Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: GLcj4WUTNwrim7T9ZDXFefHp66eMNRjTz6CxOS+KXTc=
Subject key identifier: 54:10:76:A6:48:F0:1C:03:2D:E6:5E:FA:CA:3F:66:1C:28:BF:9C:98
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019A32D8BA09E1B8544C006DE83599191BAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0D9A
Signing time: Thu 30 Oct 2025 02:00:55 +0000
Manifest this update: Thu 30 Oct 2025 02:00:55 +0000
Manifest next update: Fri 31 Oct 2025 02:00:55 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: vhAZ51nqXFenS9V0KMW2/BqsnlrEc0OGepJiMc6TdDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:d8:ba:09:e1:b8:54:4c:00:6d:e8:35:99:19:1b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Oct 30 02:00:55 2025 GMT
Not After : Oct 31 02:00:55 2025 GMT
Subject: CN=541076a648f01c032de65efaca3f661c28bf9c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:ce:51:87:40:4b:8a:ed:e7:19:b1:8c:18:
90:ae:47:91:9e:06:52:3c:19:8b:bf:e7:a7:d1:f1:
2a:3a:3e:b2:b7:87:d5:bc:c6:76:dc:87:1a:ce:4a:
08:0d:8b:ad:1e:81:99:4c:76:2a:da:c0:41:93:74:
ed:c6:cb:5d:32:cd:d2:3a:f0:3d:ab:9a:2e:4c:02:
6b:44:09:32:26:1f:b8:ab:f4:b3:09:a8:4e:c2:20:
3c:47:0c:5b:f4:97:63:4d:2c:22:33:5a:3a:33:67:
c2:9c:72:68:26:e9:48:10:11:1f:90:86:53:ee:66:
65:c9:87:fc:90:c3:6c:f2:eb:ed:ad:61:45:2d:93:
f8:16:0c:89:a4:22:e9:1a:45:2c:e8:63:b7:5b:69:
73:0c:e0:77:56:ff:2c:14:fd:9a:eb:57:c9:53:23:
0c:67:88:f9:39:de:b9:39:cd:97:53:a4:a4:a8:c9:
6f:18:81:2f:ba:9f:60:ef:77:88:bf:6c:19:c7:9a:
1b:fb:a2:cc:71:11:1b:88:d7:d3:ed:4f:01:26:63:
f7:b7:2e:e3:0b:5e:67:dd:af:22:fb:5e:5e:67:4f:
70:4d:9f:dd:00:0b:90:78:d5:95:3e:a4:ca:4f:37:
6c:9f:e0:7c:50:c1:12:3e:2d:18:bf:a2:d4:a5:b4:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:76:A6:48:F0:1C:03:2D:E6:5E:FA:CA:3F:66:1C:28:BF:9C:98
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5a:a1:2d:b6:0e:f2:26:08:71:b0:1a:72:9c:f2:e2:9b:5b:
e3:fc:a6:50:8f:01:dc:0d:f4:7b:e6:ef:96:fb:75:1f:cd:7e:
e8:ca:d9:6e:68:9d:d6:2b:3f:18:1c:45:6b:5e:a9:8e:bb:6d:
88:a0:62:f4:28:67:d5:a1:a9:b2:3a:19:83:8c:d6:eb:64:27:
1d:7a:09:91:1f:7c:8f:68:ef:1e:09:e8:30:71:0f:5b:4e:b2:
d4:10:a7:ee:d3:a4:c2:e2:61:f3:b9:1f:2b:0b:a7:bc:28:ff:
4e:03:e5:d9:ef:5c:01:4b:9b:b7:5d:2d:fb:29:2e:2c:71:13:
e2:0b:45:90:44:aa:e0:2a:b2:cd:ca:c2:77:f6:fa:34:53:5b:
1d:22:34:de:e4:10:a4:cb:21:94:01:35:e3:d7:99:7c:cc:36:
ad:18:e2:91:bb:07:8b:82:07:95:9a:e0:26:4b:1c:c2:db:02:
76:92:9a:03:65:be:87:ef:a4:af:c5:ea:31:ac:9d:f4:36:39:
92:df:a2:a7:1c:ec:61:30:55:52:d0:09:82:f4:c2:58:ac:c8:
ec:0b:b0:8c:9c:14:c8:2f:fd:dc:be:85:dc:2c:62:76:f1:18:
08:02:c3:14:d2:c3:21:39:be:25:49:59:a6:3f:93:d3:c0:1b:
ed:6d:ad:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoy2LoJ4bhUTABt6DWZGRuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGIzZDkwNGIzNDQ0MDU0NmI2MjQxZDc4OTRkOTMzMDBi
Y2JkMjgwHhcNMjUxMDMwMDIwMDU1WhcNMjUxMDMxMDIwMDU1WjAzMTEwLwYDVQQD
Eyg1NDEwNzZhNjQ4ZjAxYzAzMmRlNjVlZmFjYTNmNjYxYzI4YmY5Yzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLnOUYdAS4rt5xmxjBiQrkeRngZS
PBmLv+en0fEqOj6yt4fVvMZ23IcazkoIDYutHoGZTHYq2sBBk3TtxstdMs3SOvA9
q5ouTAJrRAkyJh+4q/SzCahOwiA8Rwxb9JdjTSwiM1o6M2fCnHJoJulIEBEfkIZT
7mZlyYf8kMNs8uvtrWFFLZP4FgyJpCLpGkUs6GO3W2lzDOB3Vv8sFP2a61fJUyMM
Z4j5Od65Oc2XU6SkqMlvGIEvup9g73eIv2wZx5ob+6LMcREbiNfT7U8BJmP3ty7j
C15n3a8i+15eZ09wTZ/dAAuQeNWVPqTKTzdsn+B8UMESPi0Yv6LUpbQ9gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQQdqZI8BwDLeZe+so/Zhwov5yYMB8GA1UdIwQY
MBaAFM/bPZBLNEQFRrYkHXiU2TMAvL0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUt
NmU3NTYxNTM1YmJkLzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUtNmU3NTYxNTM1YmJk
LzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFqhLbYO
8iYIcbAacpzy4ptb4/ymUI8B3A30e+bvlvt1H81+6MrZbmid1is/GBxFa16pjrtt
iKBi9Chn1aGpsjoZg4zW62QnHXoJkR98j2jvHgnoMHEPW06y1BCn7tOkwuJh87kf
KwunvCj/TgPl2e9cAUubt10t+ykuLHET4gtFkESq4CqyzcrCd/b6NFNbHSI03uQQ
pMshlAE149eZfMw2rRjikbsHi4IHlZrgJkscwtsCdpKaA2W+h++kr8XqMayd9DY5
kt+ipxzsYTBVUtAJgvTCWKzI7AuwjJwUyC/93L6F3CxidvEYCALDFNLDITm+JUlZ
pj+T08Ab7W2twQ==
-----END CERTIFICATE-----
Generated at Thu Oct 30 06:13:38 2025 by rpki-client