Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: gU/OqcO0UrX1O/cxI0SRCu3c/vRUNgLatsGMFVWVdeo=
Subject key identifier: C4:E1:41:1D:B9:6E:C2:60:DE:3B:24:31:58:0F:CE:28:65:D2:F7:75
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 0199FBEAD3CB10AAF7B6C82F092BA51421B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0F7A
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: HBW+28V+cjt7TQLmh+hj40rG93wLEfV8tejoQkPmCwU=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d3:cb:10:aa:f7:b6:c8:2f:09:2b:a5:14:21:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=c4e1411db96ec260de3b2431580fce2865d2f775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:12:c5:be:9c:da:8c:9f:c1:94:c4:98:fd:
41:9d:05:df:17:20:c8:02:91:79:1f:13:b3:4c:13:
81:e6:75:97:79:d2:d3:8b:5e:b4:ec:04:40:68:b7:
62:19:5a:a1:9e:f0:f0:a3:7e:5c:d9:14:4a:ad:c0:
f1:9f:f0:20:da:c3:37:2f:92:39:b4:d5:47:6b:b6:
03:b1:27:52:6b:e2:71:13:92:6b:b0:fa:94:82:b8:
3d:69:f7:b1:d5:a6:20:4c:8e:5f:f6:d8:91:45:f4:
6d:88:65:99:93:26:b8:a0:41:1f:21:d0:3a:3a:55:
4b:ed:34:f2:f9:9f:1b:d7:31:2c:bf:81:6a:68:9e:
13:57:6b:1d:80:b0:a7:d0:6c:15:ea:ad:59:39:cf:
dc:dc:a6:9a:ec:ed:1b:d5:07:53:63:00:62:86:08:
89:b1:19:af:ab:21:24:c2:d7:29:d4:77:fe:20:a6:
23:0f:93:2e:6c:09:4d:cf:f7:69:5f:65:6c:45:9e:
ed:67:86:fb:fd:2d:7f:43:08:07:85:0c:a4:7f:12:
96:fd:4a:d5:bd:a2:b1:cb:b2:11:a8:be:f1:f5:fc:
87:f4:16:0d:a2:e9:63:7b:37:9d:fe:08:2e:50:30:
f0:3a:68:d5:a9:61:94:a0:df:6c:fe:32:d7:e6:03:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E1:41:1D:B9:6E:C2:60:DE:3B:24:31:58:0F:CE:28:65:D2:F7:75
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:9f:0d:95:8c:67:2a:1b:5b:b0:b3:c3:76:a1:11:ac:3d:
64:19:ba:57:ff:11:9c:cb:8b:84:58:cb:bd:79:03:e0:0b:21:
a3:24:b5:e4:35:a4:5e:6e:ca:7f:cb:68:da:75:fc:75:73:e1:
e9:6f:d4:59:50:b2:8c:e8:f9:53:02:d7:cf:78:39:d3:b6:bb:
b0:37:c2:df:f3:c2:38:05:38:2c:f5:16:08:b6:a2:3d:15:2c:
a4:53:5e:08:01:4c:5b:fe:60:f0:e8:8b:bd:72:0e:f7:f6:18:
11:1d:e6:b8:79:0f:59:9b:e0:d4:e8:95:4e:f1:e6:03:15:df:
76:48:06:c3:f5:e4:8a:ec:3c:2a:fb:03:82:57:02:5a:e7:8d:
2b:c9:a4:9b:1c:3a:1a:4c:38:76:e0:7c:3f:c4:a2:4e:c0:93:
6e:47:67:b4:ec:4e:12:fa:c9:34:42:bf:51:80:04:ed:08:48:
d9:4b:b1:a7:3f:00:d7:80:03:bc:3a:46:01:5f:ed:85:32:d5:
23:0e:f7:6a:27:3d:13:c0:19:fb:53:83:0c:51:cd:97:62:09:
db:38:a4:55:b3:f3:82:f2:c7:72:36:1b:d6:ce:10:bf:59:57:
84:ba:ae:df:c9:57:97:93:87:97:23:e3:94:7c:b3:15:b0:af:
a1:c2:49:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76tPLEKr3tsgvCSulFCG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw
Yzg4N2QwHhcNMjUxMDE5MTAwMTM0WhcNMjUxMDIwMTAwMTM0WjAzMTEwLwYDVQQD
EyhjNGUxNDExZGI5NmVjMjYwZGUzYjI0MzE1ODBmY2UyODY1ZDJmNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA040Sxb6c2oyfwZTEmP1BnQXfFyDI
ApF5HxOzTBOB5nWXedLTi1607ARAaLdiGVqhnvDwo35c2RRKrcDxn/Ag2sM3L5I5
tNVHa7YDsSdSa+JxE5JrsPqUgrg9afex1aYgTI5f9tiRRfRtiGWZkya4oEEfIdA6
OlVL7TTy+Z8b1zEsv4FqaJ4TV2sdgLCn0GwV6q1ZOc/c3Kaa7O0b1QdTYwBihgiJ
sRmvqyEkwtcp1Hf+IKYjD5MubAlNz/dpX2VsRZ7tZ4b7/S1/QwgHhQykfxKW/UrV
vaKxy7IRqL7x9fyH9BYNouljezed/gguUDDwOmjVqWGUoN9s/jLX5gPU3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMThQR25bsJg3jskMVgPzihl0vd1MB8GA1UdIwQY
MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt
NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw
LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+ifDZWM
ZyobW7Czw3ahEaw9ZBm6V/8RnMuLhFjLvXkD4AshoyS15DWkXm7Kf8to2nX8dXPh
6W/UWVCyjOj5UwLXz3g507a7sDfC3/PCOAU4LPUWCLaiPRUspFNeCAFMW/5g8OiL
vXIO9/YYER3muHkPWZvg1OiVTvHmAxXfdkgGw/Xkiuw8KvsDglcCWueNK8mkmxw6
Gkw4duB8P8SiTsCTbkdntOxOEvrJNEK/UYAE7QhI2Uuxpz8A14ADvDpGAV/thTLV
Iw73aic9E8AZ+1ODDFHNl2IJ2zikVbPzgvLHcjYb1s4Qv1lXhLqu38lXl5OHlyPj
lHyzFbCvocJJcA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:42 2025 by rpki-client