Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: cdnFgR9jIY+5hSLoe7zFLfbR0Rx8iROCHd23brJC2tI=
Subject key identifier: 3A:A3:72:E2:56:AF:59:5C:42:0B:D6:D7:9F:54:23:A0:A5:B5:BD:F1
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 019951FAD217062E3175B95E44A29B22F1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 0220
Signing time: Tue 16 Sep 2025 10:03:36 +0000
Manifest this update: Tue 16 Sep 2025 10:03:36 +0000
Manifest next update: Wed 17 Sep 2025 10:03:36 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: itBMylBAbjY3Q7XyC/jafSYp0YztoBrVh7v8dc1rzk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:fa:d2:17:06:2e:31:75:b9:5e:44:a2:9b:22:f1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Sep 16 10:03:36 2025 GMT
Not After : Sep 17 10:03:36 2025 GMT
Subject: CN=3aa372e256af595c420bd6d79f5423a0a5b5bdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:9c:6e:25:3d:95:98:5e:0b:6e:ca:dc:cd:
fd:30:0a:38:e1:f6:e3:0e:a6:94:ef:87:e4:90:56:
7f:2c:f2:a9:51:23:67:1f:58:26:46:40:73:9a:d1:
0f:bb:71:19:c9:aa:70:bb:d1:93:61:67:38:ef:a1:
93:27:63:e1:4d:3b:70:2f:cb:c1:51:e2:0d:8b:4c:
ff:84:d6:9f:60:00:35:6c:66:1b:f3:93:33:62:f5:
26:ae:f6:04:de:33:1b:86:d9:fa:6f:0f:04:88:b4:
e1:80:73:cf:0c:78:32:2a:50:c3:ed:93:8c:81:5f:
32:87:0e:d6:70:8f:08:27:15:4d:8e:b9:54:47:38:
fd:fe:9f:32:5f:f5:8f:f1:85:5b:be:cd:23:a5:d9:
7c:fd:6f:0d:49:14:c1:c4:24:f1:0f:d7:80:41:66:
9c:c5:62:15:c1:58:11:2a:8a:89:5c:26:e7:66:de:
68:22:1c:24:3e:67:8d:b2:d1:35:a4:b8:29:9e:43:
6e:d4:23:7f:40:6a:ab:dc:86:56:2d:2b:ba:37:1f:
16:1b:62:de:7d:19:db:41:c5:e0:0a:56:6a:5d:0a:
71:54:86:c5:51:68:e3:0b:d7:3c:9d:f9:6b:d7:4d:
73:90:30:a8:fd:e2:31:b3:27:fb:87:8d:26:32:79:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:72:E2:56:AF:59:5C:42:0B:D6:D7:9F:54:23:A0:A5:B5:BD:F1
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1a:10:91:dd:7d:e2:dd:81:b7:47:79:53:7f:31:14:78:da:
55:9c:25:35:4e:27:19:c6:c3:0d:61:b8:09:16:45:a3:c1:f8:
4f:ce:e0:18:a4:64:4d:59:5c:4b:c2:ec:c8:b8:d3:87:13:d6:
9e:78:47:a0:ce:fd:2b:9f:82:3b:d0:8b:0a:fc:fe:3d:7b:1d:
fb:12:9e:b9:fd:19:53:2b:b8:03:be:4b:d1:67:f9:25:d7:c7:
84:af:64:0e:ff:d9:9b:dd:f2:10:ce:08:7a:d7:0f:61:46:fe:
1a:33:10:5c:d3:ee:d5:a9:04:17:81:1b:f0:0a:9c:f2:06:e6:
f2:52:48:b4:ff:30:5c:34:67:d1:e9:81:9b:b1:90:72:e5:e7:
0f:08:98:66:1c:bf:5f:1e:3d:d2:af:32:8e:52:89:8d:eb:d8:
d4:fd:31:8b:87:19:6f:19:9e:50:a8:8d:d8:9c:5e:10:c4:27:
20:6c:bb:aa:42:24:93:47:36:d6:fc:6a:c7:5b:9c:22:90:3a:
f2:5a:7a:0b:bc:11:98:3c:fb:c3:a8:b3:c9:85:8e:25:ab:f6:
23:21:4c:73:e5:9b:9d:a1:ac:cc:e8:78:b7:ce:a2:d6:8e:27:
b1:86:33:b6:7d:2a:29:37:00:68:18:19:78:96:9b:e8:e1:60:
6f:50:df:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlR+tIXBi4xdbleRKKbIvHYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj
NTQ1YzMwHhcNMjUwOTE2MTAwMzM2WhcNMjUwOTE3MTAwMzM2WjAzMTEwLwYDVQQD
EygzYWEzNzJlMjU2YWY1OTVjNDIwYmQ2ZDc5ZjU0MjNhMGE1YjViZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHacbiU9lZheC27K3M39MAo44fbj
DqaU74fkkFZ/LPKpUSNnH1gmRkBzmtEPu3EZyapwu9GTYWc476GTJ2PhTTtwL8vB
UeINi0z/hNafYAA1bGYb85MzYvUmrvYE3jMbhtn6bw8EiLThgHPPDHgyKlDD7ZOM
gV8yhw7WcI8IJxVNjrlURzj9/p8yX/WP8YVbvs0jpdl8/W8NSRTBxCTxD9eAQWac
xWIVwVgRKoqJXCbnZt5oIhwkPmeNstE1pLgpnkNu1CN/QGqr3IZWLSu6Nx8WG2Le
fRnbQcXgClZqXQpxVIbFUWjjC9c8nflr101zkDCo/eIxsyf7h40mMnks+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqjcuJWr1lcQgvW159UI6Cltb3xMB8GA1UdIwQY
MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt
MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex
LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBoQkd19
4t2Bt0d5U38xFHjaVZwlNU4nGcbDDWG4CRZFo8H4T87gGKRkTVlcS8LsyLjThxPW
nnhHoM79K5+CO9CLCvz+PXsd+xKeuf0ZUyu4A75L0Wf5JdfHhK9kDv/Zm93yEM4I
etcPYUb+GjMQXNPu1akEF4Eb8Aqc8gbm8lJItP8wXDRn0emBm7GQcuXnDwiYZhy/
Xx490q8yjlKJjevY1P0xi4cZbxmeUKiN2JxeEMQnIGy7qkIkk0c21vxqx1ucIpA6
8lp6C7wRmDz7w6izyYWOJav2IyFMc+WbnaGszOh4t86i1o4nsYYztn0qKTcAaBgZ
eJab6OFgb1Df/w==
-----END CERTIFICATE-----
Generated at Tue Sep 16 11:51:53 2025 by rpki-client