Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File: S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier: OoGJR0EoOW/RUs7ABdZJS1aU/GNefBi6Hl6aFfKsGjk=
Subject key identifier: 7F:F2:9C:3D:B4:DC:9C:C8:99:31:D6:B7:50:70:DF:F6:D1:C9:E7:5F
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer: /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial: 01992E90E64691A33AB117D1AA161422D667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number: 0C7F
Signing time: Tue 09 Sep 2025 13:01:11 +0000
Manifest this update: Tue 09 Sep 2025 13:01:11 +0000
Manifest next update: Wed 10 Sep 2025 13:01:11 +0000
Files and hashes: 1: 7fSgZ-LQDYvguJzdZ14V0z0FUCE.roa (hash: bUjKLDflZP/Ln3EKUyE+zKMongCT5xOF2uDWHet5S9I=)
2: DiRUXj-wMeKTJD3aUfG_fU2alsE.roa (hash: C8nsHrwSkn8Gd1JmzSYSfUzGZSwYITwrUGRtmf3pI4s=)
3: Ru-jgtHHtk22zU2Iz9obbyyNqtA.roa (hash: JK2Fg/eBJyup1fiSh8xdKaGSDAo/evkcOv83dZLvh1k=)
4: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: oeGMzeM/0GTOyxmsm4xJugQVicZm+DpYaM9RBbcQCN8=)
5: WzBH8kAZVhitfGs3LpWEVIaX2DU.roa (hash: yyE311L3mhjCKLl6ozIj/e45U2t4pgo+mFiZj5vWZ9E=)
6: vTYkTnZMEaqfhCdiY5ia6c9viZw.roa (hash: m5F7OL9Eo2LVurzs6A9iXzsVS70f86h9K1zL5V462Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:e6:46:91:a3:3a:b1:17:d1:aa:16:14:22:d6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Validity
Not Before: Sep 9 13:01:11 2025 GMT
Not After : Sep 10 13:01:11 2025 GMT
Subject: CN=7ff29c3db4dc9cc89931d6b75070dff6d1c9e75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:2f:8a:70:fe:a2:60:6f:82:fe:2d:b9:de:
bd:22:5b:ea:d7:a9:ac:a4:41:25:3b:b1:76:6c:f7:
0d:c9:41:85:c6:50:4c:52:b3:22:95:56:cd:63:08:
bc:78:c3:44:63:ff:e8:c8:88:f8:5e:e9:00:3c:20:
56:52:51:a9:1a:76:66:7b:4f:92:34:b5:0a:22:84:
f2:07:bf:23:6b:29:11:7a:ad:56:cb:c7:24:83:25:
db:71:6b:ad:75:0d:47:b4:68:45:97:b6:2f:30:b1:
5e:52:70:4c:24:ed:f2:dc:66:75:35:ae:0f:fd:96:
c7:2a:50:05:cc:9c:31:b4:91:65:e6:0a:d2:51:a6:
45:b0:f7:27:7d:88:ce:56:d4:55:ac:9c:91:07:7b:
9a:e8:f2:f8:b0:45:b4:92:12:a8:e4:d5:2e:a8:24:
69:0b:8b:6f:55:ad:08:b4:c8:e0:4d:98:f0:71:1f:
60:2a:5b:31:85:92:2b:62:bb:89:46:a1:9f:9b:2e:
7c:cf:5d:dd:54:de:11:db:d5:f6:c2:bb:92:c3:af:
85:47:ed:e4:08:bc:9b:c7:2c:60:83:db:b9:31:b2:
ae:dc:ab:35:80:06:7b:f1:f3:33:d3:13:3f:36:a7:
23:26:5b:69:78:8f:4f:e3:3a:e8:ba:de:18:e7:58:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:9C:3D:B4:DC:9C:C8:99:31:D6:B7:50:70:DF:F6:D1:C9:E7:5F
X509v3 Authority Key Identifier:
keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:19:b4:17:b5:58:51:10:d3:c3:aa:0a:69:14:2e:47:5a:3c:
56:a1:9b:49:43:6a:8d:0b:70:60:c3:4c:6e:6f:f1:00:be:e7:
16:5d:eb:b2:7f:93:df:e5:2a:a0:df:7c:ae:fc:87:0b:6b:6b:
64:62:22:62:9a:f2:7f:03:a3:88:1e:c3:b4:b5:d4:44:96:f5:
78:9a:08:a4:7b:c8:d9:de:b4:53:e6:3a:bd:e7:53:f9:c1:31:
26:43:93:83:1a:cb:27:dc:68:39:35:fc:a7:9c:ba:56:08:29:
d1:d4:d8:44:67:ac:74:25:f8:7d:ca:9f:54:7e:08:ee:84:52:
54:be:5e:90:03:2d:ce:2b:c6:2f:78:f4:f4:82:7a:65:cf:d1:
af:77:a1:f7:6b:3c:1a:cd:c9:02:8b:24:fa:79:a6:b4:3b:fb:
78:54:f7:dd:df:79:3b:6f:1c:42:2e:66:58:7e:46:5d:b3:1b:
93:39:ef:4b:24:3f:e4:5d:f1:ed:13:89:fc:43:00:c2:b3:6f:
c3:08:d9:a8:64:b4:3e:da:a4:f8:60:dc:d7:c2:5f:47:ce:2b:
b0:16:6a:75:ce:7b:ae:03:19:b9:ee:cf:f5:3b:74:59:1e:d9:
55:cf:5e:5b:7f:22:39:a0:5f:3f:5b:1b:48:60:2b:57:15:d5:
10:ad:0e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkukOZGkaM6sRfRqhYUItZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZWNjYzlkMWE3NmU5MTQ2OWNiNjNiMTJiZjcyNWQ3ZGVi
YWZiMWIwHhcNMjUwOTA5MTMwMTExWhcNMjUwOTEwMTMwMTExWjAzMTEwLwYDVQQD
Eyg3ZmYyOWMzZGI0ZGM5Y2M4OTkzMWQ2Yjc1MDcwZGZmNmQxYzllNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgegvinD+omBvgv4tud69Ilvq16ms
pEElO7F2bPcNyUGFxlBMUrMilVbNYwi8eMNEY//oyIj4XukAPCBWUlGpGnZme0+S
NLUKIoTyB78jaykReq1Wy8ckgyXbcWutdQ1HtGhFl7YvMLFeUnBMJO3y3GZ1Na4P
/ZbHKlAFzJwxtJFl5grSUaZFsPcnfYjOVtRVrJyRB3ua6PL4sEW0khKo5NUuqCRp
C4tvVa0ItMjgTZjwcR9gKlsxhZIrYruJRqGfmy58z13dVN4R29X2wruSw6+FR+3k
CLybxyxgg9u5MbKu3Ks1gAZ78fMz0xM/NqcjJltpeI9P4zrout4Y51iK9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/ynD203JzImTHWt1Bw3/bRyedfMB8GA1UdIwQY
MBaAFEvszJ0adukUactjsSv3JdfeuvsbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTkt
NGY0Yjk5NGUwZWIyLzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS83NjhmMTQtYTcyMS00NmYwLTkxOTktNGY0Yjk5NGUwZWIy
LzEvUy16TW5ScDI2UlJweTJPeEtfY2wxOTY2LXhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxm0F7VY
URDTw6oKaRQuR1o8VqGbSUNqjQtwYMNMbm/xAL7nFl3rsn+T3+UqoN98rvyHC2tr
ZGIiYpryfwOjiB7DtLXURJb1eJoIpHvI2d60U+Y6vedT+cExJkOTgxrLJ9xoOTX8
p5y6Vggp0dTYRGesdCX4fcqfVH4I7oRSVL5ekAMtzivGL3j09IJ6Zc/Rr3eh92s8
Gs3JAosk+nmmtDv7eFT33d95O28cQi5mWH5GXbMbkznvSyQ/5F3x7ROJ/EMAwrNv
wwjZqGS0Ptqk+GDc18JfR84rsBZqdc57rgMZue7P9Tt0WR7ZVc9eW38iOaBfP1sb
SGArVxXVEK0ONg==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:42:25 2025 by rpki-client