Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: AmwO4/0DjDpyVSSdPjh6TPOZZzxasHC5D5ubI6+3Uxw=
Subject key identifier: DD:E1:DD:D0:81:58:64:04:A6:52:09:D1:11:2C:B0:E5:7C:8B:12:1F
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 019A4F62CC315AB0303D04A5642371C9AEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 04DD
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: t/yDaxLTXhFstmET0xBfrGpwOU6G46u2MV5Pj9aXlZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:cc:31:5a:b0:30:3d:04:a5:64:23:71:c9:ae:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=dde1ddd081586404a65209d1112cb0e57c8b121f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:29:d1:79:4f:34:39:fa:9e:e9:b9:60:10:
92:c4:18:dd:0c:40:8a:23:80:58:35:ec:32:e1:0e:
1f:ff:96:46:86:3e:25:a0:0c:08:4f:46:5a:df:09:
6a:17:73:df:f4:78:9e:28:b0:8f:10:e8:93:41:09:
5a:3a:0a:c5:9d:f6:1c:97:7a:02:ea:49:61:9a:79:
ab:a2:23:57:a5:c7:2e:b3:c9:1b:05:9b:5d:c4:ad:
58:63:69:38:ad:6f:1c:df:60:f3:80:4e:74:3a:0f:
f8:99:92:f5:6d:3e:5e:35:69:1e:08:56:8b:28:60:
6b:7e:b2:f5:d8:03:56:db:5d:36:b9:19:83:9d:d7:
02:7a:4a:78:0a:4e:29:10:5c:13:a0:bc:84:6e:dc:
02:32:3d:24:80:79:d8:53:f9:dc:78:e9:e8:43:3d:
3f:39:f0:06:02:18:dc:c8:b5:e2:6f:2a:05:18:95:
8b:d5:ee:d3:5f:c0:4b:e2:f9:7c:2a:be:9a:76:5d:
e6:b8:1e:18:fc:ba:6c:01:ba:71:4b:c0:d9:aa:b3:
f6:a3:26:ee:36:71:99:52:1f:8d:dc:09:fe:74:81:
02:6a:54:4c:3e:ba:9b:1b:17:96:e6:1d:96:72:66:
4c:a1:60:91:ba:59:ec:63:d0:9e:17:3d:15:87:17:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:DD:D0:81:58:64:04:A6:52:09:D1:11:2C:B0:E5:7C:8B:12:1F
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:59:52:3f:96:6e:fb:1e:7c:79:82:29:bc:c9:83:e6:31:62:
39:5c:3d:c5:6d:59:79:3e:31:d4:e7:ef:5b:33:8e:65:60:1d:
35:98:ac:e3:60:7d:1d:79:16:f6:e1:51:db:e4:70:30:98:34:
72:b3:f9:13:f7:ca:af:f5:e6:d7:0d:24:e0:9d:2e:44:b2:6f:
0a:f5:ec:1d:6b:4b:34:a1:53:ae:21:6b:93:7a:2b:13:95:e1:
b4:a5:71:a4:d9:19:9d:4a:84:2a:59:12:5f:be:f2:ef:8f:2c:
ff:a6:12:dd:7d:53:7e:83:c3:cc:63:3d:bb:26:a2:49:59:01:
83:14:eb:81:93:0a:f6:60:d0:dc:bb:61:2b:23:a6:c6:05:d1:
80:f6:55:9b:9e:97:86:a7:90:76:a4:66:ec:59:5d:a9:9b:f6:
55:bc:b2:11:9e:27:ec:33:4f:14:19:95:6c:8c:ac:62:e2:e5:
6b:95:a6:4c:1a:bb:de:f4:5f:97:cb:3e:32:c3:3e:07:30:96:
ed:2d:4a:b7:60:d2:62:60:92:d7:c6:a3:00:81:54:39:6a:51:
06:65:e8:c7:24:39:bb:0b:2d:22:79:60:34:a3:4a:a9:9a:58:
4d:eb:3d:a6:b3:b3:74:79:ec:fe:52:38:2c:e6:cc:96:0b:c7:
d8:3d:57:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYswxWrAwPQSlZCNxya6vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWQzOTQ2NDEzZGQxMTE2MWI0NmM3ZGY2YWQzNjJhOTkz
OGQ1ZDQwHhcNMjUxMTA0MTUwMTA2WhcNMjUxMTA1MTUwMTA2WjAzMTEwLwYDVQQD
EyhkZGUxZGRkMDgxNTg2NDA0YTY1MjA5ZDExMTJjYjBlNTdjOGIxMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTkp0XlPNDn6num5YBCSxBjdDECK
I4BYNewy4Q4f/5ZGhj4loAwIT0Za3wlqF3Pf9HieKLCPEOiTQQlaOgrFnfYcl3oC
6klhmnmroiNXpccus8kbBZtdxK1YY2k4rW8c32DzgE50Og/4mZL1bT5eNWkeCFaL
KGBrfrL12ANW2102uRmDndcCekp4Ck4pEFwToLyEbtwCMj0kgHnYU/nceOnoQz0/
OfAGAhjcyLXibyoFGJWL1e7TX8BL4vl8Kr6adl3muB4Y/LpsAbpxS8DZqrP2oybu
NnGZUh+N3An+dIECalRMPrqbGxeW5h2WcmZMoWCRulnsY9CeFz0VhxcitQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3h3dCBWGQEplIJ0REssOV8ixIfMB8GA1UdIwQY
MBaAFAmdOUZBPdERYbRsffatNiqZONXUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3Yzkt
Y2Y1MmFhOWQ2Y2NjLzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84NTY0NDMtYjhmYi00NzhlLTg3YzktY2Y1MmFhOWQ2Y2Nj
LzEvQ1owNVJrRTkwUkZodEd4OTlxMDJLcGs0MWRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFlSP5Zu
+x58eYIpvMmD5jFiOVw9xW1ZeT4x1OfvWzOOZWAdNZis42B9HXkW9uFR2+RwMJg0
crP5E/fKr/Xm1w0k4J0uRLJvCvXsHWtLNKFTriFrk3orE5XhtKVxpNkZnUqEKlkS
X77y748s/6YS3X1TfoPDzGM9uyaiSVkBgxTrgZMK9mDQ3LthKyOmxgXRgPZVm56X
hqeQdqRm7FldqZv2VbyyEZ4n7DNPFBmVbIysYuLla5WmTBq73vRfl8s+MsM+BzCW
7S1Kt2DSYmCS18ajAIFUOWpRBmXoxyQ5uwstInlgNKNKqZpYTes9prOzdHns/lI4
LObMlgvH2D1XAQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:05 2025 by rpki-client