Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: L7tYAoufHam1f+GR2gGh9CXib9Y84cwprBuY/F9BKxI=
Subject key identifier: 0D:E7:2A:DA:0F:4E:A4:A3:FF:87:DA:9C:39:5F:8E:E5:03:BB:F6:D0
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 019A4DAADA69E7E95ADFD23ED6AD2C1C6F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 0BC6
Signing time: Tue 04 Nov 2025 07:00:33 +0000
Manifest this update: Tue 04 Nov 2025 07:00:33 +0000
Manifest next update: Wed 05 Nov 2025 07:00:33 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: R4LJcc+hFq1HY9slKbSLrtEtGtOwq0mum60tdkJNrS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:da:69:e7:e9:5a:df:d2:3e:d6:ad:2c:1c:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Nov 4 07:00:33 2025 GMT
Not After : Nov 5 07:00:33 2025 GMT
Subject: CN=0de72ada0f4ea4a3ff87da9c395f8ee503bbf6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:b0:e4:92:ef:69:50:07:f9:62:10:9e:71:
7c:d9:dc:d2:95:56:6e:5b:1b:59:f5:4f:65:31:9c:
30:70:87:75:ff:26:5d:6e:47:b8:45:90:e2:02:e1:
5c:dd:5d:65:8d:07:b8:0a:9e:f3:7f:ba:28:d4:9f:
d4:7a:0d:3b:2d:a0:c5:5a:14:1b:f3:41:3f:7a:55:
27:7e:f6:af:99:0b:61:3e:8c:ca:fb:3e:5b:03:74:
88:10:82:d8:63:32:a1:b8:34:f5:76:bc:1c:b7:22:
ce:e7:cb:f5:26:2e:cc:b3:f0:83:3d:25:af:d0:47:
fa:b5:93:35:a5:4c:63:d7:e9:e0:04:ab:3c:03:49:
16:aa:c1:fd:fd:7c:db:98:81:8f:83:c1:3e:2a:5a:
72:3a:75:c5:88:3e:65:7a:ea:f8:e9:48:00:39:fe:
19:f7:19:2a:b7:6a:72:b7:3d:bd:1e:02:b0:60:9c:
f1:83:af:2e:ad:4e:38:6f:40:38:b5:a3:80:d0:d2:
78:7c:9c:64:05:2e:84:d2:a0:a9:8b:cd:65:cb:86:
a8:e3:8b:4f:e4:13:60:48:07:ca:1b:75:7c:d9:74:
33:c1:e2:20:94:6b:43:c5:6f:99:38:fb:66:3e:0f:
18:b6:a2:ec:17:e9:82:f1:81:78:7b:c5:b6:da:1a:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:2A:DA:0F:4E:A4:A3:FF:87:DA:9C:39:5F:8E:E5:03:BB:F6:D0
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b3:fc:af:ab:ba:0f:7d:82:4e:c2:68:3a:1a:7b:b4:18:2f:
92:50:4f:6e:2f:8e:52:c6:af:3d:51:d1:6e:66:8a:33:b0:6a:
a6:ba:c6:b1:72:25:22:cc:9c:27:eb:35:79:a5:f3:23:b2:54:
c3:f1:3a:24:65:6b:b4:a3:16:f5:4a:d4:20:8b:12:14:fb:fa:
37:3d:b1:b5:a1:ba:9f:c6:d1:dc:85:e2:97:2e:4a:2f:1c:aa:
67:31:ad:28:21:1a:b1:ae:6f:91:87:6e:17:04:d1:07:a2:42:
5b:18:4d:57:df:c8:c8:db:4b:93:f2:0d:7e:5a:33:e7:24:4d:
f9:70:f0:7c:e4:c7:39:00:87:0e:0c:5b:d4:a0:b6:18:6e:f8:
86:ac:0b:a4:e6:c0:4d:bd:48:c0:34:dc:f6:b9:c9:24:46:3c:
ec:f3:b7:56:d9:21:66:18:88:1a:01:04:e1:1a:7b:8c:ea:16:
7a:66:1b:e3:24:c5:8e:7a:2f:34:9a:f4:a7:8d:b3:6b:7f:dd:
b2:72:ed:d6:58:e7:9f:dc:15:75:46:45:1c:12:a9:e1:74:b7:
75:0d:ac:0e:5f:14:53:2c:26:49:ec:8b:cf:a9:4a:85:39:cd:
97:16:25:ed:4d:ef:7c:e7:d1:a3:05:74:b5:03:46:42:6d:32:
3f:be:31:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqtpp5+la39I+1q0sHG+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmMzMGYzNDQ5M2M0NTJhMTczZTRkZTBjNDYyYzgzYTcx
MWMzMzgwHhcNMjUxMTA0MDcwMDMzWhcNMjUxMTA1MDcwMDMzWjAzMTEwLwYDVQQD
EygwZGU3MmFkYTBmNGVhNGEzZmY4N2RhOWMzOTVmOGVlNTAzYmJmNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSSw5JLvaVAH+WIQnnF82dzSlVZu
WxtZ9U9lMZwwcId1/yZdbke4RZDiAuFc3V1ljQe4Cp7zf7oo1J/Ueg07LaDFWhQb
80E/elUnfvavmQthPozK+z5bA3SIEILYYzKhuDT1drwctyLO58v1Ji7Ms/CDPSWv
0Ef6tZM1pUxj1+ngBKs8A0kWqsH9/XzbmIGPg8E+KlpyOnXFiD5leur46UgAOf4Z
9xkqt2pytz29HgKwYJzxg68urU44b0A4taOA0NJ4fJxkBS6E0qCpi81ly4ao44tP
5BNgSAfKG3V82XQzweIglGtDxW+ZOPtmPg8YtqLsF+mC8YF4e8W22hpOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3nKtoPTqSj/4fanDlfjuUDu/bQMB8GA1UdIwQY
MBaAFM8sMPNEk8RSoXPk3gxGLIOnEcM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAt
NWE5MjJhNjJjNTcxLzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAtNWE5MjJhNjJjNTcx
LzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7P8r6u6
D32CTsJoOhp7tBgvklBPbi+OUsavPVHRbmaKM7BqprrGsXIlIsycJ+s1eaXzI7JU
w/E6JGVrtKMW9UrUIIsSFPv6Nz2xtaG6n8bR3IXily5KLxyqZzGtKCEasa5vkYdu
FwTRB6JCWxhNV9/IyNtLk/INfloz5yRN+XDwfOTHOQCHDgxb1KC2GG74hqwLpObA
Tb1IwDTc9rnJJEY87PO3VtkhZhiIGgEE4Rp7jOoWemYb4yTFjnovNJr0p42za3/d
snLt1ljnn9wVdUZFHBKp4XS3dQ2sDl8UUywmSeyLz6lKhTnNlxYl7U3vfOfRowV0
tQNGQm0yP74xMg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:16 2025 by rpki-client