Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: 6CoOBVZw8AHwA8xgnOjvEC6R+cCczwQ22Q8khp7uf7s=
Subject key identifier: F9:4D:36:ED:7C:2F:3C:8E:06:72:6C:11:37:17:D1:FE:1D:72:A0:32
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 019A2C33168657336F5BB30AAAC01CE29E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 1244
Signing time: Tue 28 Oct 2025 19:02:16 +0000
Manifest this update: Tue 28 Oct 2025 19:02:16 +0000
Manifest next update: Wed 29 Oct 2025 19:02:16 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: qxmYUr7eDXSIGGHtL6Qb513KbfVnpzv7KKskOdwSfcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:33:16:86:57:33:6f:5b:b3:0a:aa:c0:1c:e2:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Oct 28 19:02:16 2025 GMT
Not After : Oct 29 19:02:16 2025 GMT
Subject: CN=f94d36ed7c2f3c8e06726c113717d1fe1d72a032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:e4:ff:c0:6d:a5:d3:8e:cf:3d:7a:0e:05:
dc:11:7b:cb:1a:c7:e2:20:a7:bb:02:9e:eb:e7:d9:
39:eb:0a:d0:3d:fe:58:0d:c8:e3:95:5f:49:f4:8a:
7a:f4:ca:0e:7e:95:7c:aa:a6:39:f1:78:7f:54:a9:
0e:b8:9f:c7:bf:7c:79:e6:d3:a5:aa:47:be:7a:07:
02:13:27:7a:b9:1a:3d:1d:7f:c8:d6:5d:94:16:ed:
bf:f3:43:f5:bc:93:c6:1c:fb:3f:b0:b1:08:eb:a3:
14:b6:15:96:51:1f:a8:c2:76:d5:1f:ea:0e:6c:0a:
c4:2f:6a:59:11:c4:f6:67:78:e9:13:ab:aa:25:44:
43:a9:a7:4d:2b:5e:75:15:2a:44:0e:30:73:d6:d8:
8a:7e:7b:13:db:26:a1:56:05:a4:8d:bf:22:46:2c:
3d:c1:9a:94:23:a5:54:c3:e1:5c:1e:43:be:35:07:
ff:1b:65:41:f8:8a:63:41:2b:3b:b3:64:67:61:76:
9a:64:88:88:c7:9d:8c:c9:12:a2:5c:6f:cb:bb:99:
68:a0:39:6f:57:97:28:53:0a:ae:08:23:8f:58:e3:
10:df:1e:44:1a:e9:4e:41:b9:56:80:d6:37:ad:66:
81:2d:ea:4d:54:31:38:7b:36:30:1c:0f:00:21:25:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4D:36:ED:7C:2F:3C:8E:06:72:6C:11:37:17:D1:FE:1D:72:A0:32
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:50:8a:14:b7:c7:45:87:80:94:82:07:63:87:ed:06:8f:70:
9b:60:e5:68:62:7a:27:08:72:92:49:02:04:b9:61:bd:f5:b7:
a0:22:de:e1:bc:e4:9f:cc:45:66:a2:01:67:85:d3:ec:2b:13:
fd:8d:ba:d5:a7:4c:9b:58:c2:45:1a:12:15:b2:90:d5:09:18:
2b:58:0d:b5:68:cf:2b:85:01:a1:96:6a:76:3c:00:5f:35:74:
f0:bf:38:cf:e0:df:96:0b:31:c6:68:00:6b:0f:5a:ef:3a:40:
fd:52:8d:55:20:0b:6b:f3:1e:87:e9:c1:f0:41:91:29:ab:90:
a6:3f:47:20:a5:fc:5a:ea:38:11:48:22:d4:9e:a9:8e:24:4a:
0a:6a:9e:6a:aa:6c:c8:ff:0d:49:cd:5c:aa:e0:cc:8c:a0:44:
59:ee:63:36:85:6b:82:1b:4c:f5:1a:15:77:c2:23:f6:97:7b:
fb:1e:d5:33:b7:42:5a:9c:44:07:c9:d2:08:fb:04:8a:7e:53:
70:d9:84:65:e7:88:96:e8:8e:52:12:ed:06:39:6c:45:5f:38:
29:3f:14:e3:0d:9e:35:b4:a0:fe:c6:6d:60:02:4d:72:62:8b:
ca:b4:b2:69:57:5d:6b:a9:4a:ce:1b:b4:3e:e6:2e:a9:2c:1b:
6d:5d:21:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosMxaGVzNvW7MKqsAc4p5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk
OTFjNmYwHhcNMjUxMDI4MTkwMjE2WhcNMjUxMDI5MTkwMjE2WjAzMTEwLwYDVQQD
EyhmOTRkMzZlZDdjMmYzYzhlMDY3MjZjMTEzNzE3ZDFmZTFkNzJhMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fjk/8BtpdOOzz16DgXcEXvLGsfi
IKe7Ap7r59k56wrQPf5YDcjjlV9J9Ip69MoOfpV8qqY58Xh/VKkOuJ/Hv3x55tOl
qke+egcCEyd6uRo9HX/I1l2UFu2/80P1vJPGHPs/sLEI66MUthWWUR+ownbVH+oO
bArEL2pZEcT2Z3jpE6uqJURDqadNK151FSpEDjBz1tiKfnsT2yahVgWkjb8iRiw9
wZqUI6VUw+FcHkO+NQf/G2VB+IpjQSs7s2RnYXaaZIiIx52MyRKiXG/Lu5looDlv
V5coUwquCCOPWOMQ3x5EGulOQblWgNY3rWaBLepNVDE4ezYwHA8AISXjfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlNNu18LzyOBnJsETcX0f4dcqAyMB8GA1UdIwQY
MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt
ZWY2YmQyNmEwMzA1LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1
LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFCKFLfH
RYeAlIIHY4ftBo9wm2DlaGJ6JwhykkkCBLlhvfW3oCLe4bzkn8xFZqIBZ4XT7CsT
/Y261adMm1jCRRoSFbKQ1QkYK1gNtWjPK4UBoZZqdjwAXzV08L84z+DflgsxxmgA
aw9a7zpA/VKNVSALa/Meh+nB8EGRKauQpj9HIKX8Wuo4EUgi1J6pjiRKCmqeaqps
yP8NSc1cquDMjKBEWe5jNoVrghtM9RoVd8Ij9pd7+x7VM7dCWpxEB8nSCPsEin5T
cNmEZeeIluiOUhLtBjlsRV84KT8U4w2eNbSg/sZtYAJNcmKLyrSyaVdda6lKzhu0
PuYuqSwbbV0hRg==
-----END CERTIFICATE-----
Generated at Wed Oct 29 03:39:48 2025 by rpki-client