Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: t8fjnQOzWPfOEtuXZMWdycVCubc6xoOXfefDryYZsPg=
Subject key identifier: C2:81:58:79:A2:32:0F:4B:26:44:42:BF:19:57:8F:99:91:3C:D3:02
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019A4EF52A98FE078CB1F6B62E94832CEC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 1060
Signing time: Tue 04 Nov 2025 13:01:21 +0000
Manifest this update: Tue 04 Nov 2025 13:01:21 +0000
Manifest next update: Wed 05 Nov 2025 13:01:21 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: aCGXvMKWxukWNCgRm91WIILq/KHSUkWS1vym+/+Mq7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2a:98:fe:07:8c:b1:f6:b6:2e:94:83:2c:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Nov 4 13:01:21 2025 GMT
Not After : Nov 5 13:01:21 2025 GMT
Subject: CN=c2815879a2320f4b264442bf19578f99913cd302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:a9:90:fe:b8:94:05:c9:e3:e4:27:69:d9:
f8:1c:08:bc:78:7a:4b:11:1b:a3:1c:11:73:68:27:
53:00:aa:a4:d0:83:0e:b0:fb:f2:be:d7:1b:c3:84:
af:e2:d8:93:5e:ef:5d:4a:ea:8c:d0:f5:bd:5e:6b:
63:d4:6f:09:ff:ad:84:5b:45:f5:65:f6:c4:b9:39:
c7:b7:db:7f:84:4a:02:c7:cb:22:22:c2:7a:29:42:
cc:a6:17:1c:6d:f6:c3:71:19:11:1e:6e:ec:c9:e4:
9c:dc:68:bb:e6:65:1a:ab:f4:f3:c6:6a:af:47:36:
b9:14:56:5c:5c:a8:e4:e7:ea:13:96:8b:bf:3c:e3:
06:b0:ec:5c:0d:40:7e:48:cc:97:b6:d9:40:fd:62:
ae:ee:16:61:ad:ec:a7:a0:45:72:c9:af:1e:f5:3d:
89:b8:c0:44:a0:6c:31:65:7d:9f:1a:86:a8:79:9d:
08:e9:0e:38:a7:d3:3f:63:c9:0b:1d:0a:62:b7:05:
81:42:18:c4:13:c2:42:b9:a6:5e:71:e6:b6:6d:20:
93:0e:e6:61:77:9d:db:48:a5:b2:4f:37:05:a5:0e:
70:d8:5d:e6:e1:05:69:3d:90:09:5f:6c:cd:e9:59:
79:05:cc:42:d6:3b:d7:ef:08:48:00:d2:8f:57:63:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:81:58:79:A2:32:0F:4B:26:44:42:BF:19:57:8F:99:91:3C:D3:02
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:64:91:c3:da:95:67:11:a9:70:71:cb:dc:14:3c:dd:97:bd:
cd:6d:a9:31:b4:4e:00:6f:0b:83:9f:5f:49:e3:20:68:a5:18:
ff:4d:f6:78:c4:83:96:db:53:2b:b0:aa:3e:d4:b8:58:bf:6a:
0f:aa:53:bc:fd:b2:7b:e5:ea:4d:36:b3:51:64:be:49:4b:b1:
29:10:75:8f:cc:38:35:00:0c:23:45:db:bd:e6:6c:2d:a9:39:
39:86:eb:62:c7:14:31:1a:11:1c:30:fb:70:9c:69:f1:c4:6c:
b4:d5:e6:f0:98:c7:fc:f4:c0:a6:1b:c4:60:29:1e:b8:57:f7:
65:6c:3d:d1:eb:d5:18:f6:de:76:df:78:81:14:af:7d:5a:78:
0f:b4:e4:3f:9e:96:83:30:24:76:e5:72:d3:26:43:d0:96:b5:
87:e6:7e:e0:3a:39:4c:7f:62:ad:5a:c7:6d:ae:99:ed:8c:73:
eb:64:42:4e:71:d2:54:56:17:bc:2d:bb:5c:8e:d3:a5:f8:41:
35:58:b5:e6:92:b2:b0:da:e6:06:bf:64:44:15:9a:42:a5:24:
5f:b7:2f:7a:b5:34:b9:f9:df:1f:b8:f9:33:19:73:4b:48:cc:
f7:31:5f:2f:a9:89:f0:bb:51:10:13:ae:67:f6:67:5b:f0:b1:
72:bb:14:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9SqY/geMsfa2LpSDLOyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk
N2EzYjEwHhcNMjUxMTA0MTMwMTIxWhcNMjUxMTA1MTMwMTIxWjAzMTEwLwYDVQQD
EyhjMjgxNTg3OWEyMzIwZjRiMjY0NDQyYmYxOTU3OGY5OTkxM2NkMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiKpkP64lAXJ4+Qnadn4HAi8eHpL
ERujHBFzaCdTAKqk0IMOsPvyvtcbw4Sv4tiTXu9dSuqM0PW9Xmtj1G8J/62EW0X1
ZfbEuTnHt9t/hEoCx8siIsJ6KULMphccbfbDcRkRHm7syeSc3Gi75mUaq/Tzxmqv
Rza5FFZcXKjk5+oTlou/POMGsOxcDUB+SMyXttlA/WKu7hZhreynoEVyya8e9T2J
uMBEoGwxZX2fGoaoeZ0I6Q44p9M/Y8kLHQpitwWBQhjEE8JCuaZecea2bSCTDuZh
d53bSKWyTzcFpQ5w2F3m4QVpPZAJX2zN6Vl5BcxC1jvX7whIANKPV2PoNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKBWHmiMg9LJkRCvxlXj5mRPNMCMB8GA1UdIwQY
MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt
OWZiOGUyNTQ1ZDczLzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz
LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmSRw9qV
ZxGpcHHL3BQ83Ze9zW2pMbROAG8Lg59fSeMgaKUY/032eMSDlttTK7CqPtS4WL9q
D6pTvP2ye+XqTTazUWS+SUuxKRB1j8w4NQAMI0XbveZsLak5OYbrYscUMRoRHDD7
cJxp8cRstNXm8JjH/PTAphvEYCkeuFf3ZWw90evVGPbedt94gRSvfVp4D7TkP56W
gzAkduVy0yZD0Ja1h+Z+4Do5TH9irVrHba6Z7Yxz62RCTnHSVFYXvC27XI7TpfhB
NVi15pKysNrmBr9kRBWaQqUkX7cverU0ufnfH7j5MxlzS0jM9zFfL6mJ8LtREBOu
Z/ZnW/CxcrsU7g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:55 2025 by rpki-client