Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
File: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft (raw, json)
Hash identifier: X3ea33YEwmGdLktmfg75prOF5SKRYIjMqZ2nkgCAZJE=
Subject key identifier: 1F:2E:89:A0:4F:B4:3C:08:D1:BB:E8:F9:53:BE:9C:0E:0F:A8:16:29
Authority key identifier: 67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
Certificate issuer: /CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Certificate serial: 019A52D2098A5856827FA9F8EE5761629BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:01:27 +0000
Manifest this update: Wed 05 Nov 2025 07:01:27 +0000
Manifest next update: Thu 06 Nov 2025 07:01:27 +0000
Files and hashes: 1: ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl (hash: 6rXXuN+Kuju25pSXKcBsiIu4XcQzyq5YCwHc8X8Mk8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:09:8a:58:56:82:7f:a9:f8:ee:57:61:62:9b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6703cfcc88c25d3e876b532cf11301225eca1b0c
Validity
Not Before: Nov 5 07:01:27 2025 GMT
Not After : Nov 6 07:01:27 2025 GMT
Subject: CN=1f2e89a04fb43c08d1bbe8f953be9c0e0fa81629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:8f:81:8f:99:72:a4:7b:82:c2:a7:67:b5:
27:95:71:14:04:8e:55:d9:77:8a:62:c5:35:ef:e8:
1f:df:12:0f:4a:a7:3d:86:1e:f0:20:93:29:44:75:
20:a2:9d:1f:0f:88:e5:59:ff:d3:ac:87:05:80:1c:
60:7c:58:36:e7:aa:73:c4:a7:46:d5:9b:53:9b:fe:
b0:a3:ca:74:91:b0:f5:18:64:11:3e:6b:68:45:c3:
e3:3c:ed:a2:a6:6e:41:c6:f1:14:4e:6e:1d:58:9b:
9f:3c:00:0f:b9:7a:f6:5e:cc:83:0f:48:4b:ff:51:
a7:45:9f:71:14:e2:2c:8a:c1:ca:6f:ca:28:a8:ac:
5d:14:a2:b4:a8:6c:13:69:70:d0:cc:27:e2:f6:73:
ed:41:d6:37:43:21:48:a2:2b:04:ea:ef:28:8c:21:
34:5d:b1:fc:ed:0a:d9:cd:ec:d7:75:a7:3a:27:9f:
39:0e:ef:8e:ce:f6:d7:a0:31:26:33:fc:f7:13:0d:
9b:1b:39:cd:c8:04:77:10:3c:6a:e2:8e:81:03:75:
bc:6d:d5:cf:b0:60:9e:90:ba:ce:f3:f5:7b:95:5d:
6c:02:8f:e5:0d:af:f1:c2:09:ad:73:8d:2c:f9:8b:
60:e9:30:36:0d:70:98:a4:1e:68:d2:5c:0a:02:d4:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:89:A0:4F:B4:3C:08:D1:BB:E8:F9:53:BE:9C:0E:0F:A8:16:29
X509v3 Authority Key Identifier:
keyid:67:03:CF:CC:88:C2:5D:3E:87:6B:53:2C:F1:13:01:22:5E:CA:1B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5f0e0d-4d90-40c8-a0b8-2a9c56f6328b/1/ZwPPzIjCXT6Ha1Ms8RMBIl7KGww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8c:f1:6e:ad:5f:b8:55:c4:a8:de:c2:48:8c:17:7f:f2:45:
fa:b6:cb:14:51:ac:fe:41:cc:f2:dd:76:ce:d2:c7:71:06:5f:
41:ed:bc:d5:e8:d8:61:54:b5:97:ae:63:d5:e1:ee:4f:fb:f0:
6c:36:98:d5:67:42:2e:12:9b:53:f0:ec:0a:2c:16:40:fb:95:
c5:c3:c7:63:82:48:23:47:dc:9a:5b:4b:49:e2:c3:00:05:64:
48:5a:97:c3:42:9d:57:62:e9:61:a3:b5:16:ed:8a:aa:03:d8:
56:6b:a9:bf:65:83:3b:28:5d:b4:8f:40:7a:26:2a:68:68:82:
1b:ce:ab:46:97:0a:5d:f1:61:c9:2a:be:9b:e4:94:a2:7e:ff:
78:40:b5:c2:84:21:c5:b8:2c:e4:16:cf:6d:0c:4d:57:44:41:
cb:cb:83:6a:db:26:5c:27:2f:0e:2b:43:31:2a:98:14:8c:01:
c3:10:1a:67:fb:08:b0:66:8e:b0:85:39:2b:96:77:5f:e1:69:
ac:19:73:02:d7:b6:f9:c4:30:a5:3f:7e:07:be:c3:24:85:63:
8b:0d:81:30:30:c3:45:73:63:70:84:2d:e5:13:c6:39:76:56:
2e:93:4d:c4:91:0d:e2:1e:89:d5:ec:f6:60:bf:52:36:e8:32:
4b:f1:c4:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0gmKWFaCf6n47ldhYpujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MDNjZmNjODhjMjVkM2U4NzZiNTMyY2YxMTMwMTIyNWVj
YTFiMGMwHhcNMjUxMTA1MDcwMTI3WhcNMjUxMTA2MDcwMTI3WjAzMTEwLwYDVQQD
EygxZjJlODlhMDRmYjQzYzA4ZDFiYmU4Zjk1M2JlOWMwZTBmYTgxNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zCPgY+ZcqR7gsKnZ7UnlXEUBI5V
2XeKYsU17+gf3xIPSqc9hh7wIJMpRHUgop0fD4jlWf/TrIcFgBxgfFg256pzxKdG
1ZtTm/6wo8p0kbD1GGQRPmtoRcPjPO2ipm5BxvEUTm4dWJufPAAPuXr2XsyDD0hL
/1GnRZ9xFOIsisHKb8ooqKxdFKK0qGwTaXDQzCfi9nPtQdY3QyFIoisE6u8ojCE0
XbH87QrZzezXdac6J585Du+OzvbXoDEmM/z3Ew2bGznNyAR3EDxq4o6BA3W8bdXP
sGCekLrO8/V7lV1sAo/lDa/xwgmtc40s+Ytg6TA2DXCYpB5o0lwKAtTn4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8uiaBPtDwI0bvo+VO+nA4PqBYpMB8GA1UdIwQY
MBaAFGcDz8yIwl0+h2tTLPETASJeyhsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgt
MmE5YzU2ZjYzMjhiLzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81ZjBlMGQtNGQ5MC00MGM4LWEwYjgtMmE5YzU2ZjYzMjhi
LzEvWndQUHpJakNYVDZIYTFNczhSTUJJbDdLR3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYzxbq1f
uFXEqN7CSIwXf/JF+rbLFFGs/kHM8t12ztLHcQZfQe281ejYYVS1l65j1eHuT/vw
bDaY1WdCLhKbU/DsCiwWQPuVxcPHY4JII0fcmltLSeLDAAVkSFqXw0KdV2LpYaO1
Fu2KqgPYVmupv2WDOyhdtI9AeiYqaGiCG86rRpcKXfFhySq+m+SUon7/eEC1woQh
xbgs5BbPbQxNV0RBy8uDatsmXCcvDitDMSqYFIwBwxAaZ/sIsGaOsIU5K5Z3X+Fp
rBlzAte2+cQwpT9+B77DJIVjiw2BMDDDRXNjcIQt5RPGOXZWLpNNxJEN4h6J1ez2
YL9SNugyS/HEoA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:38 2025 by rpki-client