Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: FrCuwocwJcV6T3mAJHL3eRPZtbbvTqLUR5z4wPex9t4=
Subject key identifier: 70:8C:00:71:05:FD:04:62:3A:6B:C9:A6:37:E9:BD:76:3B:45:B1:EA
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 019A4EF46692E17CF933B489F02C43740F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 145E
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: InshTP0J9Q8ODyenhwpVVHKTvFRALoCT56PQ6AcCBwY=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:66:92:e1:7c:f9:33:b4:89:f0:2c:43:74:0f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=708c007105fd04623a6bc9a637e9bd763b45b1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:8a:bc:8b:36:f8:f5:a5:3d:c2:2c:e2:2f:
d0:b0:69:06:13:fb:85:aa:00:fa:96:0f:56:15:9a:
b0:ab:8d:0d:84:f0:7b:c6:c0:85:5e:87:ab:1a:3f:
d9:28:d4:c2:ba:b1:fb:19:f3:fb:d8:9b:f0:c7:8a:
b6:dd:5a:29:9c:73:a6:0a:70:15:0f:23:ab:13:ee:
5f:91:ed:46:f4:2c:98:e3:35:37:0c:cd:fb:1b:64:
30:d6:b9:f9:06:5b:5b:c4:b6:54:7e:07:b8:aa:5a:
aa:9b:c7:cb:bb:f5:21:2e:c1:4b:ea:c1:58:92:b8:
43:81:34:13:ab:5a:1d:c4:35:c7:22:be:44:16:b9:
ed:32:d8:45:87:09:d2:a5:40:94:81:8e:87:e9:ff:
61:26:aa:3c:81:fe:16:d2:9a:fa:ab:77:03:90:1c:
cd:ba:d9:9d:c6:4d:4c:ab:e1:70:0b:3a:ca:b7:b9:
32:a3:26:2b:4b:f5:a0:dc:97:7b:88:87:34:a9:f8:
27:aa:80:b4:4c:4c:69:95:45:92:c7:34:04:b9:c1:
c8:88:94:32:d9:b6:ac:30:f4:77:30:74:fc:5e:1e:
84:ee:27:b7:fc:ff:15:5e:58:24:c4:19:8b:49:55:
56:fd:f4:2e:26:d5:81:59:b2:a5:ad:f4:e0:d3:06:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:00:71:05:FD:04:62:3A:6B:C9:A6:37:E9:BD:76:3B:45:B1:EA
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:92:da:99:c6:97:0b:7c:81:90:89:6d:63:c9:74:4f:2f:0c:
9f:0a:37:0b:36:72:1e:18:39:f5:40:aa:3e:14:f8:bd:a1:34:
67:df:0f:52:20:b4:68:9c:da:d9:2c:0e:66:9a:21:3d:79:67:
c7:70:d5:73:2b:ab:a5:38:ed:70:c6:d2:c4:02:f4:d0:41:32:
a9:b3:28:ce:0f:b5:5e:88:f5:c9:06:2e:2b:33:c2:da:5f:48:
c8:90:d2:53:78:4f:99:6d:03:d9:8c:e4:97:5b:52:42:b5:db:
dd:1c:85:15:64:b4:fe:bf:bb:40:a6:0e:af:f8:ca:b9:4c:38:
f2:f5:73:35:f2:99:04:61:27:72:86:ad:9c:2b:27:c6:43:bb:
d4:d9:5d:dd:1e:93:e3:bc:f5:22:59:32:ee:ec:4c:7d:cd:b7:
9f:09:a8:63:e3:cf:f7:14:03:14:9e:41:d1:44:25:68:ca:20:
95:cd:e3:ef:26:6b:ba:81:14:e4:ed:6c:ba:37:0b:e7:69:8a:
ff:30:fa:b8:93:bf:e2:34:5f:f6:4f:1b:8c:12:98:14:df:63:
20:60:ec:b7:93:3d:e0:d3:1f:a7:9b:7e:ad:5f:fc:2d:67:ab:
2f:6e:3e:3f:1c:ca:fe:d7:ca:cf:fd:97:09:b3:e0:3b:6d:15:
5b:54:51:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9GaS4Xz5M7SJ8CxDdA8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZWE2OThhYmNkZWUxMGRjYTlkNjcwM2E1NmU4N2E2YjM1
OWJmY2MwHhcNMjUxMTA0MTMwMDMxWhcNMjUxMTA1MTMwMDMxWjAzMTEwLwYDVQQD
Eyg3MDhjMDA3MTA1ZmQwNDYyM2E2YmM5YTYzN2U5YmQ3NjNiNDViMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1+KvIs2+PWlPcIs4i/QsGkGE/uF
qgD6lg9WFZqwq40NhPB7xsCFXoerGj/ZKNTCurH7GfP72Jvwx4q23VopnHOmCnAV
DyOrE+5fke1G9CyY4zU3DM37G2Qw1rn5BltbxLZUfge4qlqqm8fLu/UhLsFL6sFY
krhDgTQTq1odxDXHIr5EFrntMthFhwnSpUCUgY6H6f9hJqo8gf4W0pr6q3cDkBzN
utmdxk1Mq+FwCzrKt7kyoyYrS/Wg3Jd7iIc0qfgnqoC0TExplUWSxzQEucHIiJQy
2basMPR3MHT8Xh6E7ie3/P8VXlgkxBmLSVVW/fQuJtWBWbKlrfTg0wYrZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCMAHEF/QRiOmvJpjfpvXY7RbHqMB8GA1UdIwQY
MBaAFGfqaYq83uENyp1nA6Vuh6azWb/MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODkt
YjMyZDk3NGMyMTBlLzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hMzIyYmEtYzk2NC00NjViLTg5ODktYjMyZDk3NGMyMTBl
LzEvWi1wcGlyemU0UTNLbldjRHBXNkhwck5adjh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5LamcaX
C3yBkIltY8l0Ty8Mnwo3CzZyHhg59UCqPhT4vaE0Z98PUiC0aJza2SwOZpohPXln
x3DVcyurpTjtcMbSxAL00EEyqbMozg+1Xoj1yQYuKzPC2l9IyJDSU3hPmW0D2Yzk
l1tSQrXb3RyFFWS0/r+7QKYOr/jKuUw48vVzNfKZBGEncoatnCsnxkO71Nld3R6T
47z1Ilky7uxMfc23nwmoY+PP9xQDFJ5B0UQlaMoglc3j7yZruoEU5O1sujcL52mK
/zD6uJO/4jRf9k8bjBKYFN9jIGDst5M94NMfp5t+rV/8LWerL24+PxzK/tfKz/2X
CbPgO20VW1RRJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:36 2025 by rpki-client