Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json)
Hash identifier: Lkn92dxXv6LttAbGtqjBKyCRH/1G5xScQysaFMpS3Q8=
Subject key identifier: 3C:D0:7F:8B:38:9B:A6:66:7A:35:53:73:C0:F2:95:13:2B:5E:B8:9B
Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Certificate serial: 019A4C97C2C8453101DD99D0A61CFEC46B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 02:00:05 +0000
Manifest this update: Tue 04 Nov 2025 02:00:05 +0000
Manifest next update: Wed 05 Nov 2025 02:00:05 +0000
Files and hashes: 1: LzSQuYv1x63WY7QfqJCJtkZHVLg.roa (hash: wpzsWwm4YF25nKdgTs214tQfh9B7Ss09QnFGWVON9kQ=)
2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: i8fHzbmXF5+hO1FRCpQXcOA496zfL6geuFLvO6GpJiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:c2:c8:45:31:01:dd:99:d0:a6:1c:fe:c4:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3
Validity
Not Before: Nov 4 02:00:05 2025 GMT
Not After : Nov 5 02:00:05 2025 GMT
Subject: CN=3cd07f8b389ba6667a355373c0f295132b5eb89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:08:fd:27:9a:7f:23:27:b3:db:b5:5a:75:
75:fa:8e:10:d6:b3:35:32:dd:ac:6d:2d:15:b6:e9:
9a:10:ac:6b:ef:55:36:f4:7e:c7:e8:fd:29:07:8b:
6a:f1:eb:77:c0:93:90:8f:57:f8:df:c8:fc:a7:4e:
f1:78:c8:7d:93:36:27:2f:12:1f:22:59:04:4d:47:
62:e8:06:09:a8:90:3a:72:69:30:7e:50:51:9f:78:
2d:e3:5a:0a:85:ba:fe:06:a9:db:a3:f8:21:d6:4a:
e7:ef:9d:b6:fc:4c:13:99:6a:be:81:32:08:3b:72:
a9:c5:7f:fa:4c:47:f2:0c:1b:c5:93:f0:b5:2c:e0:
33:23:42:f4:1c:4f:b3:9b:f6:fe:30:7e:2c:23:a4:
5a:b6:73:43:f5:23:31:13:13:0e:6d:4f:69:ee:9a:
f4:30:e3:3c:51:b1:83:d6:ad:2f:40:5a:fe:74:52:
26:a6:ce:e1:35:7c:9d:dd:4c:55:5a:4f:30:4b:bb:
24:64:af:aa:9e:72:1d:ef:2b:9e:76:fb:6e:ac:a5:
35:2f:29:8b:9f:76:c9:a5:fc:19:32:a1:30:06:94:
f5:04:68:54:4d:57:2a:07:73:8d:1b:7e:a5:7e:01:
1b:1d:8e:97:cd:c3:00:10:0f:31:5f:e9:e4:ec:ca:
db:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D0:7F:8B:38:9B:A6:66:7A:35:53:73:C0:F2:95:13:2B:5E:B8:9B
X509v3 Authority Key Identifier:
keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e8:6a:be:19:e8:87:08:46:04:40:f7:73:2f:76:62:7f:4c:
1e:8e:bf:61:26:07:1f:72:4e:a8:a9:73:ec:18:04:a8:99:9c:
40:0c:a9:a2:70:71:90:37:7a:fc:ce:d0:53:64:69:77:a8:3c:
90:0a:f7:14:6e:7e:ff:32:76:bf:bc:b4:5d:9b:32:77:9b:d5:
78:b6:6e:c9:30:d5:5d:98:ad:a2:7c:e1:de:d6:86:11:d5:aa:
c4:e9:55:f7:68:d2:29:98:66:62:27:fd:3e:65:20:07:c8:82:
af:d3:31:fa:c4:94:91:e2:c8:ff:a8:53:ab:f3:b9:3a:ce:43:
e8:52:0a:1e:36:bb:70:6b:ba:f1:70:98:e0:f2:c0:af:4f:66:
61:32:a8:fb:7e:bb:1c:e3:08:ef:31:d7:0c:62:75:3b:d6:6a:
df:67:70:6b:2c:8b:5f:ad:10:7f:a6:71:e3:e2:8e:a2:95:39:
3d:81:51:2f:82:c9:89:bf:03:9d:4c:9d:82:95:96:19:8e:72:
ec:b9:dc:61:99:ce:ea:0a:b6:14:e1:a3:7f:94:87:61:b8:26:
48:92:6b:7d:0e:3a:43:69:c0:8b:c2:65:80:8e:22:46:08:5a:
6f:b2:00:3b:96:60:cd:a5:c7:3b:d0:14:ef:7b:04:10:d5:30:
4d:3d:68:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMl8LIRTEB3ZnQphz+xGscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWRlNWY0ZmVjMTZmNTE2ZjBiYzRkNjMxYzI2Mjc2NjNm
OTA1ZjMwHhcNMjUxMTA0MDIwMDA1WhcNMjUxMTA1MDIwMDA1WjAzMTEwLwYDVQQD
EygzY2QwN2Y4YjM4OWJhNjY2N2EzNTUzNzNjMGYyOTUxMzJiNWViODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuisI/SeafyMns9u1WnV1+o4Q1rM1
Mt2sbS0VtumaEKxr71U29H7H6P0pB4tq8et3wJOQj1f438j8p07xeMh9kzYnLxIf
IlkETUdi6AYJqJA6cmkwflBRn3gt41oKhbr+Bqnbo/gh1krn7522/EwTmWq+gTII
O3KpxX/6TEfyDBvFk/C1LOAzI0L0HE+zm/b+MH4sI6RatnND9SMxExMObU9p7pr0
MOM8UbGD1q0vQFr+dFImps7hNXyd3UxVWk8wS7skZK+qnnId7yuedvturKU1LymL
n3bJpfwZMqEwBpT1BGhUTVcqB3ONG36lfgEbHY6XzcMAEA8xX+nk7MrbOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzQf4s4m6ZmejVTc8DylRMrXribMB8GA1UdIwQY
MBaAFM9d5fT+wW9RbwvE1jHCYnZj+QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2Njkt
NmZlMTQ5NGZiYzJjLzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2NjktNmZlMTQ5NGZiYzJj
LzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+hqvhno
hwhGBED3cy92Yn9MHo6/YSYHH3JOqKlz7BgEqJmcQAyponBxkDd6/M7QU2Rpd6g8
kAr3FG5+/zJ2v7y0XZsyd5vVeLZuyTDVXZitonzh3taGEdWqxOlV92jSKZhmYif9
PmUgB8iCr9Mx+sSUkeLI/6hTq/O5Os5D6FIKHja7cGu68XCY4PLAr09mYTKo+367
HOMI7zHXDGJ1O9Zq32dwayyLX60Qf6Zx4+KOopU5PYFRL4LJib8DnUydgpWWGY5y
7LncYZnO6gq2FOGjf5SHYbgmSJJrfQ46Q2nAi8JlgI4iRghab7IAO5ZgzaXHO9AU
73sEENUwTT1oSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:47 2025 by rpki-client