Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: Adt3rF7BwfYzZirVyVzKCOmNSDAw/Xc3a5+V6ET5bWw=
Subject key identifier: 53:27:C5:89:22:DF:9A:4A:68:33:B6:36:6E:55:43:8E:71:5D:E6:8B
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 019A522C631BE9F29AB0D3BAEE8B44934453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 04:00:31 +0000
Manifest this update: Wed 05 Nov 2025 04:00:31 +0000
Manifest next update: Thu 06 Nov 2025 04:00:31 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: GaJjHwVRtg2Gxc8GaSu+dUc+ynqG160kbrglgrPt3NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:63:1b:e9:f2:9a:b0:d3:ba:ee:8b:44:93:44:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Nov 5 04:00:31 2025 GMT
Not After : Nov 6 04:00:31 2025 GMT
Subject: CN=5327c58922df9a4a6833b6366e55438e715de68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:72:ab:e3:a1:8e:fb:7a:b6:52:a0:ef:16:
65:82:ae:f8:fc:51:6d:fe:6b:e4:b1:77:23:4f:e4:
a3:5c:ad:0c:f3:e4:b5:f1:2d:0e:15:65:a8:b0:3b:
f3:7d:20:fc:6b:39:f7:d2:3c:dd:36:40:b8:13:2e:
36:f9:ef:5c:e1:c0:28:34:be:2e:45:1b:f2:bc:87:
a9:6a:01:a8:87:71:13:dc:b5:dc:fc:2d:25:e3:ad:
58:15:1a:47:5e:c8:df:f6:25:98:c9:0f:b8:90:71:
b0:e2:c7:9a:0a:af:fe:94:8e:4a:ca:d4:a2:fc:a6:
ec:ca:f8:88:53:87:5e:a5:84:77:fe:65:fb:9d:a5:
19:7e:4d:8e:4f:16:40:b1:1f:13:63:08:95:88:6b:
51:3d:93:7c:8a:f5:76:4a:9c:62:d6:4a:c2:2b:27:
23:31:96:38:a4:d7:73:c5:6d:ed:a0:10:11:2d:c4:
bc:23:b9:d8:5b:93:39:f8:68:88:fb:5a:dd:d2:71:
62:eb:34:07:c7:d9:f8:b0:6a:dd:b0:31:b1:7d:36:
96:f2:70:a9:93:93:fc:89:ad:eb:f3:d9:b8:dc:e5:
52:90:e8:4e:80:a4:24:f7:25:cb:d9:e8:03:bf:dc:
11:a1:c3:be:9c:b8:2e:5a:1f:90:57:ec:c1:a8:57:
81:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:C5:89:22:DF:9A:4A:68:33:B6:36:6E:55:43:8E:71:5D:E6:8B
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:84:26:db:55:bd:11:13:27:34:3d:ed:9f:58:4c:3f:16:34:
fb:6c:f9:0e:b0:88:78:ea:8b:35:41:25:5e:63:d1:6a:4d:33:
5d:8a:7e:60:25:d4:69:9a:6c:75:02:aa:ff:20:d4:97:d0:4e:
8b:e6:9a:9f:21:85:be:8e:a5:a2:c6:68:ba:cf:c2:35:41:6e:
8c:01:59:b5:db:de:70:5d:65:71:de:3a:09:e3:75:90:29:99:
c7:5f:7d:42:82:f6:94:59:ae:31:6d:6e:67:4e:9d:da:1c:3b:
06:ba:da:df:4e:57:25:c7:db:2f:e9:76:c6:f5:ce:5a:fb:a6:
d3:36:bf:f9:c0:ef:5e:ac:3b:3f:06:70:fa:20:89:af:f2:3f:
76:56:e3:b2:5d:3e:bf:b1:ed:1d:80:88:ec:13:d8:04:d7:43:
b7:1e:d5:c4:50:1a:90:09:7e:0b:fd:04:c4:13:64:a2:5c:e1:
9d:84:8a:76:4f:01:e6:bc:13:2e:e9:f7:cf:d0:44:fa:26:e0:
4c:f4:24:8b:65:86:d9:a6:45:32:e7:14:9c:b7:f9:38:fd:ce:
12:7f:76:04:d7:cf:f6:f8:da:58:d7:2d:ad:ae:e6:70:36:56:
28:c0:4e:33:49:d3:06:59:10:d7:52:3a:bf:39:c1:c8:1b:5b:
50:1f:bb:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLGMb6fKasNO67otEk0RTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTlmNzFlMTVjMGYzOGNlYmEyNTdkMzAzMDRlZDQ0YmVh
ODdjNTAwHhcNMjUxMTA1MDQwMDMxWhcNMjUxMTA2MDQwMDMxWjAzMTEwLwYDVQQD
Eyg1MzI3YzU4OTIyZGY5YTRhNjgzM2I2MzY2ZTU1NDM4ZTcxNWRlNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uByq+Ohjvt6tlKg7xZlgq74/FFt
/mvksXcjT+SjXK0M8+S18S0OFWWosDvzfSD8azn30jzdNkC4Ey42+e9c4cAoNL4u
RRvyvIepagGoh3ET3LXc/C0l461YFRpHXsjf9iWYyQ+4kHGw4seaCq/+lI5KytSi
/KbsyviIU4depYR3/mX7naUZfk2OTxZAsR8TYwiViGtRPZN8ivV2Spxi1krCKycj
MZY4pNdzxW3toBARLcS8I7nYW5M5+GiI+1rd0nFi6zQHx9n4sGrdsDGxfTaW8nCp
k5P8ia3r89m43OVSkOhOgKQk9yXL2egDv9wRocO+nLguWh+QV+zBqFeBPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMnxYki35pKaDO2Nm5VQ45xXeaLMB8GA1UdIwQY
MBaAFGSZ9x4VwPOM66JX0wME7US+qHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDct
NTc4NWIxNTczYTY5LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDctNTc4NWIxNTczYTY5
LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooQm21W9
ERMnND3tn1hMPxY0+2z5DrCIeOqLNUElXmPRak0zXYp+YCXUaZpsdQKq/yDUl9BO
i+aanyGFvo6losZous/CNUFujAFZtdvecF1lcd46CeN1kCmZx199QoL2lFmuMW1u
Z06d2hw7Brra305XJcfbL+l2xvXOWvum0za/+cDvXqw7PwZw+iCJr/I/dlbjsl0+
v7HtHYCI7BPYBNdDtx7VxFAakAl+C/0ExBNkolzhnYSKdk8B5rwTLun3z9BE+ibg
TPQki2WG2aZFMucUnLf5OP3OEn92BNfP9vjaWNctra7mcDZWKMBOM0nTBlkQ11I6
vznByBtbUB+70w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:49:01 2025 by rpki-client