Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
File: Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft (raw, json)
Hash identifier: 8bHa3DH9Tu78tUZEGCGw8m4bSaUBeZsEemyfGW7WwVg=
Subject key identifier: 30:F7:80:EC:EF:C2:32:5F:FE:6E:47:D5:DC:0F:55:12:E3:A8:A0:6C
Authority key identifier: 67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
Certificate issuer: /CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Certificate serial: 019A4DE1F7B8E42FB82D22C3CB9F70E7BD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
Manifest number: 0607
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: CzKe7bcDbHPl7S7VFX1GJ1fjZ-U.roa (hash: YjWNT62+NZ4QheBAVnVeuwY8eccUxnidCuMqn96YN2M=)
2: Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl (hash: lc4DsLFs6ebZ9pMjMSxzAvilAxU2BR0jKioKoDeXTcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f7:b8:e4:2f:b8:2d:22:c3:cb:9f:70:e7:bd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cf3ba3002ed7e23a4bd2e978b3abac327fd0d8
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=30f780ecefc2325ffe6e47d5dc0f5512e3a8a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a7:f1:70:70:a4:78:52:39:b3:02:7e:4e:52:
14:89:09:c8:b4:0d:1f:b5:22:0c:d2:82:ce:14:57:
ae:2d:79:e3:97:97:d5:be:a3:5d:6a:88:53:0d:39:
15:1f:d7:5f:cf:02:f0:6b:c2:ad:68:e9:64:6b:ae:
06:99:e8:1d:29:49:52:6d:59:af:49:c6:8e:da:c2:
05:26:f1:6b:d2:ae:d6:ef:89:14:31:14:21:a7:97:
35:75:1d:52:e7:ce:fe:e6:28:40:85:53:a4:7c:56:
ba:d3:89:bd:f9:af:cf:34:1a:d8:6d:20:c1:96:fb:
8e:bd:54:72:7d:eb:db:b1:4b:a0:d2:50:af:ac:d1:
ab:12:ce:90:a7:6c:e9:6c:e7:fe:ec:54:ab:92:08:
84:c6:68:7f:5e:93:41:bd:ef:ac:2b:88:f6:3d:3f:
f2:94:6e:f4:ff:dd:7b:7c:60:3d:20:b9:a4:09:83:
ee:e2:02:34:ed:42:12:98:9b:66:29:79:b1:ae:1b:
18:de:03:57:ed:0f:3d:dd:6e:12:10:2f:c3:60:e0:
91:b3:85:70:1e:40:91:e2:75:ec:e9:85:be:e8:ec:
26:cf:ef:02:90:99:f9:4c:bf:c8:cb:91:1d:5f:e0:
5e:71:21:0f:67:b1:72:b0:79:50:e6:f3:7c:76:35:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F7:80:EC:EF:C2:32:5F:FE:6E:47:D5:DC:0F:55:12:E3:A8:A0:6C
X509v3 Authority Key Identifier:
keyid:67:CF:3B:A3:00:2E:D7:E2:3A:4B:D2:E9:78:B3:AB:AC:32:7F:D0:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z887owAu1-I6S9LpeLOrrDJ_0Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/9428c6-b576-41c3-985d-234e0d176325/1/Z887owAu1-I6S9LpeLOrrDJ_0Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:df:6c:ad:7e:c3:ba:2f:c2:05:2c:4c:0f:f3:bb:3d:3b:68:
cd:61:23:b6:01:6e:7e:aa:b6:a2:ca:81:d8:1e:7f:e5:c6:92:
3d:08:8b:45:8e:ee:af:e1:6d:80:97:c8:78:5d:7b:8d:b9:d5:
3c:1f:a4:67:8f:d9:3c:5f:9c:8a:06:1a:ea:8e:91:d1:ae:40:
cc:11:c7:37:98:80:1e:45:96:99:37:07:2b:25:33:c8:d0:ed:
ab:09:40:cc:ea:1d:8f:ee:3b:a8:1e:e3:96:4b:28:7f:74:b4:
0d:dd:4f:f9:d1:5a:63:b4:bf:d9:ff:bf:02:b6:5e:4f:2e:f0:
12:75:9b:f0:6c:d1:d6:d0:17:3d:c2:01:b9:b0:05:61:10:a7:
c7:91:d9:fd:46:cb:e6:3d:3c:71:9d:bf:78:ee:90:8f:65:29:
24:a7:bf:27:a3:06:2e:f9:1d:36:c3:8b:0f:23:f8:0b:39:4d:
d4:82:4b:e7:08:21:0b:1a:93:25:61:f3:7a:f3:96:bf:e3:36:
e1:70:15:0b:5e:d2:f9:6f:51:db:d1:45:8e:2d:99:9c:80:e8:
c8:6b:a1:5d:0b:38:37:84:91:38:fa:01:96:0d:46:21:d4:f9:
c3:30:de:06:3b:d0:a2:ca:65:ac:9d:de:2d:6a:43:87:46:81:
e0:b9:5b:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fe45C+4LSLDy59w572SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2YzYmEzMDAyZWQ3ZTIzYTRiZDJlOTc4YjNhYmFjMzI3
ZmQwZDgwHhcNMjUxMTA0MDgwMDQ1WhcNMjUxMTA1MDgwMDQ1WjAzMTEwLwYDVQQD
EygzMGY3ODBlY2VmYzIzMjVmZmU2ZTQ3ZDVkYzBmNTUxMmUzYThhMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6fxcHCkeFI5swJ+TlIUiQnItA0f
tSIM0oLOFFeuLXnjl5fVvqNdaohTDTkVH9dfzwLwa8KtaOlka64GmegdKUlSbVmv
ScaO2sIFJvFr0q7W74kUMRQhp5c1dR1S587+5ihAhVOkfFa604m9+a/PNBrYbSDB
lvuOvVRyfevbsUug0lCvrNGrEs6Qp2zpbOf+7FSrkgiExmh/XpNBve+sK4j2PT/y
lG70/917fGA9ILmkCYPu4gI07UISmJtmKXmxrhsY3gNX7Q893W4SEC/DYOCRs4Vw
HkCR4nXs6YW+6Owmz+8CkJn5TL/Iy5EdX+BecSEPZ7FysHlQ5vN8djXnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD3gOzvwjJf/m5H1dwPVRLjqKBsMB8GA1UdIwQY
MBaAFGfPO6MALtfiOkvS6Xizq6wyf9DYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQt
MjM0ZTBkMTc2MzI1LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85NDI4YzYtYjU3Ni00MWMzLTk4NWQtMjM0ZTBkMTc2MzI1
LzEvWjg4N293QXUxLUk2UzlMcGVMT3JyREpfME5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN9srX7D
ui/CBSxMD/O7PTtozWEjtgFufqq2osqB2B5/5caSPQiLRY7ur+FtgJfIeF17jbnV
PB+kZ4/ZPF+cigYa6o6R0a5AzBHHN5iAHkWWmTcHKyUzyNDtqwlAzOodj+47qB7j
lksof3S0Dd1P+dFaY7S/2f+/ArZeTy7wEnWb8GzR1tAXPcIBubAFYRCnx5HZ/UbL
5j08cZ2/eO6Qj2UpJKe/J6MGLvkdNsOLDyP4CzlN1IJL5wghCxqTJWHzevOWv+M2
4XAVC17S+W9R29FFji2ZnIDoyGuhXQs4N4SROPoBlg1GIdT5wzDeBjvQosplrJ3e
LWpDh0aB4LlbvQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:53 2025 by rpki-client