Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: qRbiuYwF6LT/eBY9N2Kre150gYqHorPRjJl9odrTvws=
Subject key identifier: FD:C9:B9:F8:57:26:4E:98:F6:1B:07:46:AA:E0:CC:6F:58:80:49:93
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 0199FD342FF50465B0F90EDED38C5E4410D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: 0297
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: lyYWWYqzUBXJiF16Lv2gHxxstCDbpxAdqkA4uTRc+mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2f:f5:04:65:b0:f9:0e:de:d3:8c:5e:44:10:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=fdc9b9f857264e98f61b0746aae0cc6f58804993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:d6:35:da:82:07:17:64:4c:9c:da:eb:10:
c5:b2:30:bc:61:7e:fa:71:4d:17:a1:bf:43:7a:02:
01:a5:52:80:5d:69:fa:b3:4f:84:b2:4a:66:ca:c7:
23:98:aa:aa:8d:71:d7:bd:32:0a:f9:99:87:f0:3e:
b6:f3:8b:7e:eb:17:7f:d2:9e:70:37:7d:1a:ff:59:
ad:3f:31:fb:69:37:74:a0:53:50:ac:54:95:05:08:
a8:f6:16:d6:c9:46:48:78:3d:94:63:52:28:03:bb:
d7:86:d9:e0:24:75:44:72:ad:1e:27:f1:b7:e7:53:
a8:56:c6:06:c6:71:bd:9e:ca:7c:2f:13:b3:a9:93:
b7:82:c0:a7:9f:92:7e:20:ff:7a:dc:4b:c0:4d:d6:
90:41:e3:1d:75:0b:0b:4b:9a:e3:10:3a:7d:6e:42:
22:e0:0d:eb:8a:5b:71:ac:44:1b:72:45:62:d2:f9:
af:f8:d7:43:1d:36:12:b9:d9:6d:c3:e9:a5:6c:b1:
3e:21:63:8a:a3:6a:ca:bd:cf:95:39:d9:c2:7c:65:
13:43:bd:eb:58:49:5c:5c:02:ef:06:4c:40:1b:05:
7d:9f:46:53:40:9b:ed:97:dc:cd:fc:bf:d2:c9:56:
7c:6b:0b:9c:83:52:c3:ed:90:35:49:7b:29:f7:8e:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:B9:F8:57:26:4E:98:F6:1B:07:46:AA:E0:CC:6F:58:80:49:93
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bc:d7:71:87:40:8b:09:67:bd:4e:25:b5:c8:f3:9b:ae:94:
5f:fa:de:78:47:9a:05:5c:ad:74:36:c0:e6:dd:88:ca:31:21:
f5:0f:d0:08:82:df:a0:95:ae:4b:86:52:78:1a:cf:66:4a:8f:
77:df:74:40:f5:89:0e:ff:7c:5c:1b:48:ad:4f:2f:fb:0d:54:
dc:81:9b:81:55:87:96:e2:91:1e:e5:33:ad:4d:a8:ad:34:6e:
1a:89:bf:a3:6c:27:79:59:12:02:f4:61:ff:66:83:05:05:3c:
80:b9:f8:36:0a:8f:fa:b8:ce:64:71:79:58:05:7a:5b:73:50:
86:fb:9e:aa:5f:3d:92:7d:5c:5e:a8:b6:8d:ed:dd:00:a7:9b:
6d:61:58:c2:ec:64:74:7d:b0:f0:42:a7:99:ce:86:e7:90:00:
7b:f3:25:dc:e0:7f:62:a6:c7:31:da:35:4a:6a:6d:4a:49:a7:
1a:03:33:c1:6a:27:36:d1:4c:81:0b:7d:4c:8c:4e:d3:d0:b3:
b8:ec:8b:95:d4:69:c6:bf:1c:2b:e9:6a:b1:33:7c:85:80:75:
e8:13:c7:34:ee:1a:4c:87:c1:1c:6a:9e:3b:bc:9b:f4:ce:b8:
56:1c:21:6b:f8:b8:44:d7:fc:fa:af:40:91:c6:68:70:3c:75:
d3:ce:ba:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NC/1BGWw+Q7e04xeRBDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTgxNmNhZmZmYTU2MjYzZGQwZDc0ODE5Yzk0ZDU0MDJm
MWJiNmQwHhcNMjUxMDE5MTYwMTE5WhcNMjUxMDIwMTYwMTE5WjAzMTEwLwYDVQQD
EyhmZGM5YjlmODU3MjY0ZTk4ZjYxYjA3NDZhYWUwY2M2ZjU4ODA0OTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYbWNdqCBxdkTJza6xDFsjC8YX76
cU0Xob9DegIBpVKAXWn6s0+EskpmyscjmKqqjXHXvTIK+ZmH8D6284t+6xd/0p5w
N30a/1mtPzH7aTd0oFNQrFSVBQio9hbWyUZIeD2UY1IoA7vXhtngJHVEcq0eJ/G3
51OoVsYGxnG9nsp8LxOzqZO3gsCnn5J+IP963EvATdaQQeMddQsLS5rjEDp9bkIi
4A3riltxrEQbckVi0vmv+NdDHTYSudltw+mlbLE+IWOKo2rKvc+VOdnCfGUTQ73r
WElcXALvBkxAGwV9n0ZTQJvtl9zN/L/SyVZ8awucg1LD7ZA1SXsp944NBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3JufhXJk6Y9hsHRqrgzG9YgEmTMB8GA1UdIwQY
MBaAFMyYFsr/+lYmPdDXSBnJTVQC8bttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUt
MDllYjAwMTNmYzI0LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80MDdhM2YtNjZjMC00OTc5LWE3MjUtMDllYjAwMTNmYzI0
LzEvekpnV3l2XzZWaVk5ME5kSUdjbE5WQUx4dTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLzXcYdA
iwlnvU4ltcjzm66UX/reeEeaBVytdDbA5t2IyjEh9Q/QCILfoJWuS4ZSeBrPZkqP
d990QPWJDv98XBtIrU8v+w1U3IGbgVWHluKRHuUzrU2orTRuGom/o2wneVkSAvRh
/2aDBQU8gLn4NgqP+rjOZHF5WAV6W3NQhvueql89kn1cXqi2je3dAKebbWFYwuxk
dH2w8EKnmc6G55AAe/Ml3OB/YqbHMdo1SmptSkmnGgMzwWonNtFMgQt9TIxO09Cz
uOyLldRpxr8cK+lqsTN8hYB16BPHNO4aTIfBHGqeO7yb9M64Vhwha/i4RNf8+q9A
kcZocDx10866CA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:19 2025 by rpki-client