Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: ZU9txgAd3F9kO1As1tJ05EBA+AlbXwVcoH3tL6EJebs=
Subject key identifier: 45:2E:F1:CE:35:7D:82:E1:EC:BC:A6:4C:63:C5:3E:64:03:93:5F:25
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 019A4DE1F46A74812369E985CA01DD973F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 1491
Signing time: Tue 04 Nov 2025 08:00:45 +0000
Manifest this update: Tue 04 Nov 2025 08:00:45 +0000
Manifest next update: Wed 05 Nov 2025 08:00:45 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: 03qLkU4AA6I1OVTaFc5L+pssv38iK37Ven7EfF4v0iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f4:6a:74:81:23:69:e9:85:ca:01:dd:97:3f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Nov 4 08:00:45 2025 GMT
Not After : Nov 5 08:00:45 2025 GMT
Subject: CN=452ef1ce357d82e1ecbca64c63c53e6403935f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:aa:31:d0:4e:00:30:6a:23:bb:29:7b:71:
4e:05:b5:15:00:31:2f:92:2d:9a:78:ff:7c:7c:30:
42:7f:3a:18:1b:fc:41:0e:1d:f1:20:5e:51:5c:48:
d9:2e:35:de:ab:72:4d:52:77:98:41:e1:1d:af:cb:
55:cf:1e:0a:72:a0:3c:63:72:1b:44:ea:00:04:dd:
ec:72:f5:5f:c6:b0:0c:57:a6:6f:95:51:bc:14:b2:
07:56:48:1b:ad:78:54:34:62:83:16:7a:92:2b:d3:
82:0f:0e:be:2e:90:70:22:af:4b:d3:5c:71:6f:e2:
e0:ee:3a:05:40:e1:be:98:7c:d8:e7:94:a5:11:d0:
0f:42:af:30:e9:d2:f8:86:d7:b1:2a:06:3e:99:a7:
58:6e:5c:11:cc:1c:c0:82:6d:e5:ae:2e:4f:f1:5f:
48:dc:c9:3e:d5:0e:ae:9e:22:77:ad:90:09:d9:fa:
82:53:53:f6:4a:62:8d:98:1e:ba:61:56:69:22:09:
6d:ee:59:7c:59:9e:ea:49:7c:a7:8d:d5:0e:12:80:
ed:24:b0:2b:78:64:0b:15:27:e8:64:79:05:6f:af:
0e:49:1a:84:4a:ce:c4:38:c2:a0:e0:a8:7e:c7:a4:
e3:ac:a7:77:4d:6f:e0:a2:73:ee:84:9c:cd:dc:94:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:F1:CE:35:7D:82:E1:EC:BC:A6:4C:63:C5:3E:64:03:93:5F:25
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:87:11:1e:58:af:bf:ad:82:18:14:ed:6a:6f:c8:e2:d6:08:
cf:c3:9d:dd:71:99:63:5b:c4:fe:ed:77:7e:bf:e9:47:90:a4:
d5:55:92:15:34:0c:28:a2:e0:c9:cd:ba:b0:a0:dd:7c:9f:d9:
c1:4f:53:ae:57:6f:3b:76:32:7a:ff:4c:c9:48:93:b0:47:0e:
6d:2c:45:0d:38:a0:52:e0:9d:eb:3f:3c:ad:a3:96:df:a1:9c:
15:db:2e:12:75:1b:cb:82:e7:4a:b2:89:59:07:21:e2:f3:95:
0d:50:cf:3d:e3:c6:7b:5f:43:dd:05:4b:2d:ea:13:ff:d0:29:
a0:45:7d:99:89:57:36:55:24:b8:e3:bc:98:bb:59:ae:78:a8:
3f:5a:ad:29:40:6f:83:4d:61:78:6b:58:14:84:ef:1f:ae:f2:
8a:52:b9:4e:8a:13:22:20:8e:37:2b:63:df:2e:35:36:49:53:
3e:83:81:bc:41:fb:73:7d:03:e7:ae:46:0d:ce:73:6b:a9:05:
72:66:e3:a2:af:2b:eb:aa:9e:de:84:12:aa:6d:07:56:21:7a:
32:b9:b6:dc:fb:a0:21:a3:40:fe:5e:20:5d:da:bd:eb:9a:0d:
17:cc:35:f8:b5:73:01:f4:af:a1:17:c8:0d:29:f7:80:a2:60:
33:80:b7:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4fRqdIEjaemFygHdlz9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTNiZTg0NzE4ZjU1MWMyNDE0NzdmMjJhMDQxYzczNGVi
OTdkYzUwHhcNMjUxMTA0MDgwMDQ1WhcNMjUxMTA1MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg0NTJlZjFjZTM1N2Q4MmUxZWNiY2E2NGM2M2M1M2U2NDAzOTM1ZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruOqMdBOADBqI7spe3FOBbUVADEv
ki2aeP98fDBCfzoYG/xBDh3xIF5RXEjZLjXeq3JNUneYQeEdr8tVzx4KcqA8Y3Ib
ROoABN3scvVfxrAMV6ZvlVG8FLIHVkgbrXhUNGKDFnqSK9OCDw6+LpBwIq9L01xx
b+Lg7joFQOG+mHzY55SlEdAPQq8w6dL4htexKgY+madYblwRzBzAgm3lri5P8V9I
3Mk+1Q6uniJ3rZAJ2fqCU1P2SmKNmB66YVZpIglt7ll8WZ7qSXynjdUOEoDtJLAr
eGQLFSfoZHkFb68OSRqESs7EOMKg4Kh+x6TjrKd3TW/gonPuhJzN3JTBLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUu8c41fYLh7LymTGPFPmQDk18lMB8GA1UdIwQY
MBaAFMwTvoRxj1UcJBR38ioEHHNOuX3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUt
NzQxZDU1Yzk5ODAyLzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUtNzQxZDU1Yzk5ODAy
LzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYcRHliv
v62CGBTtam/I4tYIz8Od3XGZY1vE/u13fr/pR5Ck1VWSFTQMKKLgyc26sKDdfJ/Z
wU9TrldvO3Yyev9MyUiTsEcObSxFDTigUuCd6z88raOW36GcFdsuEnUby4LnSrKJ
WQch4vOVDVDPPePGe19D3QVLLeoT/9ApoEV9mYlXNlUkuOO8mLtZrnioP1qtKUBv
g01heGtYFITvH67yilK5TooTIiCONytj3y41NklTPoOBvEH7c30D565GDc5za6kF
cmbjoq8r66qe3oQSqm0HViF6Mrm23PugIaNA/l4gXdq965oNF8w1+LVzAfSvoRfI
DSn3gKJgM4C32w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:01 2025 by rpki-client