Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: 8nH9G/GPamfe4HlM3ZBhf1LERtjOvM8zWpq/531ycqY=
Subject key identifier: 40:E6:76:71:60:8D:B2:5A:40:D2:30:FF:92:C3:4E:3F:89:8B:F5:DA
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019A4DE17F498AE5A5366D7DFE07F71EB73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0720
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: fu5/dUJEh82svhT+pDHAPkye+u64dHZns1C9OA9ARcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7f:49:8a:e5:a5:36:6d:7d:fe:07:f7:1e:b7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=40e67671608db25a40d230ff92c34e3f898bf5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:82:aa:e1:bb:96:f1:1c:04:84:be:d3:35:
e2:18:32:9f:ce:95:49:06:5a:a8:a7:97:6e:ae:2b:
53:40:65:4e:b1:f8:80:43:96:55:fe:4c:d2:a6:81:
ee:ac:af:4a:e1:89:07:12:52:7e:cc:75:59:85:b8:
34:51:9e:a5:94:c5:6c:f5:bd:9e:ac:f6:24:5e:59:
08:38:37:9e:0c:95:5e:91:5d:36:17:8f:61:85:d6:
39:b0:40:03:1c:11:65:60:8a:fd:31:2a:2d:dd:be:
85:93:e6:36:73:d6:27:9e:75:aa:c9:a9:eb:2b:10:
b5:65:5b:34:5c:94:3b:74:8c:66:41:66:bf:95:fa:
5e:a8:01:e3:24:49:fd:64:15:85:1f:2f:6f:bc:7e:
7d:f2:4e:95:d7:db:0a:52:ef:e7:d7:9a:09:10:e8:
33:cd:98:8d:f6:9d:33:1d:d8:7b:c9:4f:56:ab:55:
90:e6:fe:27:60:0a:96:b2:39:7f:91:d4:b5:15:c1:
06:66:fd:77:f6:e7:80:07:7d:20:a7:35:d4:9e:8d:
c5:01:6a:b0:27:bd:b7:e4:ec:89:5e:a2:4b:68:6f:
e6:30:27:8a:55:8e:ee:25:0e:28:11:e3:a1:04:3f:
fe:bf:af:6f:c9:28:23:ee:87:4c:d8:ac:a7:d9:8e:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:76:71:60:8D:B2:5A:40:D2:30:FF:92:C3:4E:3F:89:8B:F5:DA
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7e:cb:14:8e:68:9f:b7:92:03:fe:5a:31:14:00:f8:b2:2b:
0b:e9:d3:7b:3c:7c:e6:00:df:ca:b7:d4:e9:77:4c:03:73:27:
30:b5:ee:90:a1:67:87:d4:5d:5c:70:59:05:00:9e:a7:38:ac:
30:85:a2:72:90:fe:7f:bb:2a:86:13:ed:db:54:a2:7e:fa:ac:
1f:5a:ac:96:61:c3:03:9b:7c:41:60:7d:c2:b1:ba:b4:57:7c:
ba:8a:74:09:dc:9a:28:42:15:a1:4a:2e:16:c6:c4:0e:73:02:
1d:52:e3:1d:26:68:fe:43:da:65:75:ca:5a:8c:64:99:93:7e:
73:56:02:c4:7a:b7:0a:40:6f:d8:52:1e:b9:e2:51:c3:28:69:
5d:c3:64:7d:89:ca:b0:a6:e3:54:19:12:fa:4e:a0:47:97:a6:
63:44:0f:c7:b8:5d:01:9f:9a:c4:50:47:97:d7:53:f2:6e:03:
22:06:d5:5d:e2:e5:ef:cb:a9:27:5a:f5:6b:11:9e:a4:df:63:
b8:82:3b:65:e7:97:ad:88:39:ec:0b:2b:96:f7:09:98:83:6e:
3f:9e:3b:6d:71:17:9e:12:e1:17:cc:0c:e9:4c:f2:a9:58:83:
6d:7a:c8:86:94:ab:cf:ba:9b:f7:ed:d1:cb:17:44:86:9a:8d:
d1:fa:ea:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4X9JiuWlNm19/gf3Hrc+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjUxMTA0MDgwMDE1WhcNMjUxMTA1MDgwMDE1WjAzMTEwLwYDVQQD
Eyg0MGU2NzY3MTYwOGRiMjVhNDBkMjMwZmY5MmMzNGUzZjg5OGJmNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DqCquG7lvEcBIS+0zXiGDKfzpVJ
Blqop5duritTQGVOsfiAQ5ZV/kzSpoHurK9K4YkHElJ+zHVZhbg0UZ6llMVs9b2e
rPYkXlkIODeeDJVekV02F49hhdY5sEADHBFlYIr9MSot3b6Fk+Y2c9YnnnWqyanr
KxC1ZVs0XJQ7dIxmQWa/lfpeqAHjJEn9ZBWFHy9vvH598k6V19sKUu/n15oJEOgz
zZiN9p0zHdh7yU9Wq1WQ5v4nYAqWsjl/kdS1FcEGZv139ueAB30gpzXUno3FAWqw
J7235OyJXqJLaG/mMCeKVY7uJQ4oEeOhBD/+v69vySgj7odM2Kyn2Y59NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDmdnFgjbJaQNIw/5LDTj+Ji/XaMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPH7LFI5o
n7eSA/5aMRQA+LIrC+nTezx85gDfyrfU6XdMA3MnMLXukKFnh9RdXHBZBQCepzis
MIWicpD+f7sqhhPt21SifvqsH1qslmHDA5t8QWB9wrG6tFd8uop0CdyaKEIVoUou
FsbEDnMCHVLjHSZo/kPaZXXKWoxkmZN+c1YCxHq3CkBv2FIeueJRwyhpXcNkfYnK
sKbjVBkS+k6gR5emY0QPx7hdAZ+axFBHl9dT8m4DIgbVXeLl78upJ1r1axGepN9j
uII7ZeeXrYg57AsrlvcJmINuP547bXEXnhLhF8wM6UzyqViDbXrIhpSrz7qb9+3R
yxdEhpqN0frqPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:08 2025 by rpki-client