Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: dItWZrjW5QiWu/ztw1LX/ojt6aQxxaZ+KWmzVDOIhTw=
Subject key identifier: BC:66:95:35:49:C3:8D:41:8C:A2:E4:F8:FA:EC:BD:34:5A:BB:80:2E
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 0199C4570119B218D0C9D72C11EFE9666968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0FAC
Signing time: Wed 08 Oct 2025 15:01:00 +0000
Manifest this update: Wed 08 Oct 2025 15:01:00 +0000
Manifest next update: Thu 09 Oct 2025 15:01:00 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: CdBNHLkmYG6WqLnCKqXmI0mJJ+xVTAWPvUAz9NKyurs=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:01:19:b2:18:d0:c9:d7:2c:11:ef:e9:66:69:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: Oct 8 15:01:00 2025 GMT
Not After : Oct 9 15:01:00 2025 GMT
Subject: CN=bc66953549c38d418ca2e4f8faecbd345abb802e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d8:ea:25:b1:85:f3:a1:e4:c7:4b:4e:dd:d2:
79:10:85:86:d9:85:5d:e4:6d:86:64:2e:8c:c2:56:
46:3b:2d:95:99:9b:e8:37:ff:69:7e:cd:61:d9:57:
4f:3a:ef:c0:ad:e3:27:8a:2f:fe:e2:86:1c:f0:3d:
81:e6:6b:f0:cb:79:a5:7d:73:27:57:67:0d:73:26:
a3:82:87:88:a4:cd:02:32:06:d8:53:b0:ec:a6:36:
77:05:67:0d:71:69:35:de:d7:af:59:34:b0:16:a0:
ae:26:1e:38:c5:3b:21:69:43:c1:d0:d6:94:6a:37:
fa:34:41:b4:a7:1e:1b:c9:e7:c7:4b:bc:cd:cc:29:
47:47:a9:12:b8:9a:3e:0f:5f:62:b9:e2:54:2e:5f:
4e:12:5a:2f:30:bc:b5:a0:b5:8d:f5:31:a1:b1:16:
26:83:a5:92:ec:53:6a:c2:58:02:29:71:8a:fd:f7:
bc:ee:d0:3b:cb:29:81:30:36:c8:df:bf:91:72:39:
ee:f0:68:31:63:95:95:ff:7f:a7:94:c2:2c:3d:b1:
14:12:a3:d3:45:d8:cb:8f:53:dd:56:d7:7c:10:ba:
36:33:f1:dc:67:92:ec:b3:43:5e:42:2a:97:13:e8:
c2:f4:76:8d:a3:6b:17:0c:b7:7f:b2:1a:1e:c0:1b:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:66:95:35:49:C3:8D:41:8C:A2:E4:F8:FA:EC:BD:34:5A:BB:80:2E
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:34:7c:e1:fd:1b:38:41:91:40:ee:7b:64:07:d0:27:3f:d0:
03:18:69:b5:e6:a7:7f:04:34:76:8c:36:4b:19:57:d5:19:15:
3c:02:97:60:d1:ec:88:e0:ae:e7:6f:6d:b5:db:e3:e8:6a:12:
cc:9b:02:23:27:36:80:83:87:57:1f:65:cd:1c:d8:e3:99:a9:
12:21:c7:60:ca:c9:ad:19:3e:75:80:e9:c1:e7:32:c8:7a:f2:
26:e0:a3:19:39:9f:6a:10:ba:b4:c6:45:92:bd:43:67:16:5b:
d4:48:47:7a:eb:78:9e:e2:69:95:b6:ad:99:f8:2c:4f:0d:68:
dc:d0:0c:98:04:cd:83:49:4d:e6:23:34:74:48:bd:38:ab:a4:
fc:c5:ba:c1:7e:26:1f:5e:5a:95:26:30:0f:7e:59:40:85:e2:
75:10:b0:8b:b3:6d:70:6f:84:45:3f:84:32:b5:48:44:59:47:
74:ea:d6:d1:06:39:cf:81:ab:dd:ab:50:5d:15:59:e5:c6:5b:
61:6e:6b:68:c7:8a:64:7d:ba:3c:1e:e6:a5:dd:26:c5:c7:4e:
72:63:f6:d7:9d:5a:fb:52:32:92:e6:ab:ac:85:30:ac:9c:14:
da:8d:7a:0b:03:db:7c:a1:3a:be:e6:2f:22:27:c4:66:46:d8:
f8:e2:d8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEVwEZshjQydcsEe/pZmloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMzY3ZGJhM2EyMjAwNjBlNjdkNGVjNjgwYjBmOTlmMjQ3
YTg3MmMwHhcNMjUxMDA4MTUwMTAwWhcNMjUxMDA5MTUwMTAwWjAzMTEwLwYDVQQD
EyhiYzY2OTUzNTQ5YzM4ZDQxOGNhMmU0ZjhmYWVjYmQzNDVhYmI4MDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69jqJbGF86Hkx0tO3dJ5EIWG2YVd
5G2GZC6MwlZGOy2VmZvoN/9pfs1h2VdPOu/AreMnii/+4oYc8D2B5mvwy3mlfXMn
V2cNcyajgoeIpM0CMgbYU7DspjZ3BWcNcWk13tevWTSwFqCuJh44xTshaUPB0NaU
ajf6NEG0px4byefHS7zNzClHR6kSuJo+D19iueJULl9OElovMLy1oLWN9TGhsRYm
g6WS7FNqwlgCKXGK/fe87tA7yymBMDbI37+Rcjnu8GgxY5WV/3+nlMIsPbEUEqPT
RdjLj1PdVtd8ELo2M/HcZ5Lss0NeQiqXE+jC9HaNo2sXDLd/shoewBsyTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxmlTVJw41BjKLk+PrsvTRau4AuMB8GA1UdIwQY
MBaAFNM2fbo6IgBg5n1OxoCw+Z8keocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2It
NWNhNWJmNjdlNjlkLzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hYzQxMGEtNDlhMC00ZTM4LWFlM2ItNWNhNWJmNjdlNjlk
LzEvMHpaOXVqb2lBR0RtZlU3R2dMRDVueVI2aHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDR84f0b
OEGRQO57ZAfQJz/QAxhpteanfwQ0dow2SxlX1RkVPAKXYNHsiOCu529ttdvj6GoS
zJsCIyc2gIOHVx9lzRzY45mpEiHHYMrJrRk+dYDpwecyyHryJuCjGTmfahC6tMZF
kr1DZxZb1EhHeut4nuJplbatmfgsTw1o3NAMmATNg0lN5iM0dEi9OKuk/MW6wX4m
H15alSYwD35ZQIXidRCwi7NtcG+ERT+EMrVIRFlHdOrW0QY5z4Gr3atQXRVZ5cZb
YW5raMeKZH26PB7mpd0mxcdOcmP2151a+1IykuarrIUwrJwU2o16CwPbfKE6vuYv
IifEZkbY+OLYsQ==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:55 2025 by rpki-client