Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: iGwTRakoqYNHLzFD8w4OZ24ava435ynatJiiZtHnkak=
Subject key identifier: B9:E0:9D:7F:7E:E9:7B:2F:B9:55:1D:60:B1:D2:66:22:38:F9:75:05
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 0199FBEB2CB04182776E07CABDC9A160315A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 1422
Signing time: Sun 19 Oct 2025 10:01:57 +0000
Manifest this update: Sun 19 Oct 2025 10:01:57 +0000
Manifest next update: Mon 20 Oct 2025 10:01:57 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: GGoGJVZwlaqOUJvhejO8uMSpAMlXori7JiO7nxJPpUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:2c:b0:41:82:77:6e:07:ca:bd:c9:a1:60:31:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Oct 19 10:01:57 2025 GMT
Not After : Oct 20 10:01:57 2025 GMT
Subject: CN=b9e09d7f7ee97b2fb9551d60b1d2662238f97505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:ec:6e:e1:2c:81:8d:5a:93:50:86:57:f8:
41:a1:c7:78:ea:fc:28:36:f9:18:04:d3:e9:b2:76:
65:8e:c6:00:fa:42:bb:62:d0:78:b4:93:7c:b8:e0:
10:c3:db:4b:c0:df:4d:06:eb:3e:05:8f:8b:a8:bc:
2c:21:f6:11:db:9a:3a:a6:d0:89:fb:5b:e4:39:06:
54:88:23:f2:2f:d4:f9:99:19:8d:65:26:08:ed:38:
cb:3b:5c:cc:db:7b:0e:46:3c:57:78:b4:a0:1a:e0:
b4:3d:8f:9e:23:8d:4f:8f:77:29:9d:a8:a5:77:7c:
32:e0:f7:0f:4d:bb:65:ba:31:59:3b:00:58:1f:62:
08:df:23:f6:49:78:8d:4b:70:82:93:d0:f4:a4:2a:
5f:a1:81:bd:93:ac:63:69:45:c4:28:b0:07:c6:8e:
1c:20:13:50:97:ac:53:16:48:95:d2:c1:41:90:49:
97:9a:84:00:86:c4:d1:7e:89:c2:82:a0:12:e9:1e:
54:5c:f2:6a:9e:85:38:fc:0a:41:bf:b3:ed:23:83:
0c:09:7f:fc:cc:cf:7c:ac:81:f7:35:7f:4b:e8:64:
8c:5f:b1:67:28:7a:2c:62:68:b8:8e:10:59:06:b4:
13:e3:22:b1:01:86:d2:3f:ef:53:fb:30:28:ac:41:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:9D:7F:7E:E9:7B:2F:B9:55:1D:60:B1:D2:66:22:38:F9:75:05
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:45:85:47:aa:e8:41:ec:06:b5:32:a2:73:de:ab:e5:3f:
ec:ea:00:2d:2a:1f:4a:b3:8e:49:e6:2b:9f:22:94:56:e6:47:
bf:16:ad:d7:d6:18:7e:bd:9e:8e:03:41:e0:80:73:10:02:1e:
0d:61:89:e4:1b:e9:41:b9:bb:bb:89:c6:77:0e:e2:3c:3a:a0:
8b:e1:91:44:be:86:b0:f0:94:b6:17:c1:3a:1c:87:99:75:0b:
a1:2f:4d:aa:4f:63:20:82:0f:4e:59:7e:36:b5:52:76:85:ed:
b9:ff:e9:ac:13:ba:73:9e:c8:54:98:04:63:8a:6b:1f:9c:e1:
2a:cd:86:af:79:e6:f7:9f:55:1b:7a:16:ba:62:64:30:f6:8e:
d1:c8:6a:d1:93:e4:a2:97:3b:7b:f7:e7:49:0e:27:b8:d3:56:
fc:47:dd:fd:41:d1:f4:91:17:80:db:7e:ce:23:68:5b:20:02:
88:97:dc:54:63:eb:2b:19:c7:27:1d:02:1e:42:4b:cb:e8:12:
c5:54:33:22:23:a6:da:2d:74:29:fe:a2:40:cd:39:f0:72:d0:
c8:b4:d8:ed:6b:d9:ea:80:9d:91:52:96:6a:b9:46:8d:53:85:
a7:fb:c1:6b:f4:37:d9:4f:5e:50:74:f6:3b:c9:15:fe:fe:2d:
a3:8c:5d:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yywQYJ3bgfKvcmhYDFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx
YjRhMjAwHhcNMjUxMDE5MTAwMTU3WhcNMjUxMDIwMTAwMTU3WjAzMTEwLwYDVQQD
EyhiOWUwOWQ3ZjdlZTk3YjJmYjk1NTFkNjBiMWQyNjYyMjM4Zjk3NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUnsbuEsgY1ak1CGV/hBocd46vwo
NvkYBNPpsnZljsYA+kK7YtB4tJN8uOAQw9tLwN9NBus+BY+LqLwsIfYR25o6ptCJ
+1vkOQZUiCPyL9T5mRmNZSYI7TjLO1zM23sORjxXeLSgGuC0PY+eI41Pj3cpnail
d3wy4PcPTbtlujFZOwBYH2II3yP2SXiNS3CCk9D0pCpfoYG9k6xjaUXEKLAHxo4c
IBNQl6xTFkiV0sFBkEmXmoQAhsTRfonCgqAS6R5UXPJqnoU4/ApBv7PtI4MMCX/8
zM98rIH3NX9L6GSMX7FnKHosYmi4jhBZBrQT4yKxAYbSP+9T+zAorEEazQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLngnX9+6XsvuVUdYLHSZiI4+XUFMB8GA1UdIwQY
MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt
ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl
LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNJFhUeq
6EHsBrUyonPeq+U/7OoALSofSrOOSeYrnyKUVuZHvxat19YYfr2ejgNB4IBzEAIe
DWGJ5BvpQbm7u4nGdw7iPDqgi+GRRL6GsPCUthfBOhyHmXULoS9Nqk9jIIIPTll+
NrVSdoXtuf/prBO6c57IVJgEY4prH5zhKs2Gr3nm959VG3oWumJkMPaO0chq0ZPk
opc7e/fnSQ4nuNNW/Efd/UHR9JEXgNt+ziNoWyACiJfcVGPrKxnHJx0CHkJLy+gS
xVQzIiOm2i10Kf6iQM058HLQyLTY7WvZ6oCdkVKWarlGjVOFp/vBa/Q32U9eUHT2
O8kV/v4to4xdrw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:27 2025 by rpki-client