Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: dw2Fwqh+w3ZED2sn0BeYx7Jx/N8aXvXP+ioUy46ldjU=
Subject key identifier: 2A:9F:84:39:D7:E3:92:DC:B5:ED:FE:C8:01:3C:52:49:7B:3F:BD:AA
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 0199FAA0C51182174AA6AE48839595141082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0F4D
Signing time: Sun 19 Oct 2025 04:01:04 +0000
Manifest this update: Sun 19 Oct 2025 04:01:04 +0000
Manifest next update: Mon 20 Oct 2025 04:01:04 +0000
Files and hashes: 1: ywILmYvfHvLy0zrc3mPdeVVeQE8.roa (hash: lEGb7Lo1v/pUmyHP90bFn1LBuW2bb3HIQFNpoQo/fns=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: LCcBPh6lkOEosBf6/bn0Bumt22wLnhkkYpCAvsMPiQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:c5:11:82:17:4a:a6:ae:48:83:95:95:14:10:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Oct 19 04:01:04 2025 GMT
Not After : Oct 20 04:01:04 2025 GMT
Subject: CN=2a9f8439d7e392dcb5edfec8013c52497b3fbdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ba:06:13:18:d6:db:74:dd:8d:53:6f:2a:a4:
66:27:93:94:86:d9:fc:8d:b7:8e:83:b6:c7:b0:b6:
08:a5:8a:bc:56:e0:3c:3b:30:c0:03:12:0a:fe:a7:
07:15:aa:56:38:f0:5d:ee:a6:2c:1f:3d:aa:06:7b:
23:eb:f1:3b:ab:e4:d9:db:87:1f:d8:7a:4f:5b:b5:
41:2b:cd:03:8c:f8:73:de:90:f7:a8:f5:dd:fb:7c:
68:4f:fb:17:dd:1d:29:90:fd:ae:cf:f8:db:b5:a5:
ea:02:1c:87:64:33:94:cc:3e:a8:50:3a:85:dc:27:
c4:c0:9c:9f:d3:a9:79:51:60:09:2e:11:8d:13:d1:
c1:f5:ed:b8:99:dd:f2:2a:02:4e:31:4b:9c:21:69:
43:da:e1:ce:a8:60:51:f3:3d:61:d1:1a:82:98:42:
5b:3c:cc:64:4a:7c:7d:47:ba:30:81:5b:99:9e:7e:
e1:db:90:eb:71:ca:e8:4d:89:3a:59:57:8e:9d:f6:
d9:6f:95:a5:22:94:7c:66:a4:6d:ff:ab:5e:e5:f6:
9f:46:1a:8a:fb:72:d7:9e:01:e5:39:94:06:3b:a5:
94:eb:86:eb:b5:f5:f0:f1:41:b4:6e:79:2a:13:30:
87:12:86:62:bc:0e:12:4a:21:1b:61:8f:18:ce:f3:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9F:84:39:D7:E3:92:DC:B5:ED:FE:C8:01:3C:52:49:7B:3F:BD:AA
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e6:96:06:9e:e6:68:72:fc:c7:b3:60:22:c2:e4:6e:33:a8:
8d:07:c5:18:65:39:03:9a:dc:36:54:f8:d4:92:c7:27:df:43:
ca:b7:c0:e1:e1:74:8f:33:f9:30:71:2b:e3:58:a5:d6:d0:57:
2e:89:26:cb:65:b6:3d:34:15:90:e0:4f:4c:eb:aa:13:29:bd:
a4:3b:65:b5:4f:e1:2d:20:33:9c:6f:28:1a:9e:ce:4d:25:82:
c0:51:af:a4:b9:ea:97:52:f0:32:46:0c:6b:4d:f5:32:a2:a4:
6c:b2:fd:0f:17:11:f8:e9:bd:34:d6:d8:f8:c7:9e:48:67:1c:
a3:f3:18:df:03:27:8d:ab:38:f0:b3:03:97:0c:a5:47:8b:1d:
1c:b9:07:79:d8:59:e2:28:96:f9:70:54:dd:ef:0e:a2:dc:d8:
52:4f:a0:78:19:b1:cb:48:f6:b4:3c:e5:75:d5:f4:b9:66:d1:
0a:d6:4f:56:d7:32:a5:22:0b:3f:d1:d3:f9:9a:b1:38:f4:5b:
47:80:da:53:cd:bf:e6:10:be:52:11:35:51:ef:e7:a3:ce:8a:
fe:da:ef:d9:27:e6:cf:bd:a6:55:b8:fb:62:63:ed:54:a8:06:
ac:08:8b:3d:1e:9b:ed:a7:09:b5:87:b5:a3:4b:7c:e5:41:69:
88:84:c5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oMURghdKpq5Ig5WVFBCCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm
N2U3NzcwHhcNMjUxMDE5MDQwMTA0WhcNMjUxMDIwMDQwMTA0WjAzMTEwLwYDVQQD
EygyYTlmODQzOWQ3ZTM5MmRjYjVlZGZlYzgwMTNjNTI0OTdiM2ZiZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LoGExjW23TdjVNvKqRmJ5OUhtn8
jbeOg7bHsLYIpYq8VuA8OzDAAxIK/qcHFapWOPBd7qYsHz2qBnsj6/E7q+TZ24cf
2HpPW7VBK80DjPhz3pD3qPXd+3xoT/sX3R0pkP2uz/jbtaXqAhyHZDOUzD6oUDqF
3CfEwJyf06l5UWAJLhGNE9HB9e24md3yKgJOMUucIWlD2uHOqGBR8z1h0RqCmEJb
PMxkSnx9R7owgVuZnn7h25DrccroTYk6WVeOnfbZb5WlIpR8ZqRt/6te5fafRhqK
+3LXngHlOZQGO6WU64brtfXw8UG0bnkqEzCHEoZivA4SSiEbYY8YzvPU7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqfhDnX45Lcte3+yAE8Ukl7P72qMB8GA1UdIwQY
MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt
YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy
LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuaWBp7m
aHL8x7NgIsLkbjOojQfFGGU5A5rcNlT41JLHJ99DyrfA4eF0jzP5MHEr41il1tBX
Lokmy2W2PTQVkOBPTOuqEym9pDtltU/hLSAznG8oGp7OTSWCwFGvpLnql1LwMkYM
a031MqKkbLL9DxcR+Om9NNbY+MeeSGcco/MY3wMnjas48LMDlwylR4sdHLkHedhZ
4iiW+XBU3e8OotzYUk+geBmxy0j2tDzlddX0uWbRCtZPVtcypSILP9HT+ZqxOPRb
R4DaU82/5hC+UhE1Ue/no86K/trv2Sfmz72mVbj7YmPtVKgGrAiLPR6b7acJtYe1
o0t85UFpiITFmg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:35 2025 by rpki-client