Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: dmjfOTBVks72HF1Sk17WPct0gcEZTeemN84XXfmaO0U=
Subject key identifier: 96:46:DF:CC:D7:21:A7:E0:C8:5A:05:C9:81:B5:60:14:B9:4C:01:7D
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019A50E426BF8197FC6F0261ACBCEA14E5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0452
Signing time: Tue 04 Nov 2025 22:02:00 +0000
Manifest this update: Tue 04 Nov 2025 22:02:00 +0000
Manifest next update: Wed 05 Nov 2025 22:02:00 +0000
Files and hashes: 1: HwGE0614r9XuIYTbb7FI9qw3QhA.roa (hash: NN98O8b8/m43VOkHIWYXipqgMBc9JvK22oHaFCTLRzA=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: YF5pIEhc4bLgnujhYpTLaUF7kB6sunwIf2p5m+HLWUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:26:bf:81:97:fc:6f:02:61:ac:bc:ea:14:e5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Nov 4 22:02:00 2025 GMT
Not After : Nov 5 22:02:00 2025 GMT
Subject: CN=9646dfccd721a7e0c85a05c981b56014b94c017d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:d5:43:31:fe:b4:0a:c3:6e:4a:b4:8d:41:
9f:03:95:05:26:1d:36:65:18:72:a0:82:cb:ef:d7:
dd:1d:51:af:c0:ee:ab:78:79:37:85:f9:89:f1:01:
9c:71:d5:28:3d:e9:87:6d:49:b2:71:5e:3d:9f:d6:
c7:03:13:64:73:3f:d7:53:c1:dd:8e:30:47:4d:b2:
f7:fd:62:bc:8d:5c:2f:19:44:ff:b9:99:35:f4:ee:
05:34:32:5b:ec:9c:2e:87:5b:ba:1a:2b:e5:aa:7c:
ce:79:8a:cf:a9:11:d4:dc:92:47:1c:fc:55:6b:94:
8a:c8:3a:0b:b2:f2:fc:2b:25:a5:1d:83:23:fe:c1:
fa:8b:77:30:5f:95:aa:f5:05:1b:de:48:36:f4:ef:
cd:cd:ea:6d:99:ce:3c:fd:c5:39:a9:62:b4:d6:a6:
64:51:fa:f2:c3:28:c8:ea:3d:ea:80:a8:36:10:84:
a1:3c:81:d4:ce:2f:c7:f3:60:ea:8c:be:79:3a:27:
0f:34:45:88:a9:32:5a:f6:7e:47:07:ed:7a:49:8e:
ab:62:35:53:f4:0f:f2:e8:f7:47:b2:3d:af:6b:29:
ba:98:9d:4d:50:c6:29:16:05:e7:95:ee:3c:f1:33:
88:03:27:70:46:70:43:90:9e:65:4e:3c:59:06:f0:
c9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:46:DF:CC:D7:21:A7:E0:C8:5A:05:C9:81:B5:60:14:B9:4C:01:7D
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:0f:95:cd:85:a1:db:62:31:81:ff:98:50:a3:e9:b8:fa:
19:0b:20:aa:11:95:76:10:f4:ca:73:17:20:b5:71:31:27:1c:
16:4a:69:40:da:50:ac:39:23:0b:cb:77:01:8f:90:66:3e:0a:
e1:f4:88:a3:78:a1:0c:52:b5:3b:e1:67:3f:3a:6c:a8:bd:7f:
b5:ab:25:0e:2f:09:3b:09:37:1f:0b:36:82:30:41:71:25:0c:
ce:1c:bf:29:2f:d6:d7:1b:d1:75:67:6c:00:0e:82:5b:a7:ee:
86:65:82:43:5a:3d:04:ee:5d:ad:bf:99:10:0e:3d:94:79:8c:
eb:d8:7a:1f:7f:1e:c7:05:c3:23:81:ad:eb:d3:55:10:2f:e9:
f4:f2:5d:97:23:aa:55:c5:b9:f0:14:0b:cc:a7:91:25:e3:aa:
e6:2f:6e:10:6c:b3:76:57:68:6a:cd:e8:a3:7e:de:20:d9:c7:
8c:4e:11:f8:43:cb:c6:76:89:69:33:0f:c9:cb:08:7f:f6:0d:
dc:dd:de:51:b8:aa:4e:ae:8b:ea:84:6c:a3:6c:3d:d0:81:82:
df:82:16:5b:6e:8b:5c:8e:d0:f5:41:05:dd:35:b9:a6:b2:02:
4b:7b:d8:d3:38:b0:2c:5e:e0:54:8a:ff:eb:e0:64:2b:6e:08:
32:4e:64:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ5Ca/gZf8bwJhrLzqFOX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTkwNjZkNWI2YWMzMDE5YzIwMzdmNTc5ZDExYmFlMWE1
ZWVhNzMwHhcNMjUxMTA0MjIwMjAwWhcNMjUxMTA1MjIwMjAwWjAzMTEwLwYDVQQD
Eyg5NjQ2ZGZjY2Q3MjFhN2UwYzg1YTA1Yzk4MWI1NjAxNGI5NGMwMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGjVQzH+tArDbkq0jUGfA5UFJh02
ZRhyoILL79fdHVGvwO6reHk3hfmJ8QGccdUoPemHbUmycV49n9bHAxNkcz/XU8Hd
jjBHTbL3/WK8jVwvGUT/uZk19O4FNDJb7Jwuh1u6GivlqnzOeYrPqRHU3JJHHPxV
a5SKyDoLsvL8KyWlHYMj/sH6i3cwX5Wq9QUb3kg29O/Nzeptmc48/cU5qWK01qZk
UfrywyjI6j3qgKg2EIShPIHUzi/H82DqjL55OicPNEWIqTJa9n5HB+16SY6rYjVT
9A/y6PdHsj2vaym6mJ1NUMYpFgXnle488TOIAydwRnBDkJ5lTjxZBvDJBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZG38zXIafgyFoFyYG1YBS5TAF9MB8GA1UdIwQY
MBaAFGWpBm1basMBnCA39XnRG64aXupzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt
MThmMzQzNDg4Mjg2LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2
LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKUPlc2F
odtiMYH/mFCj6bj6GQsgqhGVdhD0ynMXILVxMSccFkppQNpQrDkjC8t3AY+QZj4K
4fSIo3ihDFK1O+FnPzpsqL1/taslDi8JOwk3Hws2gjBBcSUMzhy/KS/W1xvRdWds
AA6CW6fuhmWCQ1o9BO5drb+ZEA49lHmM69h6H38exwXDI4Gt69NVEC/p9PJdlyOq
VcW58BQLzKeRJeOq5i9uEGyzdldoas3oo37eINnHjE4R+EPLxnaJaTMPycsIf/YN
3N3eUbiqTq6L6oRso2w90IGC34IWW26LXI7Q9UEF3TW5prICS3vY0ziwLF7gVIr/
6+BkK24IMk5k5g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:32:00 2025 by rpki-client