Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: 1d033uY+OaGTzgcogFBjOuMfQD01a9UHXX2sFOTDHIY=
Subject key identifier: B1:B4:40:AD:25:90:E7:E7:D3:A2:B9:E3:56:97:5B:07:0F:8D:58:56
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 019A4C6102693C49978C8BABD284515917B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0EBD
Signing time: Tue 04 Nov 2025 01:00:17 +0000
Manifest this update: Tue 04 Nov 2025 01:00:17 +0000
Manifest next update: Wed 05 Nov 2025 01:00:17 +0000
Files and hashes: 1: BwnHgQdnSW_44Zer0BPcUVfjgDQ.roa (hash: b79Q7WZT/53by0ulZoD5j5IcmVLwQi3rmkQDc+HVWZI=)
2: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
3: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: jN8sUKs2I0BHsd17sMnnbtg6TArZkdkVJjOqSvt7fII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:02:69:3c:49:97:8c:8b:ab:d2:84:51:59:17:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Nov 4 01:00:17 2025 GMT
Not After : Nov 5 01:00:17 2025 GMT
Subject: CN=b1b440ad2590e7e7d3a2b9e356975b070f8d5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:bc:1e:a1:ce:38:ca:99:ec:5a:9a:cf:fe:
fd:1c:fa:6f:e1:84:ca:ce:92:db:81:42:f6:98:18:
f4:8a:9b:30:24:83:67:c3:2b:13:60:b1:94:9f:e4:
dc:18:13:80:c0:d3:cf:81:12:3f:42:85:66:89:99:
dd:3a:14:e6:95:18:8a:96:da:23:dd:c1:81:98:68:
1f:50:d7:56:07:01:b3:b8:a2:e0:06:89:3b:cb:80:
00:db:ab:f4:f5:88:fe:62:72:cc:fe:87:c2:34:2e:
24:4d:b2:da:7d:72:f2:4e:f9:9c:91:5d:f0:1b:38:
65:20:33:f3:dc:0b:1c:0e:7e:18:69:32:74:c0:fa:
d0:d2:da:b8:4f:48:f6:fd:d0:6a:de:b8:04:a4:d4:
78:e5:95:b0:42:3b:9a:9c:f9:d0:f7:24:dc:1f:db:
12:d2:2b:ac:d3:d6:a5:80:2e:5b:d5:f0:4f:02:f0:
f9:0a:06:38:32:d3:62:a9:48:7d:fb:9f:e2:54:a6:
fe:03:5a:92:df:63:88:d9:df:18:5a:a3:fc:e8:87:
9b:13:65:9d:34:5b:02:21:c8:7b:42:f1:87:1d:ad:
6a:e7:fd:8c:59:e2:d2:dc:f2:b9:1a:4f:f8:ae:1b:
af:aa:c4:fe:44:54:b1:fd:7b:5f:2c:d1:9d:e7:5a:
3c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:40:AD:25:90:E7:E7:D3:A2:B9:E3:56:97:5B:07:0F:8D:58:56
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:28:62:d4:a9:ee:04:6d:1d:d0:f8:82:37:39:91:9b:ea:2a:
a4:76:6e:2b:4a:a0:1c:38:57:88:38:cc:70:6b:0b:b6:1e:74:
80:89:8d:a2:5f:63:c7:82:77:21:d5:c3:15:40:01:46:0a:30:
1e:ea:97:52:1c:be:91:0a:b7:45:cd:8e:f5:ac:f1:34:a2:b0:
d6:bd:0f:1a:e5:ad:8b:ae:5b:e9:73:c8:fb:21:a9:cb:f0:3a:
e2:b1:f6:8a:3d:11:f6:1f:fd:c6:7d:5c:5b:86:91:ac:51:b2:
3e:11:80:24:12:eb:53:05:dc:74:0c:af:74:e4:80:90:72:38:
14:3c:27:99:df:1e:a6:52:99:d5:45:7f:9e:79:90:21:9d:c5:
79:76:6e:49:07:24:b8:73:fb:96:d6:58:68:a9:c5:97:af:82:
5f:9a:ef:28:3a:cb:c1:54:d6:4a:70:98:89:61:76:64:5b:8e:
13:f3:2d:26:7f:72:ed:6a:a7:20:b9:b4:86:16:09:b4:db:12:
9d:40:ea:62:4b:31:ca:8c:ea:c9:44:c5:08:b7:75:43:34:dd:
13:96:c9:f3:9a:e3:7f:e5:29:14:72:a4:ff:a4:7f:40:e7:10:
c1:2b:dc:e8:87:2c:48:df:f5:cc:c6:b9:de:67:b6:ce:01:d8:
06:f3:ec:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYQJpPEmXjIur0oRRWRe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWNjMzMxODJlNDRkODk3ZjRlYWNmMTQyMTM0NjdlZjg4
NzExZDQwHhcNMjUxMTA0MDEwMDE3WhcNMjUxMTA1MDEwMDE3WjAzMTEwLwYDVQQD
EyhiMWI0NDBhZDI1OTBlN2U3ZDNhMmI5ZTM1Njk3NWIwNzBmOGQ1ODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzG8HqHOOMqZ7Fqaz/79HPpv4YTK
zpLbgUL2mBj0ipswJINnwysTYLGUn+TcGBOAwNPPgRI/QoVmiZndOhTmlRiKltoj
3cGBmGgfUNdWBwGzuKLgBok7y4AA26v09Yj+YnLM/ofCNC4kTbLafXLyTvmckV3w
GzhlIDPz3AscDn4YaTJ0wPrQ0tq4T0j2/dBq3rgEpNR45ZWwQjuanPnQ9yTcH9sS
0ius09algC5b1fBPAvD5CgY4MtNiqUh9+5/iVKb+A1qS32OI2d8YWqP86IebE2Wd
NFsCIch7QvGHHa1q5/2MWeLS3PK5Gk/4rhuvqsT+RFSx/XtfLNGd51o8JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG0QK0lkOfn06K541aXWwcPjVhWMB8GA1UdIwQY
MBaAFM+cwzGC5E2Jf06s8UITRn74hxHUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt
MjRhMGQ4MmNlYTllLzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll
LzEvejV6RE1ZTGtUWWxfVHF6eFFoTkdmdmlIRWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZChi1Knu
BG0d0PiCNzmRm+oqpHZuK0qgHDhXiDjMcGsLth50gImNol9jx4J3IdXDFUABRgow
HuqXUhy+kQq3Rc2O9azxNKKw1r0PGuWti65b6XPI+yGpy/A64rH2ij0R9h/9xn1c
W4aRrFGyPhGAJBLrUwXcdAyvdOSAkHI4FDwnmd8eplKZ1UV/nnmQIZ3FeXZuSQck
uHP7ltZYaKnFl6+CX5rvKDrLwVTWSnCYiWF2ZFuOE/MtJn9y7WqnILm0hhYJtNsS
nUDqYksxyozqyUTFCLd1QzTdE5bJ85rjf+UpFHKk/6R/QOcQwSvc6IcsSN/1zMa5
3me2zgHYBvPsJA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:44 2025 by rpki-client