Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
File: ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft (raw, json)
Hash identifier: v9wXEgT8Cvxz5OqhvFrl3BuD8sDSga0LVZ1znyF8aek=
Subject key identifier: EC:51:DD:0C:C6:AB:FC:16:9D:C0:57:25:E7:38:D2:F1:84:BF:69:B0
Authority key identifier: 65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
Certificate issuer: /CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Certificate serial: 019A4E18D7AE116880D68CFEB46E97CE9117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
Manifest number: 12F5
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl (hash: XQdeQty5UmFPEO8Bw9d6vmyPPH2MtM0dQ+k2G7hXenc=)
2: zysotr6Zh0JowEPpxerhuN8FsPI.roa (hash: m7vcKgaxDGAMU/aHqkxYhIsxn/ZRzduC29i2UI0iCuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d7:ae:11:68:80:d6:8c:fe:b4:6e:97:ce:91:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656b53255e6c8fb76fac1ccb848fee45600b55f7
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=ec51dd0cc6abfc169dc05725e738d2f184bf69b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:2a:99:52:91:e1:a8:14:6a:1d:bb:91:c1:
b5:f8:54:88:58:f7:2d:e0:a5:3b:8e:f0:d0:dc:a9:
31:05:75:fb:64:34:a3:64:3d:3a:8b:a3:7b:53:c3:
fe:a8:95:83:fe:32:93:e3:7e:5a:14:61:6f:62:79:
04:b3:c4:25:73:70:58:63:e0:03:d1:d2:0a:96:45:
d8:18:4d:0f:e5:51:99:a3:e7:a1:c1:22:ba:1d:74:
b7:bb:55:d1:3b:38:32:12:8a:12:82:a6:40:3b:c3:
37:42:6d:3a:dd:fa:2a:55:fb:e3:94:cd:fc:4e:25:
50:58:b8:e2:0a:6d:24:34:50:b9:74:d7:c7:b5:cf:
21:32:6a:ff:e4:26:03:7d:14:cd:9c:1e:87:40:85:
ea:6f:08:f4:77:3e:9d:d6:b2:7c:9c:16:7e:04:79:
0d:4b:0d:9e:62:e6:85:b8:6d:e8:2a:4b:5b:21:40:
e4:34:57:21:3c:53:42:35:d7:d5:3d:57:28:c9:54:
a2:82:75:98:d7:67:c8:f0:dd:27:b6:23:b5:b1:06:
82:8a:8a:c8:41:4e:52:81:5b:31:8b:0b:ca:8f:a0:
99:cd:c2:3c:92:78:ea:e4:b0:91:1e:7e:9e:c3:59:
3c:b6:d1:c0:fc:ed:f4:f1:a0:45:cf:71:69:fe:c7:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:51:DD:0C:C6:AB:FC:16:9D:C0:57:25:E7:38:D2:F1:84:BF:69:B0
X509v3 Authority Key Identifier:
keyid:65:6B:53:25:5E:6C:8F:B7:6F:AC:1C:CB:84:8F:EE:45:60:0B:55:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWtTJV5sj7dvrBzLhI_uRWALVfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4c8eac-bdcb-4f0d-b2d8-ea41832ad172/1/ZWtTJV5sj7dvrBzLhI_uRWALVfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5c:08:3c:fc:fc:59:f1:c0:bf:9c:3a:50:7b:54:98:3e:39:
1d:de:99:be:70:00:b4:38:b7:ea:2a:16:ee:5f:cc:c9:58:7d:
cf:1e:5b:d7:da:9d:0d:69:c5:82:9a:2a:da:23:99:91:c4:28:
0b:67:5c:76:ce:bd:db:48:ee:04:9c:c9:91:15:16:ff:1b:91:
22:a4:d2:49:67:a9:81:b4:3b:4c:ac:1e:f7:19:63:d7:9f:ef:
57:2a:98:23:bf:7e:83:4d:a2:0e:a9:44:41:8a:72:4c:de:dc:
97:e6:cf:b7:45:75:cd:10:87:58:1e:36:8e:66:0b:91:19:2c:
6a:45:15:05:bd:2f:d9:d3:0c:e2:bb:7b:2a:fb:ac:4e:f5:02:
d5:c8:6b:72:75:3e:a8:97:7e:f6:2e:59:85:a5:19:88:dd:71:
0e:a2:09:17:1e:30:71:f1:66:47:dd:fb:f5:fe:47:14:a3:5b:
01:40:e4:eb:7f:dc:7e:e4:08:6a:e4:cc:52:86:6b:ff:05:9e:
c1:5a:5a:90:6f:4b:6a:11:ff:52:06:e7:fb:52:a2:8c:a2:9d:
e2:e5:cc:34:b4:13:e1:ad:63:c7:4b:bc:87:10:a4:de:43:f3:
20:c9:49:7f:90:cd:50:cb:f7:00:8b:36:07:93:4a:31:44:ab:
91:57:4e:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNeuEWiA1oz+tG6XzpEXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmI1MzI1NWU2YzhmYjc2ZmFjMWNjYjg0OGZlZTQ1NjAw
YjU1ZjcwHhcNMjUxMTA0MDkwMDQyWhcNMjUxMTA1MDkwMDQyWjAzMTEwLwYDVQQD
EyhlYzUxZGQwY2M2YWJmYzE2OWRjMDU3MjVlNzM4ZDJmMTg0YmY2OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiMqmVKR4agUah27kcG1+FSIWPct
4KU7jvDQ3KkxBXX7ZDSjZD06i6N7U8P+qJWD/jKT435aFGFvYnkEs8Qlc3BYY+AD
0dIKlkXYGE0P5VGZo+ehwSK6HXS3u1XROzgyEooSgqZAO8M3Qm063foqVfvjlM38
TiVQWLjiCm0kNFC5dNfHtc8hMmr/5CYDfRTNnB6HQIXqbwj0dz6d1rJ8nBZ+BHkN
Sw2eYuaFuG3oKktbIUDkNFchPFNCNdfVPVcoyVSignWY12fI8N0ntiO1sQaCiorI
QU5SgVsxiwvKj6CZzcI8knjq5LCRHn6ew1k8ttHA/O308aBFz3Fp/se4pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxR3QzGq/wWncBXJec40vGEv2mwMB8GA1UdIwQY
MBaAFGVrUyVebI+3b6wcy4SP7kVgC1X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgt
ZWE0MTgzMmFkMTcyLzEvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YzhlYWMtYmRjYi00ZjBkLWIyZDgtZWE0MTgzMmFkMTcy
LzEvWld0VEpWNXNqN2R2ckJ6TGhJX3VSV0FMVmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlwIPPz8
WfHAv5w6UHtUmD45Hd6ZvnAAtDi36ioW7l/MyVh9zx5b19qdDWnFgpoq2iOZkcQo
C2dcds6920juBJzJkRUW/xuRIqTSSWepgbQ7TKwe9xlj15/vVyqYI79+g02iDqlE
QYpyTN7cl+bPt0V1zRCHWB42jmYLkRksakUVBb0v2dMM4rt7KvusTvUC1chrcnU+
qJd+9i5ZhaUZiN1xDqIJFx4wcfFmR9379f5HFKNbAUDk63/cfuQIauTMUoZr/wWe
wVpakG9LahH/Ugbn+1KijKKd4uXMNLQT4a1jx0u8hxCk3kPzIMlJf5DNUMv3AIs2
B5NKMUSrkVdOVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:25 2025 by rpki-client