Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
File: zm4aIgj6PxufPTj_8fjiw02RHzY.mft (raw, json)
Hash identifier: ta02zSz1s8qt6NQmtKFX/lPsFURJffA/rBVRLgTedS0=
Subject key identifier: 47:A1:F8:07:47:DA:BB:03:24:57:C5:D0:93:8B:6C:15:7E:30:93:77
Authority key identifier: CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
Certificate issuer: /CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Certificate serial: 0199FD34305393946A4577A04880804EB529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
Manifest number: 0FDF
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: iFAQtylr3ZRvM5JOhViQDahNSl8.roa (hash: ziaVf39GfMHlG6F56FK5ey4SYxeBfLmJtFc4nGwT8Lo=)
2: zm4aIgj6PxufPTj_8fjiw02RHzY.crl (hash: nDtBxRTvdAtdVLA217wN98tbsWqDwkp6/GhZxZgKAXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:30:53:93:94:6a:45:77:a0:48:80:80:4e:b5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce6e1a2208fa3f1b9f3d38fff1f8e2c34d911f36
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=47a1f80747dabb032457c5d0938b6c157e309377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:f0:02:cd:19:5c:4e:85:c6:55:33:bd:5b:
06:22:5c:64:40:94:ee:23:a7:51:f0:81:e8:e8:6d:
69:c6:b0:ef:6b:c6:99:36:76:70:1d:75:09:32:15:
46:4f:fa:9e:e8:f8:ac:ef:c3:8a:39:98:2f:9e:d4:
a2:6a:51:bb:30:3a:c9:be:c3:08:d9:90:b9:d1:e2:
31:64:b8:9a:c7:58:91:51:f2:0b:7a:f8:39:ee:7b:
6f:91:de:f4:5d:44:73:c6:6c:54:da:2f:6d:3b:58:
3b:c3:2e:32:f7:50:60:1f:3d:87:e8:64:01:cd:f3:
68:10:62:0d:41:b6:60:17:be:63:5d:2a:2f:a1:e8:
e7:58:6d:e1:78:da:c0:c2:5e:fb:ee:1c:de:e7:8d:
02:91:04:ba:9f:73:c0:20:62:bd:47:04:fe:8d:67:
91:53:92:9a:79:b3:9a:73:9b:59:78:4f:83:f5:90:
53:7c:ce:30:52:d1:79:b0:fd:c6:31:8b:72:dd:27:
ff:c9:47:23:f2:48:5e:1b:59:c1:21:02:99:c1:8b:
76:fd:13:ea:3b:90:d0:8f:cc:dc:5e:24:a4:5a:44:
7c:f6:f0:f9:1e:a8:91:6d:84:2c:77:ad:72:68:ac:
39:11:22:0c:42:20:b5:b6:57:3a:c5:4b:06:f2:88:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A1:F8:07:47:DA:BB:03:24:57:C5:D0:93:8B:6C:15:7E:30:93:77
X509v3 Authority Key Identifier:
keyid:CE:6E:1A:22:08:FA:3F:1B:9F:3D:38:FF:F1:F8:E2:C3:4D:91:1F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zm4aIgj6PxufPTj_8fjiw02RHzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/40746e-74c0-47ca-a23c-9fef0114a2e5/1/zm4aIgj6PxufPTj_8fjiw02RHzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:df:23:7a:e0:23:08:aa:de:1b:44:75:87:fc:e2:e0:7c:
1f:9f:cf:18:c5:43:a3:e8:6c:f9:a6:26:41:d3:8e:ca:5a:df:
2c:41:83:6d:e9:9e:22:80:1c:36:2b:80:66:b4:a2:81:37:6e:
14:11:1e:28:21:d7:64:86:d3:42:32:8c:ea:c4:18:81:1a:51:
3a:6f:8c:77:f8:8d:e9:bd:dd:57:3f:8c:71:11:ec:8e:a3:31:
62:1e:9c:95:9c:4c:8f:55:20:dd:66:49:ce:a3:b5:d5:f4:00:
8e:8b:3a:99:d4:de:bc:a6:6a:4a:17:f0:be:2d:98:78:30:2a:
3a:1c:bd:bf:5a:9c:ef:48:b2:07:74:ba:70:9a:1c:fc:9d:71:
ae:3a:ac:76:f8:91:18:40:03:c9:c0:91:ef:ff:ed:46:c9:85:
29:0c:8d:41:de:97:c0:b3:99:d3:c0:83:fc:2a:ad:8c:a7:b8:
9d:ef:14:6a:75:65:65:37:76:e3:00:e2:4b:3d:4e:8a:90:33:
1a:c4:bd:72:98:b5:c9:8c:cf:80:4c:f7:21:33:41:e5:6a:cd:
1c:dc:f7:8b:db:e7:47:58:f7:24:26:e2:5c:60:54:6d:1d:d2:
c6:9e:10:66:7c:d6:05:b3:ec:02:8c:88:12:7c:2f:52:ec:4b:
65:f8:69:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NDBTk5RqRXegSICATrUpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNmUxYTIyMDhmYTNmMWI5ZjNkMzhmZmYxZjhlMmMzNGQ5
MTFmMzYwHhcNMjUxMDE5MTYwMTE5WhcNMjUxMDIwMTYwMTE5WjAzMTEwLwYDVQQD
Eyg0N2ExZjgwNzQ3ZGFiYjAzMjQ1N2M1ZDA5MzhiNmMxNTdlMzA5Mzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0jwAs0ZXE6FxlUzvVsGIlxkQJTu
I6dR8IHo6G1pxrDva8aZNnZwHXUJMhVGT/qe6Pis78OKOZgvntSialG7MDrJvsMI
2ZC50eIxZLiax1iRUfILevg57ntvkd70XURzxmxU2i9tO1g7wy4y91BgHz2H6GQB
zfNoEGINQbZgF75jXSovoejnWG3heNrAwl777hze540CkQS6n3PAIGK9RwT+jWeR
U5KaebOac5tZeE+D9ZBTfM4wUtF5sP3GMYty3Sf/yUcj8kheG1nBIQKZwYt2/RPq
O5DQj8zcXiSkWkR89vD5HqiRbYQsd61yaKw5ESIMQiC1tlc6xUsG8ohQ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeh+AdH2rsDJFfF0JOLbBV+MJN3MB8GA1UdIwQY
MBaAFM5uGiII+j8bnz04//H44sNNkR82MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2Mt
OWZlZjAxMTRhMmU1LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80MDc0NmUtNzRjMC00N2NhLWEyM2MtOWZlZjAxMTRhMmU1
LzEvem00YUlnajZQeHVmUFRqXzhmaml3MDJSSHpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqvfI3rg
Iwiq3htEdYf84uB8H5/PGMVDo+hs+aYmQdOOylrfLEGDbemeIoAcNiuAZrSigTdu
FBEeKCHXZIbTQjKM6sQYgRpROm+Md/iN6b3dVz+McRHsjqMxYh6clZxMj1Ug3WZJ
zqO11fQAjos6mdTevKZqShfwvi2YeDAqOhy9v1qc70iyB3S6cJoc/J1xrjqsdviR
GEADycCR7//tRsmFKQyNQd6XwLOZ08CD/CqtjKe4ne8UanVlZTd24wDiSz1OipAz
GsS9cpi1yYzPgEz3ITNB5WrNHNz3i9vnR1j3JCbiXGBUbR3Sxp4QZnzWBbPsAoyI
EnwvUuxLZfhplA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:59:17 2025 by rpki-client