Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: ZduL0UjEahe2ilI1bko/vGsim6KaDbxjYP66bLe+IPU=
Subject key identifier: D6:06:DE:0D:D4:A6:A6:43:3E:8C:D8:EB:A7:C0:BF:06:88:13:9F:E3
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 019A4C9807D596DE1D6C699E0E7D3C487A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0C80
Signing time: Tue 04 Nov 2025 02:00:23 +0000
Manifest this update: Tue 04 Nov 2025 02:00:23 +0000
Manifest next update: Wed 05 Nov 2025 02:00:23 +0000
Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: FqEeSYCcdOkrSHJs1w5swigJOMZd60L6N/bSp1IgLR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:07:d5:96:de:1d:6c:69:9e:0e:7d:3c:48:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Nov 4 02:00:23 2025 GMT
Not After : Nov 5 02:00:23 2025 GMT
Subject: CN=d606de0dd4a6a6433e8cd8eba7c0bf0688139fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:43:a4:13:87:e3:92:db:62:b9:bb:f0:a7:
30:0f:c1:cb:9f:86:10:21:24:7f:19:04:31:5e:70:
aa:8a:f1:64:62:a2:09:9e:95:ad:eb:09:7a:12:0e:
8a:0b:81:93:39:77:c4:3f:64:81:24:c7:96:02:8f:
6d:0d:ac:e1:27:84:a9:12:b9:34:8c:64:c1:7d:8b:
fb:d8:26:5d:21:4e:b9:7e:64:9a:6d:27:ae:e1:ca:
74:92:af:8d:f5:5b:38:7a:88:a5:8c:25:d0:31:cd:
82:39:b3:90:72:cb:8d:19:02:46:a4:56:33:16:cc:
67:fb:d8:f9:4a:ec:ba:14:cd:22:e5:ea:b5:f4:6c:
a7:d4:d0:0f:95:7c:72:97:08:6b:a8:65:20:73:a9:
46:02:55:a1:6b:f0:eb:eb:00:13:60:fe:a1:84:de:
45:93:cb:31:24:6d:dc:b1:10:85:1a:a5:49:16:e0:
5c:dd:64:56:97:b0:c9:e4:b2:03:cc:fa:eb:a4:f7:
63:d3:fd:9f:65:72:07:c0:c1:18:92:32:7f:c1:06:
69:8b:8b:0a:d2:45:d5:d8:53:bf:72:7f:52:e5:b6:
a6:d6:e4:d7:ce:ab:44:fc:96:bf:bc:af:80:ea:c5:
5b:f6:c5:8f:79:b5:79:5a:e2:9c:7f:ce:6c:b4:41:
41:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:DE:0D:D4:A6:A6:43:3E:8C:D8:EB:A7:C0:BF:06:88:13:9F:E3
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:73:e2:87:d5:60:34:55:ca:f7:a1:43:8b:7d:92:36:79:22:
08:2b:f4:65:bc:1b:dd:c2:84:6e:c7:db:8d:ec:d1:0d:b2:a5:
c2:4b:2e:9a:f7:45:32:0b:8f:82:fe:fc:b0:26:de:0b:9e:6f:
53:bd:e4:3d:02:20:29:d2:74:e5:ee:60:6e:15:11:30:4c:bd:
56:a2:88:57:01:b8:14:e5:e8:87:14:67:81:5f:23:10:68:69:
dc:61:e2:23:78:a9:e5:15:d3:f7:08:18:7f:95:98:10:6b:1d:
bc:c8:7f:c0:a6:86:58:ab:c8:4c:85:57:2a:64:77:81:98:4b:
73:1b:48:ed:5b:e2:26:fd:0c:3b:9b:39:1a:00:75:11:f0:35:
81:c6:01:c9:25:1a:1e:ff:9b:12:12:15:b6:11:c1:d5:cb:96:
2f:91:aa:35:b8:8c:80:47:81:99:77:39:d3:ff:15:65:fb:89:
2a:ce:21:d2:46:29:49:bf:fc:9c:ac:cb:e5:48:ec:40:24:7d:
5d:a9:62:d0:03:d8:84:aa:b6:21:fa:50:fa:b0:34:bb:43:7d:
39:d3:dd:c7:00:0b:5f:92:21:08:e4:5e:11:c1:66:33:1e:d3:
e4:80:87:c4:6a:4e:ef:1d:7d:bd:87:f6:15:af:ec:8a:ec:da:
22:89:85:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMmAfVlt4dbGmeDn08SHpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDhmZTMzYTVmMGJhMGIyODYyNTM1MDViYmZiMjkzMjIw
ZjU4MTYwHhcNMjUxMTA0MDIwMDIzWhcNMjUxMTA1MDIwMDIzWjAzMTEwLwYDVQQD
EyhkNjA2ZGUwZGQ0YTZhNjQzM2U4Y2Q4ZWJhN2MwYmYwNjg4MTM5ZmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BtDpBOH45LbYrm78KcwD8HLn4YQ
ISR/GQQxXnCqivFkYqIJnpWt6wl6Eg6KC4GTOXfEP2SBJMeWAo9tDazhJ4SpErk0
jGTBfYv72CZdIU65fmSabSeu4cp0kq+N9Vs4eoiljCXQMc2CObOQcsuNGQJGpFYz
Fsxn+9j5Suy6FM0i5eq19Gyn1NAPlXxylwhrqGUgc6lGAlWha/Dr6wATYP6hhN5F
k8sxJG3csRCFGqVJFuBc3WRWl7DJ5LIDzPrrpPdj0/2fZXIHwMEYkjJ/wQZpi4sK
0kXV2FO/cn9S5bam1uTXzqtE/Ja/vK+A6sVb9sWPebV5WuKcf85stEFBaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYG3g3UpqZDPozY66fAvwaIE5/jMB8GA1UdIwQY
MBaAFM4I/jOl8LoLKGJTUFu/spMiD1gWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDct
ZDhjZmU1OTFkZDllLzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDctZDhjZmU1OTFkZDll
LzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1XPih9Vg
NFXK96FDi32SNnkiCCv0Zbwb3cKEbsfbjezRDbKlwksumvdFMguPgv78sCbeC55v
U73kPQIgKdJ05e5gbhURMEy9VqKIVwG4FOXohxRngV8jEGhp3GHiI3ip5RXT9wgY
f5WYEGsdvMh/wKaGWKvITIVXKmR3gZhLcxtI7VviJv0MO5s5GgB1EfA1gcYBySUa
Hv+bEhIVthHB1cuWL5GqNbiMgEeBmXc50/8VZfuJKs4h0kYpSb/8nKzL5UjsQCR9
Xali0APYhKq2IfpQ+rA0u0N9OdPdxwALX5IhCOReEcFmMx7T5ICHxGpO7x19vYf2
Fa/siuzaIomFQg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:24 2025 by rpki-client