Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: 4DadmNwia44hIiz1BfhScr5i67Qntrv04Zv71bwBhr0=
Subject key identifier: 3E:1A:2C:F5:E9:C5:34:6B:6F:E4:F7:0C:0F:57:4D:5A:23:DF:FC:7B
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 0199FFFEA83C1F903D5FF8AC5D4B40B604E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 05:01:43 +0000
Manifest this update: Mon 20 Oct 2025 05:01:43 +0000
Manifest next update: Tue 21 Oct 2025 05:01:43 +0000
Files and hashes: 1: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (hash: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: W1NFNrCfBiPa7F7rAlRpg6qw+fWEdjcvg95DZFB6XBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:a8:3c:1f:90:3d:5f:f8:ac:5d:4b:40:b6:04:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Oct 20 05:01:43 2025 GMT
Not After : Oct 21 05:01:43 2025 GMT
Subject: CN=3e1a2cf5e9c5346b6fe4f70c0f574d5a23dffc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:d7:a7:1b:2f:73:fb:a2:0f:e6:9d:3a:6c:
f2:83:f3:80:b5:d3:6f:17:d9:22:d0:7e:fb:09:63:
79:96:02:f5:33:b8:35:51:13:d7:87:a8:65:23:43:
10:bd:32:9b:6f:de:2d:0d:f2:ae:4e:2c:6a:9c:ac:
ec:bd:62:2c:46:15:56:28:86:95:e4:5d:e1:7a:c5:
3c:3b:af:64:af:cc:50:20:53:8b:d2:77:f8:ab:c5:
e5:7b:ca:2f:87:ff:80:74:ce:19:52:e2:4f:7a:80:
e0:d6:5c:ea:68:dd:7a:a1:4b:81:96:36:12:36:35:
59:32:83:0d:53:8b:4b:00:58:53:d2:90:10:3c:03:
ee:f7:20:de:4d:89:c5:e7:cf:9b:65:ad:54:c4:15:
f8:e7:43:2f:3d:4b:1b:0d:36:67:56:67:2c:f5:ba:
32:9a:f5:92:37:a5:dd:d3:87:1e:be:26:34:7d:83:
c9:7e:91:e6:8e:3d:11:79:0a:f2:0a:7f:ae:e1:84:
65:77:48:76:9a:f2:1f:83:b4:d9:1b:a2:06:77:0e:
3d:37:89:f8:c2:6c:75:63:3e:bc:33:f6:89:4d:9f:
24:a5:96:27:c1:35:6d:b1:63:24:cb:1a:46:b8:0b:
35:bf:9d:a3:86:33:be:67:6f:5a:93:9f:bf:54:cc:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:2C:F5:E9:C5:34:6B:6F:E4:F7:0C:0F:57:4D:5A:23:DF:FC:7B
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:26:f9:e4:91:e8:1f:35:8b:42:c6:81:9a:3b:53:ba:80:
84:e0:3b:92:21:ee:94:19:cd:d0:51:80:3d:25:63:b8:34:13:
9e:38:78:cb:4f:da:a5:46:3c:da:5b:3a:eb:e5:ad:cf:3e:bb:
62:98:e3:20:6f:2e:1a:d7:4f:ff:d7:f1:bb:ec:46:80:35:fb:
0b:84:19:e1:e6:f7:5a:d5:2f:34:ce:1e:f8:a7:b4:80:db:b6:
2d:f3:0b:ed:8a:b6:63:38:66:8a:f5:3f:13:55:25:8a:6c:e8:
ef:f9:e7:f4:0d:2e:91:7c:9a:97:e2:3c:55:b7:51:b7:06:97:
e2:69:7b:fc:7c:95:16:76:d8:c3:56:36:d9:74:fd:e0:35:53:
e9:22:34:87:8c:70:55:5e:03:b3:16:9d:bc:8b:1f:30:3a:c2:
08:76:0f:b2:f2:53:f1:5f:0a:8f:30:f2:14:9a:91:b9:14:40:
fa:43:1a:34:ce:85:ae:d0:67:c5:60:b5:27:66:d2:f4:1f:86:
81:24:10:07:d6:62:19:d2:de:41:00:a4:09:89:61:04:ec:db:
0e:3a:28:c3:92:47:d4:65:6d:da:4f:be:c8:bc:1a:11:b9:01:
76:55:81:15:21:7c:46:04:f6:9d:94:f6:69:ff:83:e2:41:9c:
f4:2d:b7:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//qg8H5A9X/isXUtAtgTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzdmMTNhYmQ5ODI3N2M2OTFmYzc2Y2U5MzM0MTBkNWQz
ZjM3YzgwHhcNMjUxMDIwMDUwMTQzWhcNMjUxMDIxMDUwMTQzWjAzMTEwLwYDVQQD
EygzZTFhMmNmNWU5YzUzNDZiNmZlNGY3MGMwZjU3NGQ1YTIzZGZmYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr7Xpxsvc/uiD+adOmzyg/OAtdNv
F9ki0H77CWN5lgL1M7g1URPXh6hlI0MQvTKbb94tDfKuTixqnKzsvWIsRhVWKIaV
5F3hesU8O69kr8xQIFOL0nf4q8Xle8ovh/+AdM4ZUuJPeoDg1lzqaN16oUuBljYS
NjVZMoMNU4tLAFhT0pAQPAPu9yDeTYnF58+bZa1UxBX450MvPUsbDTZnVmcs9boy
mvWSN6Xd04ceviY0fYPJfpHmjj0ReQryCn+u4YRld0h2mvIfg7TZG6IGdw49N4n4
wmx1Yz68M/aJTZ8kpZYnwTVtsWMkyxpGuAs1v52jhjO+Z29ak5+/VMyYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4aLPXpxTRrb+T3DA9XTVoj3/x7MB8GA1UdIwQY
MBaAFJs38Tq9mCd8aR/HbOkzQQ1dPzfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMjA2MzMtZjc5Ny00YjY1LWI5ODMt
MDZhNDEyM2I0NjFlLzEvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMjA2MzMtZjc5Ny00YjY1LWI5ODMtMDZhNDEyM2I0NjFl
LzEvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkUm+eSR
6B81i0LGgZo7U7qAhOA7kiHulBnN0FGAPSVjuDQTnjh4y0/apUY82ls66+Wtzz67
YpjjIG8uGtdP/9fxu+xGgDX7C4QZ4eb3WtUvNM4e+Ke0gNu2LfML7Yq2YzhmivU/
E1Ulimzo7/nn9A0ukXyal+I8VbdRtwaX4ml7/HyVFnbYw1Y22XT94DVT6SI0h4xw
VV4DsxadvIsfMDrCCHYPsvJT8V8KjzDyFJqRuRRA+kMaNM6FrtBnxWC1J2bS9B+G
gSQQB9ZiGdLeQQCkCYlhBOzbDjoow5JH1GVt2k++yLwaEbkBdlWBFSF8RgT2nZT2
af+D4kGc9C23vQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:04 2025 by rpki-client