Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
File: rZr63kGDroAEjWuEgY7sRvaA-iY.mft (raw, json)
Hash identifier: poZc9ED5Ob5tvqNtRSu+ZIlcBHdQcWT1mSmTngW0r6M=
Subject key identifier: E9:CC:D2:C5:79:A9:21:8A:8E:7F:BE:79:BA:54:89:3D:BA:3B:1F:B2
Authority key identifier: AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
Certificate issuer: /CN=ad9afade4183ae80048d6b84818eec46f680fa26
Certificate serial: 019A4EF46755AC41BE4A51703A550260D050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
Manifest number: 1540
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: dHcu1Xe1bMDTNim9SJl30JSk4hI.roa (hash: qRzLbHq22DmrTaMRCm+OCQCo4sWL5SJUeqY8R0TqngI=)
2: g1AtdX4-A4stQRdXTWV50haWr_U.roa (hash: SfjbeTWsFCpHADmiaD0ANERB3vzQ++Aj8Swnoj6lsUI=)
3: rZr63kGDroAEjWuEgY7sRvaA-iY.crl (hash: tLb2fAdeq3HM5EsZR2ZZM5/KfPfuJAMluVkugJFDsjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:67:55:ac:41:be:4a:51:70:3a:55:02:60:d0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9afade4183ae80048d6b84818eec46f680fa26
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=e9ccd2c579a9218a8e7fbe79ba54893dba3b1fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:0f:23:b4:b6:49:a1:3b:ee:28:1f:f6:9d:
b6:13:6d:9b:3f:f8:13:e2:4e:0d:77:3e:2e:64:63:
29:48:18:3e:b1:09:8a:49:14:91:ed:61:3b:72:47:
52:02:8c:57:17:3f:14:df:e3:8c:4f:d9:31:71:ac:
5f:f1:10:ba:6c:b5:80:34:38:42:61:59:b5:b0:24:
bc:c0:ee:8f:33:7a:ef:bd:fa:16:2e:7d:24:e3:af:
25:01:f4:f3:65:75:99:60:2f:86:a6:5a:7d:3c:30:
a9:23:88:12:d5:25:db:dc:fb:68:47:a8:74:8d:51:
b8:6a:c7:f9:fe:0a:9b:0a:85:fb:36:56:46:82:24:
86:6f:0f:40:a2:80:5d:96:07:e9:a7:9a:e9:a3:a3:
08:57:61:9f:7c:0b:2d:73:98:42:39:1a:07:98:d1:
f4:1a:22:92:c2:28:6a:3a:c6:6d:eb:79:6a:7b:9f:
df:5a:f7:ad:a3:54:c9:a9:10:57:91:3f:4c:12:11:
43:35:4e:ff:4e:ef:03:83:34:80:ca:37:0c:67:a0:
25:12:4d:fb:d4:8d:dc:c9:ed:cc:b1:57:9d:1c:51:
1e:26:ab:f3:de:40:81:cc:a7:dc:20:66:69:29:22:
8c:36:8a:4c:84:e9:b2:ad:9c:63:de:87:d9:e3:dc:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CC:D2:C5:79:A9:21:8A:8E:7F:BE:79:BA:54:89:3D:BA:3B:1F:B2
X509v3 Authority Key Identifier:
keyid:AD:9A:FA:DE:41:83:AE:80:04:8D:6B:84:81:8E:EC:46:F6:80:FA:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZr63kGDroAEjWuEgY7sRvaA-iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d377cd-e36f-4cb9-825b-c02334be128c/1/rZr63kGDroAEjWuEgY7sRvaA-iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b5:24:e1:60:7f:bd:11:0c:0c:2f:be:f2:82:10:e0:9d:e5:
b6:c7:d7:b0:e6:b4:64:d6:0c:c9:8e:f5:b4:20:28:2f:0d:d7:
d1:60:ee:27:cd:b5:12:e6:81:b2:b1:a5:d8:1b:a1:cf:a8:b4:
a8:46:10:4a:1c:a2:1d:f0:63:d9:a3:62:79:ba:82:97:95:42:
69:bd:9f:bf:9f:c3:88:94:b2:e0:93:02:7f:93:54:df:0b:d1:
61:30:da:87:32:8b:57:d4:be:1a:f1:11:59:08:e9:27:77:82:
49:07:a0:a0:80:0f:bd:ae:71:dc:67:38:b2:75:c7:2f:ab:93:
59:94:97:49:c3:b4:2d:93:6a:55:53:94:6d:69:d2:b6:13:e1:
c9:19:a4:44:79:30:ea:aa:b1:35:c7:b7:06:8a:50:3a:17:2c:
da:e3:cd:ac:6d:6c:40:f8:08:dd:6f:f1:54:bf:b9:bd:52:bf:
3e:f9:c8:df:f6:cb:56:92:e5:3c:94:46:2a:a7:11:57:a5:e4:
d2:1e:0a:90:87:ef:19:b1:37:84:31:1e:98:97:f9:2e:35:f9:
5a:d9:05:11:3a:27:66:88:0b:dc:7e:98:dc:91:3f:6b:90:f2:
f1:1b:08:aa:5a:a7:37:85:92:d4:7b:99:f4:86:af:f3:a6:c1:
2c:dc:7b:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9GdVrEG+SlFwOlUCYNBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOWFmYWRlNDE4M2FlODAwNDhkNmI4NDgxOGVlYzQ2ZjY4
MGZhMjYwHhcNMjUxMTA0MTMwMDMxWhcNMjUxMTA1MTMwMDMxWjAzMTEwLwYDVQQD
EyhlOWNjZDJjNTc5YTkyMThhOGU3ZmJlNzliYTU0ODkzZGJhM2IxZmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGUPI7S2SaE77igf9p22E22bP/gT
4k4Ndz4uZGMpSBg+sQmKSRSR7WE7ckdSAoxXFz8U3+OMT9kxcaxf8RC6bLWANDhC
YVm1sCS8wO6PM3rvvfoWLn0k468lAfTzZXWZYC+Gplp9PDCpI4gS1SXb3PtoR6h0
jVG4asf5/gqbCoX7NlZGgiSGbw9AooBdlgfpp5rpo6MIV2GffAstc5hCORoHmNH0
GiKSwihqOsZt63lqe5/fWveto1TJqRBXkT9MEhFDNU7/Tu8DgzSAyjcMZ6AlEk37
1I3cye3MsVedHFEeJqvz3kCBzKfcIGZpKSKMNopMhOmyrZxj3ofZ49z9WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnM0sV5qSGKjn++ebpUiT26Ox+yMB8GA1UdIwQY
MBaAFK2a+t5Bg66ABI1rhIGO7Eb2gPomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWIt
YzAyMzM0YmUxMjhjLzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9kMzc3Y2QtZTM2Zi00Y2I5LTgyNWItYzAyMzM0YmUxMjhj
LzEvclpyNjNrR0Ryb0FFald1RWdZN3NSdmFBLWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrUk4WB/
vREMDC++8oIQ4J3ltsfXsOa0ZNYMyY71tCAoLw3X0WDuJ821EuaBsrGl2Buhz6i0
qEYQShyiHfBj2aNiebqCl5VCab2fv5/DiJSy4JMCf5NU3wvRYTDahzKLV9S+GvER
WQjpJ3eCSQegoIAPva5x3Gc4snXHL6uTWZSXScO0LZNqVVOUbWnSthPhyRmkRHkw
6qqxNce3BopQOhcs2uPNrG1sQPgI3W/xVL+5vVK/PvnI3/bLVpLlPJRGKqcRV6Xk
0h4KkIfvGbE3hDEemJf5LjX5WtkFETonZogL3H6Y3JE/a5Dy8RsIqlqnN4WS1HuZ
9Iav86bBLNx7dQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:35 2025 by rpki-client