Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: WmyJX46F2uyRkP0kc3Z+Qd+bqNuEuZCx6Vypu2aprYw=
Subject key identifier: 04:CE:CD:66:C8:D5:09:B4:0E:1E:88:65:D5:47:69:0B:3D:76:7E:86
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 0199FC8F2CA0417E1480AE3667D66EEB7E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: nCyZUQyjt2D36q4swmmEiGNfmywHmKRmTSsI7ade4do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:a0:41:7e:14:80:ae:36:67:d6:6e:eb:7e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=04cecd66c8d509b40e1e8865d547690b3d767e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:57:a9:9b:ac:b2:cb:0d:25:b7:20:cb:fa:
be:c8:48:ae:f2:ee:15:25:5e:57:25:65:a8:08:95:
2e:17:c5:af:9f:99:56:95:f7:e1:7e:14:53:bf:8b:
67:77:24:c8:4a:06:df:4d:b5:57:76:53:64:29:c3:
af:3e:f7:8e:83:8a:7f:97:70:48:ad:b8:68:9f:29:
6f:dd:ed:90:37:58:b2:5e:aa:d6:80:0f:8c:8a:e9:
78:41:84:87:2f:a0:44:fe:89:ac:b8:47:4b:ee:fa:
b9:f8:65:c4:18:71:27:c2:e5:11:f8:0c:03:b3:76:
55:58:35:6a:ad:82:cc:87:a0:17:67:cc:1e:9a:b7:
b2:9c:7b:b1:65:86:47:1f:7a:d7:65:f7:ba:bb:f4:
ef:79:c1:72:8a:8b:38:42:c3:fb:b2:75:e0:8b:74:
00:58:27:e6:39:32:82:7f:93:32:f5:32:43:22:fb:
0c:d2:9e:7b:12:d5:cb:cc:a0:3f:86:05:42:c6:fd:
43:60:1d:c1:6f:9f:13:00:e9:44:db:aa:f5:3c:de:
70:af:9d:88:16:89:5e:22:7f:20:bb:05:44:96:e6:
c6:49:c9:ef:22:68:e0:19:02:3a:bc:c1:12:b6:4d:
d4:22:95:fc:97:65:0f:38:30:e8:40:2d:5a:0c:3a:
76:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:CD:66:C8:D5:09:B4:0E:1E:88:65:D5:47:69:0B:3D:76:7E:86
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cb:3e:d3:99:f2:c2:17:74:5a:c9:f7:51:03:6f:f4:5b:ed:
b1:4a:a3:af:27:84:03:f3:1a:4b:67:20:9b:c6:ff:91:2f:c6:
cf:e6:ac:7e:57:d9:7a:65:17:0e:ab:6d:2e:59:a3:bb:21:f3:
50:4f:33:5f:c2:4c:4b:68:64:f8:c8:d0:0c:2f:6a:ed:08:a9:
dd:ee:74:af:cb:48:5b:7a:4c:3c:d6:e8:c7:25:9c:c9:f6:a8:
a9:3c:63:a2:d0:12:76:ff:d2:dc:c4:af:35:ce:fa:b3:06:ff:
e9:f3:df:94:6a:bb:9f:d3:92:d8:ee:54:52:b1:58:97:ce:18:
50:4d:a4:bd:16:7f:5d:0d:01:c7:eb:ce:4a:78:8a:19:7c:7b:
7e:c3:69:ea:a4:a9:6e:53:58:bb:1e:cf:71:62:6f:c4:23:e6:
7b:36:f5:cf:c5:06:70:26:12:95:85:59:23:4a:9d:ab:75:de:
a7:80:e4:24:bf:78:cb:c0:04:e2:44:b8:02:b8:65:1d:40:41:
2d:cf:a9:5d:24:60:20:e6:d5:34:14:85:cf:18:5c:5b:ed:db:
6c:c1:d6:58:cb:39:a9:68:88:bd:3a:f9:db:b5:a2:0d:2b:b8:
c6:af:01:17:fb:9a:1a:37:dd:1e:af:bd:46:7f:6a:99:f9:5b:
5a:e7:97:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jyygQX4UgK42Z9Zu6344MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzc3YTA4YTQ1NjQ1NDhiNTE4ZWMzODY0YjM0MWUxZmE1
MjI1ZWEwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
EygwNGNlY2Q2NmM4ZDUwOWI0MGUxZTg4NjVkNTQ3NjkwYjNkNzY3ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzpXqZussssNJbcgy/q+yEiu8u4V
JV5XJWWoCJUuF8Wvn5lWlffhfhRTv4tndyTISgbfTbVXdlNkKcOvPveOg4p/l3BI
rbhonylv3e2QN1iyXqrWgA+Miul4QYSHL6BE/omsuEdL7vq5+GXEGHEnwuUR+AwD
s3ZVWDVqrYLMh6AXZ8wemreynHuxZYZHH3rXZfe6u/TvecFyios4QsP7snXgi3QA
WCfmOTKCf5My9TJDIvsM0p57EtXLzKA/hgVCxv1DYB3Bb58TAOlE26r1PN5wr52I
FoleIn8guwVElubGScnvImjgGQI6vMEStk3UIpX8l2UPODDoQC1aDDp2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATOzWbI1Qm0Dh6IZdVHaQs9dn6GMB8GA1UdIwQY
MBaAFMx3egikVkVItRjsOGSzQeH6UiXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMt
NzY3YjBjYzgwYzA4LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMtNzY3YjBjYzgwYzA4
LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMs+05ny
whd0Wsn3UQNv9FvtsUqjryeEA/MaS2cgm8b/kS/Gz+asflfZemUXDqttLlmjuyHz
UE8zX8JMS2hk+MjQDC9q7Qip3e50r8tIW3pMPNboxyWcyfaoqTxjotASdv/S3MSv
Nc76swb/6fPflGq7n9OS2O5UUrFYl84YUE2kvRZ/XQ0Bx+vOSniKGXx7fsNp6qSp
blNYux7PcWJvxCPmezb1z8UGcCYSlYVZI0qdq3Xep4DkJL94y8AE4kS4ArhlHUBB
Lc+pXSRgIObVNBSFzxhcW+3bbMHWWMs5qWiIvTr527WiDSu4xq8BF/uaGjfdHq+9
Rn9qmflbWueXtg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:36 2025 by rpki-client