Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
File: RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft (raw, json)
Hash identifier: 1A/0qe4Wn/bREXva20Q+2G6CdU/q4dorl4ICFvMFw/Q=
Subject key identifier: CE:21:6A:D1:5E:F2:C8:13:CC:66:8A:E5:E4:BB:0B:50:C1:6B:C5:A2
Authority key identifier: 45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
Certificate issuer: /CN=459ad2ece3e5911093d964753b656459c9bc05a7
Certificate serial: 0199FE7E0ED4E2674026465367FC0048E197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
Manifest number: 0F69
Signing time: Sun 19 Oct 2025 22:01:38 +0000
Manifest this update: Sun 19 Oct 2025 22:01:38 +0000
Manifest next update: Mon 20 Oct 2025 22:01:38 +0000
Files and hashes: 1: 2W83qhPrVeT0ZBOGqzAyh11jqS4.roa (hash: nMU/AsGlDwVQqnZ4iKRGkAD06J73vEEF7NUQRjWCaME=)
2: RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl (hash: ovcBcG07Jyt7ebcVkMVVsv9xfY/NWXU0dzuY8jeoElI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:0e:d4:e2:67:40:26:46:53:67:fc:00:48:e1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459ad2ece3e5911093d964753b656459c9bc05a7
Validity
Not Before: Oct 19 22:01:38 2025 GMT
Not After : Oct 20 22:01:38 2025 GMT
Subject: CN=ce216ad15ef2c813cc668ae5e4bb0b50c16bc5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1a:76:4e:d9:93:45:88:5b:c5:d3:bf:8b:49:
43:4b:94:86:93:db:60:30:4e:1b:93:cf:20:a9:42:
47:b0:89:ab:98:02:d6:01:bf:0e:4d:9f:69:0d:a3:
98:3c:33:3a:93:b7:84:55:e9:db:c9:d5:f1:5c:63:
39:cb:33:0d:3a:13:f3:4e:fe:a6:af:f1:37:7c:da:
1a:c8:6f:e5:c3:99:56:68:cc:92:e0:e1:10:65:01:
7f:c9:54:57:b4:d7:8d:f8:1c:47:a8:75:14:4d:d0:
cd:86:ac:ba:68:8b:69:a6:c0:d5:c8:25:66:27:2b:
39:47:aa:fb:b8:38:08:71:09:82:c6:94:c4:6c:d1:
eb:b3:2f:91:ad:97:fc:b0:9a:5f:60:19:6c:02:04:
6c:da:d7:00:3a:d1:3d:41:ed:31:6e:5d:7d:5c:87:
4e:a7:c4:4c:aa:d1:d8:ad:e7:65:ca:92:63:3b:ca:
4e:15:60:ef:a8:5d:82:f6:f2:4a:cc:3d:2f:1d:b9:
c0:f5:bf:76:c4:26:ba:ed:35:5a:99:68:3f:2c:c6:
32:42:25:17:6f:41:23:da:9a:d1:da:b7:47:e7:7f:
28:be:f5:ed:50:50:61:5c:e7:b5:31:ff:80:5b:b2:
ab:7d:67:6b:b0:92:9f:44:21:d4:be:58:34:f2:4e:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:6A:D1:5E:F2:C8:13:CC:66:8A:E5:E4:BB:0B:50:C1:6B:C5:A2
X509v3 Authority Key Identifier:
keyid:45:9A:D2:EC:E3:E5:91:10:93:D9:64:75:3B:65:64:59:C9:BC:05:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZrS7OPlkRCT2WR1O2VkWcm8Bac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0d55e7-1677-4b92-9e66-2d34dc6e5656/1/RZrS7OPlkRCT2WR1O2VkWcm8Bac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:12:8d:f4:ec:3d:57:c8:9d:55:50:47:55:59:3b:ad:76:66:
6c:8a:11:48:63:37:b4:7f:97:24:d8:47:db:f8:fe:ff:41:d4:
4d:d5:7b:8b:d6:ef:46:db:99:68:79:3a:2d:28:02:40:82:ef:
d2:b6:30:7c:2e:37:71:2e:d4:c4:30:73:f5:b3:ab:53:a2:30:
97:c8:46:69:2c:4c:fc:d8:cf:87:0c:e9:24:59:9f:13:96:75:
24:5c:87:46:de:66:bc:05:3d:54:e7:bd:ba:26:70:c4:fd:3a:
c8:fb:05:f4:9c:04:81:11:89:b0:62:00:fc:3f:ac:c4:0c:0b:
f3:7d:8b:67:6a:16:05:3c:6b:70:85:ac:39:30:1c:e6:0a:f6:
f9:74:55:22:51:ee:4e:60:a6:b1:b1:70:d0:32:50:6a:dc:7a:
00:99:a3:56:39:bf:07:51:22:60:75:03:df:51:06:c9:3d:09:
7e:a9:b2:bb:b3:fa:27:3c:29:62:23:87:ae:06:d9:5a:31:9e:
95:11:b4:5d:3e:52:dc:78:11:f6:81:11:9c:a8:ba:74:dc:11:
d3:0f:11:bd:f7:82:fd:82:33:bc:bc:bb:47:4c:1a:c1:aa:cd:
60:a5:72:e3:6e:d3:56:ff:fd:d5:84:73:f6:87:6a:3a:88:d6:
32:43:c7:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fg7U4mdAJkZTZ/wASOGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OWFkMmVjZTNlNTkxMTA5M2Q5NjQ3NTNiNjU2NDU5Yzli
YzA1YTcwHhcNMjUxMDE5MjIwMTM4WhcNMjUxMDIwMjIwMTM4WjAzMTEwLwYDVQQD
EyhjZTIxNmFkMTVlZjJjODEzY2M2NjhhZTVlNGJiMGI1MGMxNmJjNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRp2TtmTRYhbxdO/i0lDS5SGk9tg
ME4bk88gqUJHsImrmALWAb8OTZ9pDaOYPDM6k7eEVenbydXxXGM5yzMNOhPzTv6m
r/E3fNoayG/lw5lWaMyS4OEQZQF/yVRXtNeN+BxHqHUUTdDNhqy6aItppsDVyCVm
Jys5R6r7uDgIcQmCxpTEbNHrsy+RrZf8sJpfYBlsAgRs2tcAOtE9Qe0xbl19XIdO
p8RMqtHYredlypJjO8pOFWDvqF2C9vJKzD0vHbnA9b92xCa67TVamWg/LMYyQiUX
b0Ej2prR2rdH538ovvXtUFBhXOe1Mf+AW7KrfWdrsJKfRCHUvlg08k6xCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4hatFe8sgTzGaK5eS7C1DBa8WiMB8GA1UdIwQY
MBaAFEWa0uzj5ZEQk9lkdTtlZFnJvAWnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYt
MmQzNGRjNmU1NjU2LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wZDU1ZTctMTY3Ny00YjkyLTllNjYtMmQzNGRjNmU1NjU2
LzEvUlpyUzdPUGxrUkNUMldSMU8yVmtXY204QmFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxKN9Ow9
V8idVVBHVVk7rXZmbIoRSGM3tH+XJNhH2/j+/0HUTdV7i9bvRtuZaHk6LSgCQILv
0rYwfC43cS7UxDBz9bOrU6Iwl8hGaSxM/NjPhwzpJFmfE5Z1JFyHRt5mvAU9VOe9
uiZwxP06yPsF9JwEgRGJsGIA/D+sxAwL832LZ2oWBTxrcIWsOTAc5gr2+XRVIlHu
TmCmsbFw0DJQatx6AJmjVjm/B1EiYHUD31EGyT0Jfqmyu7P6JzwpYiOHrgbZWjGe
lRG0XT5S3HgR9oERnKi6dNwR0w8RvfeC/YIzvLy7R0wawarNYKVy427TVv/91YRz
9odqOojWMkPHfw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:25 2025 by rpki-client