Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: vLdyXp+7bHt6I6/nf4mPHhfIBQ25s6nTGVrOTIO4PbM=
Subject key identifier: 07:9B:77:89:02:71:2C:30:31:71:E9:EA:8F:1B:20:9F:B2:D8:6C:D6
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 019A4D06E7C8E6A69B40C12B92040D309016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 125A
Signing time: Tue 04 Nov 2025 04:01:29 +0000
Manifest this update: Tue 04 Nov 2025 04:01:29 +0000
Manifest next update: Wed 05 Nov 2025 04:01:29 +0000
Files and hashes: 1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
3: KWVhi7fgtJ1IxHgG78p9PD3RdJ0.roa (hash: KDb4m2ieiCCUnfzXPEKnNf6EnbdlGwtT0gW5l38r8FU=)
4: y-irRafrFET7ueEFRfDBe0Y0btc.roa (hash: vwA7uPcYphRiy+M8uy7NrhUZ1Q14uz25pMwIRfApgPI=)
5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: t5DnJAPZXYsB8rILUpEeJJTHDC4lrcb5aHo50T1aQu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:e7:c8:e6:a6:9b:40:c1:2b:92:04:0d:30:90:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Nov 4 04:01:29 2025 GMT
Not After : Nov 5 04:01:29 2025 GMT
Subject: CN=079b778902712c303171e9ea8f1b209fb2d86cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:1a:c1:e7:ad:7a:68:02:c2:22:bb:d9:9e:
f5:86:48:65:cc:1c:b5:2e:16:d9:c4:3f:9f:cb:02:
23:c6:63:2c:f9:ef:0e:3c:0f:2d:70:ef:c7:6d:fe:
9d:a5:c1:67:77:18:e5:b1:96:ea:fd:fb:e5:0f:2d:
31:17:1e:fa:fd:46:33:1d:04:6e:24:7f:9c:f6:d9:
64:36:ce:69:14:69:d0:d1:ff:31:37:0f:86:75:b8:
70:97:d1:33:89:68:9c:67:73:41:a9:fe:8b:60:3d:
81:c7:7a:21:3f:fc:9a:d1:68:7d:09:2e:d8:c3:c0:
ca:4b:6b:e1:f4:1e:b3:cd:2a:8f:91:32:fc:89:64:
42:7a:20:a4:eb:82:6c:9b:95:01:f9:d9:23:3f:2e:
6e:45:2d:bf:50:f4:e1:50:87:0f:7c:e0:c5:e5:0a:
98:1d:15:dc:05:7c:09:f5:02:01:7c:cc:bd:22:2e:
0e:32:3a:ce:ac:d2:7a:20:04:95:5f:8f:f8:95:bc:
67:55:4e:a9:be:77:88:25:b7:11:b7:12:96:8c:84:
c5:87:c9:bf:21:4d:fb:b6:1f:68:16:96:47:26:e4:
c1:8b:1d:26:a1:e1:6e:95:ea:8a:7f:75:ac:03:59:
99:ea:b9:e4:3e:c7:40:a3:e5:43:47:4a:04:9f:4b:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9B:77:89:02:71:2C:30:31:71:E9:EA:8F:1B:20:9F:B2:D8:6C:D6
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:66:22:48:77:79:d6:63:fd:2d:17:13:02:5a:71:9e:83:
bc:80:bb:5a:0c:42:83:90:d0:ab:a6:6e:fb:da:b8:3c:05:a3:
e5:ea:8d:89:31:a9:a7:3c:17:d0:9d:76:3f:ac:b8:44:e2:03:
b0:f1:31:7c:f8:59:f7:56:5e:8d:42:0d:96:70:4e:9c:7e:68:
87:d2:84:88:22:09:4e:82:a0:73:65:7a:df:0a:7a:59:73:0b:
6d:5b:8e:3f:10:8b:ae:cb:f6:4b:f4:8f:88:0e:4c:0b:4c:ff:
a1:ab:9a:11:d1:b8:16:b3:0e:07:c6:8f:2b:55:7a:ba:98:e9:
7e:f8:7e:40:1e:6e:93:da:22:06:19:ab:93:d9:8a:64:22:af:
10:e9:49:2d:0a:e1:a6:a1:45:a2:6f:d8:4d:ae:5e:d6:03:2c:
fa:d8:5d:f4:ce:0d:9f:82:50:62:06:46:de:90:b3:11:9b:f7:
c9:14:6c:2e:fe:b6:c2:79:7e:bb:d6:d4:85:a5:a8:2d:30:98:
9c:d7:2e:97:76:11:a6:23:20:0d:a6:d4:30:ce:5e:a7:f0:a5:
4a:5d:4d:ad:a4:7d:6d:c2:ac:0c:4c:22:e0:43:e4:cc:bb:72:
e4:95:c6:25:64:1b:9b:f4:e8:55:65:a0:e2:4a:b1:a8:7e:2a:
ed:01:20:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBufI5qabQMErkgQNMJAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTU4ZjE4MWZiNTA3YTBhMmE4MjE4NTZiOGJlMGQ1NGIx
MThiODUwHhcNMjUxMTA0MDQwMTI5WhcNMjUxMTA1MDQwMTI5WjAzMTEwLwYDVQQD
EygwNzliNzc4OTAyNzEyYzMwMzE3MWU5ZWE4ZjFiMjA5ZmIyZDg2Y2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCAaweetemgCwiK72Z71hkhlzBy1
LhbZxD+fywIjxmMs+e8OPA8tcO/Hbf6dpcFndxjlsZbq/fvlDy0xFx76/UYzHQRu
JH+c9tlkNs5pFGnQ0f8xNw+Gdbhwl9EziWicZ3NBqf6LYD2Bx3ohP/ya0Wh9CS7Y
w8DKS2vh9B6zzSqPkTL8iWRCeiCk64Jsm5UB+dkjPy5uRS2/UPThUIcPfODF5QqY
HRXcBXwJ9QIBfMy9Ii4OMjrOrNJ6IASVX4/4lbxnVU6pvneIJbcRtxKWjITFh8m/
IU37th9oFpZHJuTBix0moeFuleqKf3WsA1mZ6rnkPsdAo+VDR0oEn0vEdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAebd4kCcSwwMXHp6o8bIJ+y2GzWMB8GA1UdIwQY
MBaAFM6VjxgftQegoqghhWuL4NVLEYuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUt
MGRiYjNiOGRiMTVmLzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zZDliZmEtY2ZkMC00NGE4LTg0MmUtMGRiYjNiOGRiMTVm
LzEvenBXUEdCLTFCNkNpcUNHRmE0dmcxVXNSaTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDlmIkh3
edZj/S0XEwJacZ6DvIC7WgxCg5DQq6Zu+9q4PAWj5eqNiTGppzwX0J12P6y4ROID
sPExfPhZ91ZejUINlnBOnH5oh9KEiCIJToKgc2V63wp6WXMLbVuOPxCLrsv2S/SP
iA5MC0z/oauaEdG4FrMOB8aPK1V6upjpfvh+QB5uk9oiBhmrk9mKZCKvEOlJLQrh
pqFFom/YTa5e1gMs+thd9M4Nn4JQYgZG3pCzEZv3yRRsLv62wnl+u9bUhaWoLTCY
nNcul3YRpiMgDabUMM5ep/ClSl1NraR9bcKsDEwi4EPkzLty5JXGJWQbm/ToVWWg
4kqxqH4q7QEgMA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:58 2025 by rpki-client