Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
File: Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft (raw, json)
Hash identifier: +Oe6eQes3fpO8jwYvZJpSQabyFXtHPtHJGQ9ht/xyG0=
Subject key identifier: 89:95:1C:0B:7E:99:66:E7:A4:83:42:E4:8C:EA:CB:FC:7A:DF:37:45
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 0199FBEBD4FA985CFE0539E0D8E3EC15CAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (hash: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=)
2: Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl (hash: YzCBjVfAIYitVb9R6Obd8D5H3L7LpuZn3jbyw46eyC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d4:fa:98:5c:fe:05:39:e0:d8:e3:ec:15:ca:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=89951c0b7e9966e7a48342e48ceacbfc7adf3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:3b:0d:15:6e:28:fb:a4:5a:38:ce:0c:9a:
d6:03:f9:99:dc:e3:b4:d7:38:3a:39:31:4d:76:c6:
5b:20:9c:24:15:c7:e9:d5:3d:dc:81:78:7d:1c:b6:
a2:1b:9f:b7:07:d9:c1:ce:dc:65:ea:23:34:7e:19:
c2:7a:00:5b:49:ec:a5:aa:cf:18:ff:09:d2:b9:39:
0c:41:35:cd:58:d3:23:5a:b7:b8:c6:38:ed:52:0d:
0c:a1:5f:d0:08:dc:42:1d:21:45:78:5e:49:a9:d5:
4f:3e:8e:90:34:5d:4f:6a:b6:db:0c:78:40:f1:4d:
91:59:61:ac:c3:11:87:cf:47:99:11:da:9c:09:60:
85:67:91:48:19:9d:c9:2e:81:bc:2d:66:e3:e6:dd:
70:be:5a:37:d0:b1:eb:5a:06:65:52:25:ce:f2:44:
b1:ec:3b:d7:1e:7c:5b:3d:1e:07:33:55:37:a8:f0:
38:f0:fb:e1:3b:00:ac:eb:68:26:cf:58:a4:d3:e3:
6a:b0:91:8c:bd:3f:51:44:4f:8a:2b:e7:47:5b:f9:
2e:77:8b:ab:74:e3:f3:fc:18:60:0d:a2:3d:68:77:
97:f5:7a:3f:d0:1f:1c:45:66:ed:c3:34:32:2a:e5:
9e:a2:a3:36:7c:39:39:34:38:33:f5:5a:3f:53:c8:
d4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:95:1C:0B:7E:99:66:E7:A4:83:42:E4:8C:EA:CB:FC:7A:DF:37:45
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:46:f9:c7:fa:3f:ff:4f:be:f4:6c:09:52:bc:f5:b0:5d:
c5:2e:63:e6:b9:07:ab:8d:34:5b:85:2c:09:f5:d1:d8:03:5f:
f4:19:73:bb:89:8f:2a:a9:f5:39:24:13:f5:d3:7d:81:12:1a:
7f:d2:da:31:c6:08:7f:ce:5d:da:db:d0:13:c4:6d:59:a7:20:
48:ac:79:d0:ee:52:59:e1:89:c0:fc:3d:79:10:a6:79:48:75:
ec:cf:5f:5e:99:49:91:02:6f:1b:c5:1e:2d:12:9b:bd:cc:39:
fd:60:e7:02:6f:4a:95:23:45:6a:5d:2b:e9:a2:30:78:ba:3a:
ed:f2:e9:ce:b8:7a:98:e7:b9:5b:80:19:3d:69:c4:9c:74:24:
ed:20:1d:bb:45:8c:02:d1:70:17:9e:60:11:76:f2:ad:6e:5a:
16:12:98:96:d5:28:d9:f1:aa:2f:33:6d:e8:2e:75:91:e3:35:
e3:31:e4:c8:34:20:0b:b3:02:62:90:5d:3b:03:db:94:3a:5f:
89:a8:9f:41:b7:1c:38:7e:b4:61:0c:a8:58:28:20:a6:0e:1b:
18:0f:e3:8d:8e:ff:04:de:40:10:90:1b:69:dc:0e:a6:71:e5:
6b:a1:71:46:a0:87:9b:81:39:51:a9:26:7e:60:cc:26:65:ef:
16:31:17:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn769T6mFz+BTng2OPsFcq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjUxYTI1ZDJmMzkyMjUyNGE2YTY5YjFkN2Q2MWNkM2Nj
MmE4ZGEwHhcNMjUxMDE5MTAwMjQwWhcNMjUxMDIwMTAwMjQwWjAzMTEwLwYDVQQD
Eyg4OTk1MWMwYjdlOTk2NmU3YTQ4MzQyZTQ4Y2VhY2JmYzdhZGYzNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiY7DRVuKPukWjjODJrWA/mZ3OO0
1zg6OTFNdsZbIJwkFcfp1T3cgXh9HLaiG5+3B9nBztxl6iM0fhnCegBbSeylqs8Y
/wnSuTkMQTXNWNMjWre4xjjtUg0MoV/QCNxCHSFFeF5JqdVPPo6QNF1ParbbDHhA
8U2RWWGswxGHz0eZEdqcCWCFZ5FIGZ3JLoG8LWbj5t1wvlo30LHrWgZlUiXO8kSx
7DvXHnxbPR4HM1U3qPA48PvhOwCs62gmz1ik0+NqsJGMvT9RRE+KK+dHW/kud4ur
dOPz/BhgDaI9aHeX9Xo/0B8cRWbtwzQyKuWeoqM2fDk5NDgz9Vo/U8jUhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImVHAt+mWbnpINC5Izqy/x63zdFMB8GA1UdIwQY
MBaAFGf1GiXS85IlJKammx19Yc08wqjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYt
NTYyNmI1NGQxYTIxLzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81NDRjMzktMGVmNy00MWFiLWIxNTYtNTYyNmI1NGQxYTIx
LzEvWl9VYUpkTHpraVVrcHFhYkhYMWh6VHpDcU5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5lG+cf6
P/9PvvRsCVK89bBdxS5j5rkHq400W4UsCfXR2ANf9Blzu4mPKqn1OSQT9dN9gRIa
f9LaMcYIf85d2tvQE8RtWacgSKx50O5SWeGJwPw9eRCmeUh17M9fXplJkQJvG8Ue
LRKbvcw5/WDnAm9KlSNFal0r6aIweLo67fLpzrh6mOe5W4AZPWnEnHQk7SAdu0WM
AtFwF55gEXbyrW5aFhKYltUo2fGqLzNt6C51keM14zHkyDQgC7MCYpBdOwPblDpf
iaifQbccOH60YQyoWCggpg4bGA/jjY7/BN5AEJAbadwOpnHla6FxRqCHm4E5Uakm
fmDMJmXvFjEXzg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:13 2025 by rpki-client