Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: Nib1aTlrQfVN7kjc2o0Pwv8Zldlc/nxJNiG15LSdMh4=
Subject key identifier: D6:1C:EB:FE:E7:D3:AE:BB:17:B1:34:1B:99:82:53:76:F2:EF:28:D3
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 019A522C31EC09C5524F751A5CAB5CF90188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 04:00:19 +0000
Manifest this update: Wed 05 Nov 2025 04:00:19 +0000
Manifest next update: Thu 06 Nov 2025 04:00:19 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: VFmJuBHx3l0ZBaLDHGlcOEHErs0V69BgpgyBVwrmrnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:31:ec:09:c5:52:4f:75:1a:5c:ab:5c:f9:01:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Nov 5 04:00:19 2025 GMT
Not After : Nov 6 04:00:19 2025 GMT
Subject: CN=d61cebfee7d3aebb17b1341b99825376f2ef28d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ad:0c:24:46:72:95:9b:a7:cb:01:e7:e9:86:
16:af:4c:8a:55:8c:8a:24:38:a7:79:ad:9a:4c:8d:
bc:8b:36:b5:63:bd:b3:8c:66:85:c3:b1:b3:58:fa:
b2:49:a5:87:f7:86:2c:3f:17:77:d1:53:2e:9f:f8:
2b:27:82:c5:9b:30:c2:f6:2a:35:49:0b:89:37:0f:
5d:44:90:44:a0:61:0f:63:3e:c9:50:17:68:ab:fa:
b3:8c:d1:06:ac:9d:fa:c0:0e:80:41:20:92:93:b0:
c7:91:59:47:2d:fb:3b:9d:10:89:94:d3:10:29:6d:
06:f1:a4:12:3c:fb:63:d2:88:ed:4a:f5:f0:f3:3b:
85:f2:8c:a3:15:c0:c2:02:66:10:96:53:97:34:3d:
34:b6:55:d1:b6:a2:57:1b:6d:4c:6d:24:aa:d7:05:
2f:c5:56:20:c4:d2:cb:7b:b9:e4:f2:25:36:b6:fc:
c8:bc:f2:93:dc:c4:ae:bc:6a:27:3d:4a:84:34:c1:
d7:33:a4:36:c7:9c:02:39:c1:ef:c8:df:d4:3c:f6:
5d:0a:cf:1d:6f:2c:28:be:c6:5a:39:f5:02:1f:41:
db:87:e5:6a:bc:f6:82:12:3c:fe:d9:ab:eb:e4:95:
62:79:16:a4:67:04:ea:6f:88:f9:61:86:15:5d:07:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:EB:FE:E7:D3:AE:BB:17:B1:34:1B:99:82:53:76:F2:EF:28:D3
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7d:ba:7c:c5:ae:0f:d5:5c:99:d8:db:71:db:43:b1:9e:9e:
2b:7a:00:ff:2e:4f:92:4e:bc:60:20:63:25:be:08:94:30:d8:
32:33:53:7d:f4:aa:b7:37:34:f4:c0:ac:00:22:b3:da:0d:c8:
46:5e:13:4e:0e:75:63:42:87:2c:c0:85:e5:9a:87:4b:28:5f:
d2:4f:d8:94:d7:a5:a9:1a:33:da:70:4e:fb:e3:c4:7c:77:0a:
6b:2a:a3:3f:87:c2:d7:84:82:33:48:53:02:f9:3d:7f:20:7e:
8c:6b:3f:ed:c2:2e:fc:0a:ac:15:23:1d:2d:8d:4e:c3:86:f5:
23:b3:05:61:26:bd:79:a4:17:43:29:fb:21:38:b9:14:00:c6:
d0:c2:e3:9c:e1:48:00:c5:96:c3:fe:99:58:49:51:aa:5e:44:
83:ca:72:fa:87:80:cd:9e:e4:54:dd:3b:d2:c4:6e:fd:ce:3a:
9f:65:f5:01:10:84:36:33:eb:ad:2b:8d:ab:ef:ac:92:80:b0:
c6:af:0a:7f:d7:4d:48:ee:f5:ab:c3:c0:80:bb:7b:40:95:a5:
6e:bd:7c:b7:65:54:f0:67:8c:26:07:67:41:d7:f4:f0:cc:d0:
c5:db:67:92:2d:4e:df:63:e6:e3:5b:74:2f:d5:52:3d:9d:5e:
2f:7b:6c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLDHsCcVST3UaXKtc+QGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzUwN2E1YTFlNTUwMWE3YWQ2MzU1MzM1YWNkZmU2M2Rh
YmM5MGIwHhcNMjUxMTA1MDQwMDE5WhcNMjUxMTA2MDQwMDE5WjAzMTEwLwYDVQQD
EyhkNjFjZWJmZWU3ZDNhZWJiMTdiMTM0MWI5OTgyNTM3NmYyZWYyOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq0MJEZylZunywHn6YYWr0yKVYyK
JDinea2aTI28iza1Y72zjGaFw7GzWPqySaWH94YsPxd30VMun/grJ4LFmzDC9io1
SQuJNw9dRJBEoGEPYz7JUBdoq/qzjNEGrJ36wA6AQSCSk7DHkVlHLfs7nRCJlNMQ
KW0G8aQSPPtj0ojtSvXw8zuF8oyjFcDCAmYQllOXND00tlXRtqJXG21MbSSq1wUv
xVYgxNLLe7nk8iU2tvzIvPKT3MSuvGonPUqENMHXM6Q2x5wCOcHvyN/UPPZdCs8d
bywovsZaOfUCH0Hbh+VqvPaCEjz+2avr5JVieRakZwTqb4j5YYYVXQdjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYc6/7n0667F7E0G5mCU3by7yjTMB8GA1UdIwQY
MBaAFM7FB6Wh5VAaetY1UzWs3+Y9q8kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2Mt
ZDI0YWE1Nzk0ZDhiLzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2MtZDI0YWE1Nzk0ZDhi
LzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmX26fMWu
D9VcmdjbcdtDsZ6eK3oA/y5Pkk68YCBjJb4IlDDYMjNTffSqtzc09MCsACKz2g3I
Rl4TTg51Y0KHLMCF5ZqHSyhf0k/YlNelqRoz2nBO++PEfHcKayqjP4fC14SCM0hT
Avk9fyB+jGs/7cIu/AqsFSMdLY1Ow4b1I7MFYSa9eaQXQyn7ITi5FADG0MLjnOFI
AMWWw/6ZWElRql5Eg8py+oeAzZ7kVN070sRu/c46n2X1ARCENjPrrSuNq++skoCw
xq8Kf9dNSO71q8PAgLt7QJWlbr18t2VU8GeMJgdnQdf08MzQxdtnki1O32Pm41t0
L9VSPZ1eL3tsTw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:22 2025 by rpki-client