Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: PxgD5zo6T0AtyIFIk16FbTSxVgppFZptDqzgPL1hj28=
Subject key identifier: AE:40:4E:66:88:8C:94:17:D1:8D:CB:2D:2B:05:2A:F7:C2:82:CA:FD
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 019A70DBE5A7882B437EF48A467FE019A4EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 1461
Signing time: Tue 11 Nov 2025 03:00:50 +0000
Manifest this update: Tue 11 Nov 2025 03:00:50 +0000
Manifest next update: Wed 12 Nov 2025 03:00:50 +0000
Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: PJ5TkjxNdnWE+FBK9n8l3ssSO5xpru9TLe/vBGVBN7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e5:a7:88:2b:43:7e:f4:8a:46:7f:e0:19:a4:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Nov 11 03:00:50 2025 GMT
Not After : Nov 12 03:00:50 2025 GMT
Subject: CN=ae404e66888c9417d18dcb2d2b052af7c282cafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c3:33:32:5a:9d:d5:ab:63:c4:8e:f5:cf:d4:
22:1c:ad:83:05:98:0a:67:5e:42:66:62:b7:c7:90:
57:a0:42:fc:16:f4:b0:c3:a0:46:6b:bc:26:e0:a6:
b7:7f:87:e3:ce:35:31:95:4a:72:39:65:5a:ba:71:
00:01:de:74:ef:ee:59:37:55:04:41:41:de:ef:38:
bf:0e:98:a9:4f:6b:69:8a:06:38:84:45:0c:ab:34:
94:7f:54:da:47:b5:fb:0d:41:52:18:b9:2b:34:60:
71:cf:ea:bc:c9:34:13:2d:75:85:fd:22:c3:96:c6:
93:e3:2d:e2:5f:d8:f2:cb:78:a0:3f:35:ca:8d:23:
3e:18:11:ba:b6:9d:83:43:46:06:a9:16:5e:78:b0:
19:24:ef:a2:98:f1:90:67:64:ab:a4:1e:f5:08:8d:
86:b3:0a:a6:85:01:0a:d4:ca:51:d2:e5:93:4b:03:
21:45:4b:ec:e2:6b:a8:65:18:a1:93:4f:b5:a9:c0:
48:5d:c6:c8:be:e7:73:d3:41:d5:3e:07:e1:7b:0c:
08:cf:3f:85:54:c5:20:be:68:b4:bd:14:ac:a7:0f:
d2:c7:3a:8a:b0:0f:2c:dc:c8:52:37:77:16:99:e3:
7f:4d:f4:b0:f2:b2:07:38:02:c3:6a:7c:a0:29:d1:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:4E:66:88:8C:94:17:D1:8D:CB:2D:2B:05:2A:F7:C2:82:CA:FD
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f5:0c:f5:58:63:3e:9c:29:55:d9:a0:25:1c:5a:1a:72:32:
1b:9b:9a:72:bc:6f:44:d1:bb:08:a7:9f:d7:8b:d7:c0:4b:3c:
0b:96:50:28:a5:99:0d:e6:9e:cd:be:4d:9a:75:75:ef:a6:29:
93:9a:7d:7e:33:d3:06:65:19:97:fb:2b:bd:db:66:b5:80:a2:
28:46:a6:b3:ff:ce:2e:21:a5:e5:3c:1b:93:51:e0:30:3f:94:
2f:9f:61:01:f6:c7:1e:f1:c0:83:24:8f:6c:9d:94:7f:57:88:
c3:d2:b9:75:da:dc:c6:24:58:9a:3e:f2:0a:e1:f2:42:ab:bb:
04:55:20:f8:bd:72:39:30:5f:3f:a5:54:f5:80:dc:90:f4:90:
23:42:dc:22:2f:90:11:56:19:9f:18:3f:f1:ee:f9:08:8e:fc:
74:fc:ab:49:0f:e6:57:1e:5f:fb:98:a7:c0:80:0e:ab:ab:74:
a2:7b:6a:78:ed:ab:69:8c:c1:6c:3f:22:b2:14:dd:a6:18:ca:
30:4d:76:00:ff:a0:c5:38:05:7f:92:9c:92:01:58:8f:57:92:
05:c3:7a:21:ae:83:53:63:41:70:af:64:e0:5a:7c:a9:eb:81:
cf:6d:f1:f2:30:d1:53:04:8c:50:4f:81:df:47:85:8c:97:e9:
26:38:19:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2+WniCtDfvSKRn/gGaTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWQ0NWYwMjkyZDMxMmZkMDYwYTI3NDBiZDFlNTI3NTBi
YjhjMjUwHhcNMjUxMTExMDMwMDUwWhcNMjUxMTEyMDMwMDUwWjAzMTEwLwYDVQQD
EyhhZTQwNGU2Njg4OGM5NDE3ZDE4ZGNiMmQyYjA1MmFmN2MyODJjYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMMzMlqd1atjxI71z9QiHK2DBZgK
Z15CZmK3x5BXoEL8FvSww6BGa7wm4Ka3f4fjzjUxlUpyOWVaunEAAd507+5ZN1UE
QUHe7zi/DpipT2tpigY4hEUMqzSUf1TaR7X7DUFSGLkrNGBxz+q8yTQTLXWF/SLD
lsaT4y3iX9jyy3igPzXKjSM+GBG6tp2DQ0YGqRZeeLAZJO+imPGQZ2SrpB71CI2G
swqmhQEK1MpR0uWTSwMhRUvs4muoZRihk0+1qcBIXcbIvudz00HVPgfhewwIzz+F
VMUgvmi0vRSspw/SxzqKsA8s3MhSN3cWmeN/TfSw8rIHOALDanygKdGcmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5ATmaIjJQX0Y3LLSsFKvfCgsr9MB8GA1UdIwQY
MBaAFK2dRfApLTEv0GCidAvR5SdQu4wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMt
Nzk0OTdlZTI1OTg0LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMtNzk0OTdlZTI1OTg0
LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfUM9Vhj
PpwpVdmgJRxaGnIyG5uacrxvRNG7CKef14vXwEs8C5ZQKKWZDeaezb5NmnV176Yp
k5p9fjPTBmUZl/srvdtmtYCiKEams//OLiGl5Twbk1HgMD+UL59hAfbHHvHAgySP
bJ2Uf1eIw9K5ddrcxiRYmj7yCuHyQqu7BFUg+L1yOTBfP6VU9YDckPSQI0LcIi+Q
EVYZnxg/8e75CI78dPyrSQ/mVx5f+5inwIAOq6t0ontqeO2raYzBbD8ishTdphjK
ME12AP+gxTgFf5KckgFYj1eSBcN6Ia6DU2NBcK9k4Fp8qeuBz23x8jDRUwSMUE+B
30eFjJfpJjgZlQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:41 2025 by rpki-client