Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
File: ZeqT2IogLVHTTSqQNZfna48X8Oo.mft (raw, json)
Hash identifier: R1g7zqkWtdAG+a4L9vNTbayDLzoz67eNMG0K9R3i/FI=
Subject key identifier: 35:A7:AA:23:2F:57:B3:D6:72:A6:45:03:F9:34:20:8C:39:A8:42:2D
Authority key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Certificate issuer: /CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Certificate serial: 019A4FCFF12B29B9A20BEA65E5DA129C6024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
Manifest number: 012D
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: I-x_UPcw9sQTN9WaL1gNO5Jv8pU.roa (hash: kQYNPTEIQCpAe0+UIMCFb30JlCdHhzOSGG9E3Bksfn4=)
2: No384ukQ7PMzR7ysdXQqiI23V0U.roa (hash: WQHcVAZUYgrUok+kLmgQEzlX1mU+gj90+MGfNi8ZR3g=)
3: V4pBXU1PZiQxs_5q_J-RR8u4p6I.roa (hash: eo5F6jAlKraDD9oeFZGJ6cw6s1Keo3V6+IqIlcUTCHA=)
4: ZeqT2IogLVHTTSqQNZfna48X8Oo.crl (hash: E9WvjxHNUCw7DyEQDJ/+aYY31MoaHGb0wkiMCfwkQ0Q=)
5: ce8LRFwM6wCXX-cKMVilSCLACTA.roa (hash: SjdlAeta3OBEM6FH48Ybj415juI53asPm3ETveUv2Eg=)
6: gitklWD7TllTa09uVT2HYtJ2HAc.roa (hash: 4UXSpGqlkDuQDI9lXYLAHQ9HNN6MyyLOEemk6yCC+m8=)
7: mSfH0G_iARcbQlaJSIXQlk05LS4.roa (hash: 0FkMJZ2bnxCxc3Hk8tjYTkCS9FPgkLmBQCWnnshE9e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f1:2b:29:b9:a2:0b:ea:65:e5:da:12:9c:60:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=35a7aa232f57b3d672a64503f934208c39a8422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:78:5d:8c:e1:5a:3f:f7:76:c1:1e:e0:1d:
c2:e8:b1:71:94:3d:be:55:5b:34:8c:2d:52:ad:07:
2c:29:d3:59:64:3e:ca:65:cd:75:36:f8:a0:66:2d:
f6:31:2f:e1:11:f2:14:75:19:35:9c:de:9f:73:cf:
db:e3:85:05:09:c9:9e:1f:5a:60:39:c4:fc:e5:81:
ec:5c:20:bd:49:ac:cc:c1:32:cb:60:8d:65:7e:3d:
c6:3e:eb:5c:3c:1c:54:37:ad:6f:cd:a8:f9:0c:93:
93:bf:c8:fe:43:73:12:ef:d0:9e:4a:19:d7:53:f5:
1c:6c:4d:11:89:1d:f6:34:84:de:be:38:d3:3a:0e:
86:23:21:1f:47:02:5f:9e:9f:06:51:3d:48:ea:37:
c4:9c:5f:45:f5:a4:16:21:94:28:61:36:35:a9:e4:
21:85:95:ef:bb:bc:08:0e:fd:73:82:7c:22:8b:f6:
21:a1:43:1c:5f:06:86:62:3d:f9:56:f6:a1:72:3c:
14:22:66:ea:4d:3c:b0:66:3a:22:26:22:64:af:78:
63:3a:32:e6:43:21:6b:29:ea:db:19:d9:e1:94:6e:
87:b2:60:57:e5:24:cd:b3:2e:61:ea:bb:a7:64:ed:
9b:3f:bf:1b:c9:9e:6c:e3:71:f8:9a:98:c5:d6:ec:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A7:AA:23:2F:57:B3:D6:72:A6:45:03:F9:34:20:8C:39:A8:42:2D
X509v3 Authority Key Identifier:
keyid:65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f0:51:09:b2:7d:99:74:6d:82:fe:b0:28:e8:f0:9b:4d:0b:
23:99:c0:06:c5:1a:cb:c8:a5:ee:ed:ca:69:00:92:eb:75:c1:
fd:23:ad:9b:10:4b:c4:24:ca:ab:21:fb:e5:9c:f6:a0:53:5f:
a8:d0:09:7b:c3:aa:94:79:43:21:d8:f0:c0:5e:89:4e:ad:a0:
fe:a1:9d:b4:8f:09:e8:07:2d:06:50:2a:24:8f:0f:59:5c:33:
a7:5d:27:6a:5a:6c:08:1e:b6:16:07:94:ce:94:72:53:fc:36:
e1:46:7f:64:47:4e:00:3a:bf:13:67:2f:b5:0a:a3:8d:87:bd:
8b:d6:e0:cf:0b:a7:4e:63:9a:fa:6f:07:5c:26:5c:5f:0b:0e:
38:45:83:6c:d1:f6:97:d7:0b:39:a7:d0:cd:c3:41:49:a1:aa:
ad:45:32:04:16:8d:52:13:6a:8d:cf:b5:a4:b3:28:35:04:21:
a1:88:be:c1:fe:ab:cc:a4:1c:62:d2:8e:20:11:e7:c6:da:ce:
18:82:3c:a9:d9:7a:b3:67:97:70:7e:af:94:97:6b:d8:70:ce:
e1:cb:3c:d8:f9:22:6b:44:ca:23:48:ce:89:0d:37:8b:ac:f9:
79:5d:e3:f9:eb:d3:fa:b0:bd:09:46:02:58:99:33:9c:2b:02:
13:cf:a7:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz/ErKbmiC+pl5doSnGAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWE5M2Q4OGEyMDJkNTFkMzRkMmE5MDM1OTdlNzZiOGYx
N2YwZWEwHhcNMjUxMTA0MTcwMDE4WhcNMjUxMTA1MTcwMDE4WjAzMTEwLwYDVQQD
EygzNWE3YWEyMzJmNTdiM2Q2NzJhNjQ1MDNmOTM0MjA4YzM5YTg0MjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f94XYzhWj/3dsEe4B3C6LFxlD2+
VVs0jC1SrQcsKdNZZD7KZc11NvigZi32MS/hEfIUdRk1nN6fc8/b44UFCcmeH1pg
OcT85YHsXCC9SazMwTLLYI1lfj3GPutcPBxUN61vzaj5DJOTv8j+Q3MS79CeShnX
U/UcbE0RiR32NITevjjTOg6GIyEfRwJfnp8GUT1I6jfEnF9F9aQWIZQoYTY1qeQh
hZXvu7wIDv1zgnwii/YhoUMcXwaGYj35VvahcjwUImbqTTywZjoiJiJkr3hjOjLm
QyFrKerbGdnhlG6HsmBX5STNsy5h6runZO2bP78byZ5s43H4mpjF1uxy2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWnqiMvV7PWcqZFA/k0IIw5qEItMB8GA1UdIwQY
MBaAFGXqk9iKIC1R000qkDWX52uPF/DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWIt
Y2UxYmJhNjkxYjM3LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGVhYzAtNzFmZC00NmU5LTllMWItY2UxYmJhNjkxYjM3
LzEvWmVxVDJJb2dMVkhUVFNxUU5aZm5hNDhYOE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPBRCbJ9
mXRtgv6wKOjwm00LI5nABsUay8il7u3KaQCS63XB/SOtmxBLxCTKqyH75Zz2oFNf
qNAJe8OqlHlDIdjwwF6JTq2g/qGdtI8J6ActBlAqJI8PWVwzp10nalpsCB62FgeU
zpRyU/w24UZ/ZEdOADq/E2cvtQqjjYe9i9bgzwunTmOa+m8HXCZcXwsOOEWDbNH2
l9cLOafQzcNBSaGqrUUyBBaNUhNqjc+1pLMoNQQhoYi+wf6rzKQcYtKOIBHnxtrO
GII8qdl6s2eXcH6vlJdr2HDO4cs82Pkia0TKI0jOiQ03i6z5eV3j+evT+rC9CUYC
WJkznCsCE8+nlA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:51:32 2025 by rpki-client