Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: aOJ5WHRbNhjJDjtzNsg/AHK55cNYkTL9OE38XtHJtsk=
Subject key identifier: 5C:FE:BD:14:B0:AD:95:4B:74:25:FE:7A:4F:43:8C:63:55:0F:83:B9
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 0198D5BBF05541DD4E9EAE31AF65AC593708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0A9C
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: LgVW/zVT7GeCSGT+JhFgu2Z/C2gmx9niC+ZiThdIUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f0:55:41:dd:4e:9e:ae:31:af:65:ac:59:37:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=5cfebd14b0ad954b7425fe7a4f438c63550f83b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:ed:97:c9:0d:13:12:de:30:8d:72:ab:52:
82:66:10:6b:5a:00:09:ae:e3:28:12:39:41:55:17:
8f:f4:db:d4:37:83:5e:d1:2f:e3:5a:67:80:fe:8b:
5a:a0:da:1f:ed:c0:2a:f8:82:43:e9:e9:e2:a6:b0:
57:51:6d:68:50:a7:04:e0:71:4a:25:25:20:43:6a:
09:3a:26:54:5f:88:67:e1:a3:69:a7:10:f5:f4:e3:
f2:41:97:e9:0d:44:0a:46:1c:ac:e2:44:ad:d4:8d:
a1:47:80:c1:4b:e8:3b:ec:88:38:af:87:a3:3c:2b:
a3:a2:73:b1:3c:6a:b0:ab:f1:9a:6b:d1:e7:b9:d0:
41:29:da:5b:66:0a:43:46:dd:b7:4e:de:a7:51:8e:
27:91:b9:93:9a:83:de:23:22:d2:e7:0e:c3:b4:20:
66:d8:6b:d8:06:9a:77:51:72:82:fd:83:2d:b9:30:
ba:a3:c2:ba:1c:2a:16:4a:a8:6c:0b:67:25:4d:e4:
8b:10:87:82:41:4d:61:78:ad:a8:70:6a:0b:ba:33:
43:d9:ae:33:27:d4:39:7d:9b:cd:3d:89:65:e5:f0:
fa:86:8a:49:ae:5c:8b:67:8a:ae:37:80:31:f2:09:
35:1e:96:08:d5:c5:fc:67:e5:54:2a:b8:33:b5:be:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FE:BD:14:B0:AD:95:4B:74:25:FE:7A:4F:43:8C:63:55:0F:83:B9
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:38:65:25:4f:42:33:d1:ab:15:25:98:d3:dd:b8:26:b4:35:
14:c7:db:79:51:4f:9e:9d:2e:7b:14:bb:27:40:ff:9a:f5:5a:
3a:5a:5b:e0:e3:56:9b:b8:ee:ee:0d:20:de:10:d0:be:72:07:
88:b1:e9:56:ba:8a:03:e2:82:cc:7e:73:8a:19:85:d9:06:e2:
06:cc:42:8f:a4:0a:42:92:74:60:b1:ed:df:dd:28:46:13:09:
5b:fc:56:38:fd:f8:82:9a:d2:e6:38:fc:28:4a:79:28:b7:72:
f8:d6:5d:e0:53:4f:1e:92:8d:a2:5f:e3:3f:96:f8:96:33:4a:
45:bd:96:69:0c:60:97:f3:bd:65:39:c6:ce:fa:75:81:76:1f:
de:97:04:39:a5:ae:b6:a4:a8:1f:4d:a6:07:c3:f2:ed:c6:df:
e9:a0:fa:33:98:9f:51:9e:9f:36:ed:66:12:31:3c:4d:26:86:
0f:3b:25:b8:9c:45:20:f5:a5:94:75:54:e1:57:67:3c:1c:66:
56:9f:5b:db:bf:f0:3c:d2:1d:83:3c:7d:b3:3f:e9:bd:25:55:
77:55:76:8b:d1:7b:8d:10:86:46:66:ce:84:02:c5:b1:78:65:
71:2b:ac:87:25:66:6e:41:20:99:a8:29:57:6d:c6:21:4d:2d:
f3:60:08:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/BVQd1Onq4xr2WsWTcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk
ZWJiMGYwHhcNMjUwODIzMDcwMjAwWhcNMjUwODI0MDcwMjAwWjAzMTEwLwYDVQQD
Eyg1Y2ZlYmQxNGIwYWQ5NTRiNzQyNWZlN2E0ZjQzOGM2MzU1MGY4M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWztl8kNExLeMI1yq1KCZhBrWgAJ
ruMoEjlBVReP9NvUN4Ne0S/jWmeA/otaoNof7cAq+IJD6eniprBXUW1oUKcE4HFK
JSUgQ2oJOiZUX4hn4aNppxD19OPyQZfpDUQKRhys4kSt1I2hR4DBS+g77Ig4r4ej
PCujonOxPGqwq/Gaa9HnudBBKdpbZgpDRt23Tt6nUY4nkbmTmoPeIyLS5w7DtCBm
2GvYBpp3UXKC/YMtuTC6o8K6HCoWSqhsC2clTeSLEIeCQU1heK2ocGoLujND2a4z
J9Q5fZvNPYll5fD6hopJrlyLZ4quN4Ax8gk1HpYI1cX8Z+VUKrgztb69YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz+vRSwrZVLdCX+ek9DjGNVD4O5MB8GA1UdIwQY
MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt
MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi
LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjhlJU9C
M9GrFSWY0924JrQ1FMfbeVFPnp0uexS7J0D/mvVaOlpb4ONWm7ju7g0g3hDQvnIH
iLHpVrqKA+KCzH5zihmF2QbiBsxCj6QKQpJ0YLHt390oRhMJW/xWOP34gprS5jj8
KEp5KLdy+NZd4FNPHpKNol/jP5b4ljNKRb2WaQxgl/O9ZTnGzvp1gXYf3pcEOaWu
tqSoH02mB8Py7cbf6aD6M5ifUZ6fNu1mEjE8TSaGDzsluJxFIPWllHVU4VdnPBxm
Vp9b27/wPNIdgzx9sz/pvSVVd1V2i9F7jRCGRmbOhALFsXhlcSushyVmbkEgmagp
V23GIU0t82AI9A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:55 2025 by rpki-client