Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: QjQpkVUiHQitJUk2ZjwhrseomjODTygNiDIr8kKTSkc=
Subject key identifier: CB:82:07:BA:DC:E1:29:BB:16:9D:2E:21:43:71:05:DA:38:B4:C4:71
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 0199FCC60F76DCDB1958F97751B1B49A3489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 0923
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: yEiyYyHp9ZSTuWyhgrykZO1Xfwkt0h+L5BJmEUfLLn8=)
2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0f:76:dc:db:19:58:f9:77:51:b1:b4:9a:34:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=cb8207badce129bb169d2e21437105da38b4c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:3c:11:83:28:84:b5:65:1b:9f:83:65:62:
4d:a8:6d:7b:43:9c:5c:ff:47:e6:9a:91:8f:29:95:
bc:a2:3e:8a:43:87:fd:79:48:69:2f:53:63:14:84:
00:77:57:ad:f0:62:05:f0:6b:fa:a4:3b:af:0f:64:
54:c8:f0:b7:15:e6:19:ed:2f:2b:be:7b:36:3b:8d:
0f:35:51:8e:be:c2:71:bb:53:c0:bf:7d:97:6c:5a:
92:1f:73:65:52:8e:01:43:da:e1:2a:12:66:32:34:
e8:83:de:c7:95:a9:a3:af:95:9d:e2:97:d7:9b:c0:
ca:cb:61:05:36:fe:c5:2f:69:90:09:b1:7e:c6:2a:
a6:a2:44:f7:f8:6f:27:6e:ac:e8:fc:fc:cf:88:27:
7a:0a:f8:f2:4c:99:16:e9:f5:df:63:bc:1f:24:ca:
52:a4:6e:ca:d6:33:fa:14:35:39:b1:dc:74:03:9f:
31:b4:0b:fb:e5:85:a5:2f:0c:da:f4:6a:ed:7e:c1:
ad:45:ae:62:57:4e:c2:3c:54:b5:3b:58:6d:12:7a:
06:ac:8c:03:c1:4f:f4:fd:14:6a:c8:71:21:b3:f4:
0d:80:ae:83:78:e0:d3:a4:f5:89:0f:e1:66:38:a0:
bf:23:d3:80:69:15:1a:e6:86:06:0f:4c:d5:0b:12:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:82:07:BA:DC:E1:29:BB:16:9D:2E:21:43:71:05:DA:38:B4:C4:71
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:08:7b:05:9a:d6:29:c9:89:1f:80:cb:5d:b1:a9:97:f0:1f:
40:1a:b2:e7:57:e3:dd:5e:1b:ed:1d:6e:ff:1c:c3:47:57:2b:
e3:f3:c9:3e:f5:f7:77:b1:d8:3d:01:19:30:75:05:bd:0d:fc:
a8:4c:d7:3d:61:9e:30:6c:a7:d2:3a:74:f2:c4:a0:f2:c5:0b:
81:e5:ef:95:ab:c7:61:f0:81:2d:1e:19:dc:5e:9e:c5:26:d8:
7a:24:ff:c4:db:af:bf:4e:f4:2f:9a:c2:f8:05:8a:94:88:ef:
4c:db:b8:54:13:fa:bc:c3:9c:2b:7e:e5:1e:4d:dc:37:df:87:
80:06:b1:a6:52:6e:74:e4:a3:c6:60:00:d5:8f:ce:d2:46:67:
5d:91:a4:98:e3:3c:ae:2c:75:65:0a:e5:4a:e8:67:2d:96:8f:
88:ec:16:ea:07:fe:b7:ff:74:71:5a:be:7f:d7:ae:fa:d2:c4:
ee:86:4d:87:79:6f:78:47:e4:1d:fc:ee:5e:47:46:cf:d3:12:
05:1b:ef:c2:83:e2:5d:1c:e7:c1:cf:e6:76:85:99:e4:9e:cd:
39:32:9f:ba:15:8c:1a:4c:80:de:80:ff:a4:33:23:0a:cd:01:
25:9d:27:16:b9:e8:cd:86:7d:2f:98:5d:cb:27:85:ac:85:1f:
87:ef:12:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xg923NsZWPl3UbG0mjSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTUzMzYxZmY2YzAwODNmZDkzZDUyODY1MDMzMzE5ODYz
ZmJjNDYwHhcNMjUxMDE5MTQwMTAyWhcNMjUxMDIwMTQwMTAyWjAzMTEwLwYDVQQD
EyhjYjgyMDdiYWRjZTEyOWJiMTY5ZDJlMjE0MzcxMDVkYTM4YjRjNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbI8EYMohLVlG5+DZWJNqG17Q5xc
/0fmmpGPKZW8oj6KQ4f9eUhpL1NjFIQAd1et8GIF8Gv6pDuvD2RUyPC3FeYZ7S8r
vns2O40PNVGOvsJxu1PAv32XbFqSH3NlUo4BQ9rhKhJmMjTog97Hlamjr5Wd4pfX
m8DKy2EFNv7FL2mQCbF+xiqmokT3+G8nbqzo/PzPiCd6CvjyTJkW6fXfY7wfJMpS
pG7K1jP6FDU5sdx0A58xtAv75YWlLwza9GrtfsGtRa5iV07CPFS1O1htEnoGrIwD
wU/0/RRqyHEhs/QNgK6DeODTpPWJD+FmOKC/I9OAaRUa5oYGD0zVCxKmIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuCB7rc4Sm7Fp0uIUNxBdo4tMRxMB8GA1UdIwQY
MBaAFGaVM2H/bACD/ZPVKGUDMxmGP7xGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQt
ZmJiN2QzMGRjZTM4LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQtZmJiN2QzMGRjZTM4
LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAh7BZrW
KcmJH4DLXbGpl/AfQBqy51fj3V4b7R1u/xzDR1cr4/PJPvX3d7HYPQEZMHUFvQ38
qEzXPWGeMGyn0jp08sSg8sULgeXvlavHYfCBLR4Z3F6exSbYeiT/xNuvv070L5rC
+AWKlIjvTNu4VBP6vMOcK37lHk3cN9+HgAaxplJudOSjxmAA1Y/O0kZnXZGkmOM8
rix1ZQrlSuhnLZaPiOwW6gf+t/90cVq+f9eu+tLE7oZNh3lveEfkHfzuXkdGz9MS
BRvvwoPiXRznwc/mdoWZ5J7NOTKfuhWMGkyA3oD/pDMjCs0BJZ0nFrnozYZ9L5hd
yyeFrIUfh+8STA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:51 2025 by rpki-client