Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File: 0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier: bPgxfVn/zX13amx0GT/SmZ6kvfUOWX6tvDlaayuBNTI=
Subject key identifier: 4A:B0:4E:9C:C2:CE:59:79:32:12:74:CE:47:4C:E2:D2:65:63:FC:0B
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer: /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial: 019A5074EEAE24512DB83E30A5F929AF8347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number: 1250
Signing time: Tue 04 Nov 2025 20:00:31 +0000
Manifest this update: Tue 04 Nov 2025 20:00:31 +0000
Manifest next update: Wed 05 Nov 2025 20:00:31 +0000
Files and hashes: 1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: 9SJ1bqu68Ah50xCo/w4QQQMiD8Ru7MZCNt51TVL2NZs=)
2: dP48VWalcUAAFfcn9eWWeMKf0-w.roa (hash: 1XMmQlTq3rn/vph5sokkv8eSVZlOdVkw7fiia74kGx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:ee:ae:24:51:2d:b8:3e:30:a5:f9:29:af:83:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Validity
Not Before: Nov 4 20:00:31 2025 GMT
Not After : Nov 5 20:00:31 2025 GMT
Subject: CN=4ab04e9cc2ce5979321274ce474ce2d26563fc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:fd:d8:76:20:20:49:ab:38:7b:86:a6:e3:23:
fe:5b:a7:cb:c6:7f:cc:b1:25:f8:98:43:31:20:cf:
77:11:c0:85:07:fd:09:ae:6e:aa:14:32:7b:d2:6e:
89:f0:5d:be:b2:0f:5f:b1:2d:82:71:2e:18:0b:09:
40:a2:39:84:37:cd:5d:96:09:a8:6b:cb:b8:7f:09:
3f:95:b4:74:13:eb:41:b3:56:17:63:23:3a:21:8f:
c4:50:54:5d:93:9b:2d:71:bf:bc:e1:12:78:38:e5:
a5:de:ee:6f:10:16:c4:d2:dd:e9:46:ed:90:04:1c:
fe:54:5a:16:b2:56:85:e4:b4:5b:a4:81:80:e2:c6:
4c:60:1f:c4:19:5b:3a:af:01:bc:3b:13:5d:27:75:
f6:ee:ae:fd:1b:d2:bb:50:a5:aa:50:b6:29:da:03:
34:ac:ee:76:00:45:4b:32:e0:30:a0:03:7d:db:92:
c7:b5:f8:17:07:8a:e2:4c:a0:41:fb:2a:70:84:17:
71:e4:34:3e:bf:37:b6:24:0c:6d:23:d6:78:f0:60:
1f:a0:1a:e1:9a:19:41:34:36:b7:c0:62:82:bb:d5:
67:60:8c:92:03:af:d2:70:e5:d6:82:6b:f1:20:15:
47:f2:90:f3:2b:5e:12:40:0a:f1:f8:f5:6b:a6:cd:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B0:4E:9C:C2:CE:59:79:32:12:74:CE:47:4C:E2:D2:65:63:FC:0B
X509v3 Authority Key Identifier:
keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6c:0c:f8:3f:e8:c4:26:76:b7:e5:35:e0:6a:f3:f2:cd:8b:
b6:76:9b:3b:39:da:38:84:79:69:91:13:64:b6:41:a6:e8:66:
aa:02:03:7d:a0:fa:9c:14:a1:70:ae:6a:07:7b:a4:4d:4c:ee:
20:20:f2:65:31:b6:1b:43:fd:0e:ce:a4:45:ac:db:ec:e5:7e:
1b:53:9f:5e:e7:81:2f:ef:95:f4:5e:78:be:43:eb:c7:57:b8:
5b:fb:6c:85:15:b1:1d:8f:8f:69:4d:95:a9:0c:02:48:f5:11:
36:b8:18:e5:92:5d:65:66:4a:e7:c4:e4:3b:1e:a8:f9:c1:b0:
07:82:97:c5:9a:a9:f9:7f:35:6e:a6:53:51:49:12:08:eb:a5:
9c:6c:c8:c1:c3:f7:9e:ab:f5:b6:3b:3d:7e:f6:df:cc:9e:9c:
37:13:2e:da:68:5d:27:1b:52:a1:6c:91:56:0b:f3:48:ad:f2:
71:ef:2e:8d:9a:49:3b:00:a7:b1:22:2f:d1:e7:2c:33:c8:14:
e1:06:35:4c:dd:93:47:25:03:2b:8d:14:10:fc:52:a4:10:23:
5b:ad:e2:af:34:64:0a:10:2d:05:01:ee:ef:1f:94:2c:cf:58:
be:47:ed:94:1b:f4:df:a5:1b:f6:8d:58:f7:0c:26:79:c9:e6:
62:ed:56:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdO6uJFEtuD4wpfkpr4NHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjUxMTA0MjAwMDMxWhcNMjUxMTA1MjAwMDMxWjAzMTEwLwYDVQQD
Eyg0YWIwNGU5Y2MyY2U1OTc5MzIxMjc0Y2U0NzRjZTJkMjY1NjNmYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P3YdiAgSas4e4am4yP+W6fLxn/M
sSX4mEMxIM93EcCFB/0Jrm6qFDJ70m6J8F2+sg9fsS2CcS4YCwlAojmEN81dlgmo
a8u4fwk/lbR0E+tBs1YXYyM6IY/EUFRdk5stcb+84RJ4OOWl3u5vEBbE0t3pRu2Q
BBz+VFoWslaF5LRbpIGA4sZMYB/EGVs6rwG8OxNdJ3X27q79G9K7UKWqULYp2gM0
rO52AEVLMuAwoAN925LHtfgXB4riTKBB+ypwhBdx5DQ+vze2JAxtI9Z48GAfoBrh
mhlBNDa3wGKCu9VnYIySA6/ScOXWgmvxIBVH8pDzK14SQArx+PVrps2DXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqwTpzCzll5MhJ0zkdM4tJlY/wLMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2wM+D/o
xCZ2t+U14Grz8s2LtnabOznaOIR5aZETZLZBpuhmqgIDfaD6nBShcK5qB3ukTUzu
ICDyZTG2G0P9Ds6kRazb7OV+G1OfXueBL++V9F54vkPrx1e4W/tshRWxHY+PaU2V
qQwCSPURNrgY5ZJdZWZK58TkOx6o+cGwB4KXxZqp+X81bqZTUUkSCOulnGzIwcP3
nqv1tjs9fvbfzJ6cNxMu2mhdJxtSoWyRVgvzSK3yce8ujZpJOwCnsSIv0ecsM8gU
4QY1TN2TRyUDK40UEPxSpBAjW63irzRkChAtBQHu7x+ULM9YvkftlBv036Ub9o1Y
9wwmecnmYu1W4A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:01:48 2025 by rpki-client