Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: qgi81LneSRVhdsugAPdSjtwNY2YDlXKKdNaM/Zpy/3Q=
Subject key identifier: B9:73:D2:AB:68:A8:FE:07:F5:02:4C:F2:5E:DE:CA:31:36:A0:86:CC
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 019A4EF54DEAB7F04C931C8DA461BDCEB363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 13:01:30 +0000
Manifest this update: Tue 04 Nov 2025 13:01:30 +0000
Manifest next update: Wed 05 Nov 2025 13:01:30 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: to7yqKj/lYR1quyd4/lTJ6sIn8ekyOdsTTQJ08y4C+E=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4d:ea:b7:f0:4c:93:1c:8d:a4:61:bd:ce:b3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Nov 4 13:01:30 2025 GMT
Not After : Nov 5 13:01:30 2025 GMT
Subject: CN=b973d2ab68a8fe07f5024cf25edeca3136a086cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bd:c0:01:9b:1b:2b:36:3c:e7:92:17:fe:f6:
3a:fe:cc:b0:72:b9:27:b8:22:62:8f:fb:ad:42:a5:
c4:85:79:ec:f9:77:5e:2b:1b:92:07:4f:40:95:8c:
26:16:c3:65:c9:d5:d0:74:40:17:b7:7a:76:68:15:
7c:2b:a3:35:b4:08:86:99:e6:f6:66:12:11:28:3f:
59:3d:97:d9:c5:d4:e6:cf:df:21:bc:59:7a:ed:1b:
78:a2:09:39:81:1b:90:84:3e:54:3d:0b:8e:2d:11:
c0:9a:b3:7d:18:29:0c:b6:f1:2d:12:a1:ba:66:49:
8d:cf:60:b1:f0:45:83:ad:48:be:42:48:f7:30:b0:
95:dc:76:34:bf:36:0d:d2:b2:4f:e3:89:9a:ee:f6:
e0:4b:2a:18:e8:24:1b:a2:9e:3c:2d:00:bd:92:94:
31:ff:f9:53:24:37:71:56:08:4b:cf:99:cd:d8:61:
a9:bb:e6:68:a4:77:f0:57:74:dc:55:5c:e0:7c:dd:
82:91:b8:c2:64:41:5e:9c:33:3d:f1:36:43:d5:cd:
3f:44:90:67:e5:ed:7b:4a:f6:52:f6:08:92:92:d4:
f9:3d:fd:f5:ab:52:0c:1f:cf:e5:18:0f:20:9c:67:
3e:33:ea:cb:b6:0d:70:8e:73:b2:50:b5:59:19:30:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:D2:AB:68:A8:FE:07:F5:02:4C:F2:5E:DE:CA:31:36:A0:86:CC
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9d:85:f2:62:28:61:31:b9:c7:ea:01:2b:20:68:83:68:48:
21:d2:63:82:ba:d0:5f:ad:47:5b:b5:34:c8:55:e1:80:9d:fe:
9a:20:6c:79:80:ca:99:1a:4f:ea:a5:95:83:51:d3:f2:d2:29:
a0:fd:f9:52:37:ac:65:d0:13:09:0e:ac:dd:0a:47:9a:63:c4:
0e:a6:e6:04:57:82:e8:37:dd:2a:d8:2f:5b:12:01:8c:a1:17:
26:61:92:9f:05:a8:60:c7:cd:30:b9:d3:ad:99:b5:66:29:91:
50:9f:c3:40:18:66:7a:ec:35:56:88:82:d8:d5:d9:28:9f:a9:
cf:63:30:ee:58:96:2c:a4:02:f9:fa:09:73:a4:d1:a3:e1:74:
ab:c3:d1:76:a3:2e:ec:ca:61:d3:de:c6:a3:2a:8d:f1:45:96:
fb:a5:61:a9:49:2f:56:c4:e1:e3:0f:7f:3a:ea:fb:7a:0c:3b:
34:66:68:3a:d8:92:e2:d0:83:7c:55:ac:2d:db:70:03:f1:32:
57:4b:4c:2a:b6:a2:3a:e2:dd:2e:33:ec:ad:16:29:c0:67:b5:
76:d4:2a:ad:0f:64:0f:10:d4:72:12:27:cf:ac:6d:44:e3:b8:
36:a0:80:3e:42:c2:f2:a1:10:a3:5a:00:f8:05:50:34:44:a9:
51:24:aa:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9U3qt/BMkxyNpGG9zrNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy
ZjhmN2IwHhcNMjUxMTA0MTMwMTMwWhcNMjUxMTA1MTMwMTMwWjAzMTEwLwYDVQQD
EyhiOTczZDJhYjY4YThmZTA3ZjUwMjRjZjI1ZWRlY2EzMTM2YTA4NmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b3AAZsbKzY855IX/vY6/sywcrkn
uCJij/utQqXEhXns+XdeKxuSB09AlYwmFsNlydXQdEAXt3p2aBV8K6M1tAiGmeb2
ZhIRKD9ZPZfZxdTmz98hvFl67Rt4ogk5gRuQhD5UPQuOLRHAmrN9GCkMtvEtEqG6
ZkmNz2Cx8EWDrUi+Qkj3MLCV3HY0vzYN0rJP44ma7vbgSyoY6CQbop48LQC9kpQx
//lTJDdxVghLz5nN2GGpu+ZopHfwV3TcVVzgfN2CkbjCZEFenDM98TZD1c0/RJBn
5e17SvZS9giSktT5Pf31q1IMH8/lGA8gnGc+M+rLtg1wjnOyULVZGTDRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlz0qtoqP4H9QJM8l7eyjE2oIbMMB8GA1UdIwQY
MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt
ZjNmN2JkMzFhMGZlLzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl
LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ2F8mIo
YTG5x+oBKyBog2hIIdJjgrrQX61HW7U0yFXhgJ3+miBseYDKmRpP6qWVg1HT8tIp
oP35UjesZdATCQ6s3QpHmmPEDqbmBFeC6DfdKtgvWxIBjKEXJmGSnwWoYMfNMLnT
rZm1ZimRUJ/DQBhmeuw1VoiC2NXZKJ+pz2Mw7liWLKQC+foJc6TRo+F0q8PRdqMu
7Mph097GoyqN8UWW+6VhqUkvVsTh4w9/Our7egw7NGZoOtiS4tCDfFWsLdtwA/Ey
V0tMKraiOuLdLjPsrRYpwGe1dtQqrQ9kDxDUchInz6xtROO4NqCAPkLC8qEQo1oA
+AVQNESpUSSqwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:50 2025 by rpki-client