Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
File: zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft (raw, json)
Hash identifier: 6M2p7113qDoa5SzzmxxwfyRZr59My6JuyhTaMpHcaHY=
Subject key identifier: 67:DA:8A:24:78:0C:96:70:A2:05:ED:91:B8:29:5D:79:9D:D7:47:00
Authority key identifier: CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
Certificate issuer: /CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Certificate serial: 019A0147B5D1F245413F9929BA92AFD84115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
Manifest number: 0EFD
Signing time: Mon 20 Oct 2025 11:01:08 +0000
Manifest this update: Mon 20 Oct 2025 11:01:08 +0000
Manifest next update: Tue 21 Oct 2025 11:01:08 +0000
Files and hashes: 1: ahWZL5H1qGkfpR9r5MK6JSJk1Dc.roa (hash: WUef3WgjpaprU4IuIXYy1q31GG6Dfwy/D5/f2fp0uKs=)
2: zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl (hash: MUQfpbTNSb/L4hF9xTiuTeFcI1LUaGr4sRliw9Eo6pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:b5:d1:f2:45:41:3f:99:29:ba:92:af:d8:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd40d5ea59f80da61b4486bd999be112a1a35387
Validity
Not Before: Oct 20 11:01:08 2025 GMT
Not After : Oct 21 11:01:08 2025 GMT
Subject: CN=67da8a24780c9670a205ed91b8295d799dd74700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:0e:55:45:c9:99:6b:7d:73:4d:b1:87:a4:
e7:2f:ed:20:95:87:9f:7f:d0:70:06:8f:1d:01:db:
93:76:31:07:6c:20:c3:12:b9:2c:39:0d:ac:12:5a:
c9:72:6d:9f:dd:93:18:85:66:2d:14:d3:fa:86:e4:
1f:e2:fb:a9:99:b7:44:4c:b2:df:90:04:5a:b9:2f:
03:06:6c:af:7c:39:8e:ae:cf:b9:41:d7:a9:c3:e0:
54:b1:8a:5e:2b:56:42:99:62:84:7d:44:b3:c5:af:
b1:27:97:ce:5f:10:bd:f8:65:2a:73:69:ae:31:0c:
9c:fb:ae:95:0d:41:37:9c:77:d7:a9:2e:0b:a6:d6:
d2:fb:47:0b:aa:6a:6c:97:23:84:dc:a5:5c:17:48:
a4:ed:10:4e:8b:96:4e:8f:c5:99:07:35:17:b2:ce:
23:8b:e9:49:47:44:c9:0a:2d:9b:2a:0f:3c:76:a1:
46:8a:c2:98:b0:bf:59:87:03:1f:c6:32:25:0d:85:
21:5e:28:10:4b:4c:a3:53:26:41:c2:54:75:45:73:
87:ef:c9:4b:3c:a8:30:ce:3f:64:19:fc:bc:10:32:
16:b2:e9:cd:3f:49:c1:ce:ab:4e:57:6e:fd:68:97:
c2:be:d4:8e:69:a6:eb:e5:78:b6:71:65:63:5b:1e:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:8A:24:78:0C:96:70:A2:05:ED:91:B8:29:5D:79:9D:D7:47:00
X509v3 Authority Key Identifier:
keyid:CD:40:D5:EA:59:F8:0D:A6:1B:44:86:BD:99:9B:E1:12:A1:A3:53:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUDV6ln4DaYbRIa9mZvhEqGjU4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b329eb-fa5b-4fa8-b49b-f623304ed79a/1/zUDV6ln4DaYbRIa9mZvhEqGjU4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a1:88:32:7c:35:ef:87:e4:0b:a4:e4:e8:3f:75:3c:39:f9:
5e:70:bf:eb:fb:14:d5:d8:f2:c4:ee:69:79:4f:15:6b:30:4d:
1e:67:a5:19:af:df:47:1c:42:75:e1:d9:8b:a4:82:6a:72:24:
f9:6a:7d:2e:24:b9:55:55:04:68:24:17:78:f9:69:93:ee:88:
27:ad:0c:0d:03:5c:7c:9c:13:2b:52:21:59:49:31:65:68:c2:
36:88:1a:51:9e:18:ff:2f:80:de:38:82:cf:e0:f9:53:61:20:
e2:24:ff:76:7b:ad:8e:23:cb:a8:dd:91:72:e3:cc:01:ee:a7:
bd:6b:6e:ae:33:ec:d2:91:25:bf:0a:aa:64:5d:bd:cc:d9:90:
0d:d4:26:bc:bc:da:00:e7:a2:ce:76:a9:51:91:a0:f0:b4:95:
d2:5c:c7:ae:3a:c4:fc:21:02:bb:ac:de:89:84:0e:7b:ca:19:
72:a8:75:7c:e3:0f:5c:5f:f2:10:ff:c7:ad:da:b8:cb:f7:bc:
d1:cc:d0:df:f8:88:67:e5:1b:b2:80:8f:53:87:3c:6a:62:fb:
03:56:f7:07:99:98:f1:0a:db:82:5b:b4:87:69:77:9a:07:a5:
db:a0:a0:63:c2:c2:df:8e:a6:c3:41:41:77:e6:b7:1c:76:15:
13:37:2a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR7XR8kVBP5kpupKv2EEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNDBkNWVhNTlmODBkYTYxYjQ0ODZiZDk5OWJlMTEyYTFh
MzUzODcwHhcNMjUxMDIwMTEwMTA4WhcNMjUxMDIxMTEwMTA4WjAzMTEwLwYDVQQD
Eyg2N2RhOGEyNDc4MGM5NjcwYTIwNWVkOTFiODI5NWQ3OTlkZDc0NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4YOVUXJmWt9c02xh6TnL+0glYef
f9BwBo8dAduTdjEHbCDDErksOQ2sElrJcm2f3ZMYhWYtFNP6huQf4vupmbdETLLf
kARauS8DBmyvfDmOrs+5Qdepw+BUsYpeK1ZCmWKEfUSzxa+xJ5fOXxC9+GUqc2mu
MQyc+66VDUE3nHfXqS4LptbS+0cLqmpslyOE3KVcF0ik7RBOi5ZOj8WZBzUXss4j
i+lJR0TJCi2bKg88dqFGisKYsL9ZhwMfxjIlDYUhXigQS0yjUyZBwlR1RXOH78lL
PKgwzj9kGfy8EDIWsunNP0nBzqtOV279aJfCvtSOaabr5Xi2cWVjWx4SiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfaiiR4DJZwogXtkbgpXXmd10cAMB8GA1UdIwQY
MBaAFM1A1epZ+A2mG0SGvZmb4RKho1OHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWIt
ZjYyMzMwNGVkNzlhLzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9iMzI5ZWItZmE1Yi00ZmE4LWI0OWItZjYyMzMwNGVkNzlh
LzEvelVEVjZsbjREYVliUklhOW1admhFcUdqVTRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaGIMnw1
74fkC6Tk6D91PDn5XnC/6/sU1djyxO5peU8VazBNHmelGa/fRxxCdeHZi6SCanIk
+Wp9LiS5VVUEaCQXePlpk+6IJ60MDQNcfJwTK1IhWUkxZWjCNogaUZ4Y/y+A3jiC
z+D5U2Eg4iT/dnutjiPLqN2RcuPMAe6nvWturjPs0pElvwqqZF29zNmQDdQmvLza
AOeiznapUZGg8LSV0lzHrjrE/CECu6zeiYQOe8oZcqh1fOMPXF/yEP/Hrdq4y/e8
0czQ3/iIZ+UbsoCPU4c8amL7A1b3B5mY8Qrbglu0h2l3mgel26CgY8LC346mw0FB
d+a3HHYVEzcqLw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:40:01 2025 by rpki-client