Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: A5dtZsm7tE7K9UAGFabSUSihwfOZHxBqzhnspiA45qY=
Subject key identifier: 4F:54:40:6B:D3:27:27:0D:C6:B0:EA:0B:23:2D:A9:9D:F9:2A:B4:44
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 019A4E190A4AA293786CFA8923D0D81F9550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 06C5
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: kww734KGmB+DEB9biwtg2UY+DgwHYabzbx27ouNwjuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0a:4a:a2:93:78:6c:fa:89:23:d0:d8:1f:95:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=4f54406bd327270dc6b0ea0b232da99df92ab444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:c9:b7:57:46:87:13:8d:8c:c7:0e:a8:c8:
5c:16:d7:32:a1:33:51:59:d4:6e:66:e2:76:11:ab:
c4:ec:4a:81:1f:95:28:47:d0:cf:42:32:46:88:da:
2b:23:96:5e:5a:c7:0e:93:7d:15:1f:46:9b:74:64:
9b:54:38:c2:da:e2:44:3b:67:af:5a:39:cb:36:5e:
c1:37:fa:80:eb:1e:12:34:3a:9f:b0:8d:87:cd:1e:
9c:f7:ec:d9:61:34:3a:1e:cf:29:da:68:5b:70:e4:
06:31:2e:de:d0:e5:4a:4d:c9:ef:13:d0:46:3c:b9:
8a:e1:fa:8a:2f:d7:6d:6d:d4:77:af:17:a3:eb:80:
7c:99:39:29:8a:47:79:54:e0:cd:6d:f4:e9:5c:36:
a3:93:27:43:15:0d:74:4b:98:d4:fa:c0:9d:74:5b:
21:3f:ab:10:57:06:5c:82:a4:d5:97:5d:45:82:5a:
4a:4c:c8:68:61:02:55:34:34:16:94:76:36:20:e5:
c5:c1:65:46:4e:93:75:60:e5:1c:ea:0c:14:1e:33:
7d:21:d8:62:66:a0:dd:b7:34:db:d3:8b:7d:a6:e3:
a6:78:9c:e4:ef:57:29:d2:ef:33:ec:49:95:03:7d:
61:f3:0e:00:a1:f7:86:b8:9b:f5:fc:b9:dc:90:4c:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:40:6B:D3:27:27:0D:C6:B0:EA:0B:23:2D:A9:9D:F9:2A:B4:44
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5a:3a:9d:a8:cb:3c:f5:e3:aa:02:af:89:bc:7b:88:58:da:
c4:98:a6:6c:ab:8b:12:a3:4f:de:22:91:9e:a0:d5:aa:c0:db:
c1:a1:8d:9f:9a:92:f7:f9:94:dc:47:44:40:9c:b8:e7:59:f7:
ca:4e:0d:09:5c:a0:0a:63:55:c4:f1:8d:98:34:95:84:86:00:
5a:9a:b6:81:eb:f0:c8:2f:b1:2b:1e:46:fe:41:28:23:f1:e2:
06:10:bd:fb:f9:96:83:82:c3:77:05:6d:f8:4b:4d:a0:2a:30:
f1:30:d8:0a:fb:35:2a:82:8a:66:c5:7e:9f:c7:53:43:4e:c2:
98:ca:7e:42:1d:50:bd:5e:82:e3:95:f9:7d:2a:94:9d:ba:2b:
3f:a4:8a:6d:61:a9:a0:84:4f:08:13:6e:cb:73:c7:53:a4:72:
be:c9:a2:a7:7b:7d:09:db:7b:40:25:61:a6:4a:d9:4b:c3:63:
c7:a5:4d:57:45:91:24:ab:c3:86:23:af:04:ac:50:ef:99:91:
8e:26:43:e2:a3:0d:55:9e:fd:e7:83:70:d9:b7:4a:7f:08:d7:
13:8e:4e:bf:1a:f7:80:cc:ae:a2:40:0e:ee:98:c7:62:0c:a5:
e7:2c:4c:71:a0:29:74:b2:e2:11:51:c7:91:8f:22:c9:ba:e8:
6b:5d:a5:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQpKopN4bPqJI9DYH5VQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlY2QzOTFjNjYwYzNlNTdjNTNiODdjMGI1MmVjMGQyZjJm
NDI3NzUwHhcNMjUxMTA0MDkwMDU1WhcNMjUxMTA1MDkwMDU1WjAzMTEwLwYDVQQD
Eyg0ZjU0NDA2YmQzMjcyNzBkYzZiMGVhMGIyMzJkYTk5ZGY5MmFiNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IPJt1dGhxONjMcOqMhcFtcyoTNR
WdRuZuJ2EavE7EqBH5UoR9DPQjJGiNorI5ZeWscOk30VH0abdGSbVDjC2uJEO2ev
WjnLNl7BN/qA6x4SNDqfsI2HzR6c9+zZYTQ6Hs8p2mhbcOQGMS7e0OVKTcnvE9BG
PLmK4fqKL9dtbdR3rxej64B8mTkpikd5VODNbfTpXDajkydDFQ10S5jU+sCddFsh
P6sQVwZcgqTVl11FglpKTMhoYQJVNDQWlHY2IOXFwWVGTpN1YOUc6gwUHjN9Idhi
ZqDdtzTb04t9puOmeJzk71cp0u8z7EmVA31h8w4AofeGuJv1/LnckExM8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9UQGvTJycNxrDqCyMtqZ35KrREMB8GA1UdIwQY
MBaAFM7NORxmDD5XxTuHwLUuwNLy9Cd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEt
YTRkMzU5ZDkxMjUxLzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wYTJlMDEtOWFhNi00OGM5LWI3OWEtYTRkMzU5ZDkxMjUx
LzEvenMwNUhHWU1QbGZGTzRmQXRTN0EwdkwwSjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVo6najL
PPXjqgKvibx7iFjaxJimbKuLEqNP3iKRnqDVqsDbwaGNn5qS9/mU3EdEQJy451n3
yk4NCVygCmNVxPGNmDSVhIYAWpq2gevwyC+xKx5G/kEoI/HiBhC9+/mWg4LDdwVt
+EtNoCow8TDYCvs1KoKKZsV+n8dTQ07CmMp+Qh1QvV6C45X5fSqUnborP6SKbWGp
oIRPCBNuy3PHU6Ryvsmip3t9Cdt7QCVhpkrZS8Njx6VNV0WRJKvDhiOvBKxQ75mR
jiZD4qMNVZ7954Nw2bdKfwjXE45Ovxr3gMyuokAO7pjHYgyl5yxMcaApdLLiEVHH
kY8iybroa12lRg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:00 2025 by rpki-client