Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: k6Z8qnoFnqfnV46v55XY6XNvw7HJFiV4FXMASM7p8xk=
Subject key identifier: 47:98:49:E3:E3:64:95:7F:C2:6D:88:32:4A:F7:10:71:DD:7C:56:92
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 019A22897A0F79E6F56BE6D550FB57928D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 12D9
Signing time: Sun 26 Oct 2025 22:00:26 +0000
Manifest this update: Sun 26 Oct 2025 22:00:26 +0000
Manifest next update: Mon 27 Oct 2025 22:00:26 +0000
Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=)
2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: /3x5KmRGcynb/yMWhjp3vc2Y9TIt8AfHO5Z9Kgha2j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:7a:0f:79:e6:f5:6b:e6:d5:50:fb:57:92:8d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Oct 26 22:00:26 2025 GMT
Not After : Oct 27 22:00:26 2025 GMT
Subject: CN=479849e3e364957fc26d88324af71071dd7c5692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:f3:ba:2f:b6:a1:95:fc:6a:6a:84:1d:8c:
64:f1:4c:45:43:b0:12:e2:97:f1:78:71:a9:bb:20:
e8:74:d4:29:da:a3:e5:a1:74:cb:12:8c:7c:75:84:
eb:c1:72:d7:b9:3c:9b:7d:6f:f0:96:ba:a5:54:41:
cc:8c:9f:91:18:aa:5f:01:c8:3e:96:e2:d7:5f:57:
5d:64:22:5d:eb:a6:21:f9:4f:3e:b9:e1:fa:b1:7a:
ed:05:d3:41:6b:8d:c1:ae:04:8b:0e:54:90:d7:43:
a7:a1:32:56:3e:7e:4b:42:85:f0:73:b4:12:2f:b0:
83:c5:55:d2:f1:88:7a:63:e1:54:ea:15:b9:bc:68:
27:0f:bb:be:b8:43:1e:48:96:9a:ba:2c:0c:f3:cf:
41:f6:68:06:ea:cc:0f:30:4e:b5:28:81:68:18:aa:
2a:a9:08:ca:6f:a2:81:09:9b:c8:7b:2e:40:97:12:
6f:51:16:3b:dd:53:84:db:77:2c:56:83:d9:7d:7e:
5b:93:21:e8:7d:41:74:4f:a8:18:2f:ed:24:fd:e7:
39:52:f1:bf:3b:27:d4:77:07:cf:af:6a:95:8a:f6:
04:43:9d:d9:7c:a4:46:53:a7:69:07:d1:16:86:1e:
c2:86:21:1e:e5:f3:33:31:0b:f2:66:6a:e3:0e:80:
b5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:49:E3:E3:64:95:7F:C2:6D:88:32:4A:F7:10:71:DD:7C:56:92
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:f8:1e:96:c2:5f:4b:75:bf:13:30:5a:3d:76:24:c1:b0:
a9:44:67:3f:50:79:35:a1:a0:13:89:7e:03:b1:18:af:e2:10:
ef:a8:5a:9c:0a:b5:d0:3a:19:66:69:05:27:d8:e7:1a:b0:1d:
c5:20:64:67:9e:76:70:2c:28:be:bc:7f:34:b3:6c:a5:e2:72:
5d:55:ee:5c:ac:c2:49:29:b3:9c:a0:6b:40:af:10:86:af:2c:
a9:e1:a9:2d:8a:e6:94:7d:39:35:69:6e:ab:8e:e1:65:35:8e:
79:4f:92:4b:80:b3:33:47:41:0f:28:62:8f:3b:3b:71:11:e2:
30:fd:b1:6a:4d:75:57:e2:a8:f4:30:77:42:49:48:32:6b:b4:
95:a7:08:a6:db:c0:55:6c:ab:89:4c:79:58:a3:03:5b:c3:1f:
2f:5e:7e:07:22:80:2c:6b:f5:b7:e3:c0:88:84:85:04:d3:bf:
38:96:e4:ba:54:85:30:51:ff:57:45:e2:b6:c7:a2:4a:1a:82:
02:10:07:ea:be:de:37:52:21:d2:50:3e:69:ab:5e:11:50:cf:
d3:52:51:8a:96:9e:ca:a8:5f:64:06:28:dc:c7:6e:39:40:d5:
47:86:5e:bc:ff:d7:fd:ce:4b:25:4f:26:ba:1a:9b:54:30:95:
52:09:ad:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiXoPeeb1a+bVUPtXko1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5
MTk3NWUwHhcNMjUxMDI2MjIwMDI2WhcNMjUxMDI3MjIwMDI2WjAzMTEwLwYDVQQD
Eyg0Nzk4NDllM2UzNjQ5NTdmYzI2ZDg4MzI0YWY3MTA3MWRkN2M1NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqDzui+2oZX8amqEHYxk8UxFQ7AS
4pfxeHGpuyDodNQp2qPloXTLEox8dYTrwXLXuTybfW/wlrqlVEHMjJ+RGKpfAcg+
luLXX1ddZCJd66Yh+U8+ueH6sXrtBdNBa43BrgSLDlSQ10OnoTJWPn5LQoXwc7QS
L7CDxVXS8Yh6Y+FU6hW5vGgnD7u+uEMeSJaauiwM889B9mgG6swPME61KIFoGKoq
qQjKb6KBCZvIey5AlxJvURY73VOE23csVoPZfX5bkyHofUF0T6gYL+0k/ec5UvG/
OyfUdwfPr2qVivYEQ53ZfKRGU6dpB9EWhh7ChiEe5fMzMQvyZmrjDoC1uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEeYSePjZJV/wm2IMkr3EHHdfFaSMB8GA1UdIwQY
MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt
YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky
LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJP74HpbC
X0t1vxMwWj12JMGwqURnP1B5NaGgE4l+A7EYr+IQ76hanAq10DoZZmkFJ9jnGrAd
xSBkZ552cCwovrx/NLNspeJyXVXuXKzCSSmznKBrQK8Qhq8sqeGpLYrmlH05NWlu
q47hZTWOeU+SS4CzM0dBDyhijzs7cRHiMP2xak11V+Ko9DB3QklIMmu0lacIptvA
VWyriUx5WKMDW8MfL15+ByKALGv1t+PAiISFBNO/OJbkulSFMFH/V0XitseiShqC
AhAH6r7eN1Ih0lA+aateEVDP01JRipaeyqhfZAYo3MduOUDVR4ZevP/X/c5LJU8m
uhqbVDCVUgmtsA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:03:59 2025 by rpki-client