Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: t3TPkdJv8bP9v9bT9XvP0P77yOSKCdfpD0GgxF55YCw=
Subject key identifier: 58:63:F2:03:AA:6C:7A:1C:B9:06:29:F4:64:75:5E:8D:17:90:FD:17
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 019A54F669220E046C89A05B778CD15E861F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 1253
Signing time: Wed 05 Nov 2025 17:00:25 +0000
Manifest this update: Wed 05 Nov 2025 17:00:25 +0000
Manifest next update: Thu 06 Nov 2025 17:00:25 +0000
Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: /8RnhYuMw2yYDj3XHyvrgoUxCg4Q6jYuRWGrIsYNymg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:69:22:0e:04:6c:89:a0:5b:77:8c:d1:5e:86:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Nov 5 17:00:25 2025 GMT
Not After : Nov 6 17:00:25 2025 GMT
Subject: CN=5863f203aa6c7a1cb90629f464755e8d1790fd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:10:7f:8d:43:37:d2:7d:01:94:89:3c:ab:
ee:e4:3e:ad:8d:53:eb:61:6b:a0:1a:dc:c6:d6:44:
90:3b:06:51:64:77:a2:0a:77:91:09:73:f0:51:d5:
b0:a5:dd:52:40:78:6a:07:8a:88:ef:79:0e:66:7e:
9f:f7:92:8f:ce:4e:2a:3d:a5:80:83:43:b2:d3:78:
0f:25:73:bf:e8:98:31:1f:8f:5e:85:d1:0a:12:09:
2b:79:0d:ff:28:23:4d:ff:1f:df:fb:b0:ba:5d:70:
11:16:a4:b2:f9:d0:91:ba:7a:3b:23:7f:5a:80:af:
53:4e:e4:6e:09:2f:86:ac:cb:1e:57:65:a9:27:01:
ed:cb:84:86:c3:fa:f7:b1:be:b4:be:73:38:73:f1:
93:7f:66:55:7c:ae:88:2e:c1:ca:a5:7c:ca:36:c7:
f3:5f:3a:88:05:ef:b6:1c:12:b7:eb:9c:d4:47:d8:
50:de:17:c1:83:41:99:f0:38:7b:c3:64:78:07:93:
8b:1e:67:00:6f:15:45:62:2e:ec:3c:ca:ea:a7:a2:
81:eb:e5:02:b4:74:5e:63:dd:be:f1:3e:2e:ba:28:
2c:86:ca:81:1e:84:51:a5:16:ad:8b:81:dd:c8:e7:
78:38:7c:4a:43:ce:f7:b3:2f:ab:27:a8:d3:01:19:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:F2:03:AA:6C:7A:1C:B9:06:29:F4:64:75:5E:8D:17:90:FD:17
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5c:4d:68:0b:c7:2a:3b:03:40:bb:5e:4b:fe:cf:04:0d:2e:
11:72:01:e7:df:36:65:d2:d3:c3:a2:6f:5f:e8:29:60:82:3b:
da:20:4b:84:ce:2d:92:f8:4e:2e:23:81:4d:09:93:41:0c:b7:
22:e8:f9:e5:46:c8:16:f0:87:6b:de:3b:7f:91:bf:6c:c4:cd:
60:39:56:a5:d3:91:78:f9:36:d7:ab:c2:1e:dd:d8:75:ce:2f:
f6:3e:09:05:a6:d5:59:13:69:40:cf:18:40:4e:b1:93:93:d6:
c7:21:5d:9d:7d:a4:7c:99:56:c0:59:27:0c:fa:40:c7:56:4b:
b7:c9:6e:6e:90:22:95:3b:7f:61:d6:a1:14:12:b3:22:76:b3:
c1:79:85:d2:bb:1c:e3:ae:ef:25:29:5e:1a:8b:e6:75:db:77:
78:5a:3c:45:b7:da:66:0d:66:09:e4:8f:49:38:4b:95:14:07:
3d:5e:cc:f4:21:7a:0a:fa:1f:94:ee:7b:47:be:79:37:c9:64:
96:18:58:07:72:b0:49:e9:33:40:e1:3a:f5:75:84:e3:53:ed:
93:08:67:48:88:a3:8b:ce:6d:e0:87:5e:9e:23:62:6f:f4:80:
8d:63:87:0b:44:67:27:d8:1e:3c:ee:84:2c:e4:bc:24:d0:16:
82:fd:6c:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9mkiDgRsiaBbd4zRXoYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MTQ3Njk0ZmQxN2ViMmQxNmZlZDdmNzM1ZDdhMTFkZGQ0
NTE5NjMwHhcNMjUxMTA1MTcwMDI1WhcNMjUxMTA2MTcwMDI1WjAzMTEwLwYDVQQD
Eyg1ODYzZjIwM2FhNmM3YTFjYjkwNjI5ZjQ2NDc1NWU4ZDE3OTBmZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTEQf41DN9J9AZSJPKvu5D6tjVPr
YWugGtzG1kSQOwZRZHeiCneRCXPwUdWwpd1SQHhqB4qI73kOZn6f95KPzk4qPaWA
g0Oy03gPJXO/6JgxH49ehdEKEgkreQ3/KCNN/x/f+7C6XXARFqSy+dCRuno7I39a
gK9TTuRuCS+GrMseV2WpJwHty4SGw/r3sb60vnM4c/GTf2ZVfK6ILsHKpXzKNsfz
XzqIBe+2HBK365zUR9hQ3hfBg0GZ8Dh7w2R4B5OLHmcAbxVFYi7sPMrqp6KB6+UC
tHReY92+8T4uuigshsqBHoRRpRati4HdyOd4OHxKQ873sy+rJ6jTARk6qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhj8gOqbHocuQYp9GR1Xo0XkP0XMB8GA1UdIwQY
MBaAFGcUdpT9F+stFv7X9zXXoR3dRRljMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZTE5MGItNzMzNS00ODE2LWE3MTEt
ZGNjYWQwMjExMzI3LzEvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZTE5MGItNzMzNS00ODE2LWE3MTEtZGNjYWQwMjExMzI3
LzEvWnhSMmxQMFg2eTBXX3RmM05kZWhIZDFGR1dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlxNaAvH
KjsDQLteS/7PBA0uEXIB5982ZdLTw6JvX+gpYII72iBLhM4tkvhOLiOBTQmTQQy3
Iuj55UbIFvCHa947f5G/bMTNYDlWpdORePk216vCHt3Ydc4v9j4JBabVWRNpQM8Y
QE6xk5PWxyFdnX2kfJlWwFknDPpAx1ZLt8lubpAilTt/YdahFBKzInazwXmF0rsc
467vJSleGovmddt3eFo8RbfaZg1mCeSPSThLlRQHPV7M9CF6CvoflO57R755N8lk
lhhYB3KwSekzQOE69XWE41PtkwhnSIiji85t4IdeniNib/SAjWOHC0RnJ9gePO6E
LOS8JNAWgv1sew==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:26 2025 by rpki-client