Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: txyaSOzu01nLqmZPbEU7/Ut7E7Ccme1u63aEtUn1I3Y=
Subject key identifier: 7E:DB:5A:F6:B9:75:E4:AB:87:2C:29:C4:9F:14:5D:A3:C3:D6:2E:41
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 019A4D3D2A8FEA8D13EFBFAD36961A9AC673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 1074
Signing time: Tue 04 Nov 2025 05:00:45 +0000
Manifest this update: Tue 04 Nov 2025 05:00:45 +0000
Manifest next update: Wed 05 Nov 2025 05:00:45 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: fmhCUz0IaoDkQrabjI6Ef1msJVE2u0g4uYdgyQbgbDo=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2a:8f:ea:8d:13:ef:bf:ad:36:96:1a:9a:c6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Nov 4 05:00:45 2025 GMT
Not After : Nov 5 05:00:45 2025 GMT
Subject: CN=7edb5af6b975e4ab872c29c49f145da3c3d62e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:f0:2c:f2:ac:e8:f7:05:36:a9:70:7b:e6:
f3:42:ed:e4:f6:64:22:05:37:20:3f:cf:36:67:67:
3f:c2:19:bb:31:10:20:a3:f4:fe:90:73:f8:48:23:
f8:2a:bd:c2:42:1e:37:53:33:20:c3:03:12:a0:6a:
5a:e4:49:ac:a9:09:1f:90:e1:c0:70:00:55:d1:70:
b2:28:a9:60:e9:7a:d8:83:d9:67:fb:35:3b:be:3f:
16:6a:ce:2f:09:f8:65:ed:6b:2c:9a:0d:bc:b3:d9:
b7:69:a6:9a:15:71:9f:f1:53:bd:4d:34:38:b6:7d:
1a:bb:af:91:c1:a4:c8:32:3e:3a:e7:04:57:38:b9:
38:c1:8b:1c:a6:3f:cf:35:49:99:b0:bf:14:c8:0f:
1b:3f:49:ac:a1:b6:2d:4e:af:29:0f:43:7c:44:9a:
ec:77:90:00:a0:5f:6d:52:bb:7b:f1:bb:f3:67:48:
43:dd:d0:7f:c1:c5:57:a3:91:11:e9:4c:33:94:67:
e1:bd:21:32:87:b2:e6:37:56:43:1e:31:4d:4a:fc:
a0:58:76:07:bc:07:a6:fa:fd:25:b7:a1:be:a6:3c:
00:ea:22:cf:c9:68:12:bd:73:e9:55:dc:ee:e7:8a:
18:ac:86:f7:d3:03:cb:b2:53:0e:e1:19:9c:6c:34:
b5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:5A:F6:B9:75:E4:AB:87:2C:29:C4:9F:14:5D:A3:C3:D6:2E:41
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:9e:f3:bc:35:ed:f5:3c:55:d9:42:fd:0d:0c:88:6d:bc:b5:
ca:17:a7:f3:2f:ec:23:a9:d5:20:37:e8:54:c6:b6:69:e3:8e:
fc:2d:74:9f:52:ef:8e:23:70:fe:e1:0d:7b:6d:1b:e0:94:e8:
ce:91:49:15:3b:92:f0:c6:e4:12:d6:a5:5f:f0:39:35:4e:fb:
6f:11:cd:2e:23:dc:84:b5:07:48:33:a7:91:f7:a7:08:5b:2d:
a2:b7:1e:76:c9:17:e9:f3:be:be:14:65:0c:b8:a9:a4:6f:dd:
1d:c5:e8:a3:63:d0:45:48:56:12:da:11:db:5f:cf:88:41:dd:
0b:10:b4:b3:3a:da:08:9f:f3:3c:07:04:47:43:ec:aa:33:08:
fe:84:16:04:9b:41:6c:ef:70:62:07:2f:15:7c:33:76:4c:1e:
81:bd:ee:b5:68:c9:77:fd:39:2d:ca:60:85:bd:bd:06:bf:5d:
36:d7:ff:19:fc:3a:46:a9:df:d1:65:24:75:35:0c:69:eb:6a:
ab:73:1e:5d:3d:a8:86:2e:29:83:8f:26:2a:2b:a0:a0:2e:b0:
1d:84:bf:95:00:bd:e6:85:d2:10:1f:d1:14:e3:ce:36:ee:b7:
21:0f:39:08:ba:7b:7b:d6:aa:81:98:c8:9d:83:f6:c5:ce:d5:
8c:c1:49:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPSqP6o0T77+tNpYamsZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh
N2Y4ZjYwHhcNMjUxMTA0MDUwMDQ1WhcNMjUxMTA1MDUwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZWRiNWFmNmI5NzVlNGFiODcyYzI5YzQ5ZjE0NWRhM2MzZDYyZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlfwLPKs6PcFNqlwe+bzQu3k9mQi
BTcgP882Z2c/whm7MRAgo/T+kHP4SCP4Kr3CQh43UzMgwwMSoGpa5EmsqQkfkOHA
cABV0XCyKKlg6XrYg9ln+zU7vj8Was4vCfhl7Wssmg28s9m3aaaaFXGf8VO9TTQ4
tn0au6+RwaTIMj465wRXOLk4wYscpj/PNUmZsL8UyA8bP0msobYtTq8pD0N8RJrs
d5AAoF9tUrt78bvzZ0hD3dB/wcVXo5ER6UwzlGfhvSEyh7LmN1ZDHjFNSvygWHYH
vAem+v0lt6G+pjwA6iLPyWgSvXPpVdzu54oYrIb30wPLslMO4RmcbDS1AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7bWva5deSrhywpxJ8UXaPD1i5BMB8GA1UdIwQY
MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt
NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh
LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ7zvDXt
9TxV2UL9DQyIbby1yhen8y/sI6nVIDfoVMa2aeOO/C10n1LvjiNw/uENe20b4JTo
zpFJFTuS8MbkEtalX/A5NU77bxHNLiPchLUHSDOnkfenCFstorcedskX6fO+vhRl
DLippG/dHcXoo2PQRUhWEtoR21/PiEHdCxC0szraCJ/zPAcER0PsqjMI/oQWBJtB
bO9wYgcvFXwzdkwegb3utWjJd/05Lcpghb29Br9dNtf/Gfw6Rqnf0WUkdTUMaetq
q3MeXT2ohi4pg48mKiugoC6wHYS/lQC95oXSEB/RFOPONu63IQ85CLp7e9aqgZjI
nYP2xc7VjMFJ/A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:39 2025 by rpki-client