Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: t1AOYG721af4bT8bYp9xaEbmZXPk6zd/wXyO/DeCHKo=
Subject key identifier: A5:7C:92:C6:BF:FD:F7:CB:1B:DC:C2:91:3F:FA:B4:1C:27:E0:FB:4B
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 01993802A4C0EBB4E49442B0F5EDE25E8BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 08E1
Signing time: Thu 11 Sep 2025 09:02:01 +0000
Manifest this update: Thu 11 Sep 2025 09:02:01 +0000
Manifest next update: Fri 12 Sep 2025 09:02:01 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: sSPFxw9D4GyO5nBWAw4AZpZOgjRPXc6AyNI0/Zu8dAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:a4:c0:eb:b4:e4:94:42:b0:f5:ed:e2:5e:8b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Sep 11 09:02:01 2025 GMT
Not After : Sep 12 09:02:01 2025 GMT
Subject: CN=a57c92c6bffdf7cb1bdcc2913ffab41c27e0fb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0b:31:e0:25:15:40:42:fa:f4:27:cb:4c:fb:
b1:31:0d:fc:fd:0b:d7:0d:76:c3:46:24:31:8d:73:
00:d0:4a:95:0c:5a:bb:f2:06:c3:4b:94:2f:f7:54:
11:08:66:d8:18:cb:c2:7b:5a:4f:ac:cd:66:10:c3:
46:2f:61:3d:bf:b0:73:10:c2:04:10:e6:01:fb:3c:
e1:11:a8:4b:79:b2:7d:02:56:07:2d:5c:37:89:f7:
4e:9c:df:2b:51:30:92:e4:78:af:af:e6:6a:28:99:
0d:2c:42:cb:e7:95:c9:34:ef:70:b6:35:7b:29:15:
86:33:f5:a0:9c:c0:97:0b:2c:85:c9:36:e8:8f:e4:
81:0c:03:69:7e:bf:63:83:39:75:bd:80:9b:ac:19:
ae:39:8b:cd:5b:89:62:41:42:57:d4:be:70:01:a7:
d2:83:34:16:61:af:69:86:77:29:8a:e3:67:e2:fd:
d4:7d:c0:27:73:41:88:95:3a:55:aa:d0:6f:aa:08:
01:10:aa:92:c3:cf:a3:6d:4b:ea:90:62:0e:29:05:
04:18:d1:a4:ce:84:3b:32:c1:e7:2a:62:cc:10:e7:
83:6d:fc:c1:11:08:0f:b1:73:5d:03:c4:28:e0:94:
4d:b7:25:4b:6a:fd:c2:40:2b:ba:af:83:ab:9d:1c:
a1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:92:C6:BF:FD:F7:CB:1B:DC:C2:91:3F:FA:B4:1C:27:E0:FB:4B
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:be:45:1c:33:25:53:87:96:9a:00:ad:4f:4a:d3:5b:85:96:
b0:a7:1d:4b:91:5b:3f:81:40:81:e7:dd:c6:b0:c2:97:22:c9:
26:b0:1d:16:8a:29:f9:d0:b7:c6:f2:37:8d:c6:3d:6a:bc:fb:
b8:cc:2d:ae:3f:92:28:15:41:15:8d:27:67:68:73:82:85:84:
28:a5:f8:f1:00:b8:76:3b:6d:a6:61:7f:d3:fd:fc:85:f1:b9:
48:00:ab:9f:d2:5d:96:8b:65:19:5e:52:e6:e1:4b:75:18:15:
ac:4e:ce:53:56:d4:2d:3c:75:dc:33:b8:ce:21:c4:ef:7a:65:
01:b6:d4:6f:13:0a:06:15:d7:c4:d5:63:29:26:89:40:ff:4a:
fb:96:81:df:0c:6b:f5:4a:85:38:ac:76:c0:d4:4b:19:6b:36:
97:24:0a:b3:2b:8b:fc:ef:dd:96:d4:53:f8:ef:a3:90:53:4f:
e8:44:38:14:95:63:4a:bf:fd:cf:26:95:0a:d6:e6:57:bf:36:
c4:5e:b6:46:b4:67:0c:23:33:01:17:92:36:91:b1:65:e6:a0:
86:b4:40:93:09:f2:1a:ce:6b:d8:e7:27:16:6b:e9:dd:d4:b0:
3b:96:5a:72:e7:bb:1a:ed:fa:da:07:68:c1:e8:15:29:17:66:
07:a4:61:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4AqTA67TklEKw9e3iXovIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzBmOTlkNzk3OTNhNmYwMWU5YWQ2MjdkMWY5NjhiMGMy
ZDBmM2IwHhcNMjUwOTExMDkwMjAxWhcNMjUwOTEyMDkwMjAxWjAzMTEwLwYDVQQD
EyhhNTdjOTJjNmJmZmRmN2NiMWJkY2MyOTEzZmZhYjQxYzI3ZTBmYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Qsx4CUVQEL69CfLTPuxMQ38/QvX
DXbDRiQxjXMA0EqVDFq78gbDS5Qv91QRCGbYGMvCe1pPrM1mEMNGL2E9v7BzEMIE
EOYB+zzhEahLebJ9AlYHLVw3ifdOnN8rUTCS5Hivr+ZqKJkNLELL55XJNO9wtjV7
KRWGM/WgnMCXCyyFyTboj+SBDANpfr9jgzl1vYCbrBmuOYvNW4liQUJX1L5wAafS
gzQWYa9phncpiuNn4v3UfcAnc0GIlTpVqtBvqggBEKqSw8+jbUvqkGIOKQUEGNGk
zoQ7MsHnKmLMEOeDbfzBEQgPsXNdA8Qo4JRNtyVLav3CQCu6r4OrnRyhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKV8ksa//ffLG9zCkT/6tBwn4PtLMB8GA1UdIwQY
MBaAFM/A+Z15eTpvAemtYn0flosMLQ87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgt
ODBjYzg2ZTUxODIyLzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jNWRkM2UtOTM3Yi00MzRmLWJiYjgtODBjYzg2ZTUxODIy
LzEvejhENW5YbDVPbThCNmExaWZSLVdpd3d0RHpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyb5FHDMl
U4eWmgCtT0rTW4WWsKcdS5FbP4FAgefdxrDClyLJJrAdFoop+dC3xvI3jcY9arz7
uMwtrj+SKBVBFY0nZ2hzgoWEKKX48QC4djttpmF/0/38hfG5SACrn9JdlotlGV5S
5uFLdRgVrE7OU1bULTx13DO4ziHE73plAbbUbxMKBhXXxNVjKSaJQP9K+5aB3wxr
9UqFOKx2wNRLGWs2lyQKsyuL/O/dltRT+O+jkFNP6EQ4FJVjSr/9zyaVCtbmV782
xF62RrRnDCMzAReSNpGxZeaghrRAkwnyGs5r2OcnFmvp3dSwO5Zacue7Gu362gdo
wegVKRdmB6Rh8g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:29:02 2025 by rpki-client