Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: m8fJ7q2tSKAdzqaQ1fvgryBlmLWUhr7G4apYkImn1Xg=
Subject key identifier: CB:F5:5B:2B:36:AF:5C:F8:BA:F0:00:F4:A4:99:83:7E:4F:71:A4:13
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 0199FC21B0C9BF335F200183F0E712402CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 0257
Signing time: Sun 19 Oct 2025 11:01:30 +0000
Manifest this update: Sun 19 Oct 2025 11:01:30 +0000
Manifest next update: Mon 20 Oct 2025 11:01:30 +0000
Files and hashes: 1: 1-MrWjx41MLE2Craolgg-haNHa9U.roa (hash: tIwb/8MDPQoteToypid0+b6Y/WqY8vQG76gQarvTyPE=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: zz8cR9fHIVqaJrS1mvuVF2UiKyQKp6+t6m1bJ/C4mH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b0:c9:bf:33:5f:20:01:83:f0:e7:12:40:2c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Oct 19 11:01:30 2025 GMT
Not After : Oct 20 11:01:30 2025 GMT
Subject: CN=cbf55b2b36af5cf8baf000f4a499837e4f71a413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:61:7f:92:09:df:de:f2:71:7e:19:5e:a7:
8c:20:53:98:9a:9b:f2:0f:72:f3:07:7f:8a:f3:bc:
2a:45:0f:0f:cb:9f:d9:36:bd:b0:37:35:1c:33:f1:
ad:d6:1c:3d:ed:d6:a4:75:8c:51:af:9b:26:ed:2b:
6d:c6:65:c0:cb:5a:f9:7d:f7:87:87:fa:03:8b:f9:
ee:79:6c:ae:8d:72:e8:8b:19:ca:8c:8e:fb:3a:57:
e8:bb:3a:a6:a9:21:01:05:ea:ca:57:ad:3b:cd:16:
1c:c4:fe:81:04:90:48:a7:a9:48:46:74:1d:f3:06:
ea:eb:04:a4:9c:e6:7d:74:23:d1:75:25:a1:fa:b3:
c3:b4:89:99:5a:46:5d:fb:39:c0:dc:d6:13:4f:95:
63:96:c2:14:b8:e1:a5:36:ea:be:df:e8:60:e2:f9:
6d:d9:63:b4:45:f4:f1:97:6e:12:0b:6f:47:49:46:
15:99:d5:c5:32:42:12:d9:5c:3c:14:52:2b:d9:33:
73:ee:88:08:8b:01:93:76:c6:b7:4d:ba:bb:f1:f4:
34:be:f0:13:f4:d6:49:7e:f4:1a:fc:47:50:b9:13:
1b:09:15:94:c6:57:ed:af:92:82:6c:a7:95:a1:23:
a3:cb:ae:30:55:07:be:1b:f7:b0:85:de:78:35:ab:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F5:5B:2B:36:AF:5C:F8:BA:F0:00:F4:A4:99:83:7E:4F:71:A4:13
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:82:d7:48:a1:58:53:e7:7d:84:1e:d7:14:95:4e:58:25:ea:
82:ed:c6:75:dc:25:ff:b3:91:b9:00:0f:26:cd:22:34:94:55:
30:b8:ea:b0:24:e1:45:a4:70:bd:57:c2:70:e3:c9:1b:06:a0:
af:1c:d2:99:47:44:43:49:55:b0:5a:7b:e1:42:78:c4:bc:a7:
70:37:c7:a0:79:12:b3:28:b8:83:98:64:7e:b5:99:6b:dd:a6:
96:7b:48:3f:b6:1c:ac:f2:f7:66:43:57:e9:fd:46:13:28:95:
38:fe:62:9a:a4:89:09:7a:27:70:ea:0c:ad:31:cf:6a:8a:85:
64:51:e5:be:30:24:0f:9b:28:c6:9b:8e:35:a1:1b:3d:f3:5e:
2c:91:18:5c:9c:8b:fb:e9:42:7b:a4:7c:c6:69:ea:be:89:70:
89:56:30:19:1e:d6:44:da:63:8e:2c:34:cb:78:26:cb:8e:f2:
72:73:00:f4:3f:e5:f5:35:61:99:e1:8e:7d:ca:14:55:c3:95:
c3:1a:d6:05:12:11:46:f6:a3:73:e6:c0:1b:fe:6e:0a:58:c3:
3a:73:6a:ce:23:72:c3:64:c7:42:16:5a:d3:88:2d:d5:35:59:
23:57:01:15:13:05:5f:2d:12:77:23:b3:92:35:4f:38:52:e7:
eb:2f:b3:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbDJvzNfIAGD8OcSQCz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTIyOGEzYTNkMDA2NTRkNGIxMTE3MzM4NzRlMzFkODBj
MGEyMGMwHhcNMjUxMDE5MTEwMTMwWhcNMjUxMDIwMTEwMTMwWjAzMTEwLwYDVQQD
EyhjYmY1NWIyYjM2YWY1Y2Y4YmFmMDAwZjRhNDk5ODM3ZTRmNzFhNDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVRhf5IJ397ycX4ZXqeMIFOYmpvy
D3LzB3+K87wqRQ8Py5/ZNr2wNzUcM/Gt1hw97dakdYxRr5sm7SttxmXAy1r5ffeH
h/oDi/nueWyujXLoixnKjI77OlfouzqmqSEBBerKV607zRYcxP6BBJBIp6lIRnQd
8wbq6wSknOZ9dCPRdSWh+rPDtImZWkZd+znA3NYTT5VjlsIUuOGlNuq+3+hg4vlt
2WO0RfTxl24SC29HSUYVmdXFMkIS2Vw8FFIr2TNz7ogIiwGTdsa3Tbq78fQ0vvAT
9NZJfvQa/EdQuRMbCRWUxlftr5KCbKeVoSOjy64wVQe+G/ewhd54NavZSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv1Wys2r1z4uvAA9KSZg35PcaQTMB8GA1UdIwQY
MBaAFM4SKKOj0AZU1LERczh04x2AwKIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMt
ZmQ3ZGJkZjhlMzAwLzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mOWQ3YmEtYTQ0Yi00NjJkLWIzMzMtZmQ3ZGJkZjhlMzAw
LzEvemhJb282UFFCbFRVc1JGek9IVGpIWURBb2d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4LXSKFY
U+d9hB7XFJVOWCXqgu3Gddwl/7ORuQAPJs0iNJRVMLjqsCThRaRwvVfCcOPJGwag
rxzSmUdEQ0lVsFp74UJ4xLyncDfHoHkSsyi4g5hkfrWZa92mlntIP7YcrPL3ZkNX
6f1GEyiVOP5imqSJCXoncOoMrTHPaoqFZFHlvjAkD5soxpuONaEbPfNeLJEYXJyL
++lCe6R8xmnqvolwiVYwGR7WRNpjjiw0y3gmy47ycnMA9D/l9TVhmeGOfcoUVcOV
wxrWBRIRRvajc+bAG/5uCljDOnNqziNyw2THQhZa04gt1TVZI1cBFRMFXy0SdyOz
kjVPOFLn6y+zCA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:16 2025 by rpki-client