Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: jbrsfHjG0DVg/O/87lnaGo8Dns1hhJ2NWhuN/3fWjiI=
Subject key identifier: 8D:2C:3F:76:EB:3A:E3:19:3A:88:5B:E3:4E:6F:EB:A2:D2:2C:2F:E7
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 0199FDD94F5A2E27C0C9E22701588B7F5398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 8H9ZNpaTSYRk/wyNc5gQeLZXdYpXUBmIUIqGhL6gVKY=)
6: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
7: jHuaR39fBtfoSm7eKI-uPlXtnO0.roa (hash: tlJbuPplC7TVW63LZE8L9VXaV6yFo7hmKI0nyQHS7tc=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4f:5a:2e:27:c0:c9:e2:27:01:58:8b:7f:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=8d2c3f76eb3ae3193a885be34e6feba2d22c2fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:c5:cb:cb:34:7e:07:35:8e:26:3c:f8:b8:
f6:32:1c:6a:6a:3d:d6:41:0d:7e:65:9e:b5:5e:e5:
bf:81:8e:a0:c7:98:65:9f:e1:23:51:30:3e:5a:e5:
0d:9c:fd:61:e5:08:e3:44:f6:27:7a:2c:74:f5:ec:
3a:1f:2e:86:07:ee:4f:ac:6e:69:11:5a:e1:e0:89:
13:65:00:8d:0f:b5:1c:ab:25:e3:e3:99:23:08:4a:
0d:3b:a3:af:08:d3:b6:82:14:91:4c:a2:dd:4f:8b:
f1:37:b6:39:8a:ee:e0:d1:da:9b:45:f6:22:cb:e2:
9c:11:c7:c7:46:bd:7d:ee:94:10:b3:00:2f:57:1e:
d4:be:2b:ea:51:be:58:c8:55:22:ba:7b:86:fc:0c:
bc:a9:b3:0c:50:9c:12:e0:d3:07:f1:bc:67:97:94:
e0:35:29:d4:fe:ff:a5:7f:59:76:04:ef:cf:b1:b6:
3d:aa:d5:9f:95:10:19:f2:be:90:14:2a:96:27:a6:
50:01:7e:e7:7a:08:31:d4:8d:42:d5:21:c5:ee:76:
24:e7:45:dd:8a:f7:a0:c4:99:1c:20:13:a8:12:a6:
52:95:c2:df:a9:6c:10:81:ba:25:dd:5b:cb:18:88:
07:6a:c4:58:36:20:5e:f7:f1:ce:0a:b1:65:ec:3e:
7a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2C:3F:76:EB:3A:E3:19:3A:88:5B:E3:4E:6F:EB:A2:D2:2C:2F:E7
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:19:f1:54:f1:78:eb:ba:32:b8:ab:99:64:60:c8:0d:71:
19:0d:09:63:54:e4:02:84:14:7e:b9:74:be:b7:03:c2:c4:3d:
2c:30:42:53:67:ce:89:df:80:41:3d:76:8b:15:ae:67:9c:59:
07:63:22:c0:be:fc:12:a4:26:0c:52:e2:01:1c:48:f4:38:97:
35:02:4b:f4:e7:b4:80:09:71:3f:81:f5:37:28:e8:5b:f5:0e:
f8:f8:b0:bd:23:cb:07:23:80:76:1c:d3:c8:9f:06:91:91:52:
e5:ae:18:fd:60:8f:f1:8b:12:7c:79:c8:52:13:51:90:d3:86:
fe:21:20:17:50:68:25:4e:6a:fc:03:27:b5:62:5c:9b:37:27:
fb:a3:de:db:b6:39:76:a0:41:23:3f:ea:20:af:24:b3:55:89:
ef:0b:95:18:93:1f:b5:18:45:dc:58:91:e9:7f:ce:3a:a7:7a:
6e:e0:37:00:da:cc:d9:63:66:d6:a0:d6:fd:7d:9c:29:48:dc:
91:17:59:f9:68:06:e8:05:09:69:2c:f3:5f:94:8b:e0:61:54:
6b:1f:95:f1:12:a9:00:e3:0d:bb:b0:b6:7c:09:73:50:15:58:
e0:b7:09:ab:8e:48:a8:51:86:b5:23:64:3f:90:be:f8:13:c4:
4d:25:90:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92U9aLifAyeInAViLf1OYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1
ZGQ2ZTgwHhcNMjUxMDE5MTkwMTQxWhcNMjUxMDIwMTkwMTQxWjAzMTEwLwYDVQQD
Eyg4ZDJjM2Y3NmViM2FlMzE5M2E4ODViZTM0ZTZmZWJhMmQyMmMyZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVTFy8s0fgc1jiY8+Lj2Mhxqaj3W
QQ1+ZZ61XuW/gY6gx5hln+EjUTA+WuUNnP1h5QjjRPYneix09ew6Hy6GB+5PrG5p
EVrh4IkTZQCND7UcqyXj45kjCEoNO6OvCNO2ghSRTKLdT4vxN7Y5iu7g0dqbRfYi
y+KcEcfHRr197pQQswAvVx7UvivqUb5YyFUiunuG/Ay8qbMMUJwS4NMH8bxnl5Tg
NSnU/v+lf1l2BO/PsbY9qtWflRAZ8r6QFCqWJ6ZQAX7neggx1I1C1SHF7nYk50Xd
ivegxJkcIBOoEqZSlcLfqWwQgbol3VvLGIgHasRYNiBe9/HOCrFl7D56nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0sP3brOuMZOohb405v66LSLC/nMB8GA1UdIwQY
MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt
MjkyNmQyODFiNTE0LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0
LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+MZ8VTx
eOu6MrirmWRgyA1xGQ0JY1TkAoQUfrl0vrcDwsQ9LDBCU2fOid+AQT12ixWuZ5xZ
B2MiwL78EqQmDFLiARxI9DiXNQJL9Oe0gAlxP4H1NyjoW/UO+PiwvSPLByOAdhzT
yJ8GkZFS5a4Y/WCP8YsSfHnIUhNRkNOG/iEgF1BoJU5q/AMntWJcmzcn+6Pe27Y5
dqBBIz/qIK8ks1WJ7wuVGJMftRhF3FiR6X/OOqd6buA3ANrM2WNm1qDW/X2cKUjc
kRdZ+WgG6AUJaSzzX5SL4GFUax+V8RKpAOMNu7C2fAlzUBVY4LcJq45IqFGGtSNk
P5C++BPETSWQrA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:28 2025 by rpki-client