Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: mACTS0weXQgduF78aYnaqC6I76IsGhiLXTWrjnji3dg=
Subject key identifier: 62:98:BD:8B:53:2E:8A:28:8C:55:0C:A0:24:83:70:9B:83:9A:F5:57
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 019A4DAAD4DAF0099CE745CFCBE4DEB70248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 07:00:32 +0000
Manifest this update: Tue 04 Nov 2025 07:00:32 +0000
Manifest next update: Wed 05 Nov 2025 07:00:32 +0000
Files and hashes: 1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: Dy3zO3k3H19O4U/4pFVDq31DTrgNaZjl7fEVeh96228=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d4:da:f0:09:9c:e7:45:cf:cb:e4:de:b7:02:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Nov 4 07:00:32 2025 GMT
Not After : Nov 5 07:00:32 2025 GMT
Subject: CN=6298bd8b532e8a288c550ca02483709b839af557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:19:ee:0c:44:98:d0:78:37:e0:fb:b1:de:19:
6a:36:37:c5:c0:06:76:17:e1:3a:83:51:e4:64:4a:
d5:44:0a:54:13:5a:25:61:3f:41:a4:3d:47:37:c3:
87:1c:f8:3a:76:85:0f:3d:60:df:d9:12:e2:8c:be:
e3:f7:c7:69:2b:4e:ad:cc:42:85:fb:6f:0e:60:65:
ea:1f:d1:62:36:af:28:43:8e:56:18:8a:d3:aa:49:
78:d8:c5:00:8c:b0:3c:ce:bf:b8:53:44:61:50:9f:
ef:a6:e3:9e:b2:89:e5:5c:15:2d:96:b7:8d:d9:9f:
55:9d:36:40:d0:d1:79:9c:13:d3:fe:26:af:53:d9:
12:41:e5:30:d9:f5:d4:71:da:12:b3:26:94:24:d4:
2e:51:71:4c:57:61:ed:f7:91:24:18:a6:cf:d1:28:
93:4f:58:a0:21:e6:40:aa:00:14:03:96:05:e2:cd:
9d:8c:0f:c1:e4:9e:fe:78:97:e6:e7:f1:bb:5c:12:
2e:ef:e1:a6:fb:07:c3:2c:68:42:33:bf:9e:2b:99:
45:c6:a2:24:42:df:11:2d:27:2f:0f:29:f5:f7:ee:
cd:d1:2b:df:cb:ba:3e:9b:aa:11:89:f4:33:cb:45:
b1:64:5c:bd:86:57:2f:8a:14:b6:29:5c:5d:f0:be:
af:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:BD:8B:53:2E:8A:28:8C:55:0C:A0:24:83:70:9B:83:9A:F5:57
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c6:82:08:e9:54:d1:6b:49:63:e9:4b:fc:9d:c4:96:86:96:
54:39:5e:b2:22:66:db:24:3d:7d:14:63:3c:94:4e:97:7c:0b:
2e:32:62:4f:f2:a1:a4:d1:35:ff:38:74:10:1b:a4:d3:58:fe:
06:3d:42:72:69:83:66:78:04:ce:a9:d3:52:26:fe:e7:84:9b:
28:b0:81:91:5e:64:9d:b7:9c:60:3b:9b:e1:dd:95:fc:e7:1e:
63:18:80:0e:5f:97:8b:15:69:f0:98:bc:12:6f:aa:5d:28:92:
a7:9c:a8:1b:ad:82:04:58:05:a5:c6:52:2b:13:a6:a5:07:77:
43:c6:c9:68:da:c5:19:04:92:bb:11:e5:a9:68:47:62:16:bb:
68:99:40:8f:37:59:65:0a:42:f4:11:1a:39:3f:bd:04:26:5a:
79:f6:0d:01:9f:3a:df:96:ad:75:4d:0c:00:2d:89:3d:c9:b8:
0c:56:8f:36:32:c5:88:b3:60:0f:dd:2a:13:fb:c9:d8:c4:0e:
c0:47:c2:09:b1:ae:b9:5b:0f:49:76:c9:3a:f2:30:29:79:60:
f1:3e:dc:08:cf:c0:e3:a6:b4:7b:63:1f:dd:30:59:80:29:26:
b4:a4:8a:be:2d:50:e2:7f:12:19:91:e3:82:45:af:61:64:de:
b1:2e:c9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqtTa8Amc50XPy+TetwJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzc3YTA4YTQ1NjQ1NDhiNTE4ZWMzODY0YjM0MWUxZmE1
MjI1ZWEwHhcNMjUxMTA0MDcwMDMyWhcNMjUxMTA1MDcwMDMyWjAzMTEwLwYDVQQD
Eyg2Mjk4YmQ4YjUzMmU4YTI4OGM1NTBjYTAyNDgzNzA5YjgzOWFmNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhnuDESY0Hg34Pux3hlqNjfFwAZ2
F+E6g1HkZErVRApUE1olYT9BpD1HN8OHHPg6doUPPWDf2RLijL7j98dpK06tzEKF
+28OYGXqH9FiNq8oQ45WGIrTqkl42MUAjLA8zr+4U0RhUJ/vpuOesonlXBUtlreN
2Z9VnTZA0NF5nBPT/iavU9kSQeUw2fXUcdoSsyaUJNQuUXFMV2Ht95EkGKbP0SiT
T1igIeZAqgAUA5YF4s2djA/B5J7+eJfm5/G7XBIu7+Gm+wfDLGhCM7+eK5lFxqIk
Qt8RLScvDyn19+7N0Svfy7o+m6oRifQzy0WxZFy9hlcvihS2KVxd8L6vDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKYvYtTLooojFUMoCSDcJuDmvVXMB8GA1UdIwQY
MBaAFMx3egikVkVItRjsOGSzQeH6UiXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMt
NzY3YjBjYzgwYzA4LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMtNzY3YjBjYzgwYzA4
LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcaCCOlU
0WtJY+lL/J3EloaWVDlesiJm2yQ9fRRjPJROl3wLLjJiT/KhpNE1/zh0EBuk01j+
Bj1CcmmDZngEzqnTUib+54SbKLCBkV5knbecYDub4d2V/OceYxiADl+XixVp8Ji8
Em+qXSiSp5yoG62CBFgFpcZSKxOmpQd3Q8bJaNrFGQSSuxHlqWhHYha7aJlAjzdZ
ZQpC9BEaOT+9BCZaefYNAZ8635atdU0MAC2JPcm4DFaPNjLFiLNgD90qE/vJ2MQO
wEfCCbGuuVsPSXbJOvIwKXlg8T7cCM/A46a0e2Mf3TBZgCkmtKSKvi1Q4n8SGZHj
gkWvYWTesS7JWg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:57 2025 by rpki-client