Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: UQJKtPh3OjUFgmS2GGqE+alCZJrfzLmiom9Qnbr4LkY=
Subject key identifier: 5E:32:A9:31:88:90:52:A4:EC:40:BE:33:C4:35:30:FD:25:C8:90:53
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 0199221E9F420695976A17E353C14D6268E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 10E1
Signing time: Sun 07 Sep 2025 03:00:56 +0000
Manifest this update: Sun 07 Sep 2025 03:00:56 +0000
Manifest next update: Mon 08 Sep 2025 03:00:56 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: GZjoPMQgD3rATAYJ8vpAzG1ML3Z5eXJ+bWRZeutq4VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:9f:42:06:95:97:6a:17:e3:53:c1:4d:62:68:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Sep 7 03:00:56 2025 GMT
Not After : Sep 8 03:00:56 2025 GMT
Subject: CN=5e32a931889052a4ec40be33c43530fd25c89053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:55:2e:88:05:71:59:fe:4d:da:65:5b:51:
79:5e:87:98:d5:f9:f7:43:46:c7:11:6f:f0:a9:05:
56:8a:31:ae:5d:dc:f4:47:0b:db:f2:27:27:d9:91:
42:6f:bf:71:ca:74:bd:18:62:af:06:5f:c5:10:2f:
60:ca:88:75:0f:be:08:a1:b5:7c:5c:eb:69:e3:b6:
e4:ae:f3:f8:a0:e9:ba:31:d1:e9:4a:32:81:84:6c:
6d:61:48:9d:9b:28:46:70:e6:90:9d:b1:a8:60:e4:
fd:4c:a1:61:8d:13:f2:70:4c:17:d3:15:c6:79:21:
e5:e0:d5:02:b4:19:a4:09:d9:ca:41:45:fc:25:4c:
8a:f1:f0:21:eb:a6:29:ac:31:11:a3:4b:b0:68:e9:
17:cc:b4:69:2e:2d:07:b3:df:d4:0a:d3:81:ae:b0:
60:80:07:94:d2:a9:d5:db:29:2e:8c:c8:24:75:f3:
3a:9d:54:41:74:6c:c2:67:76:bb:e9:f1:22:2d:af:
af:b6:84:e8:41:7f:ed:23:a1:6f:23:da:67:0b:42:
46:c0:3e:c3:82:1c:ec:51:44:31:31:0e:a5:92:10:
97:9c:a9:c3:66:b1:e3:05:87:c3:11:c1:a6:a9:dd:
cf:13:62:15:d7:8f:1a:34:25:a3:54:c4:79:c9:53:
b2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:32:A9:31:88:90:52:A4:EC:40:BE:33:C4:35:30:FD:25:C8:90:53
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b6:2a:54:5d:9e:63:a0:93:0e:15:43:aa:22:c8:4b:ec:37:
55:61:bf:33:28:1e:6c:55:80:6b:f7:5a:51:3d:25:eb:ad:27:
6c:11:ed:65:53:8c:6f:2f:da:c9:5e:a5:89:61:52:3a:2e:cb:
18:6d:10:47:48:99:b9:13:79:59:a6:98:4b:97:8d:0b:f7:44:
0c:82:97:84:73:23:02:38:5a:d9:35:9f:69:be:63:94:ac:24:
a0:4b:d8:30:9c:3f:09:26:57:e2:a5:17:0f:f8:d7:2c:ee:a0:
8d:69:eb:e7:4d:f1:b0:96:6b:26:f4:7c:e6:e9:d1:87:c3:5a:
42:9b:39:70:bb:69:9f:05:1c:84:ed:a5:61:04:e5:43:b3:b5:
a3:70:6e:b7:09:df:c1:a9:78:fa:e3:10:50:ae:ba:19:ab:12:
03:9b:3a:fc:d9:4d:e7:9c:1a:82:2d:29:ff:80:46:e0:21:6e:
d0:ba:ad:82:93:5c:5f:7f:78:04:9c:04:da:48:c0:a8:d0:09:
bd:9f:13:b9:ac:01:2c:dd:b9:97:72:1f:91:21:ec:0b:88:a5:
85:77:e6:bc:f0:db:9f:ac:4c:c1:df:11:17:5c:2c:5d:8e:a8:
1e:f7:7a:e8:fc:91:ac:12:7c:5d:ee:3e:af:e4:89:bc:6b:fa:
70:bf:e1:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHp9CBpWXahfjU8FNYmjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzBmM2QxMTE4MzYxYjU5ZjMzMTVmNTkxNjQzZTFkYWJi
YjIwMDgwHhcNMjUwOTA3MDMwMDU2WhcNMjUwOTA4MDMwMDU2WjAzMTEwLwYDVQQD
Eyg1ZTMyYTkzMTg4OTA1MmE0ZWM0MGJlMzNjNDM1MzBmZDI1Yzg5MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSBVLogFcVn+TdplW1F5XoeY1fn3
Q0bHEW/wqQVWijGuXdz0Rwvb8icn2ZFCb79xynS9GGKvBl/FEC9gyoh1D74IobV8
XOtp47bkrvP4oOm6MdHpSjKBhGxtYUidmyhGcOaQnbGoYOT9TKFhjRPycEwX0xXG
eSHl4NUCtBmkCdnKQUX8JUyK8fAh66YprDERo0uwaOkXzLRpLi0Hs9/UCtOBrrBg
gAeU0qnV2ykujMgkdfM6nVRBdGzCZ3a76fEiLa+vtoToQX/tI6FvI9pnC0JGwD7D
ghzsUUQxMQ6lkhCXnKnDZrHjBYfDEcGmqd3PE2IV148aNCWjVMR5yVOyJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4yqTGIkFKk7EC+M8Q1MP0lyJBTMB8GA1UdIwQY
MBaAFM9w89ERg2G1nzMV9ZFkPh2ruyAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEt
ZmJiOWY5MWM4Y2NlLzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEtZmJiOWY5MWM4Y2Nl
LzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULYqVF2e
Y6CTDhVDqiLIS+w3VWG/MygebFWAa/daUT0l660nbBHtZVOMby/ayV6liWFSOi7L
GG0QR0iZuRN5WaaYS5eNC/dEDIKXhHMjAjha2TWfab5jlKwkoEvYMJw/CSZX4qUX
D/jXLO6gjWnr503xsJZrJvR85unRh8NaQps5cLtpnwUchO2lYQTlQ7O1o3Butwnf
wal4+uMQUK66GasSA5s6/NlN55wagi0p/4BG4CFu0LqtgpNcX394BJwE2kjAqNAJ
vZ8TuawBLN25l3IfkSHsC4ilhXfmvPDbn6xMwd8RF1wsXY6oHvd66PyRrBJ8Xe4+
r+SJvGv6cL/hFA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:07 2025 by rpki-client