Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json)
Hash identifier: 9810SBnFSwRpRX2Srxn6o15n143/ZIyrJBdFU7BkVBI=
Subject key identifier: 95:02:B5:A5:03:95:59:74:14:B5:AB:DF:56:E4:1F:44:05:59:F8:3A
Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Certificate serial: 019A71EED86F0E74E45D84A026A63272BE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (hash: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=)
2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: pNqtwTiJkY28a6vDE/LH1qKznK//oLuSXnME7knGa3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d8:6f:0e:74:e4:5d:84:a0:26:a6:32:72:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=9502b5a50395597414b5abdf56e41f440559f83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:88:91:79:b1:1f:5a:c4:f9:f2:30:47:b0:
e3:4c:66:1b:4e:54:f8:06:0f:04:65:37:42:58:31:
cb:d2:28:63:a2:d7:62:e6:2b:53:bb:a3:6c:42:55:
ed:0e:9c:29:60:58:0e:72:dc:56:f8:bc:0f:c9:31:
4a:d3:ea:42:db:3b:ec:4b:53:7a:df:a3:ce:07:1d:
6a:45:7c:b9:6e:5d:f9:66:39:05:f6:70:30:1c:0b:
44:17:89:83:90:8b:09:dc:a8:b4:1a:9b:7a:d2:af:
7d:84:bf:86:a9:95:c0:43:6b:f4:d0:ef:6e:70:29:
86:4a:d0:af:02:2f:9b:1a:34:b9:f0:d6:36:fd:47:
dd:70:fc:6e:6c:90:49:c7:33:5c:b1:3c:dd:df:94:
42:69:ea:45:1e:29:29:ab:15:18:1e:ac:13:f9:8b:
7c:87:6e:f7:19:f1:9e:cf:e3:4e:4c:e0:64:f8:00:
4b:88:21:e5:80:89:b7:13:6e:d2:87:e0:a2:e0:a1:
20:47:52:10:73:8b:7d:80:e6:dd:f1:13:ce:65:18:
3f:e4:2d:d9:1f:92:c8:74:77:47:4f:c5:fc:f7:00:
78:d8:ea:3d:57:28:09:86:b0:54:39:0c:fd:ed:5c:
03:b6:e8:27:d5:87:d3:4d:fb:aa:dd:20:8d:b9:80:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:02:B5:A5:03:95:59:74:14:B5:AB:DF:56:E4:1F:44:05:59:F8:3A
X509v3 Authority Key Identifier:
keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:ed:0f:04:ac:ea:95:b5:0e:63:bc:c9:8d:df:d8:0d:30:
53:d6:00:7b:60:8e:81:f5:e6:28:24:32:ca:ac:23:f8:e9:51:
cd:df:a3:95:2e:e2:13:13:ba:ee:02:0f:70:0c:a1:8d:02:85:
c8:e3:ca:0d:dd:47:87:bf:61:a1:f8:c8:e7:02:a1:be:92:a7:
e5:e3:d6:8c:1e:85:91:91:c0:1a:8c:25:9c:61:4f:5d:16:4f:
83:93:4f:dc:4d:d0:45:9e:a1:b3:50:5e:a9:8c:84:9f:3e:6d:
56:aa:d3:83:40:bf:a9:80:a9:26:0e:4f:20:93:0a:9b:0f:5b:
9d:41:68:42:48:21:40:f1:9d:f6:88:71:3f:e4:31:33:a2:38:
98:6a:26:24:71:1a:ac:b1:4f:d6:71:32:16:cc:c8:0b:e7:0a:
be:98:f3:f3:dd:48:b7:1d:1b:cc:40:6a:4f:ae:2d:42:84:a8:
de:6b:da:9b:e5:e3:f5:6d:89:8c:78:95:c6:5e:ea:3d:ff:66:
2a:0a:2b:62:96:96:71:d1:1c:09:84:3f:66:2c:04:83:2d:4f:
b4:0e:89:aa:e2:0c:a0:2b:c5:4e:4e:05:d8:81:c7:81:73:fe:
05:95:2f:f5:cd:d3:5a:9b:44:32:32:80:dc:2d:6c:a9:c8:7b:
1e:eb:32:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7thvDnTkXYSgJqYycr5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzdmMTNhYmQ5ODI3N2M2OTFmYzc2Y2U5MzM0MTBkNWQz
ZjM3YzgwHhcNMjUxMTExMDgwMTA5WhcNMjUxMTEyMDgwMTA5WjAzMTEwLwYDVQQD
Eyg5NTAyYjVhNTAzOTU1OTc0MTRiNWFiZGY1NmU0MWY0NDA1NTlmODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeGIkXmxH1rE+fIwR7DjTGYbTlT4
Bg8EZTdCWDHL0ihjotdi5itTu6NsQlXtDpwpYFgOctxW+LwPyTFK0+pC2zvsS1N6
36POBx1qRXy5bl35ZjkF9nAwHAtEF4mDkIsJ3Ki0Gpt60q99hL+GqZXAQ2v00O9u
cCmGStCvAi+bGjS58NY2/UfdcPxubJBJxzNcsTzd35RCaepFHikpqxUYHqwT+Yt8
h273GfGez+NOTOBk+ABLiCHlgIm3E27Sh+Ci4KEgR1IQc4t9gObd8RPOZRg/5C3Z
H5LIdHdHT8X89wB42Oo9VygJhrBUOQz97VwDtugn1YfTTfuq3SCNuYCZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUCtaUDlVl0FLWr31bkH0QFWfg6MB8GA1UdIwQY
MBaAFJs38Tq9mCd8aR/HbOkzQQ1dPzfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMjA2MzMtZjc5Ny00YjY1LWI5ODMt
MDZhNDEyM2I0NjFlLzEvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMjA2MzMtZjc5Ny00YjY1LWI5ODMtMDZhNDEyM2I0NjFl
LzEvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2/tDwSs
6pW1DmO8yY3f2A0wU9YAe2COgfXmKCQyyqwj+OlRzd+jlS7iExO67gIPcAyhjQKF
yOPKDd1Hh79hofjI5wKhvpKn5ePWjB6FkZHAGowlnGFPXRZPg5NP3E3QRZ6hs1Be
qYyEnz5tVqrTg0C/qYCpJg5PIJMKmw9bnUFoQkghQPGd9ohxP+QxM6I4mGomJHEa
rLFP1nEyFszIC+cKvpjz891Itx0bzEBqT64tQoSo3mvam+Xj9W2JjHiVxl7qPf9m
KgorYpaWcdEcCYQ/ZiwEgy1PtA6JquIMoCvFTk4F2IHHgXP+BZUv9c3TWptEMjKA
3C1sqch7Husykg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:48 2025 by rpki-client