Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: 1oopvYB4RaOsjQQ2WKJ203kkVzH2ztrJPuGuvksP5Nc=
Subject key identifier: 7C:C0:72:CE:4C:D4:E1:0B:43:78:4D:19:37:5D:16:BC:8C:94:F6:47
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 019A4D3CFB82B3F43C2235502A0D98450879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 12A0
Signing time: Tue 04 Nov 2025 05:00:33 +0000
Manifest this update: Tue 04 Nov 2025 05:00:33 +0000
Manifest next update: Wed 05 Nov 2025 05:00:33 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: 73b+r8ohYIGcZL04xYTA5un0qr8PFsv6ty+Rn4MbGWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:fb:82:b3:f4:3c:22:35:50:2a:0d:98:45:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Nov 4 05:00:33 2025 GMT
Not After : Nov 5 05:00:33 2025 GMT
Subject: CN=7cc072ce4cd4e10b43784d19375d16bc8c94f647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:aa:f4:8a:14:34:b0:0b:a2:f6:ed:b3:aa:
4b:3e:b3:a1:03:1c:83:98:cc:ed:e4:06:ba:eb:39:
a1:7e:02:cb:c9:e9:65:06:4c:fb:47:1d:b3:49:b7:
94:90:98:e9:1e:20:01:73:c6:08:ee:7e:a1:84:5e:
e2:3e:7d:99:b1:63:eb:f1:d3:cb:cb:3e:b0:ad:30:
aa:1b:88:e8:b6:43:2a:a7:52:1e:39:19:4c:91:35:
7d:db:d4:05:b1:48:dc:61:b3:01:75:61:bf:d0:1e:
d7:4f:63:16:d5:91:9e:e1:ff:3f:96:37:47:12:5f:
0a:7e:64:b2:61:ad:10:49:e9:8e:32:20:35:0b:e7:
ae:2e:2b:9b:31:22:09:d4:fe:a6:28:1f:c4:98:3f:
35:3a:d9:1b:f9:d9:af:fb:e3:54:46:78:f2:da:79:
48:fd:0b:5f:ae:be:52:05:0c:83:e7:b1:03:2b:f4:
ee:7c:e1:78:c4:ad:c4:30:a5:71:01:45:71:aa:51:
e6:0a:73:6b:f8:57:68:12:d1:1f:56:e0:2a:e2:27:
3e:e9:4a:40:9a:40:33:7a:04:d5:ef:c6:07:95:75:
89:fa:30:64:c9:7f:c6:33:03:a3:97:fa:1a:32:1a:
db:ab:07:f3:92:e1:71:09:73:c8:d7:cf:8c:10:ee:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C0:72:CE:4C:D4:E1:0B:43:78:4D:19:37:5D:16:BC:8C:94:F6:47
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:87:ff:e7:89:bf:f6:9e:01:c5:59:59:35:09:93:8d:28:
70:86:b1:57:05:04:7d:b9:4f:62:c4:37:17:7d:c9:9d:ad:b8:
19:71:ef:a0:88:92:8a:bd:d5:a8:41:89:04:73:c5:7a:3d:3d:
07:15:99:a3:67:a0:ef:d5:4d:5a:cb:ad:cf:f7:73:fc:25:7a:
e5:64:37:b6:4d:29:d9:52:1f:bf:a5:b7:54:0e:c9:57:ea:d8:
66:f7:eb:fe:d8:32:b1:ac:bf:f9:ea:fe:ca:fa:4a:db:ee:d7:
59:31:23:c2:36:0f:c0:54:40:45:c2:82:54:41:bb:59:01:72:
1c:7c:ca:08:ad:00:4c:79:ed:c8:d7:2b:ee:e0:c0:36:48:ef:
86:60:68:c1:4c:3d:13:ad:e4:39:fe:d1:ed:ee:9d:58:23:52:
5e:8f:83:b5:30:94:6d:48:c1:5c:64:0d:35:00:87:ec:49:54:
69:4d:42:13:27:4f:db:e5:7e:f7:0d:1e:65:0a:98:af:94:ea:
3a:76:1d:df:e8:1e:9f:b3:be:3c:b1:ef:5b:bf:0c:b0:af:dd:
c5:c6:d8:fc:48:0a:a2:a1:ef:63:b9:43:f4:94:9b:b3:d7:49:
7c:99:35:70:e6:b6:a6:f5:c9:62:2c:1d:29:56:4d:b3:ac:13:
05:ed:ec:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPPuCs/Q8IjVQKg2YRQh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOTYyNTU0MWFiZTZiNWFlOTI2NjcxZGFhOThhYzZkODA5
NGVjN2IwHhcNMjUxMTA0MDUwMDMzWhcNMjUxMTA1MDUwMDMzWjAzMTEwLwYDVQQD
Eyg3Y2MwNzJjZTRjZDRlMTBiNDM3ODRkMTkzNzVkMTZiYzhjOTRmNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuuq9IoUNLALovbts6pLPrOhAxyD
mMzt5Aa66zmhfgLLyellBkz7Rx2zSbeUkJjpHiABc8YI7n6hhF7iPn2ZsWPr8dPL
yz6wrTCqG4jotkMqp1IeORlMkTV929QFsUjcYbMBdWG/0B7XT2MW1ZGe4f8/ljdH
El8KfmSyYa0QSemOMiA1C+euLiubMSIJ1P6mKB/EmD81Otkb+dmv++NURnjy2nlI
/Qtfrr5SBQyD57EDK/TufOF4xK3EMKVxAUVxqlHmCnNr+FdoEtEfVuAq4ic+6UpA
mkAzegTV78YHlXWJ+jBkyX/GMwOjl/oaMhrbqwfzkuFxCXPI18+MEO5FGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzAcs5M1OELQ3hNGTddFryMlPZHMB8GA1UdIwQY
MBaAFM+WJVQavmta6SZnHaqYrG2AlOx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2Et
NTlhNTg3YmRlYTNmLzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzJlZDMtNDM0ZC00ZDQ5LTk1Y2EtNTlhNTg3YmRlYTNm
LzEvejVZbFZCcS1hMXJwSm1jZHFwaXNiWUNVN0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvmH/+eJ
v/aeAcVZWTUJk40ocIaxVwUEfblPYsQ3F33Jna24GXHvoIiSir3VqEGJBHPFej09
BxWZo2eg79VNWsutz/dz/CV65WQ3tk0p2VIfv6W3VA7JV+rYZvfr/tgysay/+er+
yvpK2+7XWTEjwjYPwFRARcKCVEG7WQFyHHzKCK0ATHntyNcr7uDANkjvhmBowUw9
E63kOf7R7e6dWCNSXo+DtTCUbUjBXGQNNQCH7ElUaU1CEydP2+V+9w0eZQqYr5Tq
OnYd3+gen7O+PLHvW78MsK/dxcbY/EgKoqHvY7lD9JSbs9dJfJk1cOa2pvXJYiwd
KVZNs6wTBe3sDg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client