Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier: /Q/EeT1eTMV/Lh4RpoTKGRYJ8Z+cD1pgYGveKTUQtxY=
Subject key identifier: DE:9B:87:01:EA:1E:80:B0:3B:EB:AC:F0:37:50:32:E9:AE:B8:95:3C
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 0199FF22E340C047A962E0625D88F7C3B948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number: 09AE
Signing time: Mon 20 Oct 2025 01:01:40 +0000
Manifest this update: Mon 20 Oct 2025 01:01:40 +0000
Manifest next update: Tue 21 Oct 2025 01:01:40 +0000
Files and hashes: 1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: qbRRwCGKSrpMm2Y4siE/DA4N4kQfUoc+1cjUqzqOVSk=)
2: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (hash: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=)
3: NAkfZdC-lHIooI3gKnWXiaH-HsE.roa (hash: w3/vlIu5NjwEAa3XQiOFjmWkJL3BENVNbQUqUr266qk=)
4: tHjmQ9NOKNWbyApXtXSEVz3gkFM.roa (hash: SBZ1boxaRQZqnvXhV5a0MuSyAE629IVLf7UqxBja6yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e3:40:c0:47:a9:62:e0:62:5d:88:f7:c3:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Oct 20 01:01:40 2025 GMT
Not After : Oct 21 01:01:40 2025 GMT
Subject: CN=de9b8701ea1e80b03bebacf0375032e9aeb8953c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:09:e8:17:87:75:7a:b2:fc:39:db:20:69:
a3:b7:d9:e3:37:8e:67:c7:7f:5d:63:c8:7a:e8:7e:
c3:ad:a7:a3:6d:63:2d:c0:9f:35:63:58:71:35:8b:
02:55:61:a5:31:2b:ba:59:f1:95:b7:9d:ee:00:cf:
6b:c3:3a:3a:68:7d:b5:45:f2:2b:a7:cf:c5:bb:fd:
18:ae:27:7e:7f:e8:0d:72:09:36:3b:85:07:9b:9b:
ec:09:07:8f:85:fb:e5:b8:a9:a3:28:17:fb:3a:eb:
f3:d0:62:cb:c8:ed:e5:04:af:ec:f4:ba:bb:a0:dd:
6b:40:8c:01:76:8f:5e:d6:05:ba:4a:88:8e:7d:25:
0d:33:90:de:27:18:0f:5b:26:d0:20:2d:c2:c9:f1:
0e:eb:89:57:d3:66:3b:e3:10:e9:26:0b:d9:aa:30:
bc:b7:1a:f5:be:47:42:b9:d3:f1:60:e2:63:24:fb:
f2:9e:53:3e:30:76:fc:24:4a:28:e1:75:28:d9:84:
61:8c:82:a3:b8:44:5c:77:4c:8a:47:ed:6f:b6:ba:
5d:03:47:1e:5b:b1:db:ff:8b:93:06:34:44:87:0c:
7e:90:07:aa:bd:a8:55:55:52:21:40:cd:a1:6a:b9:
01:86:b7:dc:23:fb:ff:cd:cb:7d:e4:3a:57:8a:1f:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:9B:87:01:EA:1E:80:B0:3B:EB:AC:F0:37:50:32:E9:AE:B8:95:3C
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b2:e6:e1:fd:f9:01:f0:69:4c:42:5e:0d:7e:38:e3:b5:99:
b7:7f:fe:3b:b7:98:36:9f:4c:d0:6b:0f:76:86:98:e4:b4:14:
f4:d7:a5:f3:a1:ba:b0:d5:4a:72:ad:6c:db:59:30:f4:82:f3:
c2:4a:aa:79:f6:3e:e5:6b:64:ba:c4:19:71:81:92:3a:e3:1d:
03:47:8f:7e:c5:78:16:68:ba:04:83:c6:5f:6a:b8:e7:4f:e3:
64:3e:4d:54:34:0e:9b:fe:a6:f4:19:36:70:39:29:78:f5:43:
ba:62:f3:5e:22:5c:30:8f:ca:cf:a6:31:12:a0:65:ee:a7:e6:
1d:9e:95:7a:a7:b2:ff:41:8a:3b:cf:21:04:15:0e:83:9e:d2:
5e:16:b7:dc:55:96:89:09:c9:97:e4:09:ec:7f:90:65:1b:43:
83:a8:06:19:98:fb:8a:42:23:03:5a:9d:9d:e3:35:c2:b0:44:
0d:b3:21:50:0a:fd:74:c1:06:7a:26:8f:1c:39:e7:b6:20:83:
8f:ff:ff:59:a1:26:b4:1e:ad:41:f3:0f:d7:25:2f:b3:e1:e8:
e5:01:45:8c:0a:4f:23:b5:fb:63:bb:5b:3a:a6:06:07:fa:64:
95:0b:be:aa:66:05:b6:ac:21:15:70:f6:d7:d5:c1:80:24:7b:
a0:46:9c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IuNAwEepYuBiXYj3w7lIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjUxMDIwMDEwMTQwWhcNMjUxMDIxMDEwMTQwWjAzMTEwLwYDVQQD
EyhkZTliODcwMWVhMWU4MGIwM2JlYmFjZjAzNzUwMzJlOWFlYjg5NTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sYJ6BeHdXqy/DnbIGmjt9njN45n
x39dY8h66H7DraejbWMtwJ81Y1hxNYsCVWGlMSu6WfGVt53uAM9rwzo6aH21RfIr
p8/Fu/0Yrid+f+gNcgk2O4UHm5vsCQePhfvluKmjKBf7Ouvz0GLLyO3lBK/s9Lq7
oN1rQIwBdo9e1gW6SoiOfSUNM5DeJxgPWybQIC3CyfEO64lX02Y74xDpJgvZqjC8
txr1vkdCudPxYOJjJPvynlM+MHb8JEoo4XUo2YRhjIKjuERcd0yKR+1vtrpdA0ce
W7Hb/4uTBjREhwx+kAeqvahVVVIhQM2harkBhrfcI/v/zct95DpXih+yaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6bhwHqHoCwO+us8DdQMumuuJU8MB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbLm4f35
AfBpTEJeDX4447WZt3/+O7eYNp9M0GsPdoaY5LQU9Nel86G6sNVKcq1s21kw9ILz
wkqqefY+5WtkusQZcYGSOuMdA0ePfsV4Fmi6BIPGX2q450/jZD5NVDQOm/6m9Bk2
cDkpePVDumLzXiJcMI/Kz6YxEqBl7qfmHZ6Veqey/0GKO88hBBUOg57SXha33FWW
iQnJl+QJ7H+QZRtDg6gGGZj7ikIjA1qdneM1wrBEDbMhUAr9dMEGeiaPHDnntiCD
j///WaEmtB6tQfMP1yUvs+Ho5QFFjApPI7X7Y7tbOqYGB/pklQu+qmYFtqwhFXD2
19XBgCR7oEachA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:00 2025 by rpki-client