Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: EwdYgnXINNFOGesWcAqVnyIqioCE0W4WhgMjcVEKZGM=
Subject key identifier: D9:4B:43:D7:85:C2:60:01:F7:A8:31:B2:86:A6:CA:C5:3B:38:84:13
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 019A2666835E6F17BED390E7EDD30F624324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 0666
Signing time: Mon 27 Oct 2025 16:00:43 +0000
Manifest this update: Mon 27 Oct 2025 16:00:43 +0000
Manifest next update: Tue 28 Oct 2025 16:00:43 +0000
Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: 3fbWVXssguztm3VJR+Zs0zbLs51u9e1r1fKgS5j9ygk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:83:5e:6f:17:be:d3:90:e7:ed:d3:0f:62:43:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: Oct 27 16:00:43 2025 GMT
Not After : Oct 28 16:00:43 2025 GMT
Subject: CN=d94b43d785c26001f7a831b286a6cac53b388413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:71:6d:89:92:ef:c5:75:a6:33:84:8d:43:
5c:d8:fd:e4:db:45:aa:c4:3f:cf:1a:eb:84:0b:02:
6b:08:c3:db:a9:8c:89:15:a9:f3:8e:fe:ef:77:6b:
ce:5c:f3:94:7a:6e:ea:14:04:12:aa:0c:4b:b1:23:
6d:f4:d7:25:fd:dd:90:0a:48:99:56:35:c3:12:81:
f2:75:f3:3d:4d:aa:9c:1e:f7:95:fe:f3:41:38:7d:
5d:12:ce:c0:cf:e9:89:78:c6:4e:8b:28:85:a1:c0:
98:e2:7d:93:00:22:51:25:3d:2f:cf:5f:bf:d6:b1:
1e:93:39:eb:b6:10:9f:35:f7:9d:4b:d6:50:1d:13:
3d:86:e6:8f:5b:c9:de:a8:8d:c6:17:a6:18:9c:44:
c3:b4:bc:71:15:9e:6b:6a:46:e6:d5:8c:33:40:7f:
5c:a4:39:57:34:1d:42:d8:e7:07:48:35:fc:e0:ee:
29:fd:26:30:a3:42:02:06:12:48:9e:ee:d5:2e:75:
e9:68:11:fb:08:89:e1:58:9c:ee:c7:74:f4:13:22:
f2:22:b5:ca:05:60:96:6c:fb:3b:16:4d:68:ba:ae:
83:e4:bc:63:1e:82:fd:8f:1a:6c:9a:9f:2b:25:cd:
a3:d7:3e:3b:e6:fc:a2:e6:f2:5d:0d:e5:08:a5:55:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4B:43:D7:85:C2:60:01:F7:A8:31:B2:86:A6:CA:C5:3B:38:84:13
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:70:ae:97:f6:1e:84:11:ae:28:92:c4:03:3c:d1:4f:59:
d2:c2:9d:97:55:46:5b:2d:0d:9c:05:70:db:bd:bd:80:50:4f:
9c:bf:0c:f9:78:ca:1b:39:98:3b:bc:38:63:3e:2d:ff:85:36:
68:23:b0:5e:56:59:3a:2f:9d:40:fb:59:3e:ed:50:d6:57:b9:
60:7f:71:92:cb:c3:2d:9f:6a:84:9b:d6:c5:e6:42:3d:1e:40:
de:c8:c6:47:5a:cf:7c:42:4e:07:b4:0c:d9:bf:d6:63:75:db:
57:fb:6c:49:d0:28:91:33:25:53:6a:fe:d8:1c:29:a8:a5:de:
f3:94:65:2f:5c:d2:68:78:9e:c4:2d:36:f6:93:b5:d5:62:22:
5f:e7:0f:58:b5:4a:59:86:0a:4c:87:cc:90:a5:62:86:c8:5b:
ad:84:50:cb:da:86:d3:84:20:4e:44:61:ac:a3:1b:aa:d2:7e:
ab:16:e0:49:27:13:53:2c:28:d0:56:34:10:76:f0:7d:c9:84:
d4:82:b0:5b:56:0c:e9:60:ec:1e:46:3b:ff:cc:7a:f8:6f:47:
59:cc:0a:35:52:9c:97:f9:44:0b:2c:f5:fa:3a:bf:72:ae:b6:
bf:19:8b:a5:b1:be:5a:1e:46:74:69:63:dc:e9:2a:57:48:ad:
e5:4c:03:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomZoNebxe+05Dn7dMPYkMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky
YjkyMGIwHhcNMjUxMDI3MTYwMDQzWhcNMjUxMDI4MTYwMDQzWjAzMTEwLwYDVQQD
EyhkOTRiNDNkNzg1YzI2MDAxZjdhODMxYjI4NmE2Y2FjNTNiMzg4NDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dRxbYmS78V1pjOEjUNc2P3k20Wq
xD/PGuuECwJrCMPbqYyJFanzjv7vd2vOXPOUem7qFAQSqgxLsSNt9Ncl/d2QCkiZ
VjXDEoHydfM9TaqcHveV/vNBOH1dEs7Az+mJeMZOiyiFocCY4n2TACJRJT0vz1+/
1rEekznrthCfNfedS9ZQHRM9huaPW8neqI3GF6YYnETDtLxxFZ5rakbm1YwzQH9c
pDlXNB1C2OcHSDX84O4p/SYwo0ICBhJInu7VLnXpaBH7CInhWJzux3T0EyLyIrXK
BWCWbPs7Fk1ouq6D5LxjHoL9jxpsmp8rJc2j1z475vyi5vJdDeUIpVXobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlLQ9eFwmAB96gxsoamysU7OIQTMB8GA1UdIwQY
MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt
M2U0NGZjYWMzYmM1LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1
LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHY1wrpf2
HoQRriiSxAM80U9Z0sKdl1VGWy0NnAVw2729gFBPnL8M+XjKGzmYO7w4Yz4t/4U2
aCOwXlZZOi+dQPtZPu1Q1le5YH9xksvDLZ9qhJvWxeZCPR5A3sjGR1rPfEJOB7QM
2b/WY3XbV/tsSdAokTMlU2r+2BwpqKXe85RlL1zSaHiexC029pO11WIiX+cPWLVK
WYYKTIfMkKVihshbrYRQy9qG04QgTkRhrKMbqtJ+qxbgSScTUywo0FY0EHbwfcmE
1IKwW1YM6WDsHkY7/8x6+G9HWcwKNVKcl/lECyz1+jq/cq62vxmLpbG+Wh5GdGlj
3OkqV0it5UwDaw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:01 2025 by rpki-client