
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: gnVusVuMG628uf2P2t/sKei718oEgBhHFpK+a3qByMM=
Subject key identifier: 41:1C:D6:96:17:3C:55:B5:CB:71:2B:85:85:BF:F9:4A:80:C7:93:5B
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019893A3A8B1E2B21EB18C512097283D87C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 162F
Signing time: Sun 10 Aug 2025 11:00:32 +0000
Manifest this update: Sun 10 Aug 2025 11:00:32 +0000
Manifest next update: Mon 11 Aug 2025 11:00:32 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
4: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: y3tVxM3T8OKA2lJ0IEjJC6Ll9IxOHGkjkbN7MuZPDQ8=)
5: nHMt9tnZDRx6m3JgaG-0g5rC0g0.roa (hash: 1doY6wOIAWaSvtGgJud3474i9gzt/qEdhjfPhIJDXfE=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:a8:b1:e2:b2:1e:b1:8c:51:20:97:28:3d:87:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Aug 10 11:00:32 2025 GMT
Not After : Aug 11 11:00:32 2025 GMT
Subject: CN=411cd696173c55b5cb712b8585bff94a80c7935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:62:4d:37:96:54:1d:3d:c4:21:ec:60:6b:95:
4b:69:2b:a2:1f:55:d0:04:28:1d:c5:8a:f3:ff:02:
8f:f9:04:14:b6:13:70:61:57:0e:61:c5:8d:5f:73:
98:ca:15:ce:90:2a:1f:9b:17:61:7e:1b:b5:c0:58:
e0:81:27:7a:82:03:5e:1c:95:3f:e4:45:bd:09:8f:
52:46:86:98:c5:53:5b:9c:31:c0:e0:21:90:13:20:
6f:01:e0:27:c6:1f:8d:b9:b0:99:a9:cc:b8:32:b7:
22:81:e5:28:79:d3:ce:b0:64:c7:4d:0f:e5:56:9c:
da:9e:13:fb:34:9c:96:b2:48:24:d8:c3:ea:44:f2:
ae:0f:7a:62:b9:49:f7:50:42:59:2c:47:26:11:fa:
5a:1b:ee:a6:5a:7a:53:5b:76:04:a1:ce:3d:11:f2:
c7:ea:5f:cc:05:39:51:76:3a:f7:c6:9d:1d:5f:48:
71:aa:f9:1d:cc:2d:26:43:fc:b4:5c:a1:dd:93:e3:
73:17:78:ec:2b:85:ba:fa:97:b8:0e:a9:ba:26:27:
e4:6d:3c:9c:b5:71:ad:a8:82:6d:a4:cf:53:60:81:
86:2a:d4:98:50:60:a3:57:19:ba:e1:d5:94:0b:92:
55:04:dc:fe:15:e2:0a:e9:18:b7:19:09:d5:f6:d1:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:D6:96:17:3C:55:B5:CB:71:2B:85:85:BF:F9:4A:80:C7:93:5B
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6c:f2:6f:77:98:d9:3d:10:94:0a:02:49:24:d2:3f:5b:43:
f2:03:0b:f7:27:b5:28:6c:4c:12:bf:a8:c3:3c:8f:ad:65:37:
e9:e5:2a:92:b5:6c:1a:33:39:21:9d:39:dc:ec:31:df:15:2b:
8e:5c:74:99:80:92:64:53:76:31:cf:d6:d7:f7:14:08:1a:e9:
c6:28:00:58:b3:07:fb:b8:cb:27:31:c1:cd:ed:12:fb:5c:b2:
bc:c2:6d:d5:aa:0f:0a:62:5d:51:09:73:eb:52:43:2b:31:1e:
f7:f5:d5:e1:82:3a:2d:c6:f3:8e:bf:46:9b:0e:40:7b:46:a2:
0f:79:9b:38:af:0b:39:dd:9d:d5:b9:88:42:9b:f4:4b:84:7f:
c6:06:3f:d7:65:f0:6a:9a:a8:96:72:b3:0a:34:43:ff:e0:00:
6b:cd:4d:32:9d:ec:ca:c8:39:d2:99:5d:bf:60:1f:64:19:f4:
39:69:af:e4:3d:21:d0:0f:d3:93:25:37:73:fb:b9:00:b3:0a:
e7:82:72:bd:cc:75:bb:df:cb:6a:f0:58:bc:0e:d9:e2:95:94:
a7:26:04:f5:80:8f:8d:cc:29:d7:b1:56:39:92:9d:2a:ba:3e:
f0:c6:93:3e:bd:70:bb:05:ab:33:b4:74:f2:31:f4:23:1e:36:
95:d9:cf:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTo6ix4rIesYxRIJcoPYfEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjUwODEwMTEwMDMyWhcNMjUwODExMTEwMDMyWjAzMTEwLwYDVQQD
Eyg0MTFjZDY5NjE3M2M1NWI1Y2I3MTJiODU4NWJmZjk0YTgwYzc5MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62JNN5ZUHT3EIexga5VLaSuiH1XQ
BCgdxYrz/wKP+QQUthNwYVcOYcWNX3OYyhXOkCofmxdhfhu1wFjggSd6ggNeHJU/
5EW9CY9SRoaYxVNbnDHA4CGQEyBvAeAnxh+NubCZqcy4MrcigeUoedPOsGTHTQ/l
VpzanhP7NJyWskgk2MPqRPKuD3piuUn3UEJZLEcmEfpaG+6mWnpTW3YEoc49EfLH
6l/MBTlRdjr3xp0dX0hxqvkdzC0mQ/y0XKHdk+NzF3jsK4W6+pe4Dqm6JifkbTyc
tXGtqIJtpM9TYIGGKtSYUGCjVxm64dWUC5JVBNz+FeIK6Ri3GQnV9tHNrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEc1pYXPFW1y3ErhYW/+UqAx5NbMB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWzyb3eY
2T0QlAoCSSTSP1tD8gML9ye1KGxMEr+owzyPrWU36eUqkrVsGjM5IZ053Owx3xUr
jlx0mYCSZFN2Mc/W1/cUCBrpxigAWLMH+7jLJzHBze0S+1yyvMJt1aoPCmJdUQlz
61JDKzEe9/XV4YI6Lcbzjr9Gmw5Ae0aiD3mbOK8LOd2d1bmIQpv0S4R/xgY/12Xw
apqolnKzCjRD/+AAa81NMp3sysg50pldv2AfZBn0OWmv5D0h0A/TkyU3c/u5ALMK
54Jyvcx1u9/LavBYvA7Z4pWUpyYE9YCPjcwp17FWOZKdKro+8MaTPr1wuwWrM7R0
8jH0Ix42ldnPTg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:28 2025 by rpki-client