Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: MDFqU8I4xnaMHFun56cAqDMzwcS2yAN88X4okoWG3TM=
Subject key identifier: C6:D1:DA:1A:66:89:41:1A:B6:F4:BD:21:79:C3:28:B6:86:22:AA:B8
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 019A51F5B342DFA807BE6E579A96A882090E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 03:00:47 +0000
Manifest this update: Wed 05 Nov 2025 03:00:47 +0000
Manifest next update: Thu 06 Nov 2025 03:00:47 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: JYtV1xya2PeTYSiqPGeg1v3D1hU.roa (hash: jSaIThGpGsn1CtL3kupT6o9d7MS0BOry41A4muvp5uA=)
4: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
5: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: 2nYGTPy0Cm1ygqKH+7PYovGZ8YpsFjHt8Wj814silDc=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b3:42:df:a8:07:be:6e:57:9a:96:a8:82:09:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: Nov 5 03:00:47 2025 GMT
Not After : Nov 6 03:00:47 2025 GMT
Subject: CN=c6d1da1a6689411ab6f4bd2179c328b68622aab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:19:2d:a4:09:74:15:e6:c8:9a:fe:29:af:
1e:47:37:35:a1:a5:0c:fc:be:94:5a:fc:dd:ec:ba:
36:ff:2f:78:a0:24:d3:76:e9:d9:b2:13:11:a7:08:
a1:46:a6:9f:8b:54:72:ad:bb:8b:3a:ca:18:e3:9d:
e4:fb:13:5d:76:2d:52:5a:da:24:e3:0f:2b:e5:78:
f8:70:47:cf:74:ab:8f:af:71:fd:8d:ce:c9:69:2e:
82:50:55:56:6b:0b:f8:58:6e:70:ee:98:b6:49:f4:
45:6e:fe:26:fa:39:72:65:73:95:aa:fd:ee:2b:51:
d2:30:2d:27:8f:1b:ed:6e:49:54:9c:8a:5a:99:91:
a0:5c:a1:d6:84:f2:43:f1:1d:72:52:02:e8:82:7a:
7c:42:20:31:3b:ae:b1:01:be:1c:ad:f1:2a:50:2e:
b2:7e:63:c6:85:1e:22:14:27:af:61:5c:71:9b:15:
a6:34:a1:34:d5:f9:f3:e0:1a:dc:52:b7:6d:6c:0f:
0d:73:d4:e9:62:2a:81:23:52:d9:e1:11:3f:52:83:
62:e9:f8:ed:c9:25:30:ad:81:9e:21:27:6d:0f:1f:
a9:32:7e:6d:d9:24:9e:0e:e4:f7:df:7c:89:02:88:
bb:98:45:35:1a:0e:9e:cd:28:58:4c:d1:1b:39:39:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D1:DA:1A:66:89:41:1A:B6:F4:BD:21:79:C3:28:B6:86:22:AA:B8
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7d:ce:0c:f1:8e:5e:ae:21:2c:69:c4:fd:90:4d:36:57:67:
e0:0a:1c:53:d3:d1:12:c6:66:c6:76:ee:fa:ef:a4:4b:63:29:
e2:d4:88:ad:75:ed:b9:41:a8:74:bd:d0:48:fe:b9:83:94:4e:
c0:7e:16:79:2d:0f:cb:e8:a5:7f:8a:7b:37:1b:b5:6f:9a:27:
19:c2:ad:d0:42:0b:cd:4d:43:57:cd:8e:0f:62:a6:b7:f7:c2:
f7:2a:21:e7:6d:f9:49:60:bb:94:3f:bc:60:e2:54:31:4c:71:
89:d9:58:55:35:1b:57:d5:9a:de:1a:52:16:d4:74:28:8d:5a:
25:f0:e2:43:39:2b:6d:7b:85:30:0e:fd:7b:7e:e4:96:be:69:
4f:46:47:f7:72:a0:fc:f5:97:a2:04:4c:f3:a2:91:70:12:ca:
97:ef:79:d9:7b:7e:dd:0b:51:a5:3a:dc:c9:63:1c:dc:1f:75:
72:81:8b:b5:8b:71:23:cf:5d:f1:6e:ef:15:ec:85:b2:9d:fa:
75:5a:ee:37:72:ac:e6:de:bd:80:9c:94:6b:9e:2d:54:aa:6f:
4d:a0:cf:21:17:aa:ef:9f:64:9d:ec:0e:66:fa:73:97:d9:4d:
66:ad:b8:60:f0:63:2a:8b:ec:50:c5:04:3c:8b:97:79:66:5d:
dc:14:99:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9bNC36gHvm5XmpaoggkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODE2Nzc0YjdjNTY2NWQ2N2E4NmMyMGNlYjY0ODdiNWI3
OGIzOGQwHhcNMjUxMTA1MDMwMDQ3WhcNMjUxMTA2MDMwMDQ3WjAzMTEwLwYDVQQD
EyhjNmQxZGExYTY2ODk0MTFhYjZmNGJkMjE3OWMzMjhiNjg2MjJhYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn8ZLaQJdBXmyJr+Ka8eRzc1oaUM
/L6UWvzd7Lo2/y94oCTTdunZshMRpwihRqafi1RyrbuLOsoY453k+xNddi1SWtok
4w8r5Xj4cEfPdKuPr3H9jc7JaS6CUFVWawv4WG5w7pi2SfRFbv4m+jlyZXOVqv3u
K1HSMC0njxvtbklUnIpamZGgXKHWhPJD8R1yUgLognp8QiAxO66xAb4crfEqUC6y
fmPGhR4iFCevYVxxmxWmNKE01fnz4BrcUrdtbA8Nc9TpYiqBI1LZ4RE/UoNi6fjt
ySUwrYGeISdtDx+pMn5t2SSeDuT333yJAoi7mEU1Gg6ezShYTNEbOTnZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbR2hpmiUEatvS9IXnDKLaGIqq4MB8GA1UdIwQY
MBaAFGWBZ3S3xWZdZ6hsIM62SHtbeLONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYt
NmIxNDY5YzNiOTVhLzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mM2I4MjUtY2JjMC00OWQyLThiNzYtNmIxNDY5YzNiOTVh
LzEvWllGbmRMZkZabDFucUd3Z3pyWkllMXQ0czQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAn3ODPGO
Xq4hLGnE/ZBNNldn4AocU9PREsZmxnbu+u+kS2Mp4tSIrXXtuUGodL3QSP65g5RO
wH4WeS0Py+ilf4p7Nxu1b5onGcKt0EILzU1DV82OD2Kmt/fC9yoh5235SWC7lD+8
YOJUMUxxidlYVTUbV9Wa3hpSFtR0KI1aJfDiQzkrbXuFMA79e37klr5pT0ZH93Kg
/PWXogRM86KRcBLKl+952Xt+3QtRpTrcyWMc3B91coGLtYtxI89d8W7vFeyFsp36
dVruN3Ks5t69gJyUa54tVKpvTaDPIReq759knewOZvpzl9lNZq24YPBjKovsUMUE
PIuXeWZd3BSZEQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:32 2025 by rpki-client