Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: wD2Z2QXDOcCAg6E0qFhmtHaMEnGBDIEbrz0+RG7mDlI=
Subject key identifier: DA:E5:19:85:F2:8B:9C:91:48:15:3A:63:2A:2C:E7:C8:EB:1D:08:B5
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 019A4E8686B96E8A03213482FFAFAD01F7B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 1720
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: hY2BoillotCTI6477BUReQVgHyL0W3Axfvp6KEL6mYI=)
2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:86:b9:6e:8a:03:21:34:82:ff:af:ad:01:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=dae51985f28b9c9148153a632a2ce7c8eb1d08b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:2d:f6:de:2f:d9:d4:05:30:25:7a:b1:68:
a4:e5:72:de:53:bf:8a:92:ee:f8:2c:36:e6:d3:3d:
8c:f2:a4:a2:5c:70:6a:f7:e1:bb:15:6e:7d:c7:9b:
01:51:69:0a:cb:be:f5:6e:bc:81:53:53:3a:5e:1b:
d6:e9:d9:47:67:d0:be:57:0c:fd:0d:e2:de:b4:b9:
23:2e:a0:86:f2:70:f1:a1:39:5c:58:cf:1f:1b:80:
77:e6:aa:13:25:95:8e:59:cd:d6:23:3f:d0:ae:5e:
de:d6:e6:64:de:8a:3a:ff:c7:9b:d8:e9:18:90:18:
1f:3e:f0:78:4a:c2:68:7a:87:8a:9e:8d:3f:4c:38:
d3:b8:ed:bf:d4:11:6b:6a:ca:a3:f8:cd:cc:7d:f1:
09:a1:cc:c5:57:48:45:e2:e6:b6:b1:8f:3c:ba:31:
6c:d0:9c:5f:15:b2:8f:db:98:ae:35:16:f5:8d:cb:
b5:42:8c:39:77:24:a1:87:8e:20:a1:d3:1c:70:26:
25:79:ba:ef:88:7c:2e:48:0a:d5:6c:5a:7e:fb:80:
46:1b:64:78:c2:24:c9:d2:b9:04:4c:91:76:ef:e4:
99:58:0b:94:d1:7d:b5:a1:9a:aa:5c:2f:47:4b:9e:
e2:1d:55:33:e3:89:6d:45:d1:43:71:be:e1:4e:d0:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E5:19:85:F2:8B:9C:91:48:15:3A:63:2A:2C:E7:C8:EB:1D:08:B5
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:17:c6:bf:e6:65:8d:43:20:15:44:73:51:72:e7:8b:fa:2a:
26:dc:0f:4b:aa:2e:a2:ca:45:ce:97:b9:fa:9c:d2:95:54:32:
a6:4d:f0:0f:23:4c:89:35:e9:02:3d:27:3b:2f:16:89:18:7b:
0f:2e:f1:77:d7:6e:a3:82:0b:02:d7:8a:a7:dc:8d:65:9f:13:
07:b3:8c:46:cb:0b:22:66:b1:ec:99:3d:0b:3c:bd:81:01:d9:
97:af:af:4f:b7:83:81:f7:80:63:3a:55:d5:1b:b6:cb:0f:b1:
c9:d7:2a:64:b8:2d:b3:6c:f0:b0:b1:47:4a:e6:c9:6c:1c:61:
f3:ad:ca:56:45:64:e3:f3:02:bc:9b:81:d0:79:3b:77:28:17:
54:24:b9:7f:b1:d7:8a:ff:8b:ba:11:17:7c:c8:e2:ab:8e:1a:
c5:3c:f5:63:d2:b4:12:a4:8c:e8:f3:2d:99:9d:45:7f:5a:99:
0e:3a:4b:ff:c0:a8:84:65:f1:3c:1d:a2:e0:ad:e0:82:4c:91:
08:2f:9f:9f:ed:77:f7:03:20:33:c6:c4:3c:75:32:cd:81:ec:
a4:3c:c0:f3:2c:f0:dc:2d:10:03:04:3f:58:0f:0b:9e:2f:5d:
08:eb:c4:dd:da:14:21:5e:7a:f6:a2:e3:4e:f3:9e:45:e4:ea:
2f:4f:85:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhoa5booDITSC/6+tAfe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDlhZWRhOGE4YWNlN2VjNTk2ZmMxODdhMmZlMTA1ODJh
NjcwNGQwHhcNMjUxMTA0MTEwMDMwWhcNMjUxMTA1MTEwMDMwWjAzMTEwLwYDVQQD
EyhkYWU1MTk4NWYyOGI5YzkxNDgxNTNhNjMyYTJjZTdjOGViMWQwOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArckt9t4v2dQFMCV6sWik5XLeU7+K
ku74LDbm0z2M8qSiXHBq9+G7FW59x5sBUWkKy771bryBU1M6XhvW6dlHZ9C+Vwz9
DeLetLkjLqCG8nDxoTlcWM8fG4B35qoTJZWOWc3WIz/Qrl7e1uZk3oo6/8eb2OkY
kBgfPvB4SsJoeoeKno0/TDjTuO2/1BFrasqj+M3MffEJoczFV0hF4ua2sY88ujFs
0JxfFbKP25iuNRb1jcu1Qow5dyShh44godMccCYlebrviHwuSArVbFp++4BGG2R4
wiTJ0rkETJF27+SZWAuU0X21oZqqXC9HS57iHVUz44ltRdFDcb7hTtCiGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrlGYXyi5yRSBU6Yyos58jrHQi1MB8GA1UdIwQY
MBaAFGdJrtqKis5+xZb8GHov4QWCpnBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYt
NjY2M2ZhYmExZGQwLzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZDM2YWItZGVlNS00NjlkLTkyMTYtNjY2M2ZhYmExZGQw
LzEvWjBtdTJvcUt6bjdGbHZ3WWVpX2hCWUttY0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhfGv+Zl
jUMgFURzUXLni/oqJtwPS6ouospFzpe5+pzSlVQypk3wDyNMiTXpAj0nOy8WiRh7
Dy7xd9duo4ILAteKp9yNZZ8TB7OMRssLImax7Jk9Czy9gQHZl6+vT7eDgfeAYzpV
1Ru2yw+xydcqZLgts2zwsLFHSubJbBxh863KVkVk4/MCvJuB0Hk7dygXVCS5f7HX
iv+LuhEXfMjiq44axTz1Y9K0EqSM6PMtmZ1Ff1qZDjpL/8CohGXxPB2i4K3ggkyR
CC+fn+139wMgM8bEPHUyzYHspDzA8yzw3C0QAwQ/WA8Lni9dCOvE3doUIV569qLj
TvOeReTqL0+FuQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:43 2025 by rpki-client