Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: oHtX6QUZB0G/DG01PFGozYPELY02LhAueAnvKSIG5wI=
Subject key identifier: 00:BD:1A:61:6C:D9:B4:59:B7:1D:C5:5E:69:C6:A1:D5:63:D5:94:C9
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 0199FC21B25786BDC876B23CA202BADB2084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 065B
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: bdS05dWwyBsy28pdQdpfLXBI/S//nCyneExhlmwPfGg=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b2:57:86:bd:c8:76:b2:3c:a2:02:ba:db:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=00bd1a616cd9b459b71dc55e69c6a1d563d594c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:d2:da:85:db:5b:a5:31:fe:3c:56:20:14:
5e:e4:a9:4e:e6:56:21:ad:b7:69:e1:18:94:2b:08:
10:8b:fb:4e:06:de:8a:89:e5:b9:82:8d:6a:a5:4c:
dc:61:29:1d:d9:c0:86:c1:e0:51:33:ea:4a:f0:ac:
d7:84:a9:98:50:ac:77:5d:39:5b:6f:1c:d1:35:32:
0e:c3:8b:31:fe:c4:2b:14:88:24:04:39:d9:1f:7f:
45:65:3a:b8:24:93:6d:a0:76:2e:9d:c9:d0:85:71:
ac:24:8d:88:60:d9:ae:25:ab:20:f3:1b:02:d8:2f:
ae:11:4a:81:a2:81:4d:31:96:72:fd:33:98:17:8b:
34:b2:8e:e1:7b:37:c0:46:ad:72:05:f1:93:bd:95:
0c:e9:c5:f0:a4:0d:30:a1:be:b8:b6:09:b4:b6:2e:
f4:77:19:9b:6f:b8:bf:e6:2e:29:a4:1a:7f:27:42:
2a:82:b7:f7:34:ee:0a:78:4d:df:6d:e9:5a:70:c0:
64:d2:27:8f:af:b6:72:9b:82:54:56:1d:f5:d8:40:
9d:28:a1:f6:1f:c6:82:62:a2:97:ee:bc:42:e3:c1:
9f:ed:f5:9e:9b:ad:31:b3:de:b3:af:38:11:60:40:
a9:6b:3f:20:07:b6:28:bc:28:fb:b4:ac:5d:eb:78:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BD:1A:61:6C:D9:B4:59:B7:1D:C5:5E:69:C6:A1:D5:63:D5:94:C9
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ed:74:c1:75:99:62:3b:fb:9e:ae:34:1b:1f:be:54:7c:21:
4a:12:7f:64:93:54:d2:3f:bf:2b:3b:a3:28:8e:a5:98:95:1d:
95:f6:67:ec:11:f1:a4:53:c1:a0:b9:94:a8:2a:50:f3:0b:15:
56:68:0b:9c:30:fc:d2:6d:aa:cc:a6:38:82:7f:05:be:bb:98:
1a:7a:33:1c:2a:91:5a:e8:3c:18:48:8c:b1:9e:86:92:cc:97:
25:50:3e:53:49:e8:14:72:cd:53:58:56:56:c8:4c:98:3d:1e:
2b:94:0e:65:2e:35:da:38:b1:8c:52:0d:89:c3:be:42:b2:c4:
a4:73:0b:ba:d1:be:ee:55:6e:9f:75:06:a1:24:6b:ef:44:d0:
3c:00:5b:f3:0a:6a:c2:dd:6b:32:fa:d3:d0:e4:d5:d1:ef:5b:
6e:da:91:51:dc:ce:d2:f5:b7:26:23:d2:3d:d2:91:b6:fc:b2:
2e:45:dc:12:67:72:66:07:50:e6:7c:66:42:0f:51:26:08:9c:
d0:d2:a6:15:27:fb:46:84:d5:0b:01:cb:77:2c:d8:33:bd:04:
1b:57:08:a3:5f:69:b8:79:40:c4:cb:dc:67:76:97:ba:f2:4d:
e0:37:d9:ea:c9:a8:4b:c5:cf:d3:87:23:96:4c:d9:48:17:fa:
35:bd:bf:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbJXhr3IdrI8ogK62yCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzU5ZjdhOGY5MDY3MmVhODM1M2FmNGQxMWQ2YWM1ZTlm
ZDgyMDYwHhcNMjUxMDE5MTEwMTMwWhcNMjUxMDIwMTEwMTMwWjAzMTEwLwYDVQQD
EygwMGJkMWE2MTZjZDliNDU5YjcxZGM1NWU2OWM2YTFkNTYzZDU5NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR7S2oXbW6Ux/jxWIBRe5KlO5lYh
rbdp4RiUKwgQi/tOBt6KieW5go1qpUzcYSkd2cCGweBRM+pK8KzXhKmYUKx3XTlb
bxzRNTIOw4sx/sQrFIgkBDnZH39FZTq4JJNtoHYuncnQhXGsJI2IYNmuJasg8xsC
2C+uEUqBooFNMZZy/TOYF4s0so7hezfARq1yBfGTvZUM6cXwpA0wob64tgm0ti70
dxmbb7i/5i4ppBp/J0Iqgrf3NO4KeE3fbelacMBk0iePr7Zym4JUVh312ECdKKH2
H8aCYqKX7rxC48Gf7fWem60xs96zrzgRYECpaz8gB7YovCj7tKxd63jqFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAC9GmFs2bRZtx3FXmnGodVj1ZTJMB8GA1UdIwQY
MBaAFGZ1n3qPkGcuqDU69NEdasXp/YIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3Yjgt
ZTRlMTdlNGI1MTgwLzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3YjgtZTRlMTdlNGI1MTgw
LzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu10wXWZ
Yjv7nq40Gx++VHwhShJ/ZJNU0j+/KzujKI6lmJUdlfZn7BHxpFPBoLmUqCpQ8wsV
VmgLnDD80m2qzKY4gn8FvruYGnozHCqRWug8GEiMsZ6GksyXJVA+U0noFHLNU1hW
VshMmD0eK5QOZS412jixjFINicO+QrLEpHMLutG+7lVun3UGoSRr70TQPABb8wpq
wt1rMvrT0OTV0e9bbtqRUdzO0vW3JiPSPdKRtvyyLkXcEmdyZgdQ5nxmQg9RJgic
0NKmFSf7RoTVCwHLdyzYM70EG1cIo19puHlAxMvcZ3aXuvJN4DfZ6smoS8XP04cj
lkzZSBf6Nb2/dQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:08 2025 by rpki-client