Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: fra5Uyap3hTiGwuylGPsk5H5ZqixWsZReGh+6MsL5FY=
Subject key identifier: 12:95:52:18:50:A1:59:86:10:24:80:9A:2E:0E:6B:9A:45:A2:29:9E
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 0199FDDA19A9EE00E4FD686C25E4E3B56886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 069B
Signing time: Sun 19 Oct 2025 19:02:33 +0000
Manifest this update: Sun 19 Oct 2025 19:02:33 +0000
Manifest next update: Mon 20 Oct 2025 19:02:33 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: FTTgB2juc+v2TP73v1J0Q2euX5iU+qaNClMo+YeYj8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:19:a9:ee:00:e4:fd:68:6c:25:e4:e3:b5:68:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Oct 19 19:02:33 2025 GMT
Not After : Oct 20 19:02:33 2025 GMT
Subject: CN=1295521850a159861024809a2e0e6b9a45a2299e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:1c:a1:56:fc:73:4c:b4:7b:7e:42:03:9e:
4a:ba:13:2e:9c:26:9d:dd:dc:4b:28:c8:83:cc:01:
1e:a4:93:f5:d1:4a:52:b0:74:1d:07:fa:60:f2:14:
28:0c:ca:31:14:3f:8f:b9:82:1e:bb:90:db:48:f3:
24:03:5d:a3:bd:53:eb:91:a4:cc:59:7e:66:a4:78:
58:4f:91:20:38:05:95:b8:35:97:68:41:18:06:de:
60:a5:37:86:02:a9:17:95:04:47:83:00:61:cd:3d:
15:85:43:ff:bb:74:c2:e7:a1:dc:77:7e:5f:06:22:
c4:12:bd:66:a0:eb:ed:be:15:98:df:f5:99:e8:50:
ca:70:99:0b:41:31:1e:d3:b2:7c:90:d5:c1:5e:36:
c1:7d:89:d3:59:42:e8:cb:ad:59:fe:20:6a:b9:94:
18:08:7d:df:9d:b4:74:f8:73:f5:6e:29:f1:b6:c5:
f0:c3:59:fd:e0:5a:b0:8b:1d:48:bb:d9:68:af:94:
ac:6b:be:44:b4:64:77:d6:b1:d7:67:58:43:fb:79:
f0:df:e5:3f:c3:1a:f6:92:5a:75:f0:65:73:02:07:
ce:da:41:9f:db:25:14:bc:3e:f2:2b:8a:51:49:02:
16:4f:d7:8c:81:cc:95:ab:c6:5b:b6:7b:a4:ea:5a:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:95:52:18:50:A1:59:86:10:24:80:9A:2E:0E:6B:9A:45:A2:29:9E
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f2:a3:36:bd:dd:6c:41:35:7b:d5:41:8c:e1:47:b3:bc:07:
79:25:15:f4:3b:19:45:58:a8:2a:d6:9e:bc:81:af:e6:8b:7b:
22:91:a3:2a:5a:26:46:12:64:8a:3c:83:fd:ab:38:52:31:d4:
c2:95:44:0a:64:ee:d0:bd:c9:0e:95:ee:c7:dc:ee:7d:64:22:
5d:4f:2e:8b:36:f9:00:ff:c5:4a:de:c5:86:df:1b:e5:c4:27:
97:57:78:db:63:67:2e:ee:26:6d:f5:04:27:f5:37:2f:d3:d9:
61:1a:9d:de:30:c0:ea:ab:42:cd:f3:54:23:01:cd:41:6b:ae:
32:ef:74:05:c9:ad:21:7d:f2:ca:56:17:eb:85:18:df:17:0c:
a6:62:93:b9:bd:1d:8b:b9:ba:d7:07:1c:89:8c:95:bc:cf:47:
87:52:eb:d5:aa:16:41:77:d0:63:6c:f0:a7:f4:c9:0d:8a:58:
65:e9:7b:d1:78:cc:1b:c6:a4:c4:a2:80:29:79:53:d2:67:39:
dc:51:70:a4:06:6a:f4:0c:57:53:a7:28:fb:35:a5:e5:2e:e6:
c7:07:a2:d2:f6:4d:05:f0:c3:04:d7:1a:31:b9:17:30:51:22:
46:b2:b7:ad:e5:f7:ba:27:39:2f:6a:17:f4:7f:53:b4:63:59:
1d:1e:c7:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92hmp7gDk/WhsJeTjtWiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkM2NkN2M0ZGM5NWNiM2UwZDRlODcwM2VmMDE0MDRmZTBh
NzA3ODAwHhcNMjUxMDE5MTkwMjMzWhcNMjUxMDIwMTkwMjMzWjAzMTEwLwYDVQQD
EygxMjk1NTIxODUwYTE1OTg2MTAyNDgwOWEyZTBlNmI5YTQ1YTIyOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUQcoVb8c0y0e35CA55KuhMunCad
3dxLKMiDzAEepJP10UpSsHQdB/pg8hQoDMoxFD+PuYIeu5DbSPMkA12jvVPrkaTM
WX5mpHhYT5EgOAWVuDWXaEEYBt5gpTeGAqkXlQRHgwBhzT0VhUP/u3TC56Hcd35f
BiLEEr1moOvtvhWY3/WZ6FDKcJkLQTEe07J8kNXBXjbBfYnTWULoy61Z/iBquZQY
CH3fnbR0+HP1binxtsXww1n94Fqwix1Iu9lor5Ssa75EtGR31rHXZ1hD+3nw3+U/
wxr2klp18GVzAgfO2kGf2yUUvD7yK4pRSQIWT9eMgcyVq8Zbtnuk6lreiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKVUhhQoVmGECSAmi4Oa5pFoimeMB8GA1UdIwQY
MBaAFM0818Tclcs+DU6HA+8BQE/gpweAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81NzE5Y2MtZTgzZS00MzNkLTgwZDUt
ZmYyNmE5ODgzMzE0LzEvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81NzE5Y2MtZTgzZS00MzNkLTgwZDUtZmYyNmE5ODgzMzE0
LzEvelR6WHhOeVZ5ejROVG9jRDd3RkFULUNuQjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/KjNr3d
bEE1e9VBjOFHs7wHeSUV9DsZRVioKtaevIGv5ot7IpGjKlomRhJkijyD/as4UjHU
wpVECmTu0L3JDpXux9zufWQiXU8uizb5AP/FSt7Fht8b5cQnl1d422NnLu4mbfUE
J/U3L9PZYRqd3jDA6qtCzfNUIwHNQWuuMu90BcmtIX3yylYX64UY3xcMpmKTub0d
i7m61wcciYyVvM9Hh1Lr1aoWQXfQY2zwp/TJDYpYZel70XjMG8akxKKAKXlT0mc5
3FFwpAZq9AxXU6co+zWl5S7mxwei0vZNBfDDBNcaMbkXMFEiRrK3reX3uic5L2oX
9H9TtGNZHR7HTg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:26 2025 by rpki-client