Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: ZeevjhqLFEucYRMhdHg5M2693q598XdZx4Vojq7gisg=
Subject key identifier: 45:F8:E5:48:B5:E4:50:56:32:21:3D:80:F0:09:2F:10:3B:F7:75:AC
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 0199FDDA77043D31291C10B0917723A53168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:56 +0000
Manifest this update: Sun 19 Oct 2025 19:02:56 +0000
Manifest next update: Mon 20 Oct 2025 19:02:56 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: KNwasS5ED9KUh3mub+dFDgZ8y6WCvWXQ6ULzn6/B1Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:77:04:3d:31:29:1c:10:b0:91:77:23:a5:31:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Oct 19 19:02:56 2025 GMT
Not After : Oct 20 19:02:56 2025 GMT
Subject: CN=45f8e548b5e4505632213d80f0092f103bf775ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:c6:d1:f0:73:b1:e5:12:40:46:35:8b:a2:
c1:f4:67:7e:a3:59:6d:4c:90:de:41:3d:7f:15:35:
f0:07:e5:18:37:76:04:cb:1a:96:f8:7d:8f:91:82:
a0:93:ef:cd:1b:f1:d6:fd:f2:ed:6f:cd:65:63:2c:
05:84:cf:61:e0:3c:2c:4e:05:29:55:57:d4:d4:50:
bd:ac:24:77:8d:0b:76:7b:bf:48:5d:61:86:85:c2:
19:f3:ed:93:1f:44:d2:e1:59:5e:84:5a:7b:9c:76:
61:dc:5b:3b:db:44:e4:4a:37:89:a0:ed:fa:4d:66:
9a:97:07:4e:8a:e2:ff:d6:9a:41:24:76:8f:4d:67:
5b:7d:17:69:55:27:91:ba:bf:1e:60:28:4e:8f:a3:
45:73:95:d5:04:2b:d4:6a:d7:ef:2b:23:9d:63:4c:
f3:73:88:c1:87:d1:48:63:8c:66:1a:bd:fe:84:50:
53:d4:e3:75:b6:ca:98:1b:12:47:2a:36:85:96:9e:
01:a0:49:b0:94:f5:a6:ba:60:c2:a5:57:5b:83:a3:
6a:dc:40:f3:c9:c2:e7:e2:50:7f:76:80:bc:86:2c:
95:95:58:30:01:bb:68:fa:97:e7:01:91:b5:e4:1c:
e4:bf:83:a3:eb:b6:4f:72:95:af:72:a8:86:75:78:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:E5:48:B5:E4:50:56:32:21:3D:80:F0:09:2F:10:3B:F7:75:AC
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:57:77:9c:65:f8:03:a0:99:53:fc:52:a4:5d:d8:09:17:c7:
1d:23:15:83:49:dd:4a:18:fb:d3:c5:87:c5:95:49:35:3c:3d:
ef:d2:ac:df:f5:1b:83:e5:bc:87:e8:4e:86:7c:53:27:df:5c:
8a:a6:01:12:65:7e:0f:a3:ef:5c:ef:27:43:50:c9:a3:4b:5a:
b3:11:f6:cc:6f:62:56:94:59:81:88:65:c7:13:bf:05:4b:da:
a3:73:5f:f2:52:5a:1c:b4:f6:61:47:15:c5:ca:b5:26:26:34:
26:5e:9c:a0:e1:62:cd:b8:ce:11:7e:4c:f4:0f:bc:f3:56:19:
2f:4a:c4:f4:b1:a7:d3:1d:66:0b:84:b0:0c:5a:28:c5:f8:89:
f3:63:78:da:3e:0f:08:4c:dc:20:43:7a:d3:57:1d:d2:bf:0b:
9e:01:94:cd:63:12:2b:82:ba:4c:54:0a:29:b3:0d:6f:37:06:
6c:80:e5:47:a7:ec:37:f1:b4:73:15:fb:0b:81:77:60:12:74:
dd:11:96:8d:8e:fa:bb:94:5b:dd:dc:a8:c9:22:41:ef:9c:8f:
ba:f2:45:e9:e6:fb:36:46:aa:d8:2a:3d:51:dd:ce:17:cb:7e:
1c:74:19:8b:1c:9c:ad:87:ef:5d:4b:95:0d:93:1a:23:01:8d:
75:ae:de:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ncEPTEpHBCwkXcjpTFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU3OGFkODU3NjA3NTIzYjUwYjYwYWNkOWUyMmNhNWEx
MDc4NTQwHhcNMjUxMDE5MTkwMjU2WhcNMjUxMDIwMTkwMjU2WjAzMTEwLwYDVQQD
Eyg0NWY4ZTU0OGI1ZTQ1MDU2MzIyMTNkODBmMDA5MmYxMDNiZjc3NWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH3G0fBzseUSQEY1i6LB9Gd+o1lt
TJDeQT1/FTXwB+UYN3YEyxqW+H2PkYKgk+/NG/HW/fLtb81lYywFhM9h4DwsTgUp
VVfU1FC9rCR3jQt2e79IXWGGhcIZ8+2TH0TS4VlehFp7nHZh3Fs720TkSjeJoO36
TWaalwdOiuL/1ppBJHaPTWdbfRdpVSeRur8eYChOj6NFc5XVBCvUatfvKyOdY0zz
c4jBh9FIY4xmGr3+hFBT1ON1tsqYGxJHKjaFlp4BoEmwlPWmumDCpVdbg6Nq3EDz
ycLn4lB/doC8hiyVlVgwAbto+pfnAZG15Bzkv4Oj67ZPcpWvcqiGdXiJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX45Ui15FBWMiE9gPAJLxA793WsMB8GA1UdIwQY
MBaAFM3ueK2FdgdSO1C2Cs2eIspaEHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMt
Y2YwMTI0Y2VkNGQ2LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy81YTQ5YmYtYzA1OS00YmVhLTg4ZDMtY2YwMTI0Y2VkNGQ2
LzEvemU1NHJZVjJCMUk3VUxZS3paNGl5bG9RZUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeld3nGX4
A6CZU/xSpF3YCRfHHSMVg0ndShj708WHxZVJNTw979Ks3/Ubg+W8h+hOhnxTJ99c
iqYBEmV+D6PvXO8nQ1DJo0tasxH2zG9iVpRZgYhlxxO/BUvao3Nf8lJaHLT2YUcV
xcq1JiY0Jl6coOFizbjOEX5M9A+881YZL0rE9LGn0x1mC4SwDFooxfiJ82N42j4P
CEzcIEN601cd0r8LngGUzWMSK4K6TFQKKbMNbzcGbIDlR6fsN/G0cxX7C4F3YBJ0
3RGWjY76u5Rb3dyoySJB75yPuvJF6eb7Nkaq2Co9Ud3OF8t+HHQZixycrYfvXUuV
DZMaIwGNda7e0g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:46 2025 by rpki-client