Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: HeCIEQEY6U59hdafrUolv+CtV9c8rnOTZg33YLEdZW8=
Subject key identifier: DE:CE:1B:10:ED:6F:D1:6A:2A:D9:FE:57:75:7B:21:20:41:0D:0E:59
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 019A4DE1BB3AF03E1E7FAEC522E53F89AA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 052E
Signing time: Tue 04 Nov 2025 08:00:30 +0000
Manifest this update: Tue 04 Nov 2025 08:00:30 +0000
Manifest next update: Wed 05 Nov 2025 08:00:30 +0000
Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: FeZ8Icu7kcHwsFfvAgW2TyGJtEk3rFGJK+I1LHZ/Rvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:bb:3a:f0:3e:1e:7f:ae:c5:22:e5:3f:89:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Nov 4 08:00:30 2025 GMT
Not After : Nov 5 08:00:30 2025 GMT
Subject: CN=dece1b10ed6fd16a2ad9fe57757b2120410d0e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:5a:f6:6d:de:1d:b6:08:f9:d3:67:94:d7:
a9:ec:d2:33:0d:0a:0b:7b:7c:ef:78:54:30:91:e8:
f3:31:5b:2f:f4:2e:07:35:75:7d:bc:70:19:88:e7:
50:0d:5d:f5:c0:ca:df:0f:15:52:7a:03:96:17:21:
47:d4:0b:75:11:b4:8d:a2:7f:21:f2:38:ba:1b:4a:
ff:dc:1f:94:4c:38:b3:3a:ec:a9:65:a2:ee:e5:75:
c9:49:77:35:c0:f7:15:70:5d:32:1b:b3:cf:bb:ad:
01:34:31:43:f8:cc:db:41:8c:6a:22:49:4f:6f:f5:
01:38:45:d2:55:b3:8a:e9:e1:82:ca:49:b3:71:5d:
4b:47:5b:10:0b:42:7e:0a:d3:6c:05:97:73:56:8a:
23:e6:21:e3:5a:3c:a4:cf:87:32:32:01:68:df:ec:
22:35:1a:54:19:a4:e8:46:14:61:c2:79:4d:da:8a:
5b:13:8f:58:84:ac:7e:9e:9d:61:6c:68:b8:f2:1a:
b5:a3:13:42:0e:86:e3:5c:ef:16:97:aa:c4:72:66:
72:58:2d:7b:1f:c0:67:f4:24:98:0a:c7:30:5d:cf:
79:82:19:54:0a:df:be:8a:e8:a2:84:df:ab:a9:8d:
bb:b2:73:f5:cc:b3:83:99:76:e9:b1:f4:0e:26:30:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CE:1B:10:ED:6F:D1:6A:2A:D9:FE:57:75:7B:21:20:41:0D:0E:59
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:04:62:97:cb:c6:d8:6e:95:c7:7e:a2:29:33:68:16:52:
c7:6c:9a:32:af:14:56:86:99:9e:16:9b:24:cb:b6:68:fd:41:
63:d3:dd:9e:f1:98:83:68:c2:41:31:ff:2e:37:45:fd:ce:e8:
d3:bf:31:f3:fa:b4:86:ad:8a:22:0d:c9:05:60:cd:68:f0:33:
c2:de:e1:8b:56:92:4d:b7:be:77:c2:b6:30:34:ef:94:ad:2f:
90:68:fd:5b:8f:03:cc:1d:2f:92:db:bb:eb:56:ec:b9:7a:36:
d1:aa:00:3b:ae:32:a1:80:20:01:39:15:bf:22:a2:c1:f7:72:
db:53:f3:3a:0e:9b:fa:9a:56:79:92:be:9b:48:e6:a2:0f:cb:
a2:e1:13:33:7c:97:39:15:bc:ec:c8:a8:d2:5b:2a:75:eb:63:
e6:7e:54:8d:e6:35:19:ba:92:9a:b4:6b:95:72:a0:ef:2c:bb:
3e:32:e2:3f:84:44:28:c1:7b:26:76:5e:37:50:94:06:68:ab:
31:97:e1:4a:0a:54:b7:ca:2f:7b:f3:cb:22:9b:c0:22:89:05:
61:d1:1f:12:b9:b6:bc:c1:6c:5d:a3:1b:86:69:2e:a9:e4:33:
33:a3:ff:43:cd:a8:5e:18:8e:5c:63:38:a9:07:e9:dd:92:04:
bb:03:42:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4bs68D4ef67FIuU/iapHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk
ZTE4YzAwHhcNMjUxMTA0MDgwMDMwWhcNMjUxMTA1MDgwMDMwWjAzMTEwLwYDVQQD
EyhkZWNlMWIxMGVkNmZkMTZhMmFkOWZlNTc3NTdiMjEyMDQxMGQwZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyJa9m3eHbYI+dNnlNep7NIzDQoL
e3zveFQwkejzMVsv9C4HNXV9vHAZiOdQDV31wMrfDxVSegOWFyFH1At1EbSNon8h
8ji6G0r/3B+UTDizOuypZaLu5XXJSXc1wPcVcF0yG7PPu60BNDFD+MzbQYxqIklP
b/UBOEXSVbOK6eGCykmzcV1LR1sQC0J+CtNsBZdzVooj5iHjWjykz4cyMgFo3+wi
NRpUGaToRhRhwnlN2opbE49YhKx+np1hbGi48hq1oxNCDobjXO8Wl6rEcmZyWC17
H8Bn9CSYCscwXc95ghlUCt++iuiihN+rqY27snP1zLODmXbpsfQOJjDNywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7OGxDtb9FqKtn+V3V7ISBBDQ5ZMB8GA1UdIwQY
MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt
NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2
LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwoEYpfL
xthulcd+oikzaBZSx2yaMq8UVoaZnhabJMu2aP1BY9PdnvGYg2jCQTH/LjdF/c7o
078x8/q0hq2KIg3JBWDNaPAzwt7hi1aSTbe+d8K2MDTvlK0vkGj9W48DzB0vktu7
61bsuXo20aoAO64yoYAgATkVvyKiwfdy21PzOg6b+ppWeZK+m0jmog/LouETM3yX
ORW87Mio0lsqdetj5n5UjeY1GbqSmrRrlXKg7yy7PjLiP4REKMF7JnZeN1CUBmir
MZfhSgpUt8ove/PLIpvAIokFYdEfErm2vMFsXaMbhmkuqeQzM6P/Q82oXhiOXGM4
qQfp3ZIEuwNCsw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:32 2025 by rpki-client