Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
File: zCFfWBWexXaiAid26mT2HFuwAZQ.mft (raw, json)
Hash identifier: MyrD3h19ej0k1iUgqTRZeQtatHGIz31+hqhucNO7cG0=
Subject key identifier: 32:37:13:04:10:79:F0:1D:EF:DF:DD:C4:24:19:17:46:F1:B9:3C:8B
Authority key identifier: CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
Certificate issuer: /CN=cc215f58159ec576a2022776ea64f61c5bb00194
Certificate serial: 019A5375D82420CF3293210B5CD47FAB2E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 10:00:23 +0000
Manifest this update: Wed 05 Nov 2025 10:00:23 +0000
Manifest next update: Thu 06 Nov 2025 10:00:23 +0000
Files and hashes: 1: 2Ny-ueNvAFjL9IDe1yMO8HfDBJE.roa (hash: SriKAtzLJClJ8RYlJnsDDGPLefd9t0TyrlM6Ndh0w6s=)
2: HSDe33dztyDbbAh5edeiMrBstpw.roa (hash: hMHbKz19ucgy7N1gbQNpI/GP1wKSKMSFktFakjiCIw4=)
3: QRtKZhH9f2q5Qs4y3jok3HnjFK0.roa (hash: kTYNUIGwJLwA+YttUf3vVXejkVq8FL+41G3GFzyW8/w=)
4: jjYT0ual1nIv5rmaeDjlNg2jdtU.roa (hash: OjHVmf3z6fImr8f0+RF/L2hzt0WZmr2JT7HoyHilItc=)
5: vGoHfriPki42R6sM4AGNaZ6Sim4.roa (hash: QcwTT5U/Z4Mw3Ga8Qis4P0Rl1OjYiRfOAUfd5c277Jw=)
6: zCFfWBWexXaiAid26mT2HFuwAZQ.crl (hash: dgm90oXUV1Rn2MPKOGpewo2JFmdqKt93s9lKK7D01sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:d8:24:20:cf:32:93:21:0b:5c:d4:7f:ab:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc215f58159ec576a2022776ea64f61c5bb00194
Validity
Not Before: Nov 5 10:00:23 2025 GMT
Not After : Nov 6 10:00:23 2025 GMT
Subject: CN=323713041079f01defdfddc424191746f1b93c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:8b:5c:e7:d8:1c:01:55:da:c4:04:29:d2:
ed:6d:e6:5c:4f:5a:35:3b:1d:68:44:fc:e7:da:21:
24:f4:f5:59:4c:ed:b0:82:84:e1:b6:02:d7:12:79:
06:4b:67:ab:6e:d4:7b:95:3e:8d:39:03:42:91:c7:
d4:7b:5d:27:fc:59:bc:55:8d:70:c2:5d:2b:ca:1b:
fc:31:da:e5:17:a3:e6:e4:1e:a9:09:ab:e0:56:30:
d4:43:28:20:0b:56:4f:50:3b:ba:45:f7:73:3d:8d:
4f:77:3c:6a:03:fc:d1:e6:74:16:b5:5b:1a:03:80:
46:91:ad:bc:fe:7b:5d:58:d1:0e:0b:fe:1a:4f:91:
b1:f9:15:21:7a:99:95:cf:b4:29:b5:2b:16:f0:24:
01:9b:82:d5:0f:f0:a3:32:35:68:94:48:17:c9:b7:
ca:dc:d2:a6:0b:00:87:d9:45:fe:57:bc:17:55:b2:
68:b3:b4:c5:03:93:a0:e2:ed:cd:0a:1d:68:b9:a3:
7d:86:b8:11:5c:19:e4:fb:2f:27:a3:2c:cd:17:9a:
9b:3a:d3:95:b8:d9:c1:d6:e4:1a:0d:01:ca:ef:82:
a9:11:aa:06:ea:f3:64:4b:12:22:2e:42:16:77:9f:
05:02:1e:20:08:ec:74:b3:08:6b:96:15:61:18:ef:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:13:04:10:79:F0:1D:EF:DF:DD:C4:24:19:17:46:F1:B9:3C:8B
X509v3 Authority Key Identifier:
keyid:CC:21:5F:58:15:9E:C5:76:A2:02:27:76:EA:64:F6:1C:5B:B0:01:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCFfWBWexXaiAid26mT2HFuwAZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ebc748-6826-4140-a8e0-843eeee0a260/1/zCFfWBWexXaiAid26mT2HFuwAZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9a:a9:08:4c:6b:fe:e3:8f:3a:bd:18:90:a5:bc:b6:61:74:
4b:cd:27:41:fd:d4:78:ae:c1:3a:57:55:7b:18:a9:3d:d0:8d:
51:b3:0b:df:65:7b:1b:95:f9:ff:99:ce:e1:d8:8a:2d:d1:00:
31:ab:87:f0:f1:29:59:7d:97:ae:c2:41:ea:32:b0:2b:7e:b5:
cb:f9:b6:98:cc:b2:0c:3b:18:e6:07:ac:3d:63:60:f8:d4:85:
a2:1e:5a:77:62:4f:57:82:45:b7:99:82:96:87:06:c1:60:0e:
74:ae:6e:e2:be:74:89:e4:ef:45:c0:18:6d:9e:08:f5:ac:3f:
23:02:84:5f:e8:1f:b9:04:bf:a0:32:8e:04:81:e0:e1:85:ec:
9e:ff:ae:d1:45:e8:b4:be:ce:c3:44:4f:b5:5f:60:6e:60:f4:
5c:5c:5e:b3:29:22:26:03:8d:91:98:29:27:86:28:d5:28:3e:
78:ad:b1:d5:95:f6:af:80:0d:c1:cc:49:2b:0a:bf:29:c5:36:
33:7a:56:68:fb:a4:f2:95:2a:0d:f9:b9:ea:42:da:ac:3f:0c:
23:1e:17:cf:4c:e2:d9:a7:22:7e:c2:17:3c:0e:cb:3b:61:0c:
70:e1:d2:46:25:a2:a3:76:0e:d1:48:8a:5a:94:97:f6:ee:11:
2f:fd:8e:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTddgkIM8ykyELXNR/qy6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMjE1ZjU4MTU5ZWM1NzZhMjAyMjc3NmVhNjRmNjFjNWJi
MDAxOTQwHhcNMjUxMTA1MTAwMDIzWhcNMjUxMTA2MTAwMDIzWjAzMTEwLwYDVQQD
EygzMjM3MTMwNDEwNzlmMDFkZWZkZmRkYzQyNDE5MTc0NmYxYjkzYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxeLXOfYHAFV2sQEKdLtbeZcT1o1
Ox1oRPzn2iEk9PVZTO2wgoThtgLXEnkGS2erbtR7lT6NOQNCkcfUe10n/Fm8VY1w
wl0ryhv8MdrlF6Pm5B6pCavgVjDUQyggC1ZPUDu6RfdzPY1PdzxqA/zR5nQWtVsa
A4BGka28/ntdWNEOC/4aT5Gx+RUhepmVz7QptSsW8CQBm4LVD/CjMjVolEgXybfK
3NKmCwCH2UX+V7wXVbJos7TFA5Og4u3NCh1ouaN9hrgRXBnk+y8noyzNF5qbOtOV
uNnB1uQaDQHK74KpEaoG6vNkSxIiLkIWd58FAh4gCOx0swhrlhVhGO9VoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI3EwQQefAd79/dxCQZF0bxuTyLMB8GA1UdIwQY
MBaAFMwhX1gVnsV2ogIndupk9hxbsAGUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAt
ODQzZWVlZTBhMjYwLzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lYmM3NDgtNjgyNi00MTQwLWE4ZTAtODQzZWVlZTBhMjYw
LzEvekNGZldCV2V4WGFpQWlkMjZtVDJIRnV3QVpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJqpCExr
/uOPOr0YkKW8tmF0S80nQf3UeK7BOldVexipPdCNUbML32V7G5X5/5nO4diKLdEA
MauH8PEpWX2XrsJB6jKwK361y/m2mMyyDDsY5gesPWNg+NSFoh5ad2JPV4JFt5mC
locGwWAOdK5u4r50ieTvRcAYbZ4I9aw/IwKEX+gfuQS/oDKOBIHg4YXsnv+u0UXo
tL7Ow0RPtV9gbmD0XFxesykiJgONkZgpJ4Yo1Sg+eK2x1ZX2r4ANwcxJKwq/KcU2
M3pWaPuk8pUqDfm56kLarD8MIx4Xz0zi2acifsIXPA7LO2EMcOHSRiWio3YO0UiK
WpSX9u4RL/2Olw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:43 2025 by rpki-client