Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: Pcq8WxohbTPPqQh2Ws+KM5P4dtdnzdyUjvWrKc2N9gY=
Subject key identifier: 55:5A:BB:66:69:C0:B6:DD:F6:51:67:61:BC:18:08:46:06:8A:EB:45
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 019A4F9906FCE38EF19CA1B5DF6DFC3F8554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 04FB
Signing time: Tue 04 Nov 2025 16:00:19 +0000
Manifest this update: Tue 04 Nov 2025 16:00:19 +0000
Manifest next update: Wed 05 Nov 2025 16:00:19 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: Lygwe0vNIV4AScJ1D0y1nC2WcxgzooLND513ZY9mcTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:06:fc:e3:8e:f1:9c:a1:b5:df:6d:fc:3f:85:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Nov 4 16:00:19 2025 GMT
Not After : Nov 5 16:00:19 2025 GMT
Subject: CN=555abb6669c0b6ddf6516761bc180846068aeb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b6:05:db:48:e9:48:c5:b4:05:6b:3e:5d:7c:
80:e5:f6:f3:e9:8e:e2:21:51:bd:0c:05:cb:0e:7b:
ab:30:55:5e:cc:bd:31:d2:5c:f4:b0:ac:60:20:ea:
2f:26:35:3e:b6:4b:c4:a4:c1:09:f6:52:c9:2c:81:
c4:97:38:97:24:99:5a:a3:45:83:ff:46:15:c4:f3:
6a:b8:b6:21:71:93:2a:0f:c1:03:1a:c9:1e:a9:76:
d9:72:31:1e:57:43:43:20:ef:9a:83:dd:ce:7c:bb:
65:3b:55:fd:2a:10:28:b9:b9:81:f7:dc:e0:f5:79:
2a:7d:37:38:97:0f:af:13:6a:2f:2b:be:84:06:0b:
91:cb:a4:fd:76:18:13:90:37:20:63:14:fe:a4:1e:
ac:90:fd:6c:63:b2:4a:91:f8:6a:47:ba:6d:f1:d5:
19:60:48:48:81:d6:54:ab:4a:21:77:c8:2b:6c:cc:
41:1e:ab:9a:ce:d4:98:a4:af:e7:85:4e:16:49:9a:
6a:0a:95:db:82:36:01:94:5f:15:5f:49:87:91:c6:
d2:63:b5:28:4e:90:81:ac:7e:53:46:40:3c:9e:54:
97:fc:49:5e:67:a9:68:8c:d6:2c:27:23:06:02:8d:
62:17:7b:41:d2:40:11:1e:c1:ab:5a:86:e0:2a:7d:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:BB:66:69:C0:B6:DD:F6:51:67:61:BC:18:08:46:06:8A:EB:45
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:d9:7a:3e:54:c7:bf:70:02:81:f5:1b:ee:e1:fa:f3:ef:
ad:11:98:bc:4c:68:6d:21:da:2a:1a:69:31:95:6e:83:f8:10:
66:89:c5:1e:1b:a1:38:01:8a:f6:ab:a0:3f:1d:28:41:24:1c:
37:76:9b:3d:a7:c7:ca:bc:16:f1:79:fd:a9:71:a4:f7:f3:80:
cf:0d:db:b6:20:a6:79:ce:88:64:3d:00:82:25:dd:13:2e:7c:
e6:a9:61:6f:94:c2:92:7d:9e:fc:95:54:fd:22:b5:37:c0:20:
de:51:75:ed:ba:8d:54:f5:bc:43:40:ab:02:6b:5b:00:55:cd:
2e:b0:ed:1b:c3:20:45:85:42:fc:85:f2:91:18:55:a4:d1:ca:
29:e2:f4:79:ab:a9:de:3d:4a:01:03:d9:ad:30:56:29:2e:43:
92:5f:52:55:61:70:ae:02:71:ba:dc:bd:c5:5b:66:4e:70:2d:
d8:7f:cb:7d:ff:3f:54:06:42:65:2b:02:c6:6f:1e:9f:14:d2:
ed:36:4d:01:d8:04:be:50:fd:1e:f1:1a:a5:00:70:42:ae:50:
d2:f5:98:f4:9c:98:26:d3:16:2f:51:a3:74:32:ad:ea:20:21:
90:1b:58:bb:96:04:71:67:b4:43:91:cb:71:b9:52:d2:9a:63:
6d:1e:bd:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmQb8447xnKG13238P4VUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi
ZWQxNjYwHhcNMjUxMTA0MTYwMDE5WhcNMjUxMTA1MTYwMDE5WjAzMTEwLwYDVQQD
Eyg1NTVhYmI2NjY5YzBiNmRkZjY1MTY3NjFiYzE4MDg0NjA2OGFlYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bYF20jpSMW0BWs+XXyA5fbz6Y7i
IVG9DAXLDnurMFVezL0x0lz0sKxgIOovJjU+tkvEpMEJ9lLJLIHElziXJJlao0WD
/0YVxPNquLYhcZMqD8EDGskeqXbZcjEeV0NDIO+ag93OfLtlO1X9KhAoubmB99zg
9XkqfTc4lw+vE2ovK76EBguRy6T9dhgTkDcgYxT+pB6skP1sY7JKkfhqR7pt8dUZ
YEhIgdZUq0ohd8grbMxBHquaztSYpK/nhU4WSZpqCpXbgjYBlF8VX0mHkcbSY7Uo
TpCBrH5TRkA8nlSX/EleZ6lojNYsJyMGAo1iF3tB0kARHsGrWobgKn0eywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVau2ZpwLbd9lFnYbwYCEYGiutFMB8GA1UdIwQY
MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt
N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz
LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1bZej5U
x79wAoH1G+7h+vPvrRGYvExobSHaKhppMZVug/gQZonFHhuhOAGK9qugPx0oQSQc
N3abPafHyrwW8Xn9qXGk9/OAzw3btiCmec6IZD0AgiXdEy585qlhb5TCkn2e/JVU
/SK1N8Ag3lF17bqNVPW8Q0CrAmtbAFXNLrDtG8MgRYVC/IXykRhVpNHKKeL0eaup
3j1KAQPZrTBWKS5Dkl9SVWFwrgJxuty9xVtmTnAt2H/Lff8/VAZCZSsCxm8enxTS
7TZNAdgEvlD9HvEapQBwQq5Q0vWY9JyYJtMWL1GjdDKt6iAhkBtYu5YEcWe0Q5HL
cblS0ppjbR69Zw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:57 2025 by rpki-client