Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
File: zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft (raw, json)
Hash identifier: OUoKGLoqXaQ50i3MS7c2H/iOLwQ3x9j8r8uw2Fc9jYY=
Subject key identifier: 61:B1:EA:BF:BE:03:22:4B:8F:9D:0B:9D:42:2D:94:E4:55:6B:7F:8A
Authority key identifier: CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
Certificate issuer: /CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Certificate serial: 019A4F6284BA2FD041C09B48EEED4D839FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: uYFh_VUWIelVXy_oDiQCWPM5ZAg.roa (hash: HgH2Bf6YxOfhcnv4hc8+KBaYB6o6R1j3iFpA4UR/vJs=)
2: zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl (hash: 5K8Ip7LDE/3nbYsmDtNc6hs3Rflzif31QT2GuwQlyy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:84:ba:2f:d0:41:c0:9b:48:ee:ed:4d:83:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5649dbba592f1c9f3f2889bcf81fd225989367
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=61b1eabfbe03224b8f9d0b9d422d94e4556b7f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:20:76:45:5e:47:7a:14:95:a8:bd:8c:21:
41:5c:9d:77:c7:ab:d6:83:05:c1:09:c0:9d:39:ba:
26:95:93:02:82:33:69:42:b6:1b:a4:ec:02:33:2a:
a5:72:92:6b:3a:27:df:4c:38:d2:a4:cc:2b:0f:d6:
1d:5a:a3:29:9b:34:dd:38:b0:04:dc:78:51:c4:10:
e8:91:05:ad:43:74:14:a8:2f:c4:49:fd:dc:6d:50:
4b:13:51:c9:0d:db:3e:42:c0:ce:e3:01:92:5d:06:
76:0c:19:b0:a8:d5:99:01:a8:6b:3f:66:6a:1a:2a:
06:3f:26:09:0e:d4:cd:7d:63:0e:de:9a:5a:7f:b8:
5c:ea:7b:fc:10:25:36:9e:8b:4c:07:19:96:55:95:
19:4b:5e:f9:dd:8f:40:ec:2a:1b:30:16:2f:a4:ef:
49:bb:17:c5:a3:2b:f5:05:c5:8b:ea:f3:95:be:c6:
82:16:ca:70:bd:c9:4a:33:20:d9:78:cd:69:c7:fe:
04:30:c2:ba:0c:b7:b0:ba:44:af:ed:a2:9a:bc:a2:
ed:59:7c:c0:f7:26:49:db:41:5f:71:ea:6e:30:a1:
8f:fd:19:2c:3e:be:20:eb:b8:c3:f7:8f:ad:58:d3:
1a:b3:59:63:49:4f:95:47:56:e1:a4:20:0f:cb:4e:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B1:EA:BF:BE:03:22:4B:8F:9D:0B:9D:42:2D:94:E4:55:6B:7F:8A
X509v3 Authority Key Identifier:
keyid:CE:56:49:DB:BA:59:2F:1C:9F:3F:28:89:BC:F8:1F:D2:25:98:93:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlZJ27pZLxyfPyiJvPgf0iWYk2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/937385-1a90-42f5-8e40-c67ab83ac1f5/1/zlZJ27pZLxyfPyiJvPgf0iWYk2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6e:11:8c:51:be:a9:97:d1:04:00:68:92:80:a0:ba:eb:41:
aa:b6:ad:83:cd:0a:19:c8:96:70:6c:28:96:ef:ec:4f:db:de:
8b:71:40:38:fd:08:33:c9:22:ba:fb:e9:98:c7:14:da:2e:63:
64:18:04:19:72:f2:f9:85:22:8b:5b:43:f1:29:43:2b:15:71:
ea:6f:b4:36:b9:7f:0a:de:3e:2c:bf:7f:15:07:19:16:c4:49:
6e:45:05:cb:70:8c:b5:89:c8:ef:e6:ad:7b:55:46:97:95:74:
8d:c9:a6:b9:de:9c:44:32:03:ae:5f:f8:f1:0b:6d:b9:52:31:
3e:45:18:3d:f2:e1:60:c3:d9:3d:d3:32:94:16:a3:42:49:21:
ec:e8:bb:0d:5a:a1:6d:5d:20:fd:bf:94:ed:9a:a4:2b:6b:ac:
75:4b:60:3e:aa:cb:7d:94:3e:e0:83:c2:a8:b4:fb:63:ba:77:
e1:62:64:8a:1d:39:5d:0d:08:d1:cf:33:6d:64:54:3c:d3:06:
f4:c0:8d:f6:f9:e0:05:e1:47:ca:51:ea:5c:6a:fa:a5:2a:46:
e8:3f:40:e6:69:83:2a:ff:09:31:70:34:18:dd:4f:65:15:9d:
8c:d2:39:ee:f2:60:07:7c:bb:9d:63:0a:fa:c1:8f:21:f9:a6:
2f:fc:6e:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYoS6L9BBwJtI7u1Ng5/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNTY0OWRiYmE1OTJmMWM5ZjNmMjg4OWJjZjgxZmQyMjU5
ODkzNjcwHhcNMjUxMTA0MTUwMDQ3WhcNMjUxMTA1MTUwMDQ3WjAzMTEwLwYDVQQD
Eyg2MWIxZWFiZmJlMDMyMjRiOGY5ZDBiOWQ0MjJkOTRlNDU1NmI3ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1ggdkVeR3oUlai9jCFBXJ13x6vW
gwXBCcCdObomlZMCgjNpQrYbpOwCMyqlcpJrOiffTDjSpMwrD9YdWqMpmzTdOLAE
3HhRxBDokQWtQ3QUqC/ESf3cbVBLE1HJDds+QsDO4wGSXQZ2DBmwqNWZAahrP2Zq
GioGPyYJDtTNfWMO3ppaf7hc6nv8ECU2notMBxmWVZUZS1753Y9A7CobMBYvpO9J
uxfFoyv1BcWL6vOVvsaCFspwvclKMyDZeM1px/4EMMK6DLewukSv7aKavKLtWXzA
9yZJ20FfcepuMKGP/RksPr4g67jD94+tWNMas1ljSU+VR1bhpCAPy04b0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGx6r++AyJLj50LnUItlORVa3+KMB8GA1UdIwQY
MBaAFM5WSdu6WS8cnz8oibz4H9IlmJNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAt
YzY3YWI4M2FjMWY1LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy85MzczODUtMWE5MC00MmY1LThlNDAtYzY3YWI4M2FjMWY1
LzEvemxaSjI3cFpMeHlmUHlpSnZQZ2YwaVdZazJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn24RjFG+
qZfRBABokoCguutBqratg80KGciWcGwolu/sT9vei3FAOP0IM8kiuvvpmMcU2i5j
ZBgEGXLy+YUii1tD8SlDKxVx6m+0Nrl/Ct4+LL9/FQcZFsRJbkUFy3CMtYnI7+at
e1VGl5V0jcmmud6cRDIDrl/48QttuVIxPkUYPfLhYMPZPdMylBajQkkh7Oi7DVqh
bV0g/b+U7ZqkK2usdUtgPqrLfZQ+4IPCqLT7Y7p34WJkih05XQ0I0c8zbWRUPNMG
9MCN9vngBeFHylHqXGr6pSpG6D9A5mmDKv8JMXA0GN1PZRWdjNI57vJgB3y7nWMK
+sGPIfmmL/xurg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:26 2025 by rpki-client