Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
File: zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft (raw, json)
Hash identifier: dQLBAzCw/4cHzb93/lOWY4v9h9aug/7klMjIlipoz90=
Subject key identifier: D0:2E:FB:B9:80:58:2A:45:6E:F8:F4:86:F0:19:C8:64:4B:BF:EF:CA
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 019A5074FADE14F72234920935816D6D5CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
Manifest number: 0DB4
Signing time: Tue 04 Nov 2025 20:00:34 +0000
Manifest this update: Tue 04 Nov 2025 20:00:34 +0000
Manifest next update: Wed 05 Nov 2025 20:00:34 +0000
Files and hashes: 1: FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa (hash: 7pDJDV3PAprmagYY0WEztJ7b9H5DGoPcWbYIPWhc9l8=)
2: zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl (hash: 1dbfhfgf2PkeSVoOCvC+/Ga/EQzHLiyndkZf/mIayE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:fa:de:14:f7:22:34:92:09:35:81:6d:6d:5c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Nov 4 20:00:34 2025 GMT
Not After : Nov 5 20:00:34 2025 GMT
Subject: CN=d02efbb980582a456ef8f486f019c8644bbfefca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:4a:71:d0:59:8f:01:76:09:e2:e1:6d:50:
5c:cc:03:ac:ba:7a:4b:62:03:93:2f:08:a4:03:75:
80:60:1d:68:9d:a7:2a:56:71:02:b8:a6:c3:9f:64:
8c:13:a2:0d:f8:0a:9f:8c:68:d3:f3:66:c2:49:19:
9b:c8:2e:c2:bf:52:4e:56:4c:22:9f:40:f0:fc:e2:
ea:25:dd:ba:b3:bc:d9:c8:76:0c:08:7d:84:1c:53:
67:76:0e:4d:7f:a6:85:9a:6b:d4:45:24:b2:cf:da:
f7:5e:24:19:74:44:32:a4:7f:fe:9a:e4:63:22:ff:
8b:4e:54:32:ca:94:87:79:e3:36:fd:14:2c:75:42:
07:ef:36:c0:96:bd:82:ac:e2:cc:04:19:b1:90:c1:
6d:26:8c:06:5a:c6:e2:7c:cf:3b:5e:ea:83:3f:c9:
cb:9b:68:1f:d5:60:69:a1:f1:e5:bc:25:a1:ca:94:
9c:88:c1:89:71:bd:65:a8:50:52:ed:3e:ec:5f:da:
e7:02:62:4e:82:99:5e:c9:41:ce:60:0d:de:fa:e9:
9d:d2:70:1e:d7:56:cf:42:ed:00:74:46:f3:e0:36:
95:e1:94:6f:9e:ef:00:66:89:f3:f9:22:21:9d:91:
0e:04:70:ae:a3:cc:64:d7:17:08:2c:e3:14:bf:32:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:FB:B9:80:58:2A:45:6E:F8:F4:86:F0:19:C8:64:4B:BF:EF:CA
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9c:56:2e:4b:1e:9c:97:c1:ec:9b:13:44:6e:48:ab:7f:00:
e4:1f:88:a8:c9:d7:5a:92:d4:31:0e:71:85:03:40:f4:43:17:
8f:1f:e3:aa:c3:af:a4:a1:2e:43:06:3b:bb:0f:d1:3f:27:87:
8b:7e:3b:3c:30:51:66:68:3d:5b:48:df:8a:ba:e4:ac:99:64:
ef:ec:97:11:91:a6:e2:14:c7:7f:eb:b9:18:13:8c:7f:38:91:
a5:3f:b2:22:71:88:7f:a0:34:35:fa:43:e3:4c:1b:36:cc:2e:
3e:a8:80:0a:f6:ba:c3:84:aa:51:29:36:26:82:bd:3b:4c:4d:
32:50:93:d4:f8:2b:e9:0b:48:e0:61:8b:7a:04:9a:c2:78:5c:
f3:b2:b0:37:42:d5:1c:81:9f:ac:c3:e0:b9:60:c4:6a:c2:4b:
f4:15:fa:74:ff:f2:71:45:a5:87:13:0f:21:3c:98:20:79:d4:
0d:5f:02:c6:76:54:18:8c:eb:87:34:12:75:6a:7c:78:0b:11:
6b:f5:d0:97:85:40:83:e0:98:05:1d:bc:41:a6:91:0f:dd:a5:
25:7e:5f:ee:95:84:4f:f8:ed:cd:0f:c6:2f:1a:cb:b1:3d:63:
2a:8e:08:67:01:45:2b:00:03:56:98:dd:09:00:5a:c5:0f:22:
bc:8c:42:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdPreFPciNJIJNYFtbVzhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2
NGQxOTYwHhcNMjUxMTA0MjAwMDM0WhcNMjUxMTA1MjAwMDM0WjAzMTEwLwYDVQQD
EyhkMDJlZmJiOTgwNTgyYTQ1NmVmOGY0ODZmMDE5Yzg2NDRiYmZlZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFRKcdBZjwF2CeLhbVBczAOsunpL
YgOTLwikA3WAYB1onacqVnECuKbDn2SME6IN+AqfjGjT82bCSRmbyC7Cv1JOVkwi
n0Dw/OLqJd26s7zZyHYMCH2EHFNndg5Nf6aFmmvURSSyz9r3XiQZdEQypH/+muRj
Iv+LTlQyypSHeeM2/RQsdUIH7zbAlr2CrOLMBBmxkMFtJowGWsbifM87XuqDP8nL
m2gf1WBpofHlvCWhypSciMGJcb1lqFBS7T7sX9rnAmJOgpleyUHOYA3e+umd0nAe
11bPQu0AdEbz4DaV4ZRvnu8AZonz+SIhnZEOBHCuo8xk1xcILOMUvzIp1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAu+7mAWCpFbvj0hvAZyGRLv+/KMB8GA1UdIwQY
MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt
YTQ2MTE2OWYxZGMyLzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy
LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZxWLkse
nJfB7JsTRG5Iq38A5B+IqMnXWpLUMQ5xhQNA9EMXjx/jqsOvpKEuQwY7uw/RPyeH
i347PDBRZmg9W0jfirrkrJlk7+yXEZGm4hTHf+u5GBOMfziRpT+yInGIf6A0NfpD
40wbNswuPqiACva6w4SqUSk2JoK9O0xNMlCT1Pgr6QtI4GGLegSawnhc87KwN0LV
HIGfrMPguWDEasJL9BX6dP/ycUWlhxMPITyYIHnUDV8CxnZUGIzrhzQSdWp8eAsR
a/XQl4VAg+CYBR28QaaRD92lJX5f7pWET/jtzQ/GLxrLsT1jKo4IZwFFKwADVpjd
CQBaxQ8ivIxCow==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:10:43 2025 by rpki-client