Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: IdgSe6ZTM1AxcylDcwpsKX6SVBVN2FZRi8GNy9B1U5U=
Subject key identifier: 47:BC:36:79:F5:CF:60:C3:38:24:26:4B:B1:13:99:1A:D8:E7:B8:C7
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 0199FB0F0395C5075C93FB8A2F4704768909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 0B9B
Signing time: Sun 19 Oct 2025 06:01:29 +0000
Manifest this update: Sun 19 Oct 2025 06:01:29 +0000
Manifest next update: Mon 20 Oct 2025 06:01:29 +0000
Files and hashes: 1: 81yN31-IxQXIZI5PlY-trqqNIno.roa (hash: v9l8y9I+7ljSUfpIaDADoFiNw5hBtJQ72MRZ64GdbyQ=)
2: Eb67nR4_r4j8Qlyfns20ti-cJT8.roa (hash: lFVr25uX8drF2iD9dDrV81ECiahOTdUT7rmBW8WFEjc=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: Rv95h8XJAX68n0wPacW5n3X+rZdGX/6WvWLOPfF39Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:03:95:c5:07:5c:93:fb:8a:2f:47:04:76:89:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Oct 19 06:01:29 2025 GMT
Not After : Oct 20 06:01:29 2025 GMT
Subject: CN=47bc3679f5cf60c33824264bb113991ad8e7b8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:76:f7:ba:a8:ce:67:48:a9:b4:ac:f5:7d:
46:46:f2:b2:cd:e9:3d:c8:9b:27:f1:f0:84:83:2a:
1f:29:c1:99:28:d7:01:d9:d9:4b:de:2e:fb:1c:b6:
97:71:8f:bd:d5:84:e9:8c:27:81:5e:0c:df:f1:95:
e1:f8:b2:f9:a5:6f:ee:b0:7a:d2:7e:5e:c3:d4:e8:
3c:a0:bc:8a:96:16:15:60:c4:93:db:58:83:e3:22:
8a:fc:4f:a6:9a:f7:6d:bb:a5:b8:b2:47:5f:b7:0f:
13:99:3e:a3:a5:a4:6f:24:08:65:2e:c6:08:e8:af:
e6:3f:60:03:c2:f6:6d:71:df:8f:e6:02:3e:f4:24:
5e:14:ca:76:5c:b9:73:51:94:8f:49:29:d2:14:3d:
c3:52:fc:2e:15:aa:dd:34:7f:17:b5:9a:57:cf:78:
0a:92:f3:fb:f2:f8:7f:9d:2a:85:20:6f:ad:5b:10:
8a:84:24:30:41:3b:d4:35:16:91:98:8b:77:9b:b4:
ce:6d:59:13:62:7d:51:d4:bd:8a:df:dd:4b:ea:b5:
1c:bf:db:df:38:6d:0f:12:40:da:77:90:22:7b:38:
4f:35:b3:f8:ed:39:dc:4f:61:bb:00:99:34:6c:ec:
86:6f:0d:fc:9d:9e:e4:dd:fe:0c:2e:a2:f1:87:7b:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:36:79:F5:CF:60:C3:38:24:26:4B:B1:13:99:1A:D8:E7:B8:C7
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:59:b8:ec:fd:e0:5f:61:ff:26:57:dc:cc:38:3e:97:21:
f9:e6:b6:6c:b1:b3:7c:53:5b:47:d0:a6:91:0e:ac:8e:ab:67:
7f:3b:56:3e:96:1b:ca:fc:98:44:d8:47:a6:ca:21:d3:a0:48:
be:39:68:51:7d:61:7b:f5:4a:3d:dc:79:e4:d1:58:70:38:aa:
32:37:9a:55:61:d9:18:85:13:46:9e:ac:09:82:17:5b:6e:a7:
ac:9c:ea:ba:53:a8:23:33:18:ae:5e:e4:3d:83:31:1a:79:83:
0a:11:af:6a:6c:ec:19:d4:43:31:5b:6d:2f:5a:eb:a0:08:ad:
24:4f:d3:5a:8c:c7:15:0f:2b:d0:49:c2:14:b3:52:d3:64:d3:
30:0a:00:33:b2:34:8e:38:b9:03:e2:67:fb:6c:14:f5:68:e1:
90:22:2f:0d:02:1e:ae:3b:25:9d:1a:7c:90:1e:ce:13:8d:1f:
9d:a9:d8:6b:e3:b2:0e:e2:5d:f3:f4:88:a4:a9:79:ae:92:42:
63:5c:30:1f:31:0f:fc:c4:0a:57:e5:10:fc:61:d7:fe:9a:16:
05:37:8c:8d:a9:07:a4:f1:f7:67:fc:93:bd:bb:3c:d9:0c:c8:
c7:29:3e:cb:8c:a6:f0:e7:7f:ef:e6:ed:1e:03:1a:46:92:93:
c4:45:7b:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DwOVxQdck/uKL0cEdokJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi
MTU4OWMwHhcNMjUxMDE5MDYwMTI5WhcNMjUxMDIwMDYwMTI5WjAzMTEwLwYDVQQD
Eyg0N2JjMzY3OWY1Y2Y2MGMzMzgyNDI2NGJiMTEzOTkxYWQ4ZTdiOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQV297qozmdIqbSs9X1GRvKyzek9
yJsn8fCEgyofKcGZKNcB2dlL3i77HLaXcY+91YTpjCeBXgzf8ZXh+LL5pW/usHrS
fl7D1Og8oLyKlhYVYMST21iD4yKK/E+mmvdtu6W4skdftw8TmT6jpaRvJAhlLsYI
6K/mP2ADwvZtcd+P5gI+9CReFMp2XLlzUZSPSSnSFD3DUvwuFardNH8XtZpXz3gK
kvP78vh/nSqFIG+tWxCKhCQwQTvUNRaRmIt3m7TObVkTYn1R1L2K391L6rUcv9vf
OG0PEkDad5AiezhPNbP47TncT2G7AJk0bOyGbw38nZ7k3f4MLqLxh3s3ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEe8Nnn1z2DDOCQmS7ETmRrY57jHMB8GA1UdIwQY
MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt
NWQ0OGJjZDdjMWRjLzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj
LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWlZuOz9
4F9h/yZX3Mw4Ppch+ea2bLGzfFNbR9CmkQ6sjqtnfztWPpYbyvyYRNhHpsoh06BI
vjloUX1he/VKPdx55NFYcDiqMjeaVWHZGIUTRp6sCYIXW26nrJzqulOoIzMYrl7k
PYMxGnmDChGvamzsGdRDMVttL1rroAitJE/TWozHFQ8r0EnCFLNS02TTMAoAM7I0
jji5A+Jn+2wU9WjhkCIvDQIerjslnRp8kB7OE40fnanYa+OyDuJd8/SIpKl5rpJC
Y1wwHzEP/MQKV+UQ/GHX/poWBTeMjakHpPH3Z/yTvbs82QzIxyk+y4ym8Od/7+bt
HgMaRpKTxEV7SA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:42 2025 by rpki-client