Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: /NFJEX+WGKlKxfQvH0gsIgfQCVJZxpgo2dxC+tDbpK0=
Subject key identifier: 10:CE:E7:EC:1D:1B:28:4D:BA:C7:EA:68:28:B9:9E:B3:6E:D6:32:55
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 0199FCC689096EB8AF9AD398E5F77239E66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 0688
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: tefGz65ASrgEXKgAgIrAfBDsGWs+v2Gx4WGZbGv3u6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:89:09:6e:b8:af:9a:d3:98:e5:f7:72:39:e6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=10cee7ec1d1b284dbac7ea6828b99eb36ed63255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:3a:44:a8:71:11:35:0c:52:52:a7:cb:14:
eb:05:be:7a:75:87:71:94:d6:ef:b4:b7:da:24:16:
82:a6:54:2c:26:23:52:96:da:c8:39:a7:a8:cd:16:
cf:17:3e:c3:a7:b5:b8:c8:99:d1:0c:86:60:35:3e:
c5:1d:d2:98:57:42:5e:b0:61:1c:b1:73:12:c8:ae:
f3:97:f7:d7:9a:6e:2d:9b:e7:6b:48:d9:5a:b3:2c:
1a:64:8f:3f:7e:e4:e6:59:ff:2e:1b:93:e0:17:de:
53:cf:b1:70:1d:18:56:bb:ef:33:2a:f1:3d:e5:36:
09:b2:84:6d:31:27:05:67:66:5a:6c:58:cd:68:e5:
6a:17:e6:bc:61:66:78:90:e0:33:f6:e7:26:b5:d6:
74:af:45:43:59:1f:41:a4:93:ef:13:7e:2c:58:df:
d8:b4:bd:db:01:5b:a8:82:48:6e:dc:fd:b6:36:d6:
99:59:c6:11:20:ec:3a:7d:52:3b:92:19:ad:5e:3c:
95:9a:9e:fe:31:d2:71:32:ac:d4:35:4f:2a:1a:9e:
c2:d7:a2:0a:b0:54:e0:de:41:23:82:e3:3b:e4:e2:
61:39:3a:ee:b5:e0:37:4d:63:eb:aa:c6:29:5a:5b:
27:e2:38:2c:92:5d:47:9f:18:8c:48:76:75:1a:0a:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:E7:EC:1D:1B:28:4D:BA:C7:EA:68:28:B9:9E:B3:6E:D6:32:55
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:05:15:e9:ad:5e:b5:35:f4:69:f1:8b:8e:94:3b:34:94:7e:
61:b8:48:bd:24:6e:d2:e3:6e:72:13:27:6d:e4:29:22:ce:c7:
2d:5f:15:25:7c:ee:c0:89:3d:45:00:db:e6:99:22:4b:d4:64:
8a:8a:c0:67:da:42:13:97:56:6d:7b:5b:ed:ef:c8:8e:1e:2b:
c4:04:d8:a8:23:35:c0:4b:14:a0:7c:27:e3:8d:ea:2b:fc:98:
96:1c:63:86:be:4c:38:39:da:95:32:23:fd:9a:d2:56:9b:c2:
e3:42:30:1c:48:1e:e0:70:47:4a:9b:db:a9:fe:70:ec:79:64:
0f:91:08:5f:66:83:ce:7c:6d:f0:94:ce:fb:49:f7:5d:3c:b3:
64:4a:23:7b:a1:ae:33:03:18:e8:f1:14:a7:69:8f:54:0a:47:
7d:a7:a0:92:fe:df:a2:25:0f:40:98:b9:41:4b:db:39:c0:a2:
07:d3:48:d4:6d:5d:5f:94:b4:ea:d6:92:f2:e6:cd:f7:7e:6d:
85:d1:4a:1e:5f:d3:e4:05:a8:ee:73:9d:01:a6:20:4b:a4:a2:
c7:75:f4:8b:54:25:2e:82:a1:c8:d0:31:3e:c7:d1:1e:9d:da:
ec:62:00:bb:07:9d:6f:b2:9d:7c:bc:d6:5a:27:d9:d1:a5:f2:
9e:4d:76:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xokJbrivmtOY5fdyOeZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh
NzQ5NjEwHhcNMjUxMDE5MTQwMTMzWhcNMjUxMDIwMTQwMTMzWjAzMTEwLwYDVQQD
EygxMGNlZTdlYzFkMWIyODRkYmFjN2VhNjgyOGI5OWViMzZlZDYzMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/o6RKhxETUMUlKnyxTrBb56dYdx
lNbvtLfaJBaCplQsJiNSltrIOaeozRbPFz7Dp7W4yJnRDIZgNT7FHdKYV0JesGEc
sXMSyK7zl/fXmm4tm+drSNlasywaZI8/fuTmWf8uG5PgF95Tz7FwHRhWu+8zKvE9
5TYJsoRtMScFZ2ZabFjNaOVqF+a8YWZ4kOAz9ucmtdZ0r0VDWR9BpJPvE34sWN/Y
tL3bAVuogkhu3P22NtaZWcYRIOw6fVI7khmtXjyVmp7+MdJxMqzUNU8qGp7C16IK
sFTg3kEjguM75OJhOTruteA3TWPrqsYpWlsn4jgskl1HnxiMSHZ1GgpyNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDO5+wdGyhNusfqaCi5nrNu1jJVMB8GA1UdIwQY
MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt
M2Q3OTY1NTM5YmM3LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3
LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAUV6a1e
tTX0afGLjpQ7NJR+YbhIvSRu0uNuchMnbeQpIs7HLV8VJXzuwIk9RQDb5pkiS9Rk
iorAZ9pCE5dWbXtb7e/Ijh4rxATYqCM1wEsUoHwn443qK/yYlhxjhr5MODnalTIj
/ZrSVpvC40IwHEge4HBHSpvbqf5w7HlkD5EIX2aDznxt8JTO+0n3XTyzZEoje6Gu
MwMY6PEUp2mPVApHfaegkv7foiUPQJi5QUvbOcCiB9NI1G1dX5S06taS8ubN935t
hdFKHl/T5AWo7nOdAaYgS6Six3X0i1QlLoKhyNAxPsfRHp3a7GIAuwedb7KdfLzW
WifZ0aXynk12Vg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:26 2025 by rpki-client