Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: lsy1yU1iT3l0FO0rxuQajM+5n0LBa7XOatqHnI07sYo=
Subject key identifier: A9:FB:82:35:1F:2D:53:8E:C5:DF:A3:C6:3A:92:CF:39:49:5B:E8:CC
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 019A4D73E0C08CEDE7E1BD631B8587BD1C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 16A1
Signing time: Tue 04 Nov 2025 06:00:31 +0000
Manifest this update: Tue 04 Nov 2025 06:00:31 +0000
Manifest next update: Wed 05 Nov 2025 06:00:31 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: f+eb+PzTSYHoaENBp17rrjTwiVM4QHzbM87uLJXHso0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e0:c0:8c:ed:e7:e1:bd:63:1b:85:87:bd:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: Nov 4 06:00:31 2025 GMT
Not After : Nov 5 06:00:31 2025 GMT
Subject: CN=a9fb82351f2d538ec5dfa3c63a92cf39495be8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:96:53:66:75:f0:96:9c:3f:d1:a5:1d:62:34:
b7:bc:a3:67:be:dd:c9:a5:70:ca:a1:35:87:d9:e5:
ac:e3:16:4c:81:7c:1b:3a:81:20:0b:69:cf:3d:23:
62:29:6b:a2:54:32:db:ff:d9:73:cd:6c:c7:85:75:
09:80:f7:81:f3:d9:c9:b4:ec:b1:4e:44:ac:c0:ca:
32:27:da:c5:b3:d5:e2:3e:16:35:e2:27:c1:96:00:
c6:37:ff:ea:8a:5a:80:31:76:cd:26:0c:42:61:87:
c1:60:b7:85:0b:6e:39:ba:55:9f:73:df:0b:b5:1c:
a1:39:63:c8:29:c2:4f:d6:83:9b:fb:a1:6f:6f:bf:
f7:d4:51:9e:b2:b1:d5:8b:a6:72:28:94:29:30:ec:
40:fa:05:c3:c7:c8:f8:14:ce:28:41:bf:6d:39:66:
f1:93:54:30:32:6c:83:6a:27:93:b1:80:5f:9a:c1:
a7:dd:bc:dc:67:78:bb:71:c8:12:26:20:fa:f0:bc:
eb:c3:92:3b:7a:1e:ca:ca:99:4e:3f:4d:a8:e9:74:
66:ae:0d:44:1a:38:0b:a8:41:f0:ce:0c:a7:04:e2:
10:36:d2:53:12:7c:5b:64:d4:bb:a2:4a:4f:9a:47:
fd:20:ca:be:17:30:52:7a:16:55:8f:1d:cc:93:af:
52:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FB:82:35:1F:2D:53:8E:C5:DF:A3:C6:3A:92:CF:39:49:5B:E8:CC
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1f:8e:15:5e:2d:c7:a3:17:1d:57:5e:73:93:6c:93:c4:09:
6f:28:08:49:d9:1e:9c:4b:e9:d8:6b:cd:ec:54:bf:0e:18:7c:
41:14:cf:e3:b0:ba:6c:75:5f:b8:fc:01:bf:b8:80:91:82:4f:
ba:39:ef:aa:f2:12:c6:e0:f6:08:4c:ac:52:e7:17:a6:fd:f7:
5d:88:9f:5a:bf:f9:cd:e1:a3:38:0b:58:b7:0a:39:00:38:46:
73:17:cd:74:6e:06:67:75:14:7f:d2:42:a9:70:47:d0:f0:5a:
44:cb:8e:cc:83:81:c4:8e:34:48:22:ec:bc:13:be:ae:2c:dc:
71:b4:01:ee:ed:b6:93:a4:d3:92:41:da:7e:2f:98:1b:98:bf:
c1:a4:0c:8a:77:4e:a4:b4:99:3d:75:48:c1:d9:98:8a:52:79:
80:c2:79:37:f7:e1:2f:a3:eb:05:72:32:63:04:5b:9a:ef:f7:
e2:9f:ac:9a:61:fd:38:e3:70:bb:b9:a1:0d:da:7a:cf:6f:fe:
81:88:57:bb:cc:88:18:2c:2d:aa:1e:a6:c2:be:81:ea:fa:b3:
42:23:af:a2:8c:8a:c0:a7:19:35:5c:77:03:45:3f:ee:47:81:
a6:61:bf:02:c9:f3:14:ec:5c:3d:aa:8a:49:a8:b4:ae:b2:95:
89:c8:86:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc+DAjO3n4b1jG4WHvRwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzQ3ODhiMmI2OTJjNzEwM2IxY2I5ZTE2MTdmOGIzNjY5
MTBmMTMwHhcNMjUxMTA0MDYwMDMxWhcNMjUxMTA1MDYwMDMxWjAzMTEwLwYDVQQD
EyhhOWZiODIzNTFmMmQ1MzhlYzVkZmEzYzYzYTkyY2YzOTQ5NWJlOGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJZTZnXwlpw/0aUdYjS3vKNnvt3J
pXDKoTWH2eWs4xZMgXwbOoEgC2nPPSNiKWuiVDLb/9lzzWzHhXUJgPeB89nJtOyx
TkSswMoyJ9rFs9XiPhY14ifBlgDGN//qilqAMXbNJgxCYYfBYLeFC245ulWfc98L
tRyhOWPIKcJP1oOb+6Fvb7/31FGesrHVi6ZyKJQpMOxA+gXDx8j4FM4oQb9tOWbx
k1QwMmyDaieTsYBfmsGn3bzcZ3i7ccgSJiD68Lzrw5I7eh7KyplOP02o6XRmrg1E
GjgLqEHwzgynBOIQNtJTEnxbZNS7okpPmkf9IMq+FzBSehZVjx3Mk69SXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKn7gjUfLVOOxd+jxjqSzzlJW+jMMB8GA1UdIwQY
MBaAFM7EeIsraSxxA7HLnhYX+LNmkQ8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMt
YzY4MmI1YmUwZTUzLzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yOWEwOTEtODU1MC00M2M2LThhMGMtYzY4MmI1YmUwZTUz
LzEvenNSNGl5dHBMSEVEc2N1ZUZoZjRzMmFSRHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQR+OFV4t
x6MXHVdec5Nsk8QJbygISdkenEvp2GvN7FS/Dhh8QRTP47C6bHVfuPwBv7iAkYJP
ujnvqvISxuD2CEysUucXpv33XYifWr/5zeGjOAtYtwo5ADhGcxfNdG4GZ3UUf9JC
qXBH0PBaRMuOzIOBxI40SCLsvBO+rizccbQB7u22k6TTkkHafi+YG5i/waQMindO
pLSZPXVIwdmYilJ5gMJ5N/fhL6PrBXIyYwRbmu/34p+smmH9OONwu7mhDdp6z2/+
gYhXu8yIGCwtqh6mwr6B6vqzQiOvooyKwKcZNVx3A0U/7keBpmG/AsnzFOxcPaqK
Sai0rrKViciGrA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:19 2025 by rpki-client