Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: 757Zvl+E4uTerg3JJRa+PvG1c99Hu8WmH3OWG5yeyl4=
Subject key identifier: 01:60:B0:39:A8:3E:04:B5:69:CA:D7:C0:A0:BA:29:C2:85:4F:BC:E1
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 019A51F581DB2DCADDB750492EE570890544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 03:00:35 +0000
Manifest this update: Wed 05 Nov 2025 03:00:35 +0000
Manifest next update: Thu 06 Nov 2025 03:00:35 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: 35LKmYG4Tv0MFyRGqLzRfAbHmQ1ZaKZICh8UKGBDZDw=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:81:db:2d:ca:dd:b7:50:49:2e:e5:70:89:05:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Nov 5 03:00:35 2025 GMT
Not After : Nov 6 03:00:35 2025 GMT
Subject: CN=0160b039a83e04b569cad7c0a0ba29c2854fbce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:0b:4c:ab:5f:b0:29:06:e0:76:62:2f:24:
a7:e9:e1:6d:e5:34:63:b6:f6:a8:6e:9f:fe:1c:11:
d2:c1:1a:42:2a:28:b6:04:39:47:77:d3:87:8a:a9:
fd:e9:0b:94:7d:29:11:9b:1a:da:2a:5e:00:96:1e:
b5:4d:ac:12:63:fb:1e:34:2b:f3:c4:92:55:8c:30:
e2:4c:c3:05:08:89:d7:43:7f:f7:f6:be:20:c6:33:
02:09:17:7a:ee:63:f1:aa:c0:ce:34:71:00:ca:df:
db:f4:8f:af:ac:d8:7d:11:c5:8a:3d:59:02:9b:97:
ea:80:2a:f8:bb:5c:2f:9f:b9:64:a8:1b:cf:7b:c0:
06:0e:e7:9e:2a:d2:81:e5:1b:de:63:81:ab:35:e2:
13:21:04:d8:ce:48:a2:50:07:f9:0e:61:2e:ed:45:
8a:75:35:b9:97:27:00:a2:8c:64:43:03:89:73:ca:
63:81:10:9f:04:e1:33:b8:85:e5:1d:29:44:26:3d:
03:cb:26:94:76:57:b8:bd:40:e4:7c:b1:96:5f:a3:
07:60:b2:04:eb:d2:ed:69:57:33:42:bb:d7:67:cb:
b5:2e:a4:59:f6:95:16:dd:b4:73:1d:b4:9a:a8:c4:
fa:5d:ff:e0:11:11:fa:d0:6a:ab:4c:00:c5:de:29:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:60:B0:39:A8:3E:04:B5:69:CA:D7:C0:A0:BA:29:C2:85:4F:BC:E1
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:52:a2:63:df:27:fc:da:4e:c0:7f:16:95:77:67:ad:81:82:
04:29:45:46:97:34:82:cd:aa:38:70:e7:f3:0c:10:22:87:67:
25:8a:f4:12:d5:43:80:a9:53:6f:b2:64:39:f4:63:fa:eb:a5:
47:72:30:9b:56:c4:a8:1f:e9:a6:11:a9:a8:78:b0:7d:6c:de:
bf:cc:ce:86:1c:9c:5a:16:5c:12:f6:4e:37:da:48:15:f3:3d:
ba:d2:6a:1e:87:48:46:3a:4b:0f:6a:8f:39:e3:53:c7:1c:36:
3a:4d:c6:4d:bb:77:18:b7:88:0c:2c:f6:f0:ed:10:23:24:e2:
31:a5:49:0e:1b:f0:68:49:3e:4b:68:68:06:08:e5:b4:e5:2e:
ac:e3:87:98:2a:d3:db:21:ac:18:32:ac:19:54:57:5f:a8:5c:
7e:6a:a1:a7:38:38:f3:41:54:34:51:6b:6a:29:db:e8:9d:88:
dc:05:d1:68:6a:28:51:d1:73:82:00:d0:00:94:f2:3b:6d:41:
6e:82:3e:aa:65:99:db:a7:f8:d0:e0:3c:d5:16:79:89:e2:fe:
ef:9f:16:d1:a5:dd:87:9b:43:e2:a0:ad:0b:6a:2a:6d:fa:66:
01:af:3b:7d:e5:c6:eb:98:a6:a1:07:f2:7c:ba:3e:ae:38:5c:
28:65:7f:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9YHbLcrdt1BJLuVwiQVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw
MDg3ZDQwHhcNMjUxMTA1MDMwMDM1WhcNMjUxMTA2MDMwMDM1WjAzMTEwLwYDVQQD
EygwMTYwYjAzOWE4M2UwNGI1NjljYWQ3YzBhMGJhMjljMjg1NGZiY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAoLTKtfsCkG4HZiLySn6eFt5TRj
tvaobp/+HBHSwRpCKii2BDlHd9OHiqn96QuUfSkRmxraKl4Alh61TawSY/seNCvz
xJJVjDDiTMMFCInXQ3/39r4gxjMCCRd67mPxqsDONHEAyt/b9I+vrNh9EcWKPVkC
m5fqgCr4u1wvn7lkqBvPe8AGDueeKtKB5RveY4GrNeITIQTYzkiiUAf5DmEu7UWK
dTW5lycAooxkQwOJc8pjgRCfBOEzuIXlHSlEJj0DyyaUdle4vUDkfLGWX6MHYLIE
69LtaVczQrvXZ8u1LqRZ9pUW3bRzHbSaqMT6Xf/gERH60GqrTADF3ilKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFgsDmoPgS1acrXwKC6KcKFT7zhMB8GA1UdIwQY
MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt
ZTVmY2ViZGFhN2YyLzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy
LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVKiY98n
/NpOwH8WlXdnrYGCBClFRpc0gs2qOHDn8wwQIodnJYr0EtVDgKlTb7JkOfRj+uul
R3Iwm1bEqB/pphGpqHiwfWzev8zOhhycWhZcEvZON9pIFfM9utJqHodIRjpLD2qP
OeNTxxw2Ok3GTbt3GLeIDCz28O0QIyTiMaVJDhvwaEk+S2hoBgjltOUurOOHmCrT
2yGsGDKsGVRXX6hcfmqhpzg480FUNFFrainb6J2I3AXRaGooUdFzggDQAJTyO21B
boI+qmWZ26f40OA81RZ5ieL+758W0aXdh5tD4qCtC2oqbfpmAa87feXG65imoQfy
fLo+rjhcKGV/ew==
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:12 2025 by rpki-client