Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: Z2vf11trWnvqYmr/b8NSfbCKH2GXWGVzcT0jCHhKMkM=
Subject key identifier: CE:3A:58:33:13:9B:37:80:2E:AF:7A:0F:F1:5A:EE:DB:B0:14:1F:72
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 019A4D73D309200B88FFB2D45798469B2E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:27 +0000
Manifest this update: Tue 04 Nov 2025 06:00:27 +0000
Manifest next update: Wed 05 Nov 2025 06:00:27 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: h1QO5MZIUUFA21XipbxFCNxxoX5POvhnZswrStMLSRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d3:09:20:0b:88:ff:b2:d4:57:98:46:9b:2e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Nov 4 06:00:27 2025 GMT
Not After : Nov 5 06:00:27 2025 GMT
Subject: CN=ce3a5833139b37802eaf7a0ff15aeedbb0141f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2e:1c:c2:a6:2e:ff:3e:11:83:71:6e:5f:0b:
c1:19:e2:8b:d6:6a:ea:2a:9b:ff:93:ed:8e:81:0f:
41:91:d5:2e:49:cb:a7:cb:f8:c7:8c:53:6d:fa:67:
56:fb:8e:22:b5:0e:8e:97:8f:53:83:a5:5d:ea:a3:
ff:1e:f5:f6:e9:b6:e7:0b:2c:b2:eb:ff:07:17:dc:
55:eb:c3:4d:b7:04:5d:05:6a:57:db:7c:75:b7:7c:
ed:e7:ba:6f:82:3f:17:82:53:63:71:86:7d:91:f7:
ee:18:8f:2a:a0:3e:17:32:bb:a0:54:ef:ee:cb:39:
c7:dc:d4:82:fc:00:2a:9c:43:21:ea:4d:b3:95:7a:
2b:b8:85:32:a3:b3:1a:ea:07:56:44:fd:de:a1:95:
06:de:78:5d:70:3b:14:fb:79:b6:0f:66:a3:6a:00:
68:13:23:08:1f:11:c2:5d:aa:1a:4a:13:a0:10:3a:
aa:7a:da:03:96:8a:b6:1e:5f:d3:24:d1:f9:d4:58:
1d:af:13:a2:b1:7c:58:30:30:87:f7:a0:31:3d:1c:
18:bf:72:6f:f1:8e:78:04:be:52:a1:6f:24:3d:a2:
09:92:6c:72:af:7c:86:2e:62:8a:72:b1:b2:f4:2a:
77:e6:04:b2:d8:b0:ab:8b:a4:b9:6a:c0:30:19:8a:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3A:58:33:13:9B:37:80:2E:AF:7A:0F:F1:5A:EE:DB:B0:14:1F:72
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0b:c0:35:50:fa:6b:8f:0d:a7:0a:c7:c7:dd:4b:18:c7:f0:
32:d1:17:fa:d3:2d:5b:be:fc:16:b5:76:10:88:95:fe:af:bb:
2a:cf:1d:77:d2:25:fc:9a:ec:5e:34:b0:2d:65:ab:68:b4:b8:
c3:33:96:72:d7:13:d0:39:a8:aa:a3:47:5e:11:93:16:fb:fb:
0b:fd:92:49:19:69:86:5f:d6:94:a6:9c:5f:10:40:fe:c8:6c:
fc:4a:5d:1f:ce:e7:c4:2b:ee:e6:17:e6:4a:64:df:70:47:16:
60:ea:db:b9:90:ec:95:3e:79:a5:b5:bf:91:ed:cd:96:1a:78:
22:08:28:d4:4a:48:63:74:dc:1e:db:e4:df:23:e7:45:97:a4:
08:20:6b:85:d9:b8:ac:99:b0:06:28:f2:76:71:2d:be:4c:c6:
ee:8a:c4:e3:b1:af:51:b1:42:f6:57:01:64:ce:25:40:12:b8:
e7:b3:02:c1:81:e1:45:89:87:db:65:da:42:61:f5:6a:ee:66:
f1:22:61:b6:c0:25:98:96:30:ca:28:75:4d:f7:51:8c:65:e1:
75:4d:da:23:0b:6b:36:97:39:80:8e:66:a1:bc:60:fc:cf:7e:
03:42:3a:65:3b:b1:1a:7d:0b:76:88:b1:b5:df:64:dc:a6:2f:
fa:af:56:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc9MJIAuI/7LUV5hGmy4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1
NjJjNDQwHhcNMjUxMTA0MDYwMDI3WhcNMjUxMTA1MDYwMDI3WjAzMTEwLwYDVQQD
EyhjZTNhNTgzMzEzOWIzNzgwMmVhZjdhMGZmMTVhZWVkYmIwMTQxZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i4cwqYu/z4Rg3FuXwvBGeKL1mrq
Kpv/k+2OgQ9BkdUuScuny/jHjFNt+mdW+44itQ6Ol49Tg6Vd6qP/HvX26bbnCyyy
6/8HF9xV68NNtwRdBWpX23x1t3zt57pvgj8XglNjcYZ9kffuGI8qoD4XMrugVO/u
yznH3NSC/AAqnEMh6k2zlXoruIUyo7Ma6gdWRP3eoZUG3nhdcDsU+3m2D2ajagBo
EyMIHxHCXaoaShOgEDqqetoDloq2Hl/TJNH51FgdrxOisXxYMDCH96AxPRwYv3Jv
8Y54BL5SoW8kPaIJkmxyr3yGLmKKcrGy9Cp35gSy2LCri6S5asAwGYrmbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM46WDMTmzeALq96D/Fa7tuwFB9yMB8GA1UdIwQY
MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt
Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4
LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgvANVD6
a48NpwrHx91LGMfwMtEX+tMtW778FrV2EIiV/q+7Ks8dd9Il/JrsXjSwLWWraLS4
wzOWctcT0DmoqqNHXhGTFvv7C/2SSRlphl/WlKacXxBA/shs/EpdH87nxCvu5hfm
SmTfcEcWYOrbuZDslT55pbW/ke3Nlhp4Iggo1EpIY3TcHtvk3yPnRZekCCBrhdm4
rJmwBijydnEtvkzG7orE47GvUbFC9lcBZM4lQBK457MCwYHhRYmH22XaQmH1au5m
8SJhtsAlmJYwyih1TfdRjGXhdU3aIwtrNpc5gI5mobxg/M9+A0I6ZTuxGn0Ldoix
td9k3KYv+q9W1w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:37 2025 by rpki-client