Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: 4iyOfiAJPoBNyptgwAv0c2nBR7ZXsCBYeSq+PLN4QWE=
Subject key identifier: EB:09:2C:3B:01:15:DE:F9:C5:91:F3:54:A5:BC:8F:CA:35:4B:ED:50
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 019A4E18AD0FAD884AEA8ED854182D64ADCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: fieu+LqX3eexJxXfkU8WRaEFbYQuzB5ieufHf05t508=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ad:0f:ad:88:4a:ea:8e:d8:54:18:2d:64:ad:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=eb092c3b0115def9c591f354a5bc8fca354bed50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:60:8b:9a:af:95:50:ce:62:36:b8:4c:37:
b1:76:56:a1:9d:85:e0:82:d6:ca:28:f4:50:c2:1b:
dd:62:0f:12:dc:42:65:6c:36:21:76:8c:17:d7:fa:
b0:10:12:2c:95:b8:33:2a:fd:ac:8d:22:3f:48:b5:
25:87:c0:cf:8e:c4:db:2b:02:4d:71:60:ef:5e:67:
18:43:3c:d3:d9:18:a5:1a:80:e3:6f:f4:ff:e3:4f:
d2:70:21:43:95:d6:b1:f0:5a:e9:1c:6f:2d:a0:c9:
d1:76:5d:d0:3d:35:db:36:10:dc:6a:9e:61:3e:d1:
24:d9:a1:60:ec:f4:cf:58:02:14:fe:89:42:15:c2:
b5:de:73:4d:fc:ee:04:99:96:ba:81:ce:2b:18:69:
fc:03:5a:5f:c6:f3:d8:2d:fd:7c:6f:c7:c0:64:b6:
2a:c0:5f:b4:32:79:b2:4c:e0:fe:62:fd:d9:89:4d:
eb:ba:bd:9a:87:a1:29:ea:57:a1:a7:07:35:23:b3:
84:e3:a1:27:dc:89:a0:60:1b:a2:7c:15:9f:c6:16:
7d:51:2e:4a:e5:e8:4c:a5:93:0f:35:ce:e1:db:f8:
21:77:ef:08:da:8a:6c:45:cf:8b:23:85:85:35:39:
4e:10:b0:4a:4c:ff:bf:04:52:2b:c9:17:7c:f9:32:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:09:2C:3B:01:15:DE:F9:C5:91:F3:54:A5:BC:8F:CA:35:4B:ED:50
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fc:f5:42:c2:68:de:fe:fe:b5:2a:8d:ba:1c:40:35:a2:53:
0e:f4:c2:1e:7a:60:7a:f1:ee:fa:dd:9e:79:78:2e:2c:b5:6d:
90:cd:04:b9:18:58:4f:d2:4d:42:f5:06:2c:dd:cf:91:1c:11:
95:dc:88:12:e4:42:81:68:49:ca:51:a3:fb:f8:12:1c:f9:8f:
6a:86:6a:37:bb:c3:54:c1:9b:72:3d:af:df:ba:93:c3:3f:24:
cf:33:3e:98:5d:6e:a5:43:2e:66:46:ca:51:cf:3c:55:68:f4:
67:ff:52:a5:69:88:17:82:58:21:f2:12:b2:10:51:86:c1:8f:
a2:df:6a:c3:c3:8d:5c:c9:96:a1:3c:5c:90:eb:53:a8:47:a0:
39:8e:70:7a:30:89:81:c3:6b:8b:4b:33:44:62:c3:0b:29:d2:
ed:76:ec:c0:ab:fa:ae:e0:8a:7b:64:00:aa:84:11:02:2e:6f:
e8:ee:0e:73:b1:76:b9:0d:73:7a:cd:dc:9b:35:f7:cb:95:48:
b3:68:c0:c2:d3:55:2c:9e:83:f7:7e:d9:a0:f0:3f:b4:e0:dd:
27:17:be:b6:36:02:bf:db:ee:a1:43:42:03:0f:14:9b:34:bc:
58:9b:a5:f4:93:3d:37:09:c2:ed:5f:b8:74:ac:11:19:ab:37:
88:f2:23:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGK0PrYhK6o7YVBgtZK3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0
NGFhMDgwHhcNMjUxMTA0MDkwMDMxWhcNMjUxMTA1MDkwMDMxWjAzMTEwLwYDVQQD
EyhlYjA5MmMzYjAxMTVkZWY5YzU5MWYzNTRhNWJjOGZjYTM1NGJlZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOhgi5qvlVDOYja4TDexdlahnYXg
gtbKKPRQwhvdYg8S3EJlbDYhdowX1/qwEBIslbgzKv2sjSI/SLUlh8DPjsTbKwJN
cWDvXmcYQzzT2RilGoDjb/T/40/ScCFDldax8FrpHG8toMnRdl3QPTXbNhDcap5h
PtEk2aFg7PTPWAIU/olCFcK13nNN/O4EmZa6gc4rGGn8A1pfxvPYLf18b8fAZLYq
wF+0MnmyTOD+Yv3ZiU3rur2ah6Ep6lehpwc1I7OE46En3ImgYBuifBWfxhZ9US5K
5ehMpZMPNc7h2/ghd+8I2opsRc+LI4WFNTlOELBKTP+/BFIryRd8+TJcHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsJLDsBFd75xZHzVKW8j8o1S+1QMB8GA1UdIwQY
MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt
NDhkM2NhMTYxYmIwLzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw
LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvz1QsJo
3v7+tSqNuhxANaJTDvTCHnpgevHu+t2eeXguLLVtkM0EuRhYT9JNQvUGLN3PkRwR
ldyIEuRCgWhJylGj+/gSHPmPaoZqN7vDVMGbcj2v37qTwz8kzzM+mF1upUMuZkbK
Uc88VWj0Z/9SpWmIF4JYIfISshBRhsGPot9qw8ONXMmWoTxckOtTqEegOY5wejCJ
gcNri0szRGLDCynS7XbswKv6ruCKe2QAqoQRAi5v6O4Oc7F2uQ1zes3cmzX3y5VI
s2jAwtNVLJ6D937ZoPA/tODdJxe+tjYCv9vuoUNCAw8UmzS8WJul9JM9NwnC7V+4
dKwRGas3iPIjcA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:14 2025 by rpki-client