Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
File: Z5JSueId-BdsxTgCeJX39FhWZqs.mft (raw, json)
Hash identifier: gdefJb8Kva2U3TfeMgpFYpOaVkItmLH7W9I6r3kdHzY=
Subject key identifier: 69:2F:1B:D7:42:DC:E1:F4:F9:60:BE:5F:1C:29:C3:3F:48:B2:EF:CB
Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab
Certificate serial: 019A26D40D08CB0D066CB6494AA43772525F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 18:00:22 +0000
Manifest this update: Mon 27 Oct 2025 18:00:22 +0000
Manifest next update: Tue 28 Oct 2025 18:00:22 +0000
Files and hashes: 1: FePFuzEqB9f7ilajywdQpEPMzKo.roa (hash: I5eMCXbNJhaHcUecOqZBTRMoNOXYmdT0pvUT3eEKqpo=)
2: Z5JSueId-BdsxTgCeJX39FhWZqs.crl (hash: g1RCKlFB2Ae9s57W5TeAnyvt4oThXX0gVT6X9JWycbU=)
3: hfiXuQJrWIHjhJiPlnaZjIZtJqs.roa (hash: ORTJO6ddZYLHT8LgOqJTg/+OzIjgkcwhz85BPQA8qzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:0d:08:cb:0d:06:6c:b6:49:4a:a4:37:72:52:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab
Validity
Not Before: Oct 27 18:00:22 2025 GMT
Not After : Oct 28 18:00:22 2025 GMT
Subject: CN=692f1bd742dce1f4f960be5f1c29c33f48b2efcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:25:d4:7a:5f:33:5a:69:b8:ad:1b:a9:fb:
51:53:9c:2c:37:6e:d0:8f:bc:27:09:04:f3:e3:c3:
84:80:35:35:be:36:48:10:13:c5:02:e6:28:ef:cc:
82:3d:2e:d8:43:8c:f8:bc:be:9a:d5:f4:98:68:18:
dc:8a:07:ad:f6:f1:0f:cc:45:01:cc:0a:b1:db:8c:
9f:7f:24:2a:7f:e0:32:75:50:01:26:d6:e4:55:f6:
46:7b:1e:1a:54:17:d6:52:7a:b4:a8:54:1f:cb:9c:
1d:bc:f6:ec:b4:0f:00:99:63:b0:cd:60:89:29:b8:
e6:58:12:78:00:c8:6b:75:e7:fa:2a:c9:6b:f0:66:
a2:b2:a5:e7:63:9c:ce:38:71:09:45:15:75:cd:9b:
3b:a2:1f:81:f7:ad:bf:c5:f5:d4:b5:dd:27:86:0c:
34:3c:9b:a2:7f:4e:ac:f3:56:5f:26:1c:fb:c0:9b:
af:40:62:a3:1d:13:d1:6a:a5:69:83:93:5c:b0:49:
c0:12:83:fc:47:fa:4d:dd:8d:12:b3:9e:11:d6:66:
15:55:82:43:6f:9d:f7:35:73:2d:10:1e:39:b1:98:
34:26:cf:c5:ed:f5:10:4e:bc:a3:b6:35:9e:a3:4d:
4b:0c:18:b0:08:8e:bf:3c:29:b1:90:87:2b:89:68:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2F:1B:D7:42:DC:E1:F4:F9:60:BE:5F:1C:29:C3:3F:48:B2:EF:CB
X509v3 Authority Key Identifier:
keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:35:f5:4b:44:11:fc:3f:29:f8:26:86:33:69:c6:d0:f0:e0:
2b:f2:87:31:51:73:a8:21:69:f1:48:f7:8b:cf:3b:2f:d9:ae:
79:b6:de:c0:3b:2e:ea:13:9a:b4:97:e6:58:f1:f8:f6:fe:cc:
5f:7c:31:58:22:a3:28:a9:c6:33:d1:a7:58:08:24:68:a8:46:
93:d4:79:85:3e:81:8c:fa:3b:23:e0:7e:41:41:07:8f:4e:dc:
4d:a7:5f:22:7e:9e:c6:ef:a6:8a:75:b5:54:38:9a:3c:82:20:
88:fc:40:f4:21:ff:60:a0:e3:00:9e:75:31:f5:bb:c2:e0:da:
44:92:af:4a:d9:1f:f0:42:ec:63:87:e8:64:51:c9:11:a3:71:
8e:73:56:87:6c:b4:cc:b8:e0:99:99:c1:22:ec:f4:9f:bd:b2:
6b:13:b0:8f:30:22:30:62:56:d9:7a:5e:1e:c0:bf:6b:4c:96:
ab:8f:a1:f2:e8:1a:1b:bd:cb:ad:6a:39:ea:f5:f2:18:d3:6f:
89:06:35:29:a5:55:92:50:14:f7:f8:17:3f:50:56:2a:4e:9a:
37:69:fa:45:0a:54:6d:d0:53:a8:12:45:24:86:3a:a1:b7:16:
ff:63:e3:21:39:e2:24:b6:3a:72:5c:cf:74:14:c8:50:a5:36:
7d:b9:f8:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1A0Iyw0GbLZJSqQ3clJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1
NjY2YWIwHhcNMjUxMDI3MTgwMDIyWhcNMjUxMDI4MTgwMDIyWjAzMTEwLwYDVQQD
Eyg2OTJmMWJkNzQyZGNlMWY0Zjk2MGJlNWYxYzI5YzMzZjQ4YjJlZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApswl1HpfM1ppuK0bqftRU5wsN27Q
j7wnCQTz48OEgDU1vjZIEBPFAuYo78yCPS7YQ4z4vL6a1fSYaBjciget9vEPzEUB
zAqx24yffyQqf+AydVABJtbkVfZGex4aVBfWUnq0qFQfy5wdvPbstA8AmWOwzWCJ
KbjmWBJ4AMhrdef6Kslr8GaisqXnY5zOOHEJRRV1zZs7oh+B962/xfXUtd0nhgw0
PJuif06s81ZfJhz7wJuvQGKjHRPRaqVpg5NcsEnAEoP8R/pN3Y0Ss54R1mYVVYJD
b533NXMtEB45sZg0Js/F7fUQTryjtjWeo01LDBiwCI6/PCmxkIcriWiNQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkvG9dC3OH0+WC+Xxwpwz9Isu/LMB8GA1UdIwQY
MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt
MzM2ZTViM2RkMDcxLzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx
LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDX1S0QR
/D8p+CaGM2nG0PDgK/KHMVFzqCFp8Uj3i887L9muebbewDsu6hOatJfmWPH49v7M
X3wxWCKjKKnGM9GnWAgkaKhGk9R5hT6BjPo7I+B+QUEHj07cTadfIn6exu+minW1
VDiaPIIgiPxA9CH/YKDjAJ51MfW7wuDaRJKvStkf8ELsY4foZFHJEaNxjnNWh2y0
zLjgmZnBIuz0n72yaxOwjzAiMGJW2XpeHsC/a0yWq4+h8ugaG73LrWo56vXyGNNv
iQY1KaVVklAU9/gXP1BWKk6aN2n6RQpUbdBTqBJFJIY6obcW/2PjITniJLY6clzP
dBTIUKU2fbn4MQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:18:36 2025 by rpki-client