Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: E38pOlN9tbaSd0+BGrdbKw8AbWDIJWbDHd1JGt2fUwQ=
Subject key identifier: A1:98:C4:DE:97:42:AF:88:7A:33:8D:51:02:0D:B0:91:44:BE:2C:E8
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019A51508994902AB2CE9373A05161BD0A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 05E4
Signing time: Wed 05 Nov 2025 00:00:23 +0000
Manifest this update: Wed 05 Nov 2025 00:00:23 +0000
Manifest next update: Thu 06 Nov 2025 00:00:23 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: fCyu1lTthTgGYM5CXfFFpwtrNdA7Q1oEZ40y9/GPhL0=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:89:94:90:2a:b2:ce:93:73:a0:51:61:bd:0a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Nov 5 00:00:23 2025 GMT
Not After : Nov 6 00:00:23 2025 GMT
Subject: CN=a198c4de9742af887a338d51020db09144be2ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:83:a0:b3:37:79:91:88:ee:b4:11:8f:c1:
77:d8:9c:f6:5a:12:d1:57:c9:5e:d9:9a:16:d9:9d:
13:f9:63:f8:56:ed:03:fe:f5:05:ab:3a:5a:1c:17:
c7:25:6c:ce:b4:7a:ff:53:eb:f1:20:3f:b3:b9:15:
d0:c0:35:4a:0e:0f:8d:17:db:17:8a:e0:17:22:e6:
f6:3f:d5:2b:0d:c9:a2:b9:7e:89:b2:ae:7f:39:c5:
4f:42:e0:f2:8a:ec:7e:31:49:47:50:80:cf:a1:9e:
86:07:da:6f:45:d2:5e:19:27:84:6b:de:78:1d:89:
0e:ae:b4:0f:f2:31:d1:c4:cb:f3:b4:b5:85:65:e6:
21:8d:da:fd:e3:89:59:ce:22:38:bf:80:ba:fa:85:
2b:71:d2:34:62:15:9c:18:6d:fb:98:f6:ae:55:37:
39:0e:28:12:3f:68:e7:0b:e4:32:6c:f3:e2:5f:bc:
19:7b:ab:a6:8d:67:7f:29:b6:28:8f:d9:12:e1:b1:
2d:f9:ee:d8:4a:f8:33:c9:84:68:7c:b5:34:ae:5a:
c9:98:23:84:bc:6a:9a:53:49:f4:a4:1f:23:8b:cf:
b1:31:ea:a1:d3:0a:1b:95:2a:15:f0:fd:a8:63:bb:
07:be:00:97:72:6f:c0:8e:da:fb:b8:e8:6d:16:30:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:98:C4:DE:97:42:AF:88:7A:33:8D:51:02:0D:B0:91:44:BE:2C:E8
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:78:56:c1:6f:9a:a2:c1:25:27:a0:92:3f:19:3f:18:b2:8d:
58:8b:39:17:ec:97:2e:be:e2:ca:f1:67:76:2f:77:58:10:4a:
f7:e6:ac:f1:1a:06:89:52:66:be:ff:b9:70:40:62:bd:0a:00:
31:35:3e:c0:ba:43:c4:02:5a:b1:94:df:41:b3:bc:c7:de:f9:
6a:4b:71:08:23:af:d4:76:c2:ab:54:2a:29:7b:f6:07:f8:4f:
91:5f:f0:69:e0:6a:ea:4d:39:45:3c:7a:16:e3:42:f6:bd:c9:
dc:71:df:20:9e:ed:a1:cd:8b:78:9a:0f:db:a7:3b:c5:2b:76:
56:70:6c:a1:22:49:ab:9d:bf:0c:2e:06:94:e2:5a:05:13:3f:
9e:a2:f3:fb:8f:cf:3a:7f:b1:f2:1d:2e:d9:e5:0e:0f:29:8f:
fa:af:51:ad:7e:17:d1:04:5e:f5:75:07:53:05:f7:7f:da:d1:
a3:0b:0d:3e:05:c2:67:09:ed:7c:ea:0c:41:f3:86:43:2b:25:
34:81:2c:ef:d4:b4:66:81:6a:7d:70:06:41:75:c2:e2:b6:3b:
bd:6a:0d:66:81:24:37:84:81:1d:f9:9c:ba:38:c9:71:1e:45:
32:3b:57:37:22:a9:28:7a:02:98:c0:d3:dc:01:b3:f5:fd:70:
98:a2:20:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUImUkCqyzpNzoFFhvQopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzM5ZDM4ZjQ2OGQ5YzEyZDhmZjUwZDViOWY5MjY1YTFl
NWE4ZDAwHhcNMjUxMTA1MDAwMDIzWhcNMjUxMTA2MDAwMDIzWjAzMTEwLwYDVQQD
EyhhMTk4YzRkZTk3NDJhZjg4N2EzMzhkNTEwMjBkYjA5MTQ0YmUyY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDSDoLM3eZGI7rQRj8F32Jz2WhLR
V8le2ZoW2Z0T+WP4Vu0D/vUFqzpaHBfHJWzOtHr/U+vxID+zuRXQwDVKDg+NF9sX
iuAXIub2P9UrDcmiuX6Jsq5/OcVPQuDyiux+MUlHUIDPoZ6GB9pvRdJeGSeEa954
HYkOrrQP8jHRxMvztLWFZeYhjdr944lZziI4v4C6+oUrcdI0YhWcGG37mPauVTc5
DigSP2jnC+QybPPiX7wZe6umjWd/KbYoj9kS4bEt+e7YSvgzyYRofLU0rlrJmCOE
vGqaU0n0pB8ji8+xMeqh0woblSoV8P2oY7sHvgCXcm/Ajtr7uOhtFjDYOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGYxN6XQq+IejONUQINsJFEvizoMB8GA1UdIwQY
MBaAFGfDnTj0aNnBLY/1DVufkmWh5ajQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2Ut
MjdlOWJlYjMyOTRiLzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81ZjVhY2MtMzY0Ni00NDNkLTlmN2UtMjdlOWJlYjMyOTRi
LzEvWjhPZE9QUm8yY0V0al9VTlc1LVNaYUhscU5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3hWwW+a
osElJ6CSPxk/GLKNWIs5F+yXLr7iyvFndi93WBBK9+as8RoGiVJmvv+5cEBivQoA
MTU+wLpDxAJasZTfQbO8x975aktxCCOv1HbCq1QqKXv2B/hPkV/waeBq6k05RTx6
FuNC9r3J3HHfIJ7toc2LeJoP26c7xSt2VnBsoSJJq52/DC4GlOJaBRM/nqLz+4/P
On+x8h0u2eUODymP+q9RrX4X0QRe9XUHUwX3f9rRowsNPgXCZwntfOoMQfOGQysl
NIEs79S0ZoFqfXAGQXXC4rY7vWoNZoEkN4SBHfmcujjJcR5FMjtXNyKpKHoCmMDT
3AGz9f1wmKIg0w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:27:20 2025 by rpki-client