Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
File: zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft (raw, json)
Hash identifier: chlLShENhzvjHcc6nQ52JeUET1cuPT6U3AuMrUgK67Q=
Subject key identifier: C1:21:37:1F:88:6A:C2:17:8C:E1:AC:F7:43:8E:AB:82:75:52:27:94
Authority key identifier: CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
Certificate issuer: /CN=cd86b8ce222482a14f9b13468ce57e9992684961
Certificate serial: 019A4DAAD7D66747622A43FB7AA2A3032EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
Manifest number: 06E1
Signing time: Tue 04 Nov 2025 07:00:33 +0000
Manifest this update: Tue 04 Nov 2025 07:00:33 +0000
Manifest next update: Wed 05 Nov 2025 07:00:33 +0000
Files and hashes: 1: DQHOKV8IKLhzD_DKbK2yKJLy3qI.roa (hash: PB4sy0lCqmdf8gfZUrxsVqDoVfWeVXqM8PmI2EwyuMw=)
2: zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl (hash: khlMefdcVfeQ1mpQ1jAETAFQfNX6huYsxWZuo5/p+IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d7:d6:67:47:62:2a:43:fb:7a:a2:a3:03:2e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd86b8ce222482a14f9b13468ce57e9992684961
Validity
Not Before: Nov 4 07:00:33 2025 GMT
Not After : Nov 5 07:00:33 2025 GMT
Subject: CN=c121371f886ac2178ce1acf7438eab8275522794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:0e:41:90:5a:dc:bb:3b:14:b6:81:a9:c4:
8c:f8:aa:00:23:e1:6f:e3:8c:07:39:f4:43:a4:2d:
2d:c6:3a:8b:8d:9c:dc:b4:5a:6f:b4:9c:06:ed:48:
30:c2:c2:26:2f:3b:1d:c8:03:e7:22:82:d5:83:1c:
99:e8:a5:ff:e4:27:09:72:ce:fe:38:2a:82:cb:74:
2e:b9:1c:84:01:26:d5:80:ee:b2:8c:cf:48:c2:81:
00:a2:e2:f6:8b:59:52:5b:9f:b4:c2:1b:5a:57:ad:
6f:d2:76:1c:48:f7:0a:73:96:42:ec:37:fc:56:bd:
e5:d2:86:67:b5:2d:b8:4e:0a:b1:d2:a4:54:21:c4:
f4:bf:56:be:5e:a0:46:33:e0:0a:9a:97:b4:77:42:
64:12:3f:46:2d:10:89:d3:3e:36:05:64:77:fd:4e:
58:14:f0:fd:94:db:03:af:76:11:e1:6b:f1:8f:7f:
6e:37:f5:58:36:40:2d:a0:f3:7f:6e:27:c1:a6:35:
ea:d7:82:57:a6:0b:7b:88:c0:df:8e:f3:8c:d3:78:
f8:d2:70:17:3e:c3:07:50:42:d3:a6:0c:d9:a0:93:
f5:8f:d5:89:1d:e5:b1:43:63:a4:1c:19:4e:30:21:
ae:dd:f4:29:e0:33:9b:c1:00:63:a7:f3:79:99:5a:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:37:1F:88:6A:C2:17:8C:E1:AC:F7:43:8E:AB:82:75:52:27:94
X509v3 Authority Key Identifier:
keyid:CD:86:B8:CE:22:24:82:A1:4F:9B:13:46:8C:E5:7E:99:92:68:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYa4ziIkgqFPmxNGjOV-mZJoSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/608114-a97a-4877-94c7-dc2d557503ee/1/zYa4ziIkgqFPmxNGjOV-mZJoSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:28:d6:aa:b3:5c:cc:57:25:80:97:b0:4e:8a:ff:09:de:c0:
b1:c3:95:7a:14:8d:24:79:13:75:d6:2b:59:81:8d:2b:6b:d2:
2a:c8:90:48:df:c5:90:8e:70:a3:46:79:d9:16:a6:c1:1b:f1:
bf:44:8d:04:a0:5f:be:dc:ac:d9:ee:b6:bc:5d:55:05:66:47:
38:fa:8b:b1:18:d7:a9:2e:f9:72:9f:35:16:3e:b5:94:cd:07:
3e:e5:6c:7a:ba:92:d3:98:43:8d:c0:bc:97:ce:3e:0c:59:ae:
d6:e7:9a:ba:4d:54:87:2c:70:44:12:b1:64:fa:b1:36:87:0f:
bb:49:27:35:54:b0:3e:f6:b4:6a:64:77:1b:2c:25:ef:c3:a2:
72:64:e1:9a:ce:ad:1a:18:f6:75:83:bb:68:0c:54:de:64:90:
ba:3f:a1:f4:94:63:98:4f:7a:0a:52:aa:d2:dd:47:95:e8:4b:
b8:3c:85:86:2d:b1:b4:5d:c0:dc:e5:c8:b6:0f:54:0b:85:0d:
83:9c:f3:13:9e:3a:91:0b:d5:1b:ec:9a:bb:b8:6e:fd:c2:23:
8e:b2:56:d7:b4:c6:3e:b6:dd:40:06:33:9c:5f:7c:22:73:c5:
34:97:31:6e:1c:a8:d2:b6:80:a3:33:ad:e0:22:20:02:4e:3f:
8f:de:fe:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqtfWZ0diKkP7eqKjAy7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODZiOGNlMjIyNDgyYTE0ZjliMTM0NjhjZTU3ZTk5OTI2
ODQ5NjEwHhcNMjUxMTA0MDcwMDMzWhcNMjUxMTA1MDcwMDMzWjAzMTEwLwYDVQQD
EyhjMTIxMzcxZjg4NmFjMjE3OGNlMWFjZjc0MzhlYWI4Mjc1NTIyNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09kOQZBa3Ls7FLaBqcSM+KoAI+Fv
44wHOfRDpC0txjqLjZzctFpvtJwG7UgwwsImLzsdyAPnIoLVgxyZ6KX/5CcJcs7+
OCqCy3QuuRyEASbVgO6yjM9IwoEAouL2i1lSW5+0whtaV61v0nYcSPcKc5ZC7Df8
Vr3l0oZntS24Tgqx0qRUIcT0v1a+XqBGM+AKmpe0d0JkEj9GLRCJ0z42BWR3/U5Y
FPD9lNsDr3YR4Wvxj39uN/VYNkAtoPN/bifBpjXq14JXpgt7iMDfjvOM03j40nAX
PsMHUELTpgzZoJP1j9WJHeWxQ2OkHBlOMCGu3fQp4DObwQBjp/N5mVqKDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEhNx+IasIXjOGs90OOq4J1UieUMB8GA1UdIwQY
MBaAFM2GuM4iJIKhT5sTRozlfpmSaElhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0Yzct
ZGMyZDU1NzUwM2VlLzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDgxMTQtYTk3YS00ODc3LTk0YzctZGMyZDU1NzUwM2Vl
LzEvellhNHppSWtncUZQbXhOR2pPVi1tWkpvU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCjWqrNc
zFclgJewTor/Cd7AscOVehSNJHkTddYrWYGNK2vSKsiQSN/FkI5wo0Z52RamwRvx
v0SNBKBfvtys2e62vF1VBWZHOPqLsRjXqS75cp81Fj61lM0HPuVserqS05hDjcC8
l84+DFmu1ueauk1UhyxwRBKxZPqxNocPu0knNVSwPva0amR3Gywl78OicmThms6t
Ghj2dYO7aAxU3mSQuj+h9JRjmE96ClKq0t1HlehLuDyFhi2xtF3A3OXItg9UC4UN
g5zzE546kQvVG+yau7hu/cIjjrJW17TGPrbdQAYznF98InPFNJcxbhyo0raAozOt
4CIgAk4/j97+Ow==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:34 2025 by rpki-client