Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: B5i47K+OPzuaMn0GY5ZfTkXa/nwy0+6d1OrW3/DnrZM=
Subject key identifier: 4B:25:EB:BA:3B:3F:64:6A:97:77:D3:38:CE:A9:AF:BE:B3:7F:B8:2A
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 019A50071DB5CAA4F2E3AE825F6F828D2AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0FE6
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: L8Cyt9xPSNwqnAP9rH3Px9aCX+G4j4Umk9EXbNLacY4=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1d:b5:ca:a4:f2:e3:ae:82:5f:6f:82:8d:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=4b25ebba3b3f646a9777d338cea9afbeb37fb82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:71:f8:fb:6a:a4:de:07:3f:65:07:08:3a:6b:
ec:d4:87:51:e0:63:bb:11:f0:ff:0e:e7:71:2b:15:
0b:80:89:71:b3:6f:5f:a7:56:0c:96:d7:e0:6f:5b:
03:0b:63:34:ac:fd:2c:de:85:aa:0f:d4:00:a5:f4:
e9:5d:33:5f:5b:ab:99:68:3f:41:99:3d:34:fb:60:
15:69:15:af:d9:b8:a7:88:34:86:5a:88:4f:47:d3:
de:9d:85:ce:87:d4:a6:5a:e5:ea:b9:a1:69:c5:88:
77:59:bb:3d:11:32:2f:aa:cd:dc:1e:00:7a:5c:c4:
3e:6b:97:45:51:e5:40:f4:7b:b7:23:09:1d:d0:ed:
0a:ec:f9:ad:b7:5e:f8:e2:e6:2b:0e:d3:5d:ae:58:
63:5c:af:4d:8d:3a:c8:2e:19:76:38:a3:6c:c3:88:
8d:99:af:82:f0:e9:ad:04:73:a9:83:43:5d:1b:73:
30:48:1b:14:e5:df:2a:49:4b:d2:60:2c:93:f7:f5:
2c:b7:60:57:13:84:98:65:e2:a9:db:9c:62:0a:2f:
27:17:3f:06:5d:f6:cb:94:04:4b:b9:6e:cf:23:ac:
d6:45:59:f3:91:b6:47:15:6b:31:ae:ec:58:b2:bf:
c7:a8:86:15:f3:8f:d1:5d:fa:23:27:1e:78:6f:35:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:25:EB:BA:3B:3F:64:6A:97:77:D3:38:CE:A9:AF:BE:B3:7F:B8:2A
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1e:68:1a:05:8d:3b:b3:e7:96:e5:f6:f2:d4:da:01:90:99:
06:38:c8:ca:14:ac:2b:51:90:ff:95:28:3f:c0:2b:b5:26:1a:
37:fa:29:80:ec:01:85:cc:98:ab:e1:83:d5:91:b0:2e:fe:a2:
13:a2:60:eb:c9:db:08:ad:99:9f:28:b9:b8:b2:25:a3:cc:85:
af:11:2a:e3:db:a8:ab:17:f7:a5:5e:e0:b0:67:94:e1:a4:84:
4d:f2:03:5f:7c:3e:ab:36:44:a9:4e:bb:1e:04:19:3f:f8:25:
ef:4c:c5:10:87:43:75:0c:a7:99:8a:a9:cd:e2:30:73:58:cb:
02:56:58:8c:73:2d:af:2c:e7:ca:07:ec:ff:92:ad:18:4b:56:
70:f7:88:dd:36:95:bf:60:1d:39:2a:22:e7:35:dd:2a:75:08:
bd:0d:63:94:65:b5:b3:e3:e7:a5:fc:b2:1d:ed:68:50:bf:45:
f0:b6:ef:04:f4:0f:3c:ba:00:46:39:8a:a5:a5:59:a0:3c:9e:
6b:d7:78:f9:71:97:bb:ab:06:56:09:22:20:15:b2:9c:db:89:
83:bc:a8:2d:23:32:91:75:0c:1c:73:0e:d0:a9:74:f1:ad:8d:
95:df:2e:ee:f7:51:d3:f1:0d:29:0d:8a:b5:05:f5:9a:10:b2:
0a:6c:54:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBx21yqTy466CX2+CjSqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmI3NzI3ZDY0YTUxOGM3Y2Q0ODVlNDgyM2VlNzhhOWUy
OTEwMDgwHhcNMjUxMTA0MTgwMDM0WhcNMjUxMTA1MTgwMDM0WjAzMTEwLwYDVQQD
Eyg0YjI1ZWJiYTNiM2Y2NDZhOTc3N2QzMzhjZWE5YWZiZWIzN2ZiODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nH4+2qk3gc/ZQcIOmvs1IdR4GO7
EfD/DudxKxULgIlxs29fp1YMltfgb1sDC2M0rP0s3oWqD9QApfTpXTNfW6uZaD9B
mT00+2AVaRWv2biniDSGWohPR9PenYXOh9SmWuXquaFpxYh3Wbs9ETIvqs3cHgB6
XMQ+a5dFUeVA9Hu3Iwkd0O0K7Pmtt1744uYrDtNdrlhjXK9NjTrILhl2OKNsw4iN
ma+C8OmtBHOpg0NdG3MwSBsU5d8qSUvSYCyT9/Ust2BXE4SYZeKp25xiCi8nFz8G
XfbLlARLuW7PI6zWRVnzkbZHFWsxruxYsr/HqIYV84/RXfojJx54bzVRWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsl67o7P2Rql3fTOM6pr76zf7gqMB8GA1UdIwQY
MBaAFGb7dyfWSlGMfNSF5II+54qeKRAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4Mzkt
N2MzYmRkYzI5NzhhLzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4MzktN2MzYmRkYzI5Nzhh
LzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkB5oGgWN
O7PnluX28tTaAZCZBjjIyhSsK1GQ/5UoP8ArtSYaN/opgOwBhcyYq+GD1ZGwLv6i
E6Jg68nbCK2Znyi5uLIlo8yFrxEq49uoqxf3pV7gsGeU4aSETfIDX3w+qzZEqU67
HgQZP/gl70zFEIdDdQynmYqpzeIwc1jLAlZYjHMtryznygfs/5KtGEtWcPeI3TaV
v2AdOSoi5zXdKnUIvQ1jlGW1s+PnpfyyHe1oUL9F8LbvBPQPPLoARjmKpaVZoDye
a9d4+XGXu6sGVgkiIBWynNuJg7yoLSMykXUMHHMO0Kl08a2Nld8u7vdR0/ENKQ2K
tQX1mhCyCmxUjw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:58:18 2025 by rpki-client