Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
File: z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft (raw, json)
Hash identifier: 2RNuXmKi+TWWoAown7HZBxxNFzrZOOrstNfGl7n1Ji8=
Subject key identifier: E9:53:4F:6D:BE:B1:89:48:3D:43:44:A2:2D:01:E5:11:FF:EE:AF:51
Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Certificate serial: 019A4DE1F5EE94AA46D33D235A134B04AD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: hPBXvKQdaqlVU4nQ-2Te7vaa8Bo.roa (hash: c9xr2QPdOJHBS76dYaN+BTyMMmlA60SbcteFKaCmJMA=)
2: z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl (hash: eKJocOaj4dGtRGlPLWPgic7gq+eLtjMjIjwrPccH1iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f5:ee:94:aa:46:d3:3d:23:5a:13:4b:04:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=e9534f6dbeb189483d4344a22d01e511ffeeaf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:d0:b8:84:a9:25:21:29:87:ba:d7:d5:1a:
f7:86:ab:05:a9:88:a8:b2:c9:f1:24:86:32:29:da:
74:25:fb:57:3d:cc:84:fb:0b:47:78:94:86:60:6d:
71:3d:2b:2f:92:c1:c2:45:94:da:43:f3:7d:80:d2:
75:27:78:ab:19:d2:f0:3d:85:7d:ed:fa:f4:da:4f:
9d:20:2f:e2:a2:f2:b2:8c:ea:c1:c0:1b:86:48:81:
40:fc:ba:5b:84:8b:9c:ca:b8:c2:f8:96:c1:c1:a2:
6f:ec:65:ca:ed:49:39:7b:35:62:fa:f5:8b:7c:2c:
71:1e:f6:48:6c:0c:0e:d2:ef:cb:c2:d4:8b:b0:54:
ec:4e:af:f0:68:f0:8b:bd:d0:db:6a:b7:d3:5e:06:
b6:0d:ad:9e:59:bf:57:71:b8:d1:63:23:8a:b4:87:
70:5b:78:63:81:4a:e5:8d:00:61:f6:4f:f3:e4:10:
b6:5d:28:3f:6e:24:2a:14:38:0d:36:99:5b:ce:e2:
d2:d5:c2:8a:f1:4d:e4:2b:98:cb:02:af:82:c1:09:
65:e5:d3:9c:48:30:40:32:fd:57:0f:31:71:43:b1:
a2:ad:6c:a1:60:b1:c8:cd:47:88:63:b6:fe:e2:75:
f0:c6:e5:6c:f5:c5:9a:d4:d4:09:ba:8b:c3:32:57:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:53:4F:6D:BE:B1:89:48:3D:43:44:A2:2D:01:E5:11:FF:EE:AF:51
X509v3 Authority Key Identifier:
keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4e:cf:95:cb:76:ed:66:6c:32:cc:48:ae:a7:c2:87:72:a3:
1f:66:a0:56:9a:47:62:c6:31:ad:a9:ed:b4:32:76:52:4b:50:
c9:7e:e3:67:f4:8a:63:24:32:e0:ce:a4:ab:e2:90:9c:6f:b6:
7a:ce:03:43:ca:2f:c0:2c:93:e3:3b:5f:f0:dc:7c:d1:c4:be:
34:c1:53:0f:f8:a9:8d:db:e2:c5:ff:bd:63:c6:97:a3:1d:ca:
5b:9d:e1:bb:8e:ed:74:85:a0:9c:50:b3:35:5b:f7:77:4f:6e:
0c:ae:c8:9d:fa:a2:2c:39:8c:f4:af:38:f3:9b:ac:45:77:de:
49:3f:d9:da:40:94:58:28:26:48:b5:c8:bd:c8:27:1e:0e:89:
37:33:7e:aa:bd:71:bd:6f:15:63:f1:e8:0e:f9:76:18:e5:d1:
b5:f0:8b:6d:e0:4c:7e:ef:21:89:67:3d:ab:3d:ce:2f:bd:e8:
51:ed:3b:73:cd:09:0b:db:cc:67:f5:df:81:98:78:cb:11:74:
85:31:0c:e1:d8:1c:b5:11:5a:f7:d2:6d:76:57:6b:9d:8d:86:
56:a1:f1:7c:f9:d2:51:cd:e7:01:64:2e:e5:15:04:5e:58:46:
d9:b7:dc:bd:e2:5d:c6:82:15:1a:6c:1a:a3:b8:6f:a2:9f:af:
74:e9:14:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fXulKpG0z0jWhNLBK05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjYyMjRiY2ZiOGI4MmRlYWFiYWM4YzRjYTI1MDM3MWI5
NzQ2MTEwHhcNMjUxMTA0MDgwMDQ1WhcNMjUxMTA1MDgwMDQ1WjAzMTEwLwYDVQQD
EyhlOTUzNGY2ZGJlYjE4OTQ4M2Q0MzQ0YTIyZDAxZTUxMWZmZWVhZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr77QuISpJSEph7rX1Rr3hqsFqYio
ssnxJIYyKdp0JftXPcyE+wtHeJSGYG1xPSsvksHCRZTaQ/N9gNJ1J3irGdLwPYV9
7fr02k+dIC/iovKyjOrBwBuGSIFA/LpbhIucyrjC+JbBwaJv7GXK7Uk5ezVi+vWL
fCxxHvZIbAwO0u/LwtSLsFTsTq/waPCLvdDbarfTXga2Da2eWb9XcbjRYyOKtIdw
W3hjgUrljQBh9k/z5BC2XSg/biQqFDgNNplbzuLS1cKK8U3kK5jLAq+CwQll5dOc
SDBAMv1XDzFxQ7GirWyhYLHIzUeIY7b+4nXwxuVs9cWa1NQJuovDMld32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlTT22+sYlIPUNEoi0B5RH/7q9RMB8GA1UdIwQY
MBaAFM9mIkvPuLgt6qusjEyiUDcbl0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjIt
Yjk1NGM1MGZkYmIwLzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjItYjk1NGM1MGZkYmIw
LzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAik7Plct2
7WZsMsxIrqfCh3KjH2agVppHYsYxranttDJ2UktQyX7jZ/SKYyQy4M6kq+KQnG+2
es4DQ8ovwCyT4ztf8Nx80cS+NMFTD/ipjdvixf+9Y8aXox3KW53hu47tdIWgnFCz
NVv3d09uDK7InfqiLDmM9K8485usRXfeST/Z2kCUWCgmSLXIvcgnHg6JNzN+qr1x
vW8VY/HoDvl2GOXRtfCLbeBMfu8hiWc9qz3OL73oUe07c80JC9vMZ/XfgZh4yxF0
hTEM4dgctRFa99JtdldrnY2GVqHxfPnSUc3nAWQu5RUEXlhG2bfcveJdxoIVGmwa
o7hvop+vdOkUQg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:28 2025 by rpki-client