
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File: ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier: Oh6KFgczEaVQu/KU/roRtSO22ScUkLTrhVHjf/5mFeU=
Subject key identifier: AB:AF:05:C9:A5:CC:EA:D9:D9:C4:6B:B7:24:BA:DD:2A:EC:37:8F:4C
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 019A4E1873D10D19864BC1893F446C7DED60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number: 0F00
Signing time: Tue 04 Nov 2025 09:00:16 +0000
Manifest this update: Tue 04 Nov 2025 09:00:16 +0000
Manifest next update: Wed 05 Nov 2025 09:00:16 +0000
Files and hashes: 1: EQLAmwce-4qvK6GmwcFTOhIRkwQ.roa (hash: JsjgQjAnTuCMbWUsyWPVoy0ThBVMbRkRSyV5BIOaYsk=)
2: VBFGSZe25hk515GWxj1O9wYFsPI.roa (hash: cO/lLoWMHsASPsdz4OnLCXsIfZY9ylovdO0mqXRc+eM=)
3: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: 2JvSuY2i0sZhCfEy432WzWTYRv7tsUbNEE7JClhNt4o=)
4: t_lJAzfvjWKMyLKQMrioEk5d_0w.roa (hash: wl26VQmURsOv+pvsAOIbkvKehkFtkmgC21ZsAlFMTv4=)
5: wqvUrg3ytAmyescNq7O97CA45e8.roa (hash: e+ouxKVrzJBnu8qX3QbAYldaZ2LWrtwIg9cy15dfuBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:73:d1:0d:19:86:4b:c1:89:3f:44:6c:7d:ed:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Nov 4 09:00:16 2025 GMT
Not After : Nov 5 09:00:16 2025 GMT
Subject: CN=abaf05c9a5ccead9d9c46bb724badd2aec378f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:f9:21:f5:16:9d:41:f4:bd:a0:30:c1:b2:
ce:bd:fd:70:d7:83:f8:d3:d1:c7:f8:7c:4e:65:25:
00:03:28:bf:a4:2d:d7:56:49:15:66:52:c9:e4:c0:
28:e9:a6:cc:80:b2:8a:df:97:cf:71:9d:86:1e:18:
3d:06:e7:68:3a:0b:41:0c:bb:1a:a6:6e:cc:11:f5:
c0:9d:fd:08:38:5c:42:45:ba:ca:8c:b1:9e:e6:ee:
b5:14:f1:ff:ca:61:4d:ff:05:80:8d:9c:eb:4e:7e:
c2:10:31:56:9c:ba:ed:ab:cf:85:d7:fc:12:d7:67:
a1:e7:9b:77:d9:b6:e0:26:27:74:59:40:03:61:66:
23:93:39:5c:54:08:cc:54:e4:87:48:a5:ab:59:2c:
a5:06:af:3c:da:18:21:b9:3b:2a:95:5b:ff:da:ad:
2c:6a:16:ab:fe:c8:35:d7:d0:78:70:82:db:00:d8:
92:b5:d5:f0:06:27:a7:db:2e:5a:fd:c1:c9:6e:de:
58:93:8c:6f:3a:53:61:96:03:14:30:9b:85:12:4a:
59:b0:d1:b0:8e:75:b6:67:35:04:ac:89:36:16:99:
aa:85:cf:3d:81:4e:b6:c6:10:af:15:ff:4c:a3:d9:
be:42:0b:a7:e2:f3:e7:96:3d:ec:56:29:29:fc:0c:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:05:C9:A5:CC:EA:D9:D9:C4:6B:B7:24:BA:DD:2A:EC:37:8F:4C
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c3:a9:70:b5:15:c4:92:b4:94:9a:eb:2c:83:fb:72:16:57:
87:ee:d9:41:61:88:b6:01:16:8b:49:39:52:c4:e2:29:a8:7a:
eb:47:ec:a8:b0:2b:62:4d:8b:0f:cc:fd:9e:e0:31:42:63:00:
75:ef:83:29:65:27:65:4f:55:5e:c8:12:37:4f:58:94:b4:5d:
fc:45:24:f9:5c:72:f6:45:bb:4e:80:82:0e:16:86:7f:8c:9e:
4b:f9:e9:39:77:49:27:ab:ba:18:88:e6:5f:4e:b6:f8:7f:f3:
a7:ec:9b:f3:7c:ad:0e:50:5a:08:03:74:1b:98:e3:72:4b:59:
d5:6e:82:20:5f:f7:59:d9:fd:8e:ef:ad:a4:44:39:15:bb:f4:
9c:3a:e7:74:88:df:aa:34:dd:5a:dc:c2:fb:05:63:9b:28:63:
e5:57:3f:6f:c4:a4:fd:cd:ad:d3:c6:8d:a5:9a:42:7d:c7:d7:
bf:8e:3e:3e:86:aa:11:ff:e3:c3:de:c8:d8:bc:81:a3:80:7e:
23:44:bc:d3:11:01:ab:62:78:32:57:72:eb:e0:27:52:e5:ae:
23:fc:69:e8:ad:68:cd:b7:91:f7:91:a5:f0:9b:e9:78:91:70:
f8:e7:4d:23:f6:f7:a7:63:7c:48:62:7d:0c:58:80:2c:f4:2b:
42:63:35:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGHPRDRmGS8GJP0Rsfe1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjUxMTA0MDkwMDE2WhcNMjUxMTA1MDkwMDE2WjAzMTEwLwYDVQQD
EyhhYmFmMDVjOWE1Y2NlYWQ5ZDljNDZiYjcyNGJhZGQyYWVjMzc4ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFj5IfUWnUH0vaAwwbLOvf1w14P4
09HH+HxOZSUAAyi/pC3XVkkVZlLJ5MAo6abMgLKK35fPcZ2GHhg9BudoOgtBDLsa
pm7MEfXAnf0IOFxCRbrKjLGe5u61FPH/ymFN/wWAjZzrTn7CEDFWnLrtq8+F1/wS
12eh55t32bbgJid0WUADYWYjkzlcVAjMVOSHSKWrWSylBq882hghuTsqlVv/2q0s
ahar/sg119B4cILbANiStdXwBien2y5a/cHJbt5Yk4xvOlNhlgMUMJuFEkpZsNGw
jnW2ZzUErIk2Fpmqhc89gU62xhCvFf9Mo9m+Qgun4vPnlj3sVikp/AxpuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuvBcmlzOrZ2cRrtyS63SrsN49MMB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTktM2M3ZTRmOTNlNDJi
LzEvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcOpcLUV
xJK0lJrrLIP7chZXh+7ZQWGItgEWi0k5UsTiKah660fsqLArYk2LD8z9nuAxQmMA
de+DKWUnZU9VXsgSN09YlLRd/EUk+Vxy9kW7ToCCDhaGf4yeS/npOXdJJ6u6GIjm
X062+H/zp+yb83ytDlBaCAN0G5jjcktZ1W6CIF/3Wdn9ju+tpEQ5Fbv0nDrndIjf
qjTdWtzC+wVjmyhj5Vc/b8Sk/c2t08aNpZpCfcfXv44+PoaqEf/jw97I2LyBo4B+
I0S80xEBq2J4Mldy6+AnUuWuI/xp6K1ozbeR95Gl8JvpeJFw+OdNI/b3p2N8SGJ9
DFiALPQrQmM1hQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:45 2025 by rpki-client