Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: fhmNz5Obr9ORqEDiF9Q3e+h7x43m7wqJmalIGzu3Sp0=
Subject key identifier: FB:20:57:72:58:CF:EF:3C:DD:5C:96:00:E4:23:11:A9:6C:22:BB:2F
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 0199FE46E6ED653CB89D1C7D39EE71BB816D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0DD7
Signing time: Sun 19 Oct 2025 21:01:23 +0000
Manifest this update: Sun 19 Oct 2025 21:01:23 +0000
Manifest next update: Mon 20 Oct 2025 21:01:23 +0000
Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: Xhb+DnQOUU0NqXjEfUPJvFSKuWs2YP/AjeFo4zytSR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e6:ed:65:3c:b8:9d:1c:7d:39:ee:71:bb:81:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Oct 19 21:01:23 2025 GMT
Not After : Oct 20 21:01:23 2025 GMT
Subject: CN=fb20577258cfef3cdd5c9600e42311a96c22bb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:49:b6:d1:3c:c1:26:65:66:95:b3:b5:ae:
ec:29:e9:16:42:1c:0d:f4:68:1f:a5:5e:db:5c:6e:
d9:c8:49:ce:cc:53:fd:59:27:cc:f9:bc:8a:62:c5:
ff:98:39:3a:df:27:4f:d1:5a:4f:c6:2d:07:f5:14:
a6:c3:00:37:aa:71:a6:a4:f6:4f:77:34:05:f4:6d:
be:b9:94:fb:ff:fe:f9:24:d0:24:6c:c7:7f:6d:a4:
56:58:12:9e:04:ee:72:31:3c:89:4a:46:22:41:b3:
e5:e1:bf:27:da:93:26:d7:40:30:08:c5:98:80:b4:
99:da:f7:be:b8:89:47:e6:16:69:8a:dc:8f:96:32:
49:64:ca:33:e0:e7:6b:f1:24:b9:0e:26:ef:68:5b:
31:e2:c8:8c:b3:46:8e:78:c1:ff:be:6f:53:9c:9d:
4f:b8:ea:c1:f9:ee:4d:ad:4a:82:e6:e2:c7:d6:dd:
d0:c4:98:be:ed:3c:a9:b5:b9:1d:2f:e5:b0:12:01:
ef:e1:0e:1a:d5:fd:1c:04:54:5e:14:9c:92:3c:8a:
c0:9a:78:cf:c3:b3:b7:aa:23:1b:6f:b0:ee:62:8d:
93:cf:99:07:41:4f:12:22:bd:04:a7:a2:45:23:7e:
57:b2:ac:d5:ad:38:97:40:50:f1:62:ce:49:10:e7:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:57:72:58:CF:EF:3C:DD:5C:96:00:E4:23:11:A9:6C:22:BB:2F
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c9:2d:06:32:01:24:a4:99:c9:cf:d8:c4:4e:c5:c4:a9:a2:
4a:f6:86:dc:9e:a5:0d:19:0d:24:a7:75:da:ba:11:57:0f:dc:
8b:7c:11:6f:d7:f5:0f:b7:e5:3b:36:aa:78:c1:25:ed:13:79:
8f:7e:5b:6c:d3:55:50:bd:5d:94:e4:5c:b9:d8:ff:aa:fe:37:
61:06:79:e4:da:3a:9c:65:9e:ca:c0:5e:71:59:b6:b5:a3:f1:
b3:e8:1e:a0:3c:f3:0e:78:74:0e:f8:0b:34:fb:04:0b:fe:e6:
6a:ce:d0:13:cb:e0:28:b0:f7:c7:93:37:9b:f3:06:51:44:a5:
36:a4:3f:2d:a6:76:72:f7:46:13:41:5c:98:f2:3c:87:b9:3e:
a4:04:e6:8f:1c:9c:d0:33:9a:c3:d6:6d:87:50:28:1f:6a:d2:
9e:41:25:c0:c3:d9:eb:9d:cf:eb:42:ce:53:cf:c0:7a:8d:59:
59:a8:50:cd:87:e8:74:52:63:6c:79:ac:c2:74:b3:a3:1f:18:
51:2a:c5:4a:d8:01:dd:56:4d:b2:91:81:20:8e:c7:2f:b9:94:
10:3f:28:5b:77:3f:1e:11:1d:a8:d3:00:87:21:19:88:4f:eb:
b9:e8:bc:ce:6c:79:bb:79:d7:7e:96:35:ff:a1:c2:3c:72:17:
2d:fe:20:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RubtZTy4nRx9Oe5xu4FtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZDA0NWMxM2MwM2RjYjM3M2QyYTdkODVkMWUwMWI2ZTBh
YzdlMWMwHhcNMjUxMDE5MjEwMTIzWhcNMjUxMDIwMjEwMTIzWjAzMTEwLwYDVQQD
EyhmYjIwNTc3MjU4Y2ZlZjNjZGQ1Yzk2MDBlNDIzMTFhOTZjMjJiYjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslVJttE8wSZlZpWzta7sKekWQhwN
9GgfpV7bXG7ZyEnOzFP9WSfM+byKYsX/mDk63ydP0VpPxi0H9RSmwwA3qnGmpPZP
dzQF9G2+uZT7//75JNAkbMd/baRWWBKeBO5yMTyJSkYiQbPl4b8n2pMm10AwCMWY
gLSZ2ve+uIlH5hZpityPljJJZMoz4Odr8SS5DibvaFsx4siMs0aOeMH/vm9TnJ1P
uOrB+e5NrUqC5uLH1t3QxJi+7TyptbkdL+WwEgHv4Q4a1f0cBFReFJySPIrAmnjP
w7O3qiMbb7DuYo2Tz5kHQU8SIr0Ep6JFI35XsqzVrTiXQFDxYs5JEOcBgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsgV3JYz+883VyWAOQjEalsIrsvMB8GA1UdIwQY
MBaAFGfQRcE8A9yzc9Kn2F0eAbbgrH4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMt
MTZmZjcyM2FmMzM1LzEvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8yZTRmM2YtNTUyNi00NTIwLTgzMTMtMTZmZjcyM2FmMzM1
LzEvWjlCRndUd0QzTE56MHFmWVhSNEJ0dUNzZmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMktBjIB
JKSZyc/YxE7FxKmiSvaG3J6lDRkNJKd12roRVw/ci3wRb9f1D7flOzaqeMEl7RN5
j35bbNNVUL1dlORcudj/qv43YQZ55No6nGWeysBecVm2taPxs+geoDzzDnh0DvgL
NPsEC/7mas7QE8vgKLD3x5M3m/MGUUSlNqQ/LaZ2cvdGE0FcmPI8h7k+pATmjxyc
0DOaw9Zth1AoH2rSnkElwMPZ653P60LOU8/Aeo1ZWahQzYfodFJjbHmswnSzox8Y
USrFStgB3VZNspGBII7HL7mUED8oW3c/HhEdqNMAhyEZiE/ruei8zmx5u3nXfpY1
/6HCPHIXLf4gKA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:49 2025 by rpki-client