Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
File: Zzs6cc93J1Wj34ztXXNRb4ccChE.mft (raw, json)
Hash identifier: w4a9TpzFu9xUKuNgvnaUU1rVWGVSUpnwUJFAdOBuVt8=
Subject key identifier: 32:EB:DA:2B:09:96:B0:31:49:B9:63:CA:56:58:AA:6E:9E:51:4F:38
Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Certificate serial: 019A4D746AC326265CFC9EBDF9280EF7BA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 06:01:06 +0000
Manifest this update: Tue 04 Nov 2025 06:01:06 +0000
Manifest next update: Wed 05 Nov 2025 06:01:06 +0000
Files and hashes: 1: GTxuBJTZE8RhiPu02DbvRC5p3z4.roa (hash: ODgzdGKPm6A4A6ykvf0SWXMpsN711v9+LdTfhHSvPgM=)
2: Ylh0fw9kcwnCy2vgTQX9shlegWA.roa (hash: DVyC8PSQe0rTzi2pDjlYi3xWXdCvuv5Lwza7vDtRow0=)
3: Zzs6cc93J1Wj34ztXXNRb4ccChE.crl (hash: b5WfDDWIRCNuFtFbxxnhAgtY5WhMZn0vkI+6LMl3Ybs=)
4: kdXQriZmWhShfEV9r2HAp8-_kM8.roa (hash: NVhh4nwbgv5YrwoaouQ4UcAlf1u93ePric61BCLsXWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:6a:c3:26:26:5c:fc:9e:bd:f9:28:0e:f7:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11
Validity
Not Before: Nov 4 06:01:06 2025 GMT
Not After : Nov 5 06:01:06 2025 GMT
Subject: CN=32ebda2b0996b03149b963ca5658aa6e9e514f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:79:51:d4:28:ee:ee:22:0c:46:ea:87:8b:
b3:94:c1:e9:b8:25:3f:70:bc:49:99:00:22:34:2f:
c7:e8:ff:50:7e:e5:be:74:d9:e5:14:35:73:f5:e8:
2a:18:6e:b3:e0:fb:98:ee:34:0e:a3:41:3d:59:e4:
e4:cf:1f:28:5d:5c:03:53:23:c2:d3:ed:36:23:d4:
11:6f:e7:09:eb:50:87:5f:8b:f3:37:56:d6:7d:a3:
30:e6:1a:13:1b:98:c8:8a:34:24:e2:09:32:b0:d9:
8b:49:32:da:ca:9f:57:f9:70:6e:a9:7c:dd:b0:51:
50:65:9e:72:dd:bc:68:a5:11:0b:b7:d5:0c:bb:8a:
56:cc:3e:b3:ca:29:eb:3e:cb:11:bb:f6:90:27:26:
37:78:8f:92:60:b6:16:ab:76:05:0f:4e:d5:75:8e:
19:0b:37:9d:99:30:21:6f:32:96:b2:f7:50:a9:b9:
5a:0b:e5:7a:09:78:7c:d9:c3:69:78:c6:81:5f:00:
53:04:b4:a0:8c:90:55:f4:31:d6:4b:cc:27:df:e4:
ba:a9:4d:4d:e6:9b:b5:c1:40:12:8b:2b:7b:c4:83:
5c:3d:d9:59:1e:98:67:bd:8f:18:c1:84:c1:b1:02:
70:e1:2d:03:69:7a:2b:37:72:3b:59:61:10:a8:e5:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:DA:2B:09:96:B0:31:49:B9:63:CA:56:58:AA:6E:9E:51:4F:38
X509v3 Authority Key Identifier:
keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c5:c7:b7:1e:6f:a5:25:17:a4:63:c1:99:89:ed:15:93:c3:
b4:60:71:97:2b:4a:fd:ec:d1:9f:12:63:60:dc:a3:b0:7c:2c:
ce:98:cd:83:24:df:60:62:a2:c1:e0:62:d0:44:fc:79:54:29:
3f:1a:15:40:81:19:7e:13:53:7c:37:18:2f:27:b9:89:57:59:
80:be:70:11:40:6c:d1:fa:fa:ea:21:b8:33:5a:1c:de:0a:ea:
58:86:de:93:c7:1a:88:43:59:cd:fd:0c:b5:19:a1:fe:a2:2e:
d1:f2:2d:75:46:f9:ee:73:2c:32:ca:70:80:bf:e7:56:f2:13:
67:d1:30:58:45:46:cd:1f:d4:b4:12:34:db:3a:d3:ee:d5:32:
2c:fd:23:ba:a8:eb:93:d6:ed:88:0f:8c:25:f0:79:4f:3a:70:
47:f7:5f:46:a0:2c:d5:1a:be:c0:ad:8b:4f:c8:77:30:19:17:
dc:5a:91:69:f8:4c:12:48:43:5e:f9:2b:ca:a0:c0:74:25:b4:
5f:b9:a6:b4:ef:bd:53:41:fd:ba:37:c9:b3:3c:36:34:0d:78:
63:50:f8:97:99:9f:0a:2f:47:c2:49:60:33:3f:c8:7f:b4:f2:
ab:39:95:1f:5c:fc:8d:3c:2f:63:b4:5a:51:7a:eb:04:f0:5d:
2c:64:6f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdGrDJiZc/J69+SgO97oCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3M2IzYTcxY2Y3NzI3NTVhM2RmOGNlZDVkNzM1MTZmODcx
YzBhMTEwHhcNMjUxMTA0MDYwMTA2WhcNMjUxMTA1MDYwMTA2WjAzMTEwLwYDVQQD
EygzMmViZGEyYjA5OTZiMDMxNDliOTYzY2E1NjU4YWE2ZTllNTE0ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQh5UdQo7u4iDEbqh4uzlMHpuCU/
cLxJmQAiNC/H6P9QfuW+dNnlFDVz9egqGG6z4PuY7jQOo0E9WeTkzx8oXVwDUyPC
0+02I9QRb+cJ61CHX4vzN1bWfaMw5hoTG5jIijQk4gkysNmLSTLayp9X+XBuqXzd
sFFQZZ5y3bxopRELt9UMu4pWzD6zyinrPssRu/aQJyY3eI+SYLYWq3YFD07VdY4Z
CzedmTAhbzKWsvdQqblaC+V6CXh82cNpeMaBXwBTBLSgjJBV9DHWS8wn3+S6qU1N
5pu1wUASiyt7xINcPdlZHphnvY8YwYTBsQJw4S0DaXorN3I7WWEQqOXaawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLr2isJlrAxSbljylZYqm6eUU84MB8GA1UdIwQY
MBaAFGc7OnHPdydVo9+M7V1zUW+HHAoRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEt
NmZlMWYyOTRlNjI3LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEtNmZlMWYyOTRlNjI3
LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMXHtx5v
pSUXpGPBmYntFZPDtGBxlytK/ezRnxJjYNyjsHwszpjNgyTfYGKiweBi0ET8eVQp
PxoVQIEZfhNTfDcYLye5iVdZgL5wEUBs0fr66iG4M1oc3grqWIbek8caiENZzf0M
tRmh/qIu0fItdUb57nMsMspwgL/nVvITZ9EwWEVGzR/UtBI02zrT7tUyLP0juqjr
k9btiA+MJfB5TzpwR/dfRqAs1Rq+wK2LT8h3MBkX3FqRafhMEkhDXvkryqDAdCW0
X7mmtO+9U0H9ujfJszw2NA14Y1D4l5mfCi9HwklgMz/If7TyqzmVH1z8jTwvY7Ra
UXrrBPBdLGRvVA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:35 2025 by rpki-client