Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: Yg0A8zS5+/+GG06JY1SnUKao2s9qs0sgWIIqIkaRAMg=
Subject key identifier: B7:A1:3B:C7:FD:26:3B:0C:EF:63:3F:6D:9B:89:B9:9A:31:7C:98:B8
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019A4C61800966150EF339FB7B921C321159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 01:00:49 +0000
Manifest this update: Tue 04 Nov 2025 01:00:49 +0000
Manifest next update: Wed 05 Nov 2025 01:00:49 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: FQB04o+9QUeS69rW8p8eQLGWJXzUnEnGlq8yEqTSX8k=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:80:09:66:15:0e:f3:39:fb:7b:92:1c:32:11:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Nov 4 01:00:49 2025 GMT
Not After : Nov 5 01:00:49 2025 GMT
Subject: CN=b7a13bc7fd263b0cef633f6d9b89b99a317c98b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:45:1c:98:3f:ed:2b:7e:9c:a6:e6:ff:98:12:
de:00:ea:99:c5:33:d7:62:c7:e8:6e:b2:13:9c:c1:
a2:ad:f7:2d:2d:22:70:90:39:e8:bb:d2:19:b7:d8:
25:dd:a5:7a:df:b2:20:24:e2:10:da:18:36:ba:d9:
ad:6e:fd:fe:c1:f7:1f:1d:87:3f:26:52:d5:7d:da:
47:a5:cc:c9:48:bf:7d:23:db:8a:36:f6:6f:3f:7b:
22:66:ee:12:d2:6e:ca:e4:41:75:19:7f:f0:41:a4:
d9:f5:87:78:26:14:5f:5a:30:96:dd:9b:72:19:05:
f4:23:c9:d3:a8:40:10:80:1d:26:61:de:31:b7:91:
b7:b2:d7:50:30:de:9e:e5:89:55:e7:4b:4d:1f:2c:
a3:b1:5d:41:67:6e:6f:6f:90:dd:5a:a6:16:4e:9d:
cc:50:81:a0:10:bf:b4:30:d8:23:90:d8:90:1c:6e:
2a:b4:aa:a5:49:06:16:95:77:0f:05:da:c6:fa:63:
e7:20:80:7c:4e:cd:bf:ef:16:8c:ec:7c:27:f8:a6:
73:f5:01:a8:b6:be:6b:9d:18:b8:66:df:9f:f2:6c:
9c:6a:09:70:21:60:47:46:14:10:11:cb:83:9c:06:
b4:d2:03:5a:2d:48:8c:2f:55:f2:1d:28:33:dd:3d:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:3B:C7:FD:26:3B:0C:EF:63:3F:6D:9B:89:B9:9A:31:7C:98:B8
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c4:7a:1b:a9:15:2f:1e:1e:db:cb:1a:cd:91:95:b2:b7:ae:
75:a6:ff:54:f5:23:fb:06:1d:16:f0:c0:ca:c7:25:2c:9e:8f:
15:bd:a1:4d:0c:48:2c:8c:ca:f5:33:93:55:e4:ad:35:d1:ef:
df:d2:8a:f8:f9:04:1a:a9:5c:ae:82:7d:27:bd:4a:35:61:b8:
b8:a3:10:ce:20:e3:fc:ec:75:19:d7:17:96:a2:d2:6b:f7:b5:
2e:9f:81:56:7b:b5:2e:57:d2:e6:b1:e4:42:d7:3f:ca:20:df:
7e:a7:00:c2:a6:28:cc:cd:26:0c:5d:4f:7d:e7:58:20:2c:45:
a3:95:98:33:71:40:6d:91:c9:0e:eb:ce:f0:72:37:34:87:b0:
15:31:a1:f3:53:49:26:8e:48:a8:18:d2:15:bf:43:75:c9:e5:
d5:b6:79:51:9c:af:f3:30:79:56:13:03:a6:1f:77:9a:22:f6:
4a:e0:fa:8d:f9:98:be:92:5b:d8:0b:0b:97:1c:0d:db:70:93:
26:55:26:0b:09:cc:a7:5e:07:dc:09:cd:08:93:93:d7:53:06:
94:56:20:fd:6d:a5:aa:75:89:2e:fa:5a:cf:64:11:c4:42:9f:
8d:85:05:a2:d0:bd:8f:1f:c4:f8:8e:1e:6f:0f:c6:9e:b8:83:
80:9c:47:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYYAJZhUO8zn7e5IcMhFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl
ODZhYWMwHhcNMjUxMTA0MDEwMDQ5WhcNMjUxMTA1MDEwMDQ5WjAzMTEwLwYDVQQD
EyhiN2ExM2JjN2ZkMjYzYjBjZWY2MzNmNmQ5Yjg5Yjk5YTMxN2M5OGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0UcmD/tK36cpub/mBLeAOqZxTPX
YsfobrITnMGirfctLSJwkDnou9IZt9gl3aV637IgJOIQ2hg2utmtbv3+wfcfHYc/
JlLVfdpHpczJSL99I9uKNvZvP3siZu4S0m7K5EF1GX/wQaTZ9Yd4JhRfWjCW3Zty
GQX0I8nTqEAQgB0mYd4xt5G3stdQMN6e5YlV50tNHyyjsV1BZ25vb5DdWqYWTp3M
UIGgEL+0MNgjkNiQHG4qtKqlSQYWlXcPBdrG+mPnIIB8Ts2/7xaM7Hwn+KZz9QGo
tr5rnRi4Zt+f8mycaglwIWBHRhQQEcuDnAa00gNaLUiML1XyHSgz3T3RoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLehO8f9JjsM72M/bZuJuZoxfJi4MB8GA1UdIwQY
MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt
MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm
LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcR6G6kV
Lx4e28sazZGVsreudab/VPUj+wYdFvDAysclLJ6PFb2hTQxILIzK9TOTVeStNdHv
39KK+PkEGqlcroJ9J71KNWG4uKMQziDj/Ox1GdcXlqLSa/e1Lp+BVnu1LlfS5rHk
Qtc/yiDffqcAwqYozM0mDF1PfedYICxFo5WYM3FAbZHJDuvO8HI3NIewFTGh81NJ
Jo5IqBjSFb9Ddcnl1bZ5UZyv8zB5VhMDph93miL2SuD6jfmYvpJb2AsLlxwN23CT
JlUmCwnMp14H3AnNCJOT11MGlFYg/W2lqnWJLvpaz2QRxEKfjYUFotC9jx/E+I4e
bw/GnriDgJxHng==
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:22:50 2025 by rpki-client