Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: aVSQ/3BzRd/SHrp1zfqWyb6h5RUB0jvE+C/8l4iXQJM=
Subject key identifier: 57:ED:90:EA:C1:B0:9B:F2:68:4B:1B:E5:5B:9D:11:FF:CF:70:C7:F2
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 019A036C28B393C9BC9A4346879D13431B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 21:00:11 +0000
Manifest this update: Mon 20 Oct 2025 21:00:11 +0000
Manifest next update: Tue 21 Oct 2025 21:00:11 +0000
Files and hashes: 1: 41j3d2RDOJcBPDBuQ5GVOR304-4.roa (hash: eAoOudYj+cHlQYjWYa9sz6FB+63f4zS6NwTicUIeFfM=)
2: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: csRpdamw4TUyPvjlre/3c9LVMC/5cJiG2/iR6bRPbBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 21:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:6c:28:b3:93:c9:bc:9a:43:46:87:9d:13:43:1b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Oct 20 21:00:11 2025 GMT
Not After : Oct 21 21:00:11 2025 GMT
Subject: CN=57ed90eac1b09bf2684b1be55b9d11ffcf70c7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:7b:3b:e3:72:fb:6c:5c:8b:fd:14:5c:7b:
13:53:64:14:ce:42:06:73:89:e3:76:39:1f:0e:f2:
b7:ba:81:9e:c5:57:f2:6f:9d:79:c5:c3:31:e5:f6:
68:cd:39:8f:35:ae:3f:01:95:ac:f4:aa:52:db:c5:
59:f2:0f:5b:45:42:bf:6a:69:55:a4:f4:48:fa:28:
ab:f5:50:51:50:19:79:f3:3a:ee:e3:71:bb:ab:89:
fc:8b:5f:85:8d:a3:13:66:4a:4c:75:16:4c:f3:e8:
54:2b:8f:9c:7e:03:d6:3d:13:26:e2:0f:f7:cc:c3:
72:22:15:55:59:49:a6:05:ee:94:5b:d7:d4:c0:52:
7f:e2:1e:9e:61:04:98:39:99:b6:55:78:c4:34:cf:
67:25:39:d4:e5:5b:bf:a1:33:7c:a3:c9:3e:df:28:
b3:f6:da:d3:3d:9e:f6:22:93:6b:73:70:3e:bb:17:
1f:99:00:80:41:47:c0:f1:40:45:52:f2:26:15:96:
c0:5f:9b:a3:99:34:23:85:f5:5e:03:91:ee:46:69:
11:65:14:1d:27:0d:f7:d4:d1:f2:1f:94:d8:61:29:
da:7d:a1:cd:22:7b:ec:fc:89:31:58:bd:28:07:12:
5f:e9:81:0a:ae:dd:da:5a:3c:80:2a:15:e1:c0:05:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:90:EA:C1:B0:9B:F2:68:4B:1B:E5:5B:9D:11:FF:CF:70:C7:F2
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:35:31:76:49:e5:d3:20:68:84:0e:35:b4:86:97:9d:97:c3:
26:a3:88:c2:74:f3:d8:44:e9:99:76:d3:74:3b:fc:1c:43:35:
ee:5c:95:16:d8:49:f4:0f:58:18:3b:d5:be:1f:0c:91:e7:ab:
fb:bd:bc:1c:d9:f1:05:c4:bf:46:04:f1:56:d4:65:52:fa:37:
bb:77:e2:c6:80:7d:55:59:b2:27:58:1f:f5:7c:5c:04:25:6d:
c3:34:dc:21:93:87:d0:61:d7:71:7f:de:15:3f:68:58:bc:e6:
3a:0b:17:5d:cd:9d:e1:c1:05:34:14:c9:49:05:97:86:93:84:
0a:cb:37:ce:b5:b6:84:ca:0c:d8:a7:23:84:22:b1:72:04:10:
0c:dc:93:9c:95:42:40:6c:31:d6:79:60:23:98:82:94:4b:86:
46:63:4a:a8:47:db:77:c9:6d:2f:09:3a:c7:61:c4:7c:de:18:
40:00:b0:9e:ce:8d:e6:21:bf:7d:2a:95:04:29:cb:2e:73:81:
6c:0e:f9:94:b7:b4:47:2c:ef:74:c3:05:fd:81:ad:43:45:e0:
7c:e1:fd:3e:31:1c:7c:ea:f7:b7:4b:7d:69:c5:f5:a6:e9:b3:
82:2c:06:2f:fc:0e:88:b4:57:1d:55:73:da:17:dd:b8:4f:ae:
58:28:46:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDbCizk8m8mkNGh50TQxuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmM2YyNmI1NDFmMGJiYThhNWNlNzFlYTUzODExYjQ2YzE2
NTdhYjMwHhcNMjUxMDIwMjEwMDExWhcNMjUxMDIxMjEwMDExWjAzMTEwLwYDVQQD
Eyg1N2VkOTBlYWMxYjA5YmYyNjg0YjFiZTU1YjlkMTFmZmNmNzBjN2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUB7O+Ny+2xci/0UXHsTU2QUzkIG
c4njdjkfDvK3uoGexVfyb515xcMx5fZozTmPNa4/AZWs9KpS28VZ8g9bRUK/amlV
pPRI+iir9VBRUBl58zru43G7q4n8i1+FjaMTZkpMdRZM8+hUK4+cfgPWPRMm4g/3
zMNyIhVVWUmmBe6UW9fUwFJ/4h6eYQSYOZm2VXjENM9nJTnU5Vu/oTN8o8k+3yiz
9trTPZ72IpNrc3A+uxcfmQCAQUfA8UBFUvImFZbAX5ujmTQjhfVeA5HuRmkRZRQd
Jw331NHyH5TYYSnafaHNInvs/IkxWL0oBxJf6YEKrt3aWjyAKhXhwAWunQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFftkOrBsJvyaEsb5VudEf/PcMfyMB8GA1UdIwQY
MBaAFP8/JrVB8Luopc5x6lOBG0bBZXqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYt
MWMyNjBiMWUyOGQxLzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYtMWMyNjBiMWUyOGQx
LzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjUxdknl
0yBohA41tIaXnZfDJqOIwnTz2ETpmXbTdDv8HEM17lyVFthJ9A9YGDvVvh8Mkeer
+728HNnxBcS/RgTxVtRlUvo3u3fixoB9VVmyJ1gf9XxcBCVtwzTcIZOH0GHXcX/e
FT9oWLzmOgsXXc2d4cEFNBTJSQWXhpOECss3zrW2hMoM2KcjhCKxcgQQDNyTnJVC
QGwx1nlgI5iClEuGRmNKqEfbd8ltLwk6x2HEfN4YQACwns6N5iG/fSqVBCnLLnOB
bA75lLe0RyzvdMMF/YGtQ0XgfOH9PjEcfOr3t0t9acX1pumzgiwGL/wOiLRXHVVz
2hfduE+uWChGVQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:07:51 2025 by rpki-client