Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
File: ZUdEPmINY8jk9UpnF4R00fkJr2g.mft (raw, json)
Hash identifier: i0T/G//UsM8e/sH4/vCL3j0n7nZzwwjnzrwRYJId7Ig=
Subject key identifier: 62:28:A6:FF:97:6F:D7:F3:62:2B:D0:98:67:56:C9:39:81:1E:2A:05
Authority key identifier: 65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
Certificate issuer: /CN=6547443e620d63c8e4f54a67178474d1f909af68
Certificate serial: 019A71EE632CAB9B6F75B757B7AE6C2D35F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
Manifest number: 079F
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: ObZz_0AF61xVwJZ1enhy0gnRgCQ.roa (hash: x882U2h8oBPYNUh4TnbQfiF4AFln2XESGCfJHIw0DG8=)
2: ZUdEPmINY8jk9UpnF4R00fkJr2g.crl (hash: WIShPvpQilgNTipgBdH5P/6xUFNl2Apcn0tasm6nwjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:63:2c:ab:9b:6f:75:b7:57:b7:ae:6c:2d:35:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6547443e620d63c8e4f54a67178474d1f909af68
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=6228a6ff976fd7f3622bd0986756c939811e2a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:b3:70:7a:95:4f:d2:29:a7:12:98:4f:12:
70:6d:83:ac:40:71:2c:46:b8:70:2e:d8:32:dd:67:
57:ef:2c:b4:fd:84:9b:24:6c:a1:b0:41:4f:da:0c:
a2:16:eb:a5:45:d4:f1:5a:f5:48:62:71:88:5a:e7:
dc:86:d2:cf:3c:1d:40:fc:67:21:12:b3:d8:48:de:
01:52:29:6f:36:c9:ed:b7:f6:7d:13:7f:c6:51:8e:
e1:f4:b8:5e:16:2d:ee:ff:01:9d:52:17:9a:3b:0b:
f8:d0:9f:9b:83:03:8f:b9:0e:4a:ba:4e:ec:10:a0:
6c:c5:27:82:3b:f8:e4:9c:18:0b:89:ba:78:da:24:
84:07:05:29:d1:cc:50:fe:bb:29:10:26:ee:2e:8f:
42:de:9c:73:3e:ef:d7:ea:f4:48:7f:40:de:6c:08:
b7:b8:5e:4f:09:ad:c4:64:48:a6:0d:7c:5c:ec:8c:
79:d7:be:6e:f8:4a:80:88:a5:cc:25:b1:6d:c6:e8:
6d:38:69:c3:db:71:2f:02:ae:49:b3:56:f1:2b:9e:
d1:cf:cb:40:15:8b:f7:3b:2e:53:8e:34:e6:66:c5:
3c:c2:f2:28:b5:cc:44:2c:da:8a:0f:50:b2:0b:28:
af:57:f8:3a:5c:f6:c4:46:49:ed:88:45:f0:0b:b1:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:28:A6:FF:97:6F:D7:F3:62:2B:D0:98:67:56:C9:39:81:1E:2A:05
X509v3 Authority Key Identifier:
keyid:65:47:44:3E:62:0D:63:C8:E4:F5:4A:67:17:84:74:D1:F9:09:AF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUdEPmINY8jk9UpnF4R00fkJr2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e5ea19-0b7b-431f-91bf-abcc905d9ffe/1/ZUdEPmINY8jk9UpnF4R00fkJr2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:de:66:39:f3:2f:a5:86:4c:81:bd:e5:3c:e9:82:ac:c0:49:
b4:60:80:37:0f:70:81:28:3c:c2:0d:1a:58:75:f7:c0:78:94:
f3:ca:3e:7e:61:ba:0b:b4:a9:5d:2d:31:ec:d3:8b:ab:71:a3:
0b:0b:c1:24:dc:d5:29:44:9c:72:43:be:88:37:6b:b9:07:66:
f2:df:9c:86:a9:3a:d9:32:df:3b:01:0d:d4:b3:0b:d4:8e:ed:
d4:d4:02:eb:42:f7:a1:35:5a:1f:79:f4:1f:67:17:89:75:10:
07:71:1a:db:fa:d2:4d:7e:12:bb:3f:32:3a:0b:c3:5b:ec:bf:
a9:45:d2:b8:50:f3:ac:fc:dc:1e:99:ee:2e:7c:c1:24:f5:23:
d2:c2:9a:89:87:40:73:91:66:6e:11:ad:39:c1:69:f0:fb:d2:
6d:2c:78:4f:8e:ee:aa:6b:60:49:70:09:dd:54:ab:13:ae:17:
94:6f:5c:3a:7a:36:63:9f:c9:26:fa:a5:85:79:97:91:fd:b8:
79:48:9b:2e:a5:ea:ab:93:4e:1f:ba:c3:b8:af:17:eb:31:04:
bd:f3:5e:56:7a:42:3f:ed:a8:9e:bc:0d:d6:1b:0a:22:32:97:
f7:07:82:d3:5d:58:05:0a:80:22:9e:d7:39:03:c2:54:d1:5e:
5e:89:37:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7mMsq5tvdbdXt65sLTX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NDc0NDNlNjIwZDYzYzhlNGY1NGE2NzE3ODQ3NGQxZjkw
OWFmNjgwHhcNMjUxMTExMDgwMDM5WhcNMjUxMTEyMDgwMDM5WjAzMTEwLwYDVQQD
Eyg2MjI4YTZmZjk3NmZkN2YzNjIyYmQwOTg2NzU2YzkzOTgxMWUyYTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZmzcHqVT9IppxKYTxJwbYOsQHEs
RrhwLtgy3WdX7yy0/YSbJGyhsEFP2gyiFuulRdTxWvVIYnGIWufchtLPPB1A/Gch
ErPYSN4BUilvNsntt/Z9E3/GUY7h9LheFi3u/wGdUheaOwv40J+bgwOPuQ5Kuk7s
EKBsxSeCO/jknBgLibp42iSEBwUp0cxQ/rspECbuLo9C3pxzPu/X6vRIf0DebAi3
uF5PCa3EZEimDXxc7Ix5175u+EqAiKXMJbFtxuhtOGnD23EvAq5Js1bxK57Rz8tA
FYv3Oy5TjjTmZsU8wvIotcxELNqKD1CyCyivV/g6XPbERkntiEXwC7GjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIopv+Xb9fzYivQmGdWyTmBHioFMB8GA1UdIwQY
MBaAFGVHRD5iDWPI5PVKZxeEdNH5Ca9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYt
YWJjYzkwNWQ5ZmZlLzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lNWVhMTktMGI3Yi00MzFmLTkxYmYtYWJjYzkwNWQ5ZmZl
LzEvWlVkRVBtSU5ZOGprOVVwbkY0UjAwZmtKcjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX95mOfMv
pYZMgb3lPOmCrMBJtGCANw9wgSg8wg0aWHX3wHiU88o+fmG6C7SpXS0x7NOLq3Gj
CwvBJNzVKUScckO+iDdruQdm8t+chqk62TLfOwEN1LML1I7t1NQC60L3oTVaH3n0
H2cXiXUQB3Ea2/rSTX4Suz8yOgvDW+y/qUXSuFDzrPzcHpnuLnzBJPUj0sKaiYdA
c5FmbhGtOcFp8PvSbSx4T47uqmtgSXAJ3VSrE64XlG9cOno2Y5/JJvqlhXmXkf24
eUibLqXqq5NOH7rDuK8X6zEEvfNeVnpCP+2onrwN1hsKIjKX9weC011YBQqAIp7X
OQPCVNFeXok3Ow==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:08:34 2025 by rpki-client