Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: cBVcliOiwEaa1hrU0FW7vwCv3Aq88ghuPSpW40xLcZ4=
Subject key identifier: BE:E0:E4:96:B2:D8:10:CF:1E:04:F4:8F:54:8B:05:7C:E1:94:57:CF
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 0199FE7E0721C281A774F7438CBC46791549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 22:01:36 +0000
Manifest this update: Sun 19 Oct 2025 22:01:36 +0000
Manifest next update: Mon 20 Oct 2025 22:01:36 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: ZBPhxwRZzx2y474RAtsVdOnaLhIB3bDbshE3eM3Z3MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:07:21:c2:81:a7:74:f7:43:8c:bc:46:79:15:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Oct 19 22:01:36 2025 GMT
Not After : Oct 20 22:01:36 2025 GMT
Subject: CN=bee0e496b2d810cf1e04f48f548b057ce19457cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ec:88:c1:71:70:2f:90:74:74:89:92:83:d9:
a6:24:e5:3d:95:ac:04:dc:99:01:2f:95:a5:82:81:
ea:a8:63:5b:67:a9:fc:77:7f:ce:12:b4:e0:d5:e0:
62:0e:51:51:9c:6e:09:92:2d:f8:80:22:ea:7d:33:
65:98:d8:f1:89:43:a4:be:49:f6:b4:d5:7d:fd:85:
9c:ec:b4:96:03:25:2f:34:ce:84:cf:42:40:f1:ac:
6e:ea:b9:de:36:5a:6a:a3:10:58:ad:d0:bd:6d:4d:
a1:20:41:5d:ce:4e:a6:f4:f2:cb:45:28:d8:8e:1b:
19:83:17:76:36:12:fc:7d:b2:ee:48:ca:e2:0b:cc:
00:a3:5b:0b:83:04:39:04:7b:61:f0:1d:a7:00:a0:
08:5c:aa:72:1d:af:86:7b:c3:98:28:9a:e5:0f:07:
ff:1f:3f:72:91:33:3f:da:2b:c8:d9:8a:c1:15:06:
1f:00:41:d4:81:a5:e5:e9:13:b1:8f:58:e2:ef:22:
cc:f6:45:f6:df:c5:46:fb:90:fe:f8:5c:93:02:82:
61:2b:ca:77:11:f0:53:70:db:cf:84:2d:18:bc:7f:
5f:44:50:3b:af:38:da:cf:e6:bc:e5:5c:d1:f2:d9:
e2:c2:35:d8:d2:2d:ef:64:61:1e:ea:04:ce:1b:fb:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E0:E4:96:B2:D8:10:CF:1E:04:F4:8F:54:8B:05:7C:E1:94:57:CF
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e2:10:12:9f:a6:ed:2b:02:7d:4f:ba:c6:33:b3:ac:5c:55:
3a:44:89:43:ee:d9:6b:9f:fe:47:e2:12:cb:7d:69:ce:f1:b6:
bb:f8:5c:45:46:9b:c2:db:6a:fb:7f:e3:99:d5:3f:44:3d:21:
38:94:02:17:63:3a:c5:82:1f:9b:d6:2e:88:6a:02:f4:59:94:
0b:6e:43:b2:58:ff:de:32:37:25:4e:d7:10:94:5f:70:32:2c:
ee:28:e0:6f:a0:01:1e:23:7c:be:07:30:47:30:e3:4e:98:b3:
31:0a:50:ef:d1:6c:a7:5d:1e:c5:df:aa:d6:4b:d5:6b:23:b9:
e6:ea:60:ae:f4:fb:0e:a1:9f:e9:b6:89:26:a7:c6:a2:65:64:
bc:44:bf:b5:8d:67:0e:13:1c:6f:97:46:1c:e5:ef:7b:8e:46:
56:7f:2d:50:95:ac:a3:63:84:e8:dd:b5:78:5c:03:66:89:32:
58:c8:49:cb:67:8e:58:2c:4d:f3:1c:12:5d:af:2a:37:9f:e4:
0e:87:a2:91:6a:7d:44:c3:43:37:89:5d:ae:e1:75:d2:dc:10:
34:b4:f6:f0:8b:84:c1:fd:03:db:35:e0:44:31:bc:0a:43:c6:
9d:e7:ac:c7:d5:9c:79:fa:48:98:0d:f7:50:28:68:5a:cb:fa:
fc:ea:23:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fgchwoGndPdDjLxGeRVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh
YTMwNDQwHhcNMjUxMDE5MjIwMTM2WhcNMjUxMDIwMjIwMTM2WjAzMTEwLwYDVQQD
EyhiZWUwZTQ5NmIyZDgxMGNmMWUwNGY0OGY1NDhiMDU3Y2UxOTQ1N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+yIwXFwL5B0dImSg9mmJOU9lawE
3JkBL5WlgoHqqGNbZ6n8d3/OErTg1eBiDlFRnG4Jki34gCLqfTNlmNjxiUOkvkn2
tNV9/YWc7LSWAyUvNM6Ez0JA8axu6rneNlpqoxBYrdC9bU2hIEFdzk6m9PLLRSjY
jhsZgxd2NhL8fbLuSMriC8wAo1sLgwQ5BHth8B2nAKAIXKpyHa+Ge8OYKJrlDwf/
Hz9ykTM/2ivI2YrBFQYfAEHUgaXl6ROxj1ji7yLM9kX238VG+5D++FyTAoJhK8p3
EfBTcNvPhC0YvH9fRFA7rzjaz+a85VzR8tniwjXY0i3vZGEe6gTOG/vlTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7g5Jay2BDPHgT0j1SLBXzhlFfPMB8GA1UdIwQY
MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt
YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1
LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleIQEp+m
7SsCfU+6xjOzrFxVOkSJQ+7Za5/+R+ISy31pzvG2u/hcRUabwttq+3/jmdU/RD0h
OJQCF2M6xYIfm9YuiGoC9FmUC25Dslj/3jI3JU7XEJRfcDIs7ijgb6ABHiN8vgcw
RzDjTpizMQpQ79Fsp10exd+q1kvVayO55upgrvT7DqGf6baJJqfGomVkvES/tY1n
DhMcb5dGHOXve45GVn8tUJWso2OE6N21eFwDZokyWMhJy2eOWCxN8xwSXa8qN5/k
DoeikWp9RMNDN4ldruF10twQNLT28IuEwf0D2zXgRDG8CkPGneesx9WcefpImA33
UChoWsv6/Oojdg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:15 2025 by rpki-client