Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: iecErjZ3TWl2NLfcg1jKOH0vyWX+Y9bl1ItVXJcFb+A=
Subject key identifier: 59:8D:12:C1:20:B9:FA:26:81:5A:88:55:9E:CC:09:57:DC:DC:91:13
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 019A4D06B0409910B39EFD7FA5E9FEDD6E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 09CC
Signing time: Tue 04 Nov 2025 04:01:15 +0000
Manifest this update: Tue 04 Nov 2025 04:01:15 +0000
Manifest next update: Wed 05 Nov 2025 04:01:15 +0000
Files and hashes: 1: YDAV-stFbBYknK-MHQjAFGKIviM.roa (hash: SdDeY9dzrBZujPQFvilvXbGOkdZa6vv8FLkLN5jjZVw=)
2: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: OdRbdRoMzB252AKJ03VnNo8sFs5QDPiUGVd6Wskkeqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:b0:40:99:10:b3:9e:fd:7f:a5:e9:fe:dd:6e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: Nov 4 04:01:15 2025 GMT
Not After : Nov 5 04:01:15 2025 GMT
Subject: CN=598d12c120b9fa26815a88559ecc0957dcdc9113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:88:ce:8e:08:ec:01:40:da:af:d6:8c:35:
a1:fc:a5:62:05:13:27:51:28:0b:f8:fc:e3:d4:ea:
7a:7e:4c:ca:68:a4:fc:78:a4:9b:8a:5c:b0:89:a1:
60:10:77:48:c9:f2:cb:21:a8:41:86:2e:d7:43:33:
61:b5:0d:d2:8d:b7:b5:f7:09:18:cc:29:98:ce:bc:
eb:81:98:3c:44:03:9c:e6:cc:eb:e9:66:aa:74:4a:
90:be:1f:c7:46:d4:12:c3:73:be:2f:30:47:10:6b:
87:1d:69:1d:2d:a6:ec:ef:e7:7a:17:a9:bf:71:80:
89:d0:89:a7:23:ff:64:c8:42:ab:33:05:9e:fb:0b:
38:40:f1:19:da:64:bf:fb:3c:4d:9e:78:14:76:76:
7d:ca:de:e6:ca:e2:b3:ee:e5:03:36:1d:fe:12:3e:
93:f9:07:b1:39:22:33:38:c7:cc:8b:ca:fc:96:4f:
1e:6a:9d:01:51:8f:9f:0f:b1:f9:bd:19:ed:6a:89:
1b:06:e2:7d:36:44:ff:0d:4b:00:52:0c:2a:4b:a5:
7e:5f:70:11:52:0c:99:01:7f:84:60:15:52:0c:47:
e7:8a:5c:f3:9d:36:bc:be:7e:db:67:e6:b7:2c:f1:
6d:43:98:b5:25:a0:b7:63:85:f5:1f:5e:74:15:92:
12:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:12:C1:20:B9:FA:26:81:5A:88:55:9E:CC:09:57:DC:DC:91:13
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0b:42:56:86:ed:d2:45:b7:3d:af:f3:f2:93:69:4c:fc:06:
8e:8d:89:58:c4:fa:46:25:5e:da:9a:db:2c:d7:e5:00:47:7d:
28:3e:d0:cc:da:a3:44:90:12:79:e8:ce:84:06:46:7d:73:cc:
b0:ba:a6:c1:67:ae:b7:de:6c:9d:e6:64:f2:92:c5:03:67:6d:
5d:f8:c6:bc:1e:58:f5:57:b9:65:22:8e:81:f2:e3:d4:97:35:
52:bd:dd:4e:c5:f7:ae:4f:17:ee:4c:0b:9d:26:8e:c3:60:b8:
88:03:48:14:90:35:96:3c:81:6d:6c:28:fc:c6:45:0a:bb:90:
88:12:5c:47:ac:cf:46:57:52:08:78:de:9f:f6:4b:35:5c:26:
89:90:32:7b:e3:ad:55:d5:94:b9:9d:53:8b:8e:66:38:9e:4c:
53:13:4b:e3:a6:a7:ca:89:d5:ae:75:ef:98:0f:d2:34:af:aa:
eb:b3:54:9f:e9:e1:8d:88:23:f7:34:24:74:4d:f0:f8:c4:86:
bc:50:c8:87:85:c0:85:67:89:82:87:5f:6a:24:8e:2f:7b:f5:
47:f9:fc:9f:19:1b:3e:09:58:99:f7:b4:5d:6c:ca:68:97:fc:
fa:2e:9d:e1:e8:4d:f4:41:27:36:0d:f7:49:17:df:41:04:76:
bb:56:19:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBrBAmRCznv1/pen+3W5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmNiYTEwYWI0NjVjZjBlZTNlNzYwMjVjNjdmODU1NGQy
ZDAxYTUwHhcNMjUxMTA0MDQwMTE1WhcNMjUxMTA1MDQwMTE1WjAzMTEwLwYDVQQD
Eyg1OThkMTJjMTIwYjlmYTI2ODE1YTg4NTU5ZWNjMDk1N2RjZGM5MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZyIzo4I7AFA2q/WjDWh/KViBRMn
USgL+Pzj1Op6fkzKaKT8eKSbilywiaFgEHdIyfLLIahBhi7XQzNhtQ3Sjbe19wkY
zCmYzrzrgZg8RAOc5szr6WaqdEqQvh/HRtQSw3O+LzBHEGuHHWkdLabs7+d6F6m/
cYCJ0ImnI/9kyEKrMwWe+ws4QPEZ2mS/+zxNnngUdnZ9yt7myuKz7uUDNh3+Ej6T
+QexOSIzOMfMi8r8lk8eap0BUY+fD7H5vRntaokbBuJ9NkT/DUsAUgwqS6V+X3AR
UgyZAX+EYBVSDEfnilzznTa8vn7bZ+a3LPFtQ5i1JaC3Y4X1H150FZISvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmNEsEgufomgVqIVZ7MCVfc3JETMB8GA1UdIwQY
MBaAFM1suhCrRlzw7j52Alxn+FVNLQGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMt
NTZhZmMzY2JkZjRlLzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81MWRkMjEtOWRiMS00MjI0LTlhYWMtNTZhZmMzY2JkZjRl
LzEveld5NkVLdEdYUER1UG5ZQ1hHZjRWVTB0QWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAtCVobt
0kW3Pa/z8pNpTPwGjo2JWMT6RiVe2prbLNflAEd9KD7QzNqjRJASeejOhAZGfXPM
sLqmwWeut95sneZk8pLFA2dtXfjGvB5Y9Ve5ZSKOgfLj1Jc1Ur3dTsX3rk8X7kwL
nSaOw2C4iANIFJA1ljyBbWwo/MZFCruQiBJcR6zPRldSCHjen/ZLNVwmiZAye+Ot
VdWUuZ1Ti45mOJ5MUxNL46anyonVrnXvmA/SNK+q67NUn+nhjYgj9zQkdE3w+MSG
vFDIh4XAhWeJgodfaiSOL3v1R/n8nxkbPglYmfe0XWzKaJf8+i6d4ehN9EEnNg33
SRffQQR2u1YZWQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:42 2025 by rpki-client