Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: ryjoyHN7aHleFMHXaRjZvc0IOKCjsEw3z8NjFLYQ+nc=
Subject key identifier: 6A:0F:ED:AD:B7:76:61:62:E9:EF:A8:52:C0:04:5F:CE:DA:CF:86:E8
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 019A4D06D705256CDFD2DBA323E6597D15E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 031F
Signing time: Tue 04 Nov 2025 04:01:25 +0000
Manifest this update: Tue 04 Nov 2025 04:01:25 +0000
Manifest next update: Wed 05 Nov 2025 04:01:25 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: PGVMAwS/+ypNDNKMSYN5VD0q22Eb1RqjjNjfKliNm1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:d7:05:25:6c:df:d2:db:a3:23:e6:59:7d:15:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Nov 4 04:01:25 2025 GMT
Not After : Nov 5 04:01:25 2025 GMT
Subject: CN=6a0fedadb7766162e9efa852c0045fcedacf86e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:35:73:c3:e0:01:71:da:0e:71:b6:96:8f:dd:
32:45:c4:7f:b6:73:a5:c0:95:87:37:6b:26:71:92:
ac:44:9a:ee:ea:2c:4b:c3:4d:f2:7b:11:86:65:09:
c4:21:22:2e:99:a2:db:3c:ba:dd:0a:45:90:33:9e:
cb:86:db:b8:19:6e:3f:bc:01:1c:cb:26:a3:04:c0:
7a:4f:7a:6f:fb:8c:bf:05:0d:d9:62:bb:48:c6:a3:
8d:46:39:4a:72:28:f8:aa:7f:39:ff:4c:4b:64:f7:
6e:f6:80:51:31:4f:ca:91:1b:a8:a8:e4:93:a4:69:
ed:fc:bc:7c:c3:88:03:0f:9e:c0:02:56:76:57:fb:
68:eb:42:98:22:3e:24:8b:e6:57:a3:36:b6:10:79:
a5:21:68:94:05:d0:cb:d2:05:f2:88:77:0b:6b:19:
29:ce:88:a9:f6:55:c8:28:ed:4c:bc:67:31:9e:62:
45:3a:4d:b3:f7:bf:c2:ca:38:88:48:70:16:d4:bb:
c4:69:40:e5:57:36:8a:d8:c3:94:2e:79:c8:f6:5e:
32:10:42:b9:5b:b0:60:24:57:52:6e:64:e5:f2:5e:
8d:6a:e3:b3:b1:c3:a9:f3:0f:f6:6d:e8:38:23:ae:
5b:c3:d7:ea:50:e5:7a:8d:b7:a0:31:6f:f5:25:af:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0F:ED:AD:B7:76:61:62:E9:EF:A8:52:C0:04:5F:CE:DA:CF:86:E8
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:15:aa:b5:7f:58:c0:41:e1:e3:01:ab:a3:7e:3e:ab:67:b7:
3a:e4:69:75:e0:25:9d:61:6b:a5:9f:31:4d:f5:bb:b5:fe:af:
c5:41:49:7c:a6:d7:34:86:f7:a8:e7:77:f9:1d:58:4f:03:97:
ec:52:91:f4:52:03:9e:b9:47:2c:08:3a:28:4f:71:8c:94:a2:
bf:dc:40:7a:31:4e:02:44:f1:e9:83:9b:bd:45:fe:01:53:91:
c4:3e:2b:18:6d:50:91:b5:39:c3:c3:be:1d:d0:93:21:70:9c:
bd:d5:04:7f:3f:a3:1f:a7:0e:32:f4:c3:66:f6:b6:a5:35:b7:
8d:cf:1d:50:a8:d6:85:25:e3:2a:fc:2e:18:cf:c1:47:37:34:
e4:3e:b9:22:92:10:b0:0d:77:9f:d0:7d:55:5c:4a:cb:54:82:
05:53:23:e7:2e:9f:bf:23:ae:c5:2e:7a:a5:6c:c9:da:52:b8:
4a:d4:f5:c8:75:d8:3a:76:98:67:7d:37:9d:ae:28:6f:c2:49:
05:48:4f:9a:b9:fc:17:3f:a0:da:10:c9:66:00:69:89:c8:7d:
d5:e9:01:e1:8b:82:a4:83:21:85:9a:f5:b0:da:d0:b9:76:cc:
35:e5:80:f8:91:2e:28:d5:09:72:b4:a3:86:92:fe:10:8f:d8:
41:fd:48:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBtcFJWzf0tujI+ZZfRXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm
OTM4MjcwHhcNMjUxMTA0MDQwMTI1WhcNMjUxMTA1MDQwMTI1WjAzMTEwLwYDVQQD
Eyg2YTBmZWRhZGI3NzY2MTYyZTllZmE4NTJjMDA0NWZjZWRhY2Y4NmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDVzw+ABcdoOcbaWj90yRcR/tnOl
wJWHN2smcZKsRJru6ixLw03yexGGZQnEISIumaLbPLrdCkWQM57Lhtu4GW4/vAEc
yyajBMB6T3pv+4y/BQ3ZYrtIxqONRjlKcij4qn85/0xLZPdu9oBRMU/KkRuoqOST
pGnt/Lx8w4gDD57AAlZ2V/to60KYIj4ki+ZXoza2EHmlIWiUBdDL0gXyiHcLaxkp
zoip9lXIKO1MvGcxnmJFOk2z97/CyjiISHAW1LvEaUDlVzaK2MOULnnI9l4yEEK5
W7BgJFdSbmTl8l6NauOzscOp8w/2beg4I65bw9fqUOV6jbegMW/1Ja8otwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoP7a23dmFi6e+oUsAEX87az4boMB8GA1UdIwQY
MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt
ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm
LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhWqtX9Y
wEHh4wGro34+q2e3OuRpdeAlnWFrpZ8xTfW7tf6vxUFJfKbXNIb3qOd3+R1YTwOX
7FKR9FIDnrlHLAg6KE9xjJSiv9xAejFOAkTx6YObvUX+AVORxD4rGG1QkbU5w8O+
HdCTIXCcvdUEfz+jH6cOMvTDZva2pTW3jc8dUKjWhSXjKvwuGM/BRzc05D65IpIQ
sA13n9B9VVxKy1SCBVMj5y6fvyOuxS56pWzJ2lK4StT1yHXYOnaYZ303na4ob8JJ
BUhPmrn8Fz+g2hDJZgBpich91ekB4YuCpIMhhZr1sNrQuXbMNeWA+JEuKNUJcrSj
hpL+EI/YQf1IFw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:46 2025 by rpki-client