Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json)
Hash identifier: V7uB0hwC78/7UtrliMTVsqzvUBg/jdFKyHSdeE4zKIM=
Subject key identifier: F1:48:54:73:45:FD:90:39:2E:8F:A4:85:4A:5E:C1:BA:42:F2:31:66
Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99
Certificate serial: 0199FAA13954261728AF0ECF4CD8D3FA7D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
Manifest number: 1C
Signing time: Sun 19 Oct 2025 04:01:33 +0000
Manifest this update: Sun 19 Oct 2025 04:01:33 +0000
Manifest next update: Mon 20 Oct 2025 04:01:33 +0000
Files and hashes: 1: 7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa (hash: 07a2Z1bP4ZM4lvBNnIbYpGRZq/i+QW1+w8DIMuAxBRM=)
2: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: qMMYsp2VrWtt0UM/Bi9uESWdgo7mAv2W6ItzEZiZQts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:39:54:26:17:28:af:0e:cf:4c:d8:d3:fa:7d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99
Validity
Not Before: Oct 19 04:01:33 2025 GMT
Not After : Oct 20 04:01:33 2025 GMT
Subject: CN=f148547345fd90392e8fa4854a5ec1ba42f23166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:82:63:df:55:3c:a4:b9:42:c7:6f:a0:ed:
4a:cd:51:b9:45:5c:dd:26:4e:34:64:84:22:8b:47:
27:22:65:2a:35:81:7a:b2:6f:35:f5:e6:62:b3:66:
cd:40:bb:bf:12:eb:59:7f:0c:ec:6f:c7:95:3c:66:
71:7c:ea:84:c2:00:c9:3d:f3:45:8f:bb:46:29:0f:
14:78:5a:84:c4:c4:7d:d1:9e:cf:7f:c2:65:2a:50:
ac:1e:f7:93:9a:ff:a9:eb:60:3c:a8:cf:df:78:0e:
b0:d5:ac:14:7c:96:ce:24:c8:f8:11:fa:e9:b0:f8:
2d:6a:d2:72:60:d6:51:a8:79:fb:53:bd:93:ff:d7:
f8:2f:ca:d4:11:cf:57:c1:b0:43:9c:25:bd:dc:1e:
e0:d1:84:3f:67:08:bd:e8:89:57:17:f8:ff:43:6a:
a2:f6:3d:f8:c7:dc:46:41:4d:8a:95:58:85:65:2b:
fd:b7:b3:4d:2c:91:62:ae:0e:b6:3b:9e:11:98:65:
40:84:b6:ba:c5:d5:cd:a5:a2:e4:4b:3c:dd:ab:77:
7e:e6:05:5c:92:50:1a:5b:b2:32:57:aa:09:58:65:
eb:ed:74:7b:77:62:e4:e1:84:56:f1:c6:03:13:60:
65:42:41:66:c9:05:1d:fd:9d:86:61:bc:58:d7:fa:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:48:54:73:45:FD:90:39:2E:8F:A4:85:4A:5E:C1:BA:42:F2:31:66
X509v3 Authority Key Identifier:
keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:08:e6:10:0d:60:05:2e:d2:eb:13:f1:90:aa:6d:1a:54:cc:
12:0c:80:3f:27:06:87:06:28:8b:59:06:7c:1b:76:3c:76:85:
52:02:72:4c:e0:c2:8e:63:71:1b:0f:b0:fa:b3:5b:60:2c:6d:
3b:d8:16:8c:f3:27:fa:5a:21:27:16:c8:d4:38:ff:e1:dd:25:
b2:e9:3e:8e:97:06:17:f6:c5:11:64:4f:22:3f:9f:54:71:d0:
1e:4e:7e:69:7f:60:67:37:32:7a:6c:15:a2:e9:d6:b5:45:a3:
ab:b4:28:10:7c:16:cb:2a:22:50:2f:37:af:c9:da:92:f2:cd:
4e:65:84:aa:19:ed:5e:c8:fb:77:ef:67:6a:e6:bc:4e:d8:cd:
74:6f:d5:62:16:7a:b1:50:27:13:dc:a8:3f:dc:0f:8f:d9:0b:
8c:ed:bf:3c:50:88:13:f7:67:a1:30:2f:74:bb:c8:17:e6:06:
28:91:99:82:7f:ae:20:4e:cd:7e:ad:27:6c:c6:81:60:3e:bd:
ae:ac:9e:11:48:7a:21:11:5a:46:b7:75:91:10:06:59:b6:f7:
62:4f:2b:e9:50:db:e1:0a:ad:18:60:03:78:a2:5d:28:6d:65:
0b:3d:e1:ad:a5:40:85:7a:23:85:e3:bc:0a:51:86:4f:73:45:
df:19:e7:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oTlUJhcorw7PTNjT+n0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDEyMzNmMTEyYTRhMzQzNTU3NWEzYTIxOWRjY2MwMjEw
NjhkOTkwHhcNMjUxMDE5MDQwMTMzWhcNMjUxMDIwMDQwMTMzWjAzMTEwLwYDVQQD
EyhmMTQ4NTQ3MzQ1ZmQ5MDM5MmU4ZmE0ODU0YTVlYzFiYTQyZjIzMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV+CY99VPKS5QsdvoO1KzVG5RVzd
Jk40ZIQii0cnImUqNYF6sm819eZis2bNQLu/EutZfwzsb8eVPGZxfOqEwgDJPfNF
j7tGKQ8UeFqExMR90Z7Pf8JlKlCsHveTmv+p62A8qM/feA6w1awUfJbOJMj4Efrp
sPgtatJyYNZRqHn7U72T/9f4L8rUEc9XwbBDnCW93B7g0YQ/Zwi96IlXF/j/Q2qi
9j34x9xGQU2KlViFZSv9t7NNLJFirg62O54RmGVAhLa6xdXNpaLkSzzdq3d+5gVc
klAaW7IyV6oJWGXr7XR7d2Lk4YRW8cYDE2BlQkFmyQUd/Z2GYbxY1/qSkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFIVHNF/ZA5Lo+khUpewbpC8jFmMB8GA1UdIwQY
MBaAFGbRIz8RKko0NVdaOiGdzMAhBo2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgt
ZmU0Y2QyNzEyMzA2LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgtZmU0Y2QyNzEyMzA2
LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAjmEA1g
BS7S6xPxkKptGlTMEgyAPycGhwYoi1kGfBt2PHaFUgJyTODCjmNxGw+w+rNbYCxt
O9gWjPMn+lohJxbI1Dj/4d0lsuk+jpcGF/bFEWRPIj+fVHHQHk5+aX9gZzcyemwV
ounWtUWjq7QoEHwWyyoiUC83r8nakvLNTmWEqhntXsj7d+9naua8TtjNdG/VYhZ6
sVAnE9yoP9wPj9kLjO2/PFCIE/dnoTAvdLvIF+YGKJGZgn+uIE7Nfq0nbMaBYD69
rqyeEUh6IRFaRrd1kRAGWbb3Yk8r6VDb4QqtGGADeKJdKG1lCz3hraVAhXojheO8
ClGGT3NF3xnncg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:17 2025 by rpki-client