:12:90:8d:
18:22:d8:df:71:83:77:36:90:e6:37:be:53:29:01:
ba:ee:33:9a:f2:47:61:0c:66:2c:c2:35:20:b6:1f:
db:ec:a2:b3:ff:0d:21:9e:8d:19:ff:b5:7a:52:94:
5a:8e:4d:57:69:19:38:b6:96:29:41:fc:b0:72:37:
13:70:e7:1c:fd:85:bb:56:0a:9c:d3:d5:8d:b9:58:
cc:8f:83:08:b2:32:51:36:0a:fd:51:1d:fc:44:28:
7b:0d:5a:9f:86:3b:2a:42:91:f7:1c:95:82:dc:cc:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F7:AB:65:F8:1C:78:C2:86:64:BD:DE:06:2D:C7:28:7F:A4:37:EB
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5e:5f:4a:d9:42:54:68:bb:4d:eb:71:b9:3e:db:c5:1c:57:
77:d9:28:3a:2b:4c:c3:31:df:ae:7c:47:07:34:72:a2:e9:74:
b9:81:b6:eb:e1:54:2c:f2:05:59:3f:a0:de:b6:65:e0:fd:35:
2e:ed:91:ba:0e:f1:60:6c:47:1c:35:04:8f:f6:82:83:3a:e2:
74:4e:c2:a3:98:73:33:5d:ea:2f:5f:57:1f:e7:1d:f8:22:b9:
1d:8e:1e:b0:0d:10:26:2f:24:0d:a1:87:bb:da:28:d0:bb:46:
6c:e9:c7:12:49:13:f1:a3:df:d5:dd:9f:35:d4:c3:68:0f:a1:
36:62:d5:8b:4c:80:f3:e6:61:b7:0f:4a:70:4d:5b:54:dc:f6:
f0:9b:ca:ee:e7:05:eb:5d:8a:f4:45:b0:29:56:74:5e:67:6f:
de:b0:aa:28:1d:ca:db:fb:68:1b:7f:e2:bb:6c:fc:11:2e:a5:
e2:62:db:70:fc:1d:7f:c2:9a:39:28:1c:7e:f7:d3:33:e4:92:
24:d6:5a:bc:7f:29:69:7a:c7:af:4c:fb:39:4e:4d:0a:e9:d3:
69:db:1f:c5:cc:e5:e8:65:66:e2:2e:15:cf:35:eb:22:1a:77:
ed:cf:9a:a2:39:2f:63:db:91:7d:e1:c3:e5:eb:55:a0:6e:37:
09:1f:27:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmI7D2G+/LfnGukszLRc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOTYyNTU0MWFiZTZiNWFlOTI2NjcxZGFhOThhYzZkODA5
NGVjN2IwHhcNMjUwODIzMTEwMjU4WhcNMjUwODI0MTEwMjU4WjAzMTEwLwYDVQQD
EygwZmY3YWI2NWY4MWM3OGMyODY2NGJkZGUwNjJkYzcyODdmYTQzN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/8z+4UX5kgyVqUvHu0v33cHXarT
LEBi7Qdpq+sr3+O77WehttC+VTSkMBb/F1l+y6aYnDQJA30P/PhgzI3DFXnH/jsj
qRNxsdS+n8u7NTqV7cX7C51j5wRC+V9u3Gwj7TvknP6pcE9pDTAenZoxxawLN+D7
jECMMXckR9jDj1B/8CtMHr+WFKXmrAnEWX+jdSkSkI0YItjfcYN3NpDmN75TKQG6
7jOa8kdhDGYswjUgth/b7KKz/w0hno0Z/7V6UpRajk1XaRk4tpYpQfywcjcTcOcc
/YW7Vgqc09WNuVjMj4MIsjJRNgr9UR38RCh7DVqfhjsqQpH3HJWC3MynnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/3q2X4HHjChmS93gYtxyh/pDfrMB8GA1UdIwQY
MBaAFM+WJVQavmta6SZnHaqYrG2AlOx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2Et
NTlhNTg3YmRlYTNmLzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2EtNTlhNTg3YmRlYTNm
LzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPl5fStlC
VGi7TetxuT7bxRxXd9koOitMwzHfrnxHBzRyoul0uYG26+FULPIFWT+g3rZl4P01
Lu2Rug7xYGxHHDUEj/aCgzridE7Co5hzM13qL19XH+cd+CK5HY4esA0QJi8kDaGH
u9oo0LtGbOnHEkkT8aPf1d2fNdTDaA+hNmLVi0yA8+Zhtw9KcE1bVNz28JvK7ucF
612K9EWwKVZ0Xmdv3rCqKB3K2/toG3/iu2z8ES6l4mLbcPwdf8KaOSgcfvfTM+SS
JNZavH8paXrHr0z7OU5NCunTadsfxczl6GVm4i4VzzXrIhp37c+aojkvY9uRfeHD
5etVoG43CR8nvQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:08 2025 by rpki-client