Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: yasCKpakVPuPp5xv/wCBwciA9sb83XU01czatq8Rzmk=
Subject key identifier: 21:B3:E0:D6:ED:71:DE:AE:9F:14:F3:6E:05:7B:03:D6:30:70:71:8F
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 0199FDA1CAFB5B0101FD4D0ABAA8F5A960B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 18:01:02 +0000
Manifest this update: Sun 19 Oct 2025 18:01:02 +0000
Manifest next update: Mon 20 Oct 2025 18:01:02 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: ieD82RZL1vYm/br9gKyELr5Aokhh+xJtExuUIvAapCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:ca:fb:5b:01:01:fd:4d:0a:ba:a8:f5:a9:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Oct 19 18:01:02 2025 GMT
Not After : Oct 20 18:01:02 2025 GMT
Subject: CN=21b3e0d6ed71deae9f14f36e057b03d63070718f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c9:3d:3b:24:f8:22:9c:5e:80:56:40:82:4b:
08:6e:11:bd:35:0d:2f:4a:1d:9a:6a:ce:71:bc:63:
7e:2c:4d:3e:79:10:f9:77:1b:a9:c5:53:66:41:f6:
74:35:1a:a9:b8:e0:c2:bb:18:51:4e:86:56:8a:88:
9b:49:67:d1:d3:4e:87:ed:83:11:d2:f3:cb:1c:fb:
76:fb:5c:33:a3:44:4e:de:7d:e2:bf:7d:5b:de:56:
70:ef:f1:44:76:ed:37:79:f4:5a:2d:a4:59:65:bb:
f2:d9:2b:9a:ba:3a:63:71:d8:d4:88:aa:6e:3d:c7:
63:59:ce:f3:00:1f:13:9a:25:63:41:42:b7:d8:41:
00:14:d1:ff:65:27:84:56:7d:b6:a4:c5:62:59:37:
7b:00:8f:3f:58:be:dd:2a:fd:eb:93:6a:fd:3f:78:
8e:ab:dd:69:19:c5:3f:69:09:e5:ab:97:de:5f:82:
1e:06:26:f4:40:e7:75:8b:13:17:2a:33:ed:7a:46:
75:2d:59:39:26:05:9b:cc:2a:6e:1c:b4:36:44:f3:
5b:34:5e:79:3c:e2:e6:77:58:e1:ac:d6:47:7e:bd:
3b:22:50:f0:68:45:64:66:43:94:51:08:c5:a3:91:
3b:05:c3:e6:f6:0c:f3:51:3f:f8:48:f2:91:b7:d0:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B3:E0:D6:ED:71:DE:AE:9F:14:F3:6E:05:7B:03:D6:30:70:71:8F
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ce:70:f8:06:63:02:4f:91:f0:ab:05:8e:82:9f:00:8c:0c:
e8:d6:54:62:35:19:a7:b5:dd:2a:a3:d2:7f:03:30:06:b1:de:
73:4b:f4:76:04:f8:bc:ce:49:59:76:6a:c3:aa:53:f0:94:79:
7f:6b:35:7b:3a:58:af:a7:23:0d:57:f6:ca:05:96:29:2a:e2:
a3:4c:0e:94:66:53:6b:c1:ec:99:a4:4f:a1:21:ec:c5:a9:2c:
1f:43:f5:5c:6a:ca:66:a9:dc:a2:64:a1:1f:6a:8d:91:2a:cd:
1e:8c:64:b9:9d:ed:48:88:16:12:99:49:8e:f2:63:7d:d0:97:
67:ec:ba:64:dc:34:ae:56:94:81:c2:7f:55:bb:b0:00:47:0b:
13:10:1f:f6:c0:4c:a3:b6:e0:88:e9:f2:d4:6e:18:3c:dd:90:
28:f3:88:7b:cc:8d:51:30:2c:cd:56:08:06:47:f4:c3:80:7b:
02:ad:6b:60:49:70:55:49:a0:4c:63:e6:44:ae:56:cf:1b:c9:
f6:91:37:e9:4c:13:1d:0f:92:a1:17:11:f0:a2:b3:54:59:a2:
eb:30:51:1a:57:45:59:87:fe:e0:4a:10:c7:b1:df:a6:2b:59:
39:11:31:19:17:9a:26:5c:15:b6:25:72:5b:f2:69:d6:f8:b3:
4e:2d:4c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ocr7WwEB/U0Kuqj1qWC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkN2Y4Nzg5NDkwMTA3MDk3YjIwY2ZhNmUzZDQ1OWYxMzYy
NzRiYTQwHhcNMjUxMDE5MTgwMTAyWhcNMjUxMDIwMTgwMTAyWjAzMTEwLwYDVQQD
EygyMWIzZTBkNmVkNzFkZWFlOWYxNGYzNmUwNTdiMDNkNjMwNzA3MThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsk9OyT4IpxegFZAgksIbhG9NQ0v
Sh2aas5xvGN+LE0+eRD5dxupxVNmQfZ0NRqpuODCuxhRToZWioibSWfR006H7YMR
0vPLHPt2+1wzo0RO3n3iv31b3lZw7/FEdu03efRaLaRZZbvy2SuaujpjcdjUiKpu
PcdjWc7zAB8TmiVjQUK32EEAFNH/ZSeEVn22pMViWTd7AI8/WL7dKv3rk2r9P3iO
q91pGcU/aQnlq5feX4IeBib0QOd1ixMXKjPtekZ1LVk5JgWbzCpuHLQ2RPNbNF55
POLmd1jhrNZHfr07IlDwaEVkZkOUUQjFo5E7BcPm9gzzUT/4SPKRt9AgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGz4Nbtcd6unxTzbgV7A9YwcHGPMB8GA1UdIwQY
MBaAFM1/h4lJAQcJeyDPpuPUWfE2J0ukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMt
NDk4MGZjYThkMjc3LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83YjhkNWQtMTNlNi00ZDJiLWJjZTMtNDk4MGZjYThkMjc3
LzEvelgtSGlVa0JCd2w3SU0tbTQ5Ulo4VFluUzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARs5w+AZj
Ak+R8KsFjoKfAIwM6NZUYjUZp7XdKqPSfwMwBrHec0v0dgT4vM5JWXZqw6pT8JR5
f2s1ezpYr6cjDVf2ygWWKSrio0wOlGZTa8HsmaRPoSHsxaksH0P1XGrKZqncomSh
H2qNkSrNHoxkuZ3tSIgWEplJjvJjfdCXZ+y6ZNw0rlaUgcJ/VbuwAEcLExAf9sBM
o7bgiOny1G4YPN2QKPOIe8yNUTAszVYIBkf0w4B7Aq1rYElwVUmgTGPmRK5WzxvJ
9pE36UwTHQ+SoRcR8KKzVFmi6zBRGldFWYf+4EoQx7HfpitZORExGReaJlwVtiVy
W/Jp1vizTi1Muw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:32 2025 by rpki-client