Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: xm0eG5WtRrrmYco5F5GCFUYJx8SI/VJeukxyOdQZ7Bw=
Subject key identifier: E2:7D:6F:BD:47:2F:93:90:F9:AF:BA:1E:33:80:8F:22:F3:F8:59:05
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 0199FB7CA250925230FC48CF70E6FD04E48E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 1100
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: gUbgV/z0gAzdE8ioszFqd0W9IV2UFlGbUQYPl7zGxgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a2:50:92:52:30:fc:48:cf:70:e6:fd:04:e4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=e27d6fbd472f9390f9afba1e33808f22f3f85905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:01:94:f7:11:64:40:f4:2c:c3:e8:1b:dd:
8d:ea:8b:ae:c3:fb:39:01:06:39:40:40:9f:79:22:
58:81:e7:52:ba:7f:7a:8a:01:9e:7a:1b:b4:5a:f5:
f9:a0:f3:00:d3:16:12:80:7a:72:f5:22:f2:d7:c8:
d1:18:48:9b:cd:1f:0d:aa:a9:3e:51:33:63:a5:e3:
e8:5b:f7:2b:66:fc:45:36:6a:c1:df:b8:e3:81:80:
6c:84:41:36:c6:7f:c7:63:b6:dc:0f:68:ac:6b:5c:
20:db:71:ad:d8:18:e4:86:70:0b:be:3d:fc:73:91:
1b:49:e9:9b:1b:02:15:11:a2:ee:cb:1d:f1:d9:c2:
cb:84:4c:1c:d7:d3:e8:0c:4f:42:25:01:77:c5:ef:
04:43:b7:68:8f:c2:3f:31:bd:60:09:47:73:b1:66:
26:b8:7e:db:5e:00:39:bf:ba:8b:12:1f:2f:b5:38:
bc:ad:bd:bf:80:30:81:83:8f:d1:d2:18:2a:d0:a6:
69:33:cc:9b:57:34:19:9a:48:2f:12:cb:5a:0b:d3:
a3:47:c6:15:95:d5:01:f4:80:ef:76:22:cd:39:86:
c7:dc:ba:c5:ab:9d:bf:00:39:ce:71:71:b9:fe:bb:
60:cb:61:f7:ec:6e:cb:3e:ed:c7:7f:df:fe:a7:ce:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:6F:BD:47:2F:93:90:F9:AF:BA:1E:33:80:8F:22:F3:F8:59:05
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b7:a2:45:ed:ba:4f:41:42:74:33:ba:30:31:86:bb:7d:7c:
ce:ee:c9:56:cf:11:d7:54:25:99:71:32:93:a4:a6:99:54:18:
34:75:f9:33:52:b8:cf:eb:23:5c:99:54:14:63:6d:d3:0d:2f:
28:d7:9f:61:03:db:9a:99:cb:23:5b:e5:2c:55:fb:58:62:b5:
b9:5c:b0:9f:cf:2e:99:41:79:a5:16:f6:a0:34:d7:fc:f5:96:
4d:06:e0:13:a4:be:03:02:19:61:5c:96:2b:a0:91:5c:6e:56:
93:fd:7e:81:77:85:61:94:89:5b:a2:96:bf:3a:63:58:b8:e8:
bc:77:bc:60:e8:cd:89:e5:b5:ed:bd:5e:73:69:5d:09:43:6d:
5e:a1:24:24:a0:22:8a:4f:71:be:eb:04:8d:28:b6:df:9f:19:
82:24:9a:c7:34:e7:57:fc:2b:ac:24:ba:9c:22:0d:61:41:b9:
ba:fe:24:d7:3f:74:0e:5e:42:42:2c:b3:78:a2:fe:88:62:1d:
cc:1b:41:84:0e:d6:e4:34:e0:c3:64:50:7c:d0:35:c4:19:94:
30:2a:2a:fe:b6:fb:dc:af:c0:f9:5d:21:e0:ab:cc:d2:59:85:
3a:fe:bc:00:5a:02:be:05:48:b8:26:ad:eb:17:9f:25:94:fd:
8f:97:a1:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKJQklIw/EjPcOb9BOSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjI0NzRkZTg0MTE2NzUyYjkwODBhN2EwZGIzMjI1MzVj
NTYwMjYwHhcNMjUxMDE5MDgwMTEzWhcNMjUxMDIwMDgwMTEzWjAzMTEwLwYDVQQD
EyhlMjdkNmZiZDQ3MmY5MzkwZjlhZmJhMWUzMzgwOGYyMmYzZjg1OTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8ABlPcRZED0LMPoG92N6ouuw/s5
AQY5QECfeSJYgedSun96igGeehu0WvX5oPMA0xYSgHpy9SLy18jRGEibzR8Nqqk+
UTNjpePoW/crZvxFNmrB37jjgYBshEE2xn/HY7bcD2isa1wg23Gt2BjkhnALvj38
c5EbSembGwIVEaLuyx3x2cLLhEwc19PoDE9CJQF3xe8EQ7doj8I/Mb1gCUdzsWYm
uH7bXgA5v7qLEh8vtTi8rb2/gDCBg4/R0hgq0KZpM8ybVzQZmkgvEstaC9OjR8YV
ldUB9IDvdiLNOYbH3LrFq52/ADnOcXG5/rtgy2H37G7LPu3Hf9/+p84U0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJ9b71HL5OQ+a+6HjOAjyLz+FkFMB8GA1UdIwQY
MBaAFMzyR03oQRZ1K5CAp6DbMiU1xWAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYt
Y2M5MDYyMGU5OWNmLzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lY2ViMDItODBiNC00Nzk0LWFjYmYtY2M5MDYyMGU5OWNm
LzEvelBKSFRlaEJGblVya0lDbm9Oc3lKVFhGWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABreiRe26
T0FCdDO6MDGGu318zu7JVs8R11QlmXEyk6SmmVQYNHX5M1K4z+sjXJlUFGNt0w0v
KNefYQPbmpnLI1vlLFX7WGK1uVywn88umUF5pRb2oDTX/PWWTQbgE6S+AwIZYVyW
K6CRXG5Wk/1+gXeFYZSJW6KWvzpjWLjovHe8YOjNieW17b1ec2ldCUNtXqEkJKAi
ik9xvusEjSi2358ZgiSaxzTnV/wrrCS6nCINYUG5uv4k1z90Dl5CQiyzeKL+iGId
zBtBhA7W5DTgw2RQfNA1xBmUMCoq/rb73K/A+V0h4KvM0lmFOv68AFoCvgVIuCat
6xefJZT9j5ehdw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:57 2025 by rpki-client