Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: AohLF2IYA7+0gzrv38+bwBTuvi6uU2Cg6OItb9JbaPo=
Subject key identifier: 9A:E4:43:C1:38:AF:40:A4:FE:CC:C0:74:98:BC:F8:D7:3B:A3:5E:65
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 019A725C970E7CAA666E1EB8EEF9C5272849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 07BE
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: +E1d4XR7hl3535HNFV1dPh4QtNHoLDkVI2fvRPegChs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:97:0e:7c:aa:66:6e:1e:b8:ee:f9:c5:27:28:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=9ae443c138af40a4feccc07498bcf8d73ba35e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:3d:af:1e:7d:8f:bd:2e:be:d2:86:b8:13:
b1:77:47:41:ad:54:9d:75:87:29:0a:40:0e:8d:5f:
a7:d1:c3:8d:f8:b9:0a:49:51:1b:32:6e:16:ab:a5:
8e:3c:6b:d4:a1:41:f3:4a:c2:6f:76:70:a5:96:3d:
a7:17:40:65:3a:5e:72:e8:b7:14:79:3c:34:58:45:
5d:ad:66:21:47:ad:26:8a:73:77:9b:3f:91:60:57:
db:36:da:79:47:0d:17:0e:4d:e8:9d:f4:09:ab:15:
f4:e6:19:71:6d:59:0f:fe:f1:91:9d:66:97:57:85:
41:84:65:9e:eb:aa:07:ed:70:c8:34:55:45:8d:56:
4f:fc:bc:ed:58:f8:1e:70:fb:9e:ba:40:2d:4f:27:
c5:5e:ef:7b:5c:9a:ce:63:47:8a:51:46:a1:b7:43:
53:61:64:3e:ec:a9:de:48:64:41:e9:9b:0b:4a:4a:
7d:ba:ac:ec:92:e5:92:fc:23:dc:ab:e1:f5:12:b0:
35:fe:4e:cf:e8:9e:76:a2:5a:84:7c:cc:01:2d:6d:
17:b5:60:56:61:83:34:49:37:77:0d:20:ff:c6:2b:
dc:43:15:f3:12:81:a8:bb:ad:4d:81:74:62:5f:ad:
38:c8:10:17:87:04:d5:50:48:04:76:88:4a:c3:4e:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E4:43:C1:38:AF:40:A4:FE:CC:C0:74:98:BC:F8:D7:3B:A3:5E:65
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:6e:3f:68:44:ec:68:b8:bc:59:b3:12:55:8e:bd:ad:42:
a0:b8:41:c6:eb:ab:36:74:72:c7:74:24:d5:2a:60:d8:cd:b9:
52:a1:70:a4:5f:29:2f:97:b3:6f:d3:2f:88:60:74:6e:53:93:
50:a3:7a:c9:d7:76:87:5f:3b:69:20:85:99:31:8c:42:79:0d:
fd:cd:00:72:dc:bf:af:0a:73:32:95:97:78:63:1f:86:09:33:
7f:db:5c:39:33:78:e4:f7:29:67:00:a0:d4:77:8b:70:b5:4f:
f8:20:b6:82:49:fd:d9:e8:3d:8b:05:37:16:1a:70:da:a3:fc:
5f:1e:87:d7:11:0a:c2:cc:02:55:08:a5:80:cd:8f:60:f4:f2:
48:54:0a:73:66:1f:41:60:ff:a2:35:27:a9:f8:aa:40:58:4f:
e3:a3:81:ef:eb:9f:cb:b3:a2:5a:46:70:5c:39:ae:a7:33:ed:
6e:7b:47:c0:58:5b:08:9a:39:c0:dc:1c:84:64:be:61:8e:e2:
af:d8:0d:f3:5e:09:5b:53:31:6c:41:08:b1:c5:6a:dc:23:db:
2e:35:89:a4:bb:87:5d:71:3f:79:5b:f0:a8:eb:7f:f6:8d:8c:
e5:27:73:14:74:65:ce:89:ed:ad:9b:7d:7d:68:20:91:ff:1b:
07:0a:8a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJcOfKpmbh647vnFJyhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl
NGRmYWYwHhcNMjUxMTExMTAwMTAxWhcNMjUxMTEyMTAwMTAxWjAzMTEwLwYDVQQD
Eyg5YWU0NDNjMTM4YWY0MGE0ZmVjY2MwNzQ5OGJjZjhkNzNiYTM1ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz49rx59j70uvtKGuBOxd0dBrVSd
dYcpCkAOjV+n0cON+LkKSVEbMm4Wq6WOPGvUoUHzSsJvdnCllj2nF0BlOl5y6LcU
eTw0WEVdrWYhR60minN3mz+RYFfbNtp5Rw0XDk3onfQJqxX05hlxbVkP/vGRnWaX
V4VBhGWe66oH7XDINFVFjVZP/LztWPgecPueukAtTyfFXu97XJrOY0eKUUaht0NT
YWQ+7KneSGRB6ZsLSkp9uqzskuWS/CPcq+H1ErA1/k7P6J52olqEfMwBLW0XtWBW
YYM0STd3DSD/xivcQxXzEoGou61NgXRiX604yBAXhwTVUEgEdohKw04WhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrkQ8E4r0Ck/szAdJi8+Nc7o15lMB8GA1UdIwQY
MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt
Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1
LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+huP2hE
7Gi4vFmzElWOva1CoLhBxuurNnRyx3Qk1Spg2M25UqFwpF8pL5ezb9MviGB0blOT
UKN6ydd2h187aSCFmTGMQnkN/c0Acty/rwpzMpWXeGMfhgkzf9tcOTN45PcpZwCg
1HeLcLVP+CC2gkn92eg9iwU3Fhpw2qP8Xx6H1xEKwswCVQilgM2PYPTySFQKc2Yf
QWD/ojUnqfiqQFhP46OB7+ufy7OiWkZwXDmupzPtbntHwFhbCJo5wNwchGS+YY7i
r9gN814JW1MxbEEIscVq3CPbLjWJpLuHXXE/eVvwqOt/9o2M5SdzFHRlzontrZt9
fWggkf8bBwqKLw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:40 2025 by rpki-client