Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: fyjBrVDkjV0tz6wxVc+ScUbkk4gDjDKtOsl5j+SX3U0=
Subject key identifier: DE:79:2F:82:92:59:36:F7:88:09:75:B1:DD:29:08:20:07:BF:9F:76
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 0199FB45D05BD230A704BCD38018F0900D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0B34
Signing time: Sun 19 Oct 2025 07:01:20 +0000
Manifest this update: Sun 19 Oct 2025 07:01:20 +0000
Manifest next update: Mon 20 Oct 2025 07:01:20 +0000
Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: rqp/UfCeHbRNkcBn2isSYgc4opV4dSDXDXwdMG0vspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d0:5b:d2:30:a7:04:bc:d3:80:18:f0:90:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Oct 19 07:01:20 2025 GMT
Not After : Oct 20 07:01:20 2025 GMT
Subject: CN=de792f82925936f7880975b1dd29082007bf9f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f5:24:dd:b9:d2:b2:68:6e:7c:79:df:0c:6d:
83:91:0e:20:21:24:41:4c:81:8a:cb:9c:88:07:45:
4a:e4:f3:0f:2a:9e:a9:70:0a:be:ff:02:ea:74:80:
50:86:19:b6:11:1c:01:e5:2e:48:09:4b:81:99:d3:
0e:05:ab:76:df:54:a1:3f:e4:20:e9:5f:98:04:d7:
a9:d0:61:f9:e1:32:5b:da:5b:69:be:85:bb:27:10:
b0:17:37:77:69:f1:03:e0:40:ed:47:4e:93:e8:dd:
1a:a4:7c:7f:b2:bd:0b:86:bf:7a:f7:c6:0c:d2:94:
21:05:cb:9a:8e:ea:e8:d1:cf:02:37:00:48:c5:4f:
24:3d:33:ae:6a:cc:24:52:9f:40:5a:bd:ae:d8:79:
50:9c:06:27:c6:94:f3:2e:d0:45:60:1c:85:0e:f1:
ee:52:84:de:85:b3:a2:30:9e:e6:1b:47:84:77:27:
48:52:17:16:34:ca:f9:ba:fc:5f:0e:99:70:b4:91:
ff:17:34:90:48:94:a1:64:87:45:c4:24:97:a7:4e:
64:29:0b:42:56:7c:91:9c:0e:d2:4e:ba:dd:06:06:
a6:18:eb:ad:b6:45:31:95:d2:25:74:30:91:15:f4:
06:4e:73:89:c9:c1:75:5e:7a:f3:b3:6f:e2:35:fc:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:79:2F:82:92:59:36:F7:88:09:75:B1:DD:29:08:20:07:BF:9F:76
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:82:09:fd:61:87:9b:5f:b1:33:f2:9f:dd:08:39:ad:c2:20:
d2:af:9f:66:99:99:11:57:de:b9:47:4b:79:7b:7b:d1:26:b3:
69:3f:83:cd:20:5d:72:12:2f:c8:79:0f:c2:75:c3:65:41:a0:
9c:87:dc:2f:1a:a7:a8:c1:bd:ee:7b:71:f3:b1:fc:ce:f0:55:
10:3b:60:76:47:10:84:86:98:7f:50:b1:35:6b:85:41:8e:bb:
89:0c:33:40:34:da:4e:68:0e:ab:34:8a:11:31:98:5c:b4:3e:
48:4c:c1:de:ee:5f:ad:8e:4b:7e:10:1a:92:b9:8b:43:34:d9:
47:5c:28:d0:72:c5:30:ae:c8:a4:9b:0b:81:1d:69:40:91:b2:
2f:d0:44:64:7d:ea:7a:2d:3d:d1:9a:54:de:85:6c:d9:eb:b8:
b8:27:76:84:75:1a:01:f2:9e:d0:29:c2:b5:8e:34:a0:61:d3:
ea:fd:80:a6:c1:86:a0:dc:c7:d4:e2:d6:1d:db:22:32:21:7c:
32:e6:aa:ee:68:1f:b3:67:06:28:1f:6f:34:26:93:9a:92:db:
34:34:c0:a1:89:76:a8:40:b8:7b:68:d5:c0:ec:1b:17:eb:02:
81:8c:1e:81:70:a2:84:68:85:72:9d:97:d6:ed:fa:9a:c7:75:
50:28:05:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdBb0jCnBLzTgBjwkA2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk
ZWJiMGYwHhcNMjUxMDE5MDcwMTIwWhcNMjUxMDIwMDcwMTIwWjAzMTEwLwYDVQQD
EyhkZTc5MmY4MjkyNTkzNmY3ODgwOTc1YjFkZDI5MDgyMDA3YmY5Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PUk3bnSsmhufHnfDG2DkQ4gISRB
TIGKy5yIB0VK5PMPKp6pcAq+/wLqdIBQhhm2ERwB5S5ICUuBmdMOBat231ShP+Qg
6V+YBNep0GH54TJb2ltpvoW7JxCwFzd3afED4EDtR06T6N0apHx/sr0Lhr9698YM
0pQhBcuajuro0c8CNwBIxU8kPTOuaswkUp9AWr2u2HlQnAYnxpTzLtBFYByFDvHu
UoTehbOiMJ7mG0eEdydIUhcWNMr5uvxfDplwtJH/FzSQSJShZIdFxCSXp05kKQtC
VnyRnA7STrrdBgamGOuttkUxldIldDCRFfQGTnOJycF1Xnrzs2/iNfxE4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN55L4KSWTb3iAl1sd0pCCAHv592MB8GA1UdIwQY
MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt
MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi
LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYIJ/WGH
m1+xM/Kf3Qg5rcIg0q+fZpmZEVfeuUdLeXt70SazaT+DzSBdchIvyHkPwnXDZUGg
nIfcLxqnqMG97ntx87H8zvBVEDtgdkcQhIaYf1CxNWuFQY67iQwzQDTaTmgOqzSK
ETGYXLQ+SEzB3u5frY5LfhAakrmLQzTZR1wo0HLFMK7IpJsLgR1pQJGyL9BEZH3q
ei090ZpU3oVs2eu4uCd2hHUaAfKe0CnCtY40oGHT6v2ApsGGoNzH1OLWHdsiMiF8
Muaq7mgfs2cGKB9vNCaTmpLbNDTAoYl2qEC4e2jVwOwbF+sCgYwegXCihGiFcp2X
1u36msd1UCgFeA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client