Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: +1hQDqqeyfcyY2tXeO8+2Xmc12x/Hql4kiXWHBx+Gok=
Subject key identifier: ED:17:63:22:D0:6D:1D:97:34:E6:54:EC:DD:90:45:5D:15:ED:D6:53
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 019A50072196D593B2B6B675461FB211D3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0CCB
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: fnVjwFd/hGfygeIIygzYGBPRBAVaiv50RIzMZI0yX5U=)
2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:21:96:d5:93:b2:b6:b6:75:46:1f:b2:11:d3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=ed176322d06d1d9734e654ecdd90455d15edd653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:3c:20:74:31:aa:2f:5e:32:78:99:aa:49:
52:50:cf:bc:86:8f:7d:4e:c9:5a:e7:13:2f:19:47:
69:48:4c:80:60:36:8d:93:a1:6f:36:77:05:98:e5:
da:1c:2d:b9:d4:83:43:49:0e:8a:12:ca:cd:a7:9d:
b8:13:ad:14:38:72:5e:73:47:5d:64:6c:de:0d:bc:
4f:0a:f8:ab:80:a8:5a:3e:c5:2d:71:fc:5c:ee:25:
01:02:4c:3e:11:88:1a:27:55:e8:72:e8:97:b0:74:
dd:7e:b3:1c:eb:ef:0a:f3:3e:80:b5:d6:e6:89:bd:
6c:8b:fb:03:66:e0:45:c7:37:f7:5e:e9:59:b5:28:
45:e6:eb:56:68:02:f5:2d:84:58:30:46:ad:b1:be:
88:a6:c3:5d:bb:29:98:f2:08:8a:41:c9:ee:67:e4:
3e:cd:d6:db:f8:5c:c0:01:e9:83:62:04:91:2e:aa:
a3:f9:34:10:f5:c1:76:10:09:24:a1:48:b1:76:8d:
30:58:0a:ab:17:22:21:1d:e0:d6:84:b9:1f:16:52:
ff:ce:a3:c9:41:b1:89:f1:77:23:b5:8d:21:2f:a7:
a3:f3:61:6c:39:3e:52:53:7d:e5:9f:0b:50:b6:c2:
d5:a3:9b:da:7e:28:c5:01:ef:0e:f3:49:b0:7b:67:
b3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:63:22:D0:6D:1D:97:34:E6:54:EC:DD:90:45:5D:15:ED:D6:53
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:75:dd:92:8a:c4:44:83:01:30:aa:ca:5d:18:e7:d1:ab:a6:
ec:82:a3:23:cd:04:31:4a:85:66:ca:ae:d4:2e:d0:73:5f:50:
bb:bf:34:57:29:30:c4:b0:2d:a6:e8:ac:06:81:af:10:28:9e:
53:55:bd:28:21:d6:b3:9a:f8:5c:1a:9b:36:75:52:5c:9d:76:
f3:6a:1d:f6:63:4d:6b:d6:5f:02:f4:85:ab:6b:36:8a:10:6d:
73:bd:16:71:05:5b:a7:e1:7d:92:f1:3d:a2:25:20:d3:1e:f9:
d4:53:3b:59:7d:d8:b2:e2:27:c4:43:63:4a:9e:0a:00:25:56:
43:60:6b:69:af:b8:a8:42:d8:88:7c:a3:cf:8b:83:7d:03:f3:
a6:15:f9:05:d3:2e:6b:03:25:10:40:0f:52:e4:54:bf:27:f7:
e3:03:aa:b5:21:a5:68:81:7a:41:bf:40:2e:61:85:95:3d:45:
88:95:e3:9b:e2:df:3a:e5:66:a4:4f:ae:7f:a3:e7:02:7e:52:
a7:7c:9d:82:b9:3b:91:b7:eb:38:c7:17:38:e1:48:8e:ff:6d:
46:59:b2:a4:ef:b4:12:23:3e:8d:90:55:d0:9e:2a:45:9b:b5:
c8:e4:5e:ea:1f:4b:9a:f7:e4:a0:54:fa:81:08:35:ff:77:03:
3d:41:ea:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQByGW1ZOytrZ1Rh+yEdPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz
YzEzYmQwHhcNMjUxMTA0MTgwMDM1WhcNMjUxMTA1MTgwMDM1WjAzMTEwLwYDVQQD
EyhlZDE3NjMyMmQwNmQxZDk3MzRlNjU0ZWNkZDkwNDU1ZDE1ZWRkNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlI8IHQxqi9eMniZqklSUM+8ho99
Tsla5xMvGUdpSEyAYDaNk6FvNncFmOXaHC251INDSQ6KEsrNp524E60UOHJec0dd
ZGzeDbxPCvirgKhaPsUtcfxc7iUBAkw+EYgaJ1XocuiXsHTdfrMc6+8K8z6Atdbm
ib1si/sDZuBFxzf3XulZtShF5utWaAL1LYRYMEatsb6IpsNduymY8giKQcnuZ+Q+
zdbb+FzAAemDYgSRLqqj+TQQ9cF2EAkkoUixdo0wWAqrFyIhHeDWhLkfFlL/zqPJ
QbGJ8XcjtY0hL6ej82FsOT5SU33lnwtQtsLVo5vafijFAe8O80mwe2eziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0XYyLQbR2XNOZU7N2QRV0V7dZTMB8GA1UdIwQY
MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt
YWQ5ZTFhMDUxMGI5LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5
LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHXdkorE
RIMBMKrKXRjn0aum7IKjI80EMUqFZsqu1C7Qc19Qu780VykwxLAtpuisBoGvECie
U1W9KCHWs5r4XBqbNnVSXJ1282od9mNNa9ZfAvSFq2s2ihBtc70WcQVbp+F9kvE9
oiUg0x751FM7WX3YsuInxENjSp4KACVWQ2Braa+4qELYiHyjz4uDfQPzphX5BdMu
awMlEEAPUuRUvyf34wOqtSGlaIF6Qb9ALmGFlT1FiJXjm+LfOuVmpE+uf6PnAn5S
p3ydgrk7kbfrOMcXOOFIjv9tRlmypO+0EiM+jZBV0J4qRZu1yORe6h9LmvfkoFT6
gQg1/3cDPUHq2w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:12:40 2025 by rpki-client