Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: S/nx1JvGMyztZlVAGOIRBIR7TbSIENXdgEUDZzWhhp8=
Subject key identifier: 4C:81:DD:21:7D:00:BE:58:02:81:02:9B:8A:74:B9:CD:34:4D:6D:63
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 0199FBEADAE6D1213D9A66D2B4713721E978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: VXgzetZvj0zjyBFc6/gRzS9QJZ+Qe4cYrpJouPzBdDg=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:da:e6:d1:21:3d:9a:66:d2:b4:71:37:21:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=4c81dd217d00be580281029b8a74b9cd344d6d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:db:ea:dc:6f:08:e0:6c:98:c5:99:37:90:
6f:4c:7c:42:09:ad:4b:dd:f3:1b:e8:64:42:12:2b:
62:61:ee:2b:b0:8e:0e:5b:47:7a:dc:ee:fd:f0:fa:
d0:cd:70:df:8e:be:b1:ad:f4:4a:05:0b:47:bf:49:
4a:b2:29:c7:3d:d6:64:5d:69:8a:17:d1:2d:f1:70:
82:ea:2b:3f:d0:f8:95:4e:9d:22:ad:bd:26:40:ff:
ee:5f:08:e0:29:8b:17:b6:2e:e9:e2:3e:3f:b2:a6:
37:49:b3:3f:02:e2:8e:91:d4:15:1f:0b:b5:44:6c:
91:58:2f:e1:2d:08:10:6c:78:63:cf:c2:24:6a:90:
f0:aa:a7:81:7d:55:17:65:b7:fa:82:ff:1e:51:bc:
39:ea:91:b6:f0:a9:bd:3e:f6:83:a4:cc:a3:80:52:
91:25:5e:4a:36:72:ca:83:67:8b:fd:60:c4:fd:1a:
45:5d:be:88:cd:ef:e7:25:82:15:a0:66:82:83:4e:
f2:6e:bd:71:95:e6:4e:e3:e0:ef:3a:89:43:9a:69:
1b:3d:4a:92:3f:27:18:51:d5:8c:26:bb:69:16:2d:
cd:ae:d1:0e:0b:6b:9b:0b:46:d2:e2:c9:51:98:5a:
3e:ed:e2:b1:d2:fe:8b:6b:75:28:74:1f:68:b3:b1:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:DD:21:7D:00:BE:58:02:81:02:9B:8A:74:B9:CD:34:4D:6D:63
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:b0:b5:b5:3d:b7:1a:80:32:73:34:e3:9c:91:01:b2:30:
0c:d4:1b:9e:24:59:d6:c9:2d:56:cb:ca:65:f9:1b:2b:58:d7:
ca:37:c2:6f:1e:cc:df:8c:4c:e5:f7:61:8e:33:bf:6e:29:e9:
14:3e:08:35:e9:1e:b3:1b:f7:e5:d4:4f:99:44:18:f0:bd:cb:
dc:03:30:a3:8c:cc:dc:42:f1:e8:df:16:48:9e:a2:7f:ef:60:
6f:b4:11:8a:67:78:f2:dc:3e:19:ca:d2:2d:5f:de:72:d6:a0:
b4:f0:2f:21:6a:0c:50:31:b7:b8:5a:99:b1:e7:a2:58:b3:5c:
63:91:a3:66:64:41:68:23:93:da:43:89:4a:b0:6b:6a:00:96:
d0:45:6f:77:d8:4b:11:fb:15:89:da:1d:68:c4:d5:c9:eb:e9:
3b:48:74:22:b4:08:4f:13:b7:b5:b3:48:34:51:3c:24:7d:80:
88:1a:9d:0f:65:b4:fb:cf:c5:b8:48:ad:07:d5:1d:bf:dc:82:
4e:8d:58:a0:8d:45:a3:1b:1f:8d:7e:51:29:5b:a4:fb:78:b3:
57:d9:44:72:0a:f8:8f:2f:82:16:f2:74:5b:c0:12:24:6f:27:
01:ed:9e:a1:ff:75:cb:c4:24:41:16:8d:51:85:33:f1:f2:a1:
83:8a:59:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76trm0SE9mmbStHE3Iel4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjUxMDE5MTAwMTM2WhcNMjUxMDIwMTAwMTM2WjAzMTEwLwYDVQQD
Eyg0YzgxZGQyMTdkMDBiZTU4MDI4MTAyOWI4YTc0YjljZDM0NGQ2ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRXb6txvCOBsmMWZN5BvTHxCCa1L
3fMb6GRCEitiYe4rsI4OW0d63O798PrQzXDfjr6xrfRKBQtHv0lKsinHPdZkXWmK
F9Et8XCC6is/0PiVTp0irb0mQP/uXwjgKYsXti7p4j4/sqY3SbM/AuKOkdQVHwu1
RGyRWC/hLQgQbHhjz8IkapDwqqeBfVUXZbf6gv8eUbw56pG28Km9PvaDpMyjgFKR
JV5KNnLKg2eL/WDE/RpFXb6Ize/nJYIVoGaCg07ybr1xleZO4+DvOolDmmkbPUqS
PycYUdWMJrtpFi3NrtEOC2ubC0bS4slRmFo+7eKx0v6La3UodB9os7GxnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyB3SF9AL5YAoECm4p0uc00TW1jMB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmGwtbU9
txqAMnM045yRAbIwDNQbniRZ1sktVsvKZfkbK1jXyjfCbx7M34xM5fdhjjO/binp
FD4INekesxv35dRPmUQY8L3L3AMwo4zM3ELx6N8WSJ6if+9gb7QRimd48tw+GcrS
LV/ectagtPAvIWoMUDG3uFqZseeiWLNcY5GjZmRBaCOT2kOJSrBragCW0EVvd9hL
EfsVidodaMTVyevpO0h0IrQITxO3tbNINFE8JH2AiBqdD2W0+8/FuEitB9Udv9yC
To1YoI1FoxsfjX5RKVuk+3izV9lEcgr4jy+CFvJ0W8ASJG8nAe2eof91y8QkQRaN
UYUz8fKhg4pZuA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:39 2025 by rpki-client