Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: qy0ltIR/madVfDBjYn5jJUfnCSgsXeld8VfJv+VXwsw=
Subject key identifier: DB:9E:13:8A:D5:F5:64:28:48:CE:DD:E8:29:DB:3D:DB:5C:88:A5:E6
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019A4D745751A8C63D443DA8415B5314721F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 06BC
Signing time: Tue 04 Nov 2025 06:01:01 +0000
Manifest this update: Tue 04 Nov 2025 06:01:01 +0000
Manifest next update: Wed 05 Nov 2025 06:01:01 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: gxTJgoGQh/Qjqfvj9ZU4UJUx6xFa0oyfTCXY+cczSGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:57:51:a8:c6:3d:44:3d:a8:41:5b:53:14:72:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Nov 4 06:01:01 2025 GMT
Not After : Nov 5 06:01:01 2025 GMT
Subject: CN=db9e138ad5f5642848cedde829db3ddb5c88a5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:e7:0c:30:35:b9:66:68:ba:29:bc:27:32:
89:87:e5:01:dd:aa:80:09:f3:38:5d:12:79:3a:23:
30:4e:19:b0:c9:75:73:6c:46:25:a1:60:48:21:03:
17:fc:54:69:e5:18:7d:0f:4c:d1:57:a6:f9:00:11:
3d:b2:48:84:f3:ba:8a:29:16:76:81:26:1a:97:f3:
d3:9a:4b:9b:02:1e:a5:02:86:23:e1:8b:1e:1c:5a:
97:0e:33:d0:ff:87:50:20:ff:ea:20:33:58:48:a9:
6d:11:c4:86:bb:08:7c:c1:e7:b0:8d:d7:3d:6f:a5:
31:8c:7e:64:b3:81:ba:b3:2a:69:ab:84:b0:e1:d0:
5d:dd:27:72:f0:0d:93:1d:fe:be:c5:07:cd:00:e6:
88:95:20:a7:c0:3b:99:c8:5b:b2:10:5f:28:3a:93:
21:ab:ee:19:b1:44:7b:40:aa:62:57:a9:58:7d:c8:
ed:ac:03:ea:d5:3c:81:21:aa:55:47:bd:34:a1:26:
14:38:85:e0:3a:c5:42:fb:c2:c3:f2:b5:e9:01:b8:
49:aa:f2:49:fc:62:3e:5d:8c:2f:36:62:cd:cf:0a:
4e:7a:7a:14:93:74:76:b0:4f:f5:81:5a:78:98:ff:
2d:d3:38:2c:e7:c1:47:40:13:a7:e5:d9:3a:fc:09:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9E:13:8A:D5:F5:64:28:48:CE:DD:E8:29:DB:3D:DB:5C:88:A5:E6
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:47:2f:ee:17:2c:13:2c:4b:be:b0:03:34:be:0a:6b:38:87:
55:51:b8:0e:8c:20:cc:cb:07:3d:c0:97:c9:cb:93:3f:97:15:
28:61:bc:25:b7:20:6a:5c:37:49:06:f2:65:6d:77:19:d8:42:
32:ca:9b:19:ad:2f:13:1f:de:c8:b9:f6:57:72:63:b8:f7:55:
f8:3a:7b:f7:dd:53:87:3f:f1:cd:98:ce:ab:f4:b8:c4:d3:c8:
97:8e:7f:86:3e:d8:26:d9:6d:29:1c:72:2b:56:05:3d:b8:95:
fb:8e:26:b7:55:77:5a:1c:77:33:c8:73:1d:0a:da:4e:4b:f3:
95:e3:21:be:8b:a1:17:74:5e:ee:15:ae:d7:78:ad:be:d6:f2:
36:c9:ab:71:da:09:7e:4f:fb:a2:c5:98:18:35:0c:6a:2c:a0:
d5:51:77:9b:32:b0:94:4d:51:25:7b:a4:bc:64:69:f3:ff:4b:
e2:66:d1:a6:a8:d4:8c:f2:9e:d0:41:14:97:80:f5:c8:09:a6:
f2:ff:8c:d7:5a:be:1d:d6:6b:5c:0a:a6:cf:c9:e5:5a:f2:1b:
81:52:b5:c6:fe:87:7d:74:ec:72:a9:e8:1e:8c:72:74:21:4d:
d9:36:c8:37:07:ce:02:e3:e5:3c:2d:1c:a4:52:d2:d1:7a:55:
5e:13:7c:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdFdRqMY9RD2oQVtTFHIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMzg0NzY2NzUxMGY0ZjJlNTliYjFiMzk0YWUyN2U4ZGFk
MGRjOTcwHhcNMjUxMTA0MDYwMTAxWhcNMjUxMTA1MDYwMTAxWjAzMTEwLwYDVQQD
EyhkYjllMTM4YWQ1ZjU2NDI4NDhjZWRkZTgyOWRiM2RkYjVjODhhNWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIjnDDA1uWZouim8JzKJh+UB3aqA
CfM4XRJ5OiMwThmwyXVzbEYloWBIIQMX/FRp5Rh9D0zRV6b5ABE9skiE87qKKRZ2
gSYal/PTmkubAh6lAoYj4YseHFqXDjPQ/4dQIP/qIDNYSKltEcSGuwh8weewjdc9
b6UxjH5ks4G6syppq4Sw4dBd3Sdy8A2THf6+xQfNAOaIlSCnwDuZyFuyEF8oOpMh
q+4ZsUR7QKpiV6lYfcjtrAPq1TyBIapVR700oSYUOIXgOsVC+8LD8rXpAbhJqvJJ
/GI+XYwvNmLNzwpOenoUk3R2sE/1gVp4mP8t0zgs58FHQBOn5dk6/AlEtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNueE4rV9WQoSM7d6CnbPdtciKXmMB8GA1UdIwQY
MBaAFM44R2Z1EPTy5Zuxs5SuJ+ja0NyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2It
NGJhNDQzNzdiZDg2LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGYyYTgtZDNiNy00NDNkLWFjM2ItNGJhNDQzNzdiZDg2
LzEvempoSFpuVVE5UExsbTdHemxLNG42TnJRM0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUcv7hcs
EyxLvrADNL4KaziHVVG4DowgzMsHPcCXycuTP5cVKGG8Jbcgalw3SQbyZW13GdhC
MsqbGa0vEx/eyLn2V3JjuPdV+Dp7991Thz/xzZjOq/S4xNPIl45/hj7YJtltKRxy
K1YFPbiV+44mt1V3Whx3M8hzHQraTkvzleMhvouhF3Re7hWu13itvtbyNsmrcdoJ
fk/7osWYGDUMaiyg1VF3mzKwlE1RJXukvGRp8/9L4mbRpqjUjPKe0EEUl4D1yAmm
8v+M11q+HdZrXAqmz8nlWvIbgVK1xv6HfXTscqnoHoxydCFN2TbINwfOAuPlPC0c
pFLS0XpVXhN8kg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:05:18 2025 by rpki-client