Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: 10I2a9VRGXfjxycfiodzvpl9LpBxw+23WmhLeYvn5Vg=
Subject key identifier: DE:71:F1:A8:CF:73:FB:36:27:9B:E9:7C:20:FD:B6:5C:C8:59:F1:81
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 019A4E18A8CFA551D72323BE24E75689A94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 1432
Signing time: Tue 04 Nov 2025 09:00:30 +0000
Manifest this update: Tue 04 Nov 2025 09:00:30 +0000
Manifest next update: Wed 05 Nov 2025 09:00:30 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: EB6iPG9cqtjsLNJydTA/wkMInmqfdOreU6gn+Dxa/KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:a8:cf:a5:51:d7:23:23:be:24:e7:56:89:a9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Nov 4 09:00:30 2025 GMT
Not After : Nov 5 09:00:30 2025 GMT
Subject: CN=de71f1a8cf73fb36279be97c20fdb65cc859f181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:d6:a2:b9:42:a4:c9:e6:01:11:5c:06:19:
1a:51:d8:d8:d8:14:2e:54:18:05:1c:63:35:f2:4b:
95:77:46:13:c8:4e:d1:1b:cd:6c:ba:a9:20:81:97:
33:59:fb:79:4a:04:ad:cb:82:b1:2d:2d:87:d4:f3:
cf:cf:7c:5a:56:79:80:44:4b:69:98:e9:32:12:9e:
5e:3d:cb:cc:0f:15:33:86:2e:4a:bf:b4:c7:ee:dd:
c1:aa:ad:3f:a3:e7:18:89:a1:22:3d:e2:18:af:19:
9c:6d:de:53:2e:19:c3:51:55:51:fb:f3:7f:f5:27:
ae:ba:73:bb:57:c7:74:2b:7f:21:e3:cd:61:87:d0:
fd:1d:08:ba:e8:f3:95:59:4e:7b:ea:53:f1:f5:9f:
61:1a:25:bb:53:bb:e6:42:99:f3:4e:32:61:6f:f0:
ed:b6:a7:a7:00:b4:75:25:95:bd:a6:a8:44:57:01:
99:b0:11:5d:eb:0c:d1:82:bf:51:66:06:c3:e1:8b:
f2:d3:7c:4e:36:7d:53:f2:f5:ce:f5:7e:9f:83:40:
00:61:52:3e:68:c8:e5:74:88:b4:42:fd:7d:8d:21:
82:f2:25:49:c7:47:3f:11:ab:65:b9:9f:e4:54:a1:
89:c7:3f:5b:4a:7b:59:4b:43:d2:c2:7e:8e:4a:22:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:71:F1:A8:CF:73:FB:36:27:9B:E9:7C:20:FD:B6:5C:C8:59:F1:81
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2d:79:94:ab:27:bc:e9:a8:8a:46:94:1b:fb:0f:59:9d:85:
a7:f3:c6:13:53:a9:78:ab:c0:cc:1e:95:0d:24:08:3f:55:a4:
2b:d1:98:de:90:9a:71:ea:fc:b2:8f:ee:b7:4c:5a:d8:e3:f8:
1f:0d:7f:65:99:9e:d3:97:7e:89:3e:9b:6f:07:ab:93:09:31:
8c:84:e4:0a:3e:a9:c3:61:16:74:9e:94:0d:8b:15:97:65:14:
73:4a:19:6f:0f:77:49:94:a5:d5:9a:4c:38:7a:31:be:75:1c:
23:06:6c:cb:10:90:21:c5:df:78:62:f6:1e:7b:27:e8:ff:b8:
b8:f6:da:a0:13:10:b5:26:40:d9:85:21:d4:15:b1:23:a8:d4:
f6:3d:fa:47:b4:e3:a7:da:e1:06:ee:57:e4:49:01:4b:29:43:
92:25:53:ac:97:2c:5d:1f:c7:19:19:00:47:10:f0:20:f6:c1:
f4:d8:58:f6:19:f3:f1:f2:fd:05:cc:0a:2e:e2:21:eb:4e:00:
a8:9b:1a:bf:8f:07:0a:71:d0:42:17:1c:23:db:89:34:8b:d3:
11:37:46:35:50:3f:17:52:e2:0c:11:dd:b2:30:c3:88:18:d1:
ae:2b:e0:4d:a4:25:b0:53:d1:c5:42:cc:6b:92:71:37:38:89:
13:20:27:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGKjPpVHXIyO+JOdWialMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx
Njk1MDYwHhcNMjUxMTA0MDkwMDMwWhcNMjUxMTA1MDkwMDMwWjAzMTEwLwYDVQQD
EyhkZTcxZjFhOGNmNzNmYjM2Mjc5YmU5N2MyMGZkYjY1Y2M4NTlmMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIXWorlCpMnmARFcBhkaUdjY2BQu
VBgFHGM18kuVd0YTyE7RG81suqkggZczWft5SgSty4KxLS2H1PPPz3xaVnmAREtp
mOkyEp5ePcvMDxUzhi5Kv7TH7t3Bqq0/o+cYiaEiPeIYrxmcbd5TLhnDUVVR+/N/
9SeuunO7V8d0K38h481hh9D9HQi66POVWU576lPx9Z9hGiW7U7vmQpnzTjJhb/Dt
tqenALR1JZW9pqhEVwGZsBFd6wzRgr9RZgbD4Yvy03xONn1T8vXO9X6fg0AAYVI+
aMjldIi0Qv19jSGC8iVJx0c/EatluZ/kVKGJxz9bSntZS0PSwn6OSiIk/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5x8ajPc/s2J5vpfCD9tlzIWfGBMB8GA1UdIwQY
MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct
ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx
LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS15lKsn
vOmoikaUG/sPWZ2Fp/PGE1OpeKvAzB6VDSQIP1WkK9GY3pCacer8so/ut0xa2OP4
Hw1/ZZme05d+iT6bbwerkwkxjITkCj6pw2EWdJ6UDYsVl2UUc0oZbw93SZSl1ZpM
OHoxvnUcIwZsyxCQIcXfeGL2Hnsn6P+4uPbaoBMQtSZA2YUh1BWxI6jU9j36R7Tj
p9rhBu5X5EkBSylDkiVTrJcsXR/HGRkARxDwIPbB9NhY9hnz8fL9BcwKLuIh604A
qJsav48HCnHQQhccI9uJNIvTETdGNVA/F1LiDBHdsjDDiBjRrivgTaQlsFPRxULM
a5JxNziJEyAnMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:47 2025 by rpki-client