Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
File: z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft (raw, json)
Hash identifier: Yt4Lw2EUqbGr+M6+mzFbPDtI2uiSziPxnj6hwOUdcw0=
Subject key identifier: 9B:88:CC:10:32:9C:1A:A8:90:C0:24:7D:0C:8F:B1:8D:5B:EB:72:2A
Authority key identifier: CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
Certificate issuer: /CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Certificate serial: 019922554BD3D5B7BCE905C1CD8C087EAE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
Manifest number: 36
Signing time: Sun 07 Sep 2025 04:00:39 +0000
Manifest this update: Sun 07 Sep 2025 04:00:39 +0000
Manifest next update: Mon 08 Sep 2025 04:00:39 +0000
Files and hashes: 1: gIxZrWlHl0oRXmPccq0bAMsTD7c.roa (hash: icJylGKFEOgR2y+9aMtSkzbhz2/KK1SV2PGADtfOVCk=)
2: z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl (hash: BrxPt/vdIhi4LlELlkKKFvuFyX9hDsTXIHuKGH69PCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:4b:d3:d5:b7:bc:e9:05:c1:cd:8c:08:7e:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe4694ec24ea715dca2d27a321c04bd0b0c90be
Validity
Not Before: Sep 7 04:00:39 2025 GMT
Not After : Sep 8 04:00:39 2025 GMT
Subject: CN=9b88cc10329c1aa890c0247d0c8fb18d5beb722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:96:fe:9f:1f:65:4a:bb:81:30:3b:51:ee:
61:ff:80:24:06:02:4d:30:0c:c8:3c:04:e9:ff:15:
a9:1e:0b:99:0d:6b:4a:98:07:ae:1a:04:52:bc:d4:
2e:02:87:b0:7f:f4:60:f3:56:a0:ba:50:e0:15:ca:
61:7a:c7:15:80:2b:c2:82:20:87:ac:7b:ca:97:e5:
51:a4:41:0b:5c:80:76:6e:75:46:47:74:d6:86:08:
1d:cb:7d:d5:2b:92:3e:1b:77:91:55:b9:26:76:74:
c1:e3:83:59:62:63:ca:62:f0:bb:6c:3c:9d:d0:c0:
ff:21:c0:15:d6:06:5a:e5:87:a2:e6:15:71:50:a3:
e7:5b:97:be:07:74:8c:64:42:a0:bc:dd:bd:97:26:
d4:ef:49:34:22:54:65:19:ad:7f:ac:c2:53:6c:db:
54:37:a3:7b:eb:86:c0:1e:41:92:c9:99:a8:27:0e:
55:4b:f6:81:c2:7a:12:fc:f7:ea:a0:83:79:8c:51:
3a:16:4a:dd:c5:38:13:56:78:bf:05:8c:b2:51:83:
6a:44:6c:64:be:54:46:bd:50:5c:bc:17:a9:5f:77:
a5:1b:6c:cb:4f:1a:cc:9a:cc:d6:91:32:1d:ec:a5:
f8:3b:87:4c:20:5d:21:e9:ce:5b:2a:d1:ac:6f:4b:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:88:CC:10:32:9C:1A:A8:90:C0:24:7D:0C:8F:B1:8D:5B:EB:72:2A
X509v3 Authority Key Identifier:
keyid:CF:E4:69:4E:C2:4E:A7:15:DC:A2:D2:7A:32:1C:04:BD:0B:0C:90:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-RpTsJOpxXcotJ6MhwEvQsMkL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/97339c-cdbd-4626-be25-c5b64c528e28/1/z-RpTsJOpxXcotJ6MhwEvQsMkL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:62:09:2c:e0:e1:eb:01:7f:5f:96:2a:7a:61:ee:6e:2f:fa:
fc:c8:f7:86:ab:ee:fc:cc:eb:0e:cc:e6:fe:da:05:f9:da:1d:
2e:e7:23:3f:18:b5:fa:50:3f:47:00:06:dd:e6:71:dd:a5:de:
18:bb:b2:5d:f1:14:8f:df:97:26:92:38:90:00:6a:67:ab:ad:
07:cc:73:0b:7c:ef:4a:35:78:ba:e3:b0:89:2c:32:92:9f:35:
92:66:f1:f7:9a:82:73:35:83:3b:59:3e:21:51:09:48:a4:e0:
34:00:34:cb:3d:42:47:a3:49:a7:b8:6d:3e:0f:92:b5:12:6b:
2f:4c:5b:5c:e6:39:19:ba:eb:8a:51:5c:fb:f0:36:2e:31:b8:
d0:29:ee:35:3e:ff:c4:df:60:48:f7:a1:66:b7:34:0a:1b:10:
76:01:81:97:48:15:72:32:08:ce:b6:a8:7a:45:0e:1b:3c:19:
16:db:1a:5f:3b:c2:d0:df:13:34:e8:24:7c:ca:f7:31:61:0a:
83:2b:57:5d:31:88:a8:69:68:f0:ba:aa:85:f9:36:e3:49:62:
f4:f5:e6:34:0d:4c:86:25:ec:ba:25:d9:d6:47:6e:ce:7b:1d:
19:bb:b7:cd:bc:38:43:ca:89:b1:fd:81:ad:3d:4f:53:d2:4a:
f3:84:5d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVUvT1be86QXBzYwIfq4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZTQ2OTRlYzI0ZWE3MTVkY2EyZDI3YTMyMWMwNGJkMGIw
YzkwYmUwHhcNMjUwOTA3MDQwMDM5WhcNMjUwOTA4MDQwMDM5WjAzMTEwLwYDVQQD
Eyg5Yjg4Y2MxMDMyOWMxYWE4OTBjMDI0N2QwYzhmYjE4ZDViZWI3MjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GaW/p8fZUq7gTA7Ue5h/4AkBgJN
MAzIPATp/xWpHguZDWtKmAeuGgRSvNQuAoewf/Rg81agulDgFcphescVgCvCgiCH
rHvKl+VRpEELXIB2bnVGR3TWhggdy33VK5I+G3eRVbkmdnTB44NZYmPKYvC7bDyd
0MD/IcAV1gZa5Yei5hVxUKPnW5e+B3SMZEKgvN29lybU70k0IlRlGa1/rMJTbNtU
N6N764bAHkGSyZmoJw5VS/aBwnoS/PfqoIN5jFE6FkrdxTgTVni/BYyyUYNqRGxk
vlRGvVBcvBepX3elG2zLTxrMmszWkTId7KX4O4dMIF0h6c5bKtGsb0sMvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJuIzBAynBqokMAkfQyPsY1b63IqMB8GA1UdIwQY
MBaAFM/kaU7CTqcV3KLSejIcBL0LDJC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzMzOWMtY2RiZC00NjI2LWJlMjUt
YzViNjRjNTI4ZTI4LzEvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi85NzMzOWMtY2RiZC00NjI2LWJlMjUtYzViNjRjNTI4ZTI4
LzEvei1ScFRzSk9weFhjb3RKNk1od0V2UXNNa0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwGIJLODh
6wF/X5YqemHubi/6/Mj3hqvu/MzrDszm/toF+dodLucjPxi1+lA/RwAG3eZx3aXe
GLuyXfEUj9+XJpI4kABqZ6utB8xzC3zvSjV4uuOwiSwykp81kmbx95qCczWDO1k+
IVEJSKTgNAA0yz1CR6NJp7htPg+StRJrL0xbXOY5GbrrilFc+/A2LjG40CnuNT7/
xN9gSPehZrc0ChsQdgGBl0gVcjIIzraoekUOGzwZFtsaXzvC0N8TNOgkfMr3MWEK
gytXXTGIqGlo8Lqqhfk240li9PXmNA1MhiXsuiXZ1kduznsdGbu3zbw4Q8qJsf2B
rT1PU9JK84Rd0g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client