Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: ++KqrclvYeIcUpF5xgRXUNTGhTA2bhVkd3WPsXHZa2o=
Subject key identifier: D4:01:6B:4B:E9:FA:00:BD:31:94:82:B6:AB:D9:AE:18:37:1B:02:1E
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019A4F621522B295B7B52D3544A94B4412FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:19 +0000
Manifest this update: Tue 04 Nov 2025 15:00:19 +0000
Manifest next update: Wed 05 Nov 2025 15:00:19 +0000
Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: RvNUtc+ULB6wbycuq/qcizQx4NkM0oVkMF6ZC+GSVlM=)
2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:15:22:b2:95:b7:b5:2d:35:44:a9:4b:44:12:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Nov 4 15:00:19 2025 GMT
Not After : Nov 5 15:00:19 2025 GMT
Subject: CN=d4016b4be9fa00bd319482b6abd9ae18371b021e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:f8:d9:6b:15:2f:c2:d5:7c:b2:a1:f2:da:
0e:0e:4e:44:57:13:08:39:a8:f2:1e:12:6d:fe:2f:
84:6c:73:5a:b2:e8:c4:d2:e4:fa:be:7a:e3:61:9c:
cb:96:a5:af:7d:94:e3:91:68:b9:c3:c9:05:58:fc:
37:8d:f1:61:0f:64:e5:3f:5f:b5:15:aa:ff:30:9d:
63:67:91:3e:51:34:3d:06:5e:44:11:c6:eb:76:ea:
0f:c8:0d:67:9e:47:0f:ed:91:23:9a:47:82:63:92:
ce:1d:51:4a:f4:99:82:96:7f:83:b6:a0:1e:fd:ee:
81:8c:95:c0:06:c4:21:33:fa:b9:85:42:59:17:31:
dd:f9:bc:82:4c:2e:da:f3:d6:75:0f:ec:dd:13:0f:
60:90:73:e7:f4:00:71:9f:1a:b8:82:12:f1:84:ec:
98:55:cf:29:99:d3:56:a3:a5:07:3d:6a:7f:3f:f9:
e5:7b:50:a0:5e:3d:d8:3a:e9:76:1f:71:af:79:d6:
70:01:10:3c:ab:7a:51:1e:03:bd:83:56:fd:20:4c:
ec:65:88:dc:19:9a:b2:a9:e6:f7:8f:74:ff:aa:95:
b6:20:f0:70:56:da:d1:67:9d:d1:90:49:4e:f7:70:
9f:08:3a:f4:98:06:4b:e6:0e:0d:9f:a1:76:99:92:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:01:6B:4B:E9:FA:00:BD:31:94:82:B6:AB:D9:AE:18:37:1B:02:1E
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5b:9c:8a:1e:97:2e:3a:db:f6:34:23:01:4d:58:70:48:5f:
ae:39:fc:c6:9b:bb:6f:87:cb:6a:a8:d5:c2:87:0e:8d:7a:33:
98:80:33:63:2b:45:be:a2:cd:a6:9f:21:2a:1d:4b:0b:80:64:
92:0e:97:5b:ce:27:03:29:b8:fb:05:d0:56:c8:2d:7f:1d:45:
7f:8c:45:ac:35:5d:bb:f5:3c:73:9d:f9:54:37:3b:84:f2:0d:
76:71:9e:df:8a:7e:18:8a:02:3c:bc:04:98:eb:e4:bc:5d:f1:
6a:19:9d:bc:1b:cb:11:da:95:c0:e7:90:5d:13:a1:7e:ab:87:
58:86:a8:15:50:07:24:af:90:48:21:5b:85:d3:2e:a2:d8:c9:
32:ce:61:32:65:f5:31:dc:89:7f:c7:ab:b0:13:a7:91:42:37:
af:c5:ac:8a:98:74:30:23:7e:a4:7f:fd:63:0d:54:7e:95:48:
59:9d:7f:07:ca:6f:ea:75:d3:46:f6:1c:3a:67:75:54:39:8d:
cf:c2:af:30:88:c5:96:ec:b1:1f:50:30:42:e1:d2:a3:26:8a:
83:c9:43:3e:c2:63:82:3c:c9:5d:e1:3e:c9:c8:25:5f:f6:3a:
17:67:12:7d:5f:88:bc:94:f9:b7:27:6a:b8:43:47:38:25:51:
0c:41:c7:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYhUispW3tS01RKlLRBL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWE2Yjk3NWVhZmQyY2U1MTQ2ODcyMzgxNDM1NWY1NmM1
NWJhZmIwHhcNMjUxMTA0MTUwMDE5WhcNMjUxMTA1MTUwMDE5WjAzMTEwLwYDVQQD
EyhkNDAxNmI0YmU5ZmEwMGJkMzE5NDgyYjZhYmQ5YWUxODM3MWIwMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDr42WsVL8LVfLKh8toODk5EVxMI
OajyHhJt/i+EbHNasujE0uT6vnrjYZzLlqWvfZTjkWi5w8kFWPw3jfFhD2TlP1+1
Far/MJ1jZ5E+UTQ9Bl5EEcbrduoPyA1nnkcP7ZEjmkeCY5LOHVFK9JmCln+DtqAe
/e6BjJXABsQhM/q5hUJZFzHd+byCTC7a89Z1D+zdEw9gkHPn9ABxnxq4ghLxhOyY
Vc8pmdNWo6UHPWp/P/nle1CgXj3YOul2H3GvedZwARA8q3pRHgO9g1b9IEzsZYjc
GZqyqeb3j3T/qpW2IPBwVtrRZ53RkElO93CfCDr0mAZL5g4Nn6F2mZIfbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQBa0vp+gC9MZSCtqvZrhg3GwIeMB8GA1UdIwQY
MBaAFGWaa5der9LOUUaHI4FDVfVsVbr7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQt
ZWZmM2NkY2JkMDBhLzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xNzA0MjItMzlhZC00OTljLWJiZmQtZWZmM2NkY2JkMDBh
LzEvWlpwcmwxNnYwczVSUm9jamdVTlY5V3hWdXZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFucih6X
Ljrb9jQjAU1YcEhfrjn8xpu7b4fLaqjVwocOjXozmIAzYytFvqLNpp8hKh1LC4Bk
kg6XW84nAym4+wXQVsgtfx1Ff4xFrDVdu/U8c535VDc7hPINdnGe34p+GIoCPLwE
mOvkvF3xahmdvBvLEdqVwOeQXROhfquHWIaoFVAHJK+QSCFbhdMuotjJMs5hMmX1
MdyJf8ersBOnkUI3r8Wsiph0MCN+pH/9Yw1UfpVIWZ1/B8pv6nXTRvYcOmd1VDmN
z8KvMIjFluyxH1AwQuHSoyaKg8lDPsJjgjzJXeE+ycglX/Y6F2cSfV+IvJT5tydq
uENHOCVRDEHHcg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:02 2025 by rpki-client