Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: g90wxcl4JCMC/cEbjpdR5kawUumGciZDJ4inbURpagc=
Subject key identifier: 7F:4B:D6:71:DE:8F:B8:93:29:8C:C1:C7:36:88:E3:BD:36:9E:4A:39
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 019A210951B56A2166E0F688B731C9056878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0B09
Signing time: Sun 26 Oct 2025 15:00:50 +0000
Manifest this update: Sun 26 Oct 2025 15:00:50 +0000
Manifest next update: Mon 27 Oct 2025 15:00:50 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: KnbUd5nAcObJx-mFANUZ-3dv9ZE.roa (hash: J1B+8yhPspHeU/Bm8kDFuArgnyqhlnkM76APcA7nLcw=)
3: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: riYBdlnipJ+3J/qnD0kDLRdoKzzmumcu+aJa1oN89xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:51:b5:6a:21:66:e0:f6:88:b7:31:c9:05:68:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Oct 26 15:00:50 2025 GMT
Not After : Oct 27 15:00:50 2025 GMT
Subject: CN=7f4bd671de8fb893298cc1c73688e3bd369e4a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:e4:64:0b:f0:91:11:70:11:29:47:5c:df:
92:bc:d6:d2:58:cc:92:45:a0:5f:ac:b8:0b:27:66:
21:52:56:6b:c0:bc:a9:e0:7e:be:82:89:7f:2e:99:
d2:48:20:45:0b:18:df:38:8c:99:1b:54:a4:b2:6e:
5b:fc:0e:32:e5:48:4a:23:a5:82:3f:73:55:0e:98:
f5:bc:e6:be:14:69:64:a7:f5:ae:fb:80:0f:0e:28:
27:f2:f0:e7:c4:4d:50:8e:e7:62:14:48:30:63:c7:
a7:a0:b0:91:0e:00:72:e0:8e:fc:d2:6e:df:47:de:
9a:e1:86:07:30:14:43:00:ed:81:d1:29:58:ed:8c:
0b:db:a6:98:52:09:9c:34:96:c2:ad:21:68:f1:5e:
5b:ae:c5:bb:da:44:8f:a9:2d:19:79:5c:4e:2d:4e:
e7:79:d1:35:a2:a1:ef:65:67:60:90:c9:f0:76:48:
50:ed:12:e7:1d:31:d2:0f:55:f9:52:18:86:4f:db:
74:96:21:ac:75:74:26:e6:6d:e2:da:38:ed:f9:30:
bb:e1:37:f6:20:a7:ca:da:17:86:b3:a6:c2:ee:dc:
c6:a4:62:ee:bb:7f:fb:2c:94:47:63:18:77:0d:9f:
a8:11:2f:ba:a3:3d:9b:b6:c0:ab:fe:6e:3d:f4:79:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4B:D6:71:DE:8F:B8:93:29:8C:C1:C7:36:88:E3:BD:36:9E:4A:39
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:55:0f:1c:2a:be:fe:e9:26:df:5e:2e:74:a6:1c:2b:81:08:
66:7f:0d:15:41:29:4e:0b:97:e7:38:a0:67:b3:00:30:e4:09:
29:ee:f9:5b:13:58:9f:fb:1d:83:c6:de:1f:18:aa:3d:ed:0e:
0f:bb:53:d6:b8:d9:0c:11:9a:0b:6f:46:c7:ed:e4:de:d4:1a:
a2:3d:c7:a7:0e:ff:61:80:1b:2f:08:4f:08:2c:52:20:ac:d7:
13:08:52:56:a6:20:7b:a5:1b:34:7d:6f:95:89:e5:b5:43:be:
36:84:29:66:bd:69:2f:b7:c9:cc:2b:45:b2:8b:0b:05:d2:81:
11:10:a9:c0:f4:13:c8:50:de:8a:73:5d:ab:00:3a:7d:64:8b:
b5:82:90:44:5d:d3:a0:0e:94:7d:20:07:ec:9b:14:0c:b5:72:
6e:c2:95:e1:02:37:a1:26:1b:17:e1:05:49:91:04:1f:6e:29:
a1:3a:d8:d1:0d:b3:ab:33:dc:a6:dd:5a:7d:37:ae:5f:e4:84:
c8:b8:e7:af:0e:3d:fb:09:89:69:de:2d:53:a7:46:68:ea:35:
d8:ea:8e:b3:4b:ed:d6:a9:85:1f:c3:60:33:c4:f2:85:c2:4d:
bc:b6:13:7b:ad:01:2b:3b:cd:5c:ee:27:57:11:ec:08:de:a9:
b5:63:4f:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohCVG1aiFm4PaItzHJBWh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk
MjEzMDUwHhcNMjUxMDI2MTUwMDUwWhcNMjUxMDI3MTUwMDUwWjAzMTEwLwYDVQQD
Eyg3ZjRiZDY3MWRlOGZiODkzMjk4Y2MxYzczNjg4ZTNiZDM2OWU0YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvDkZAvwkRFwESlHXN+SvNbSWMyS
RaBfrLgLJ2YhUlZrwLyp4H6+gol/LpnSSCBFCxjfOIyZG1Sksm5b/A4y5UhKI6WC
P3NVDpj1vOa+FGlkp/Wu+4APDign8vDnxE1QjudiFEgwY8enoLCRDgBy4I780m7f
R96a4YYHMBRDAO2B0SlY7YwL26aYUgmcNJbCrSFo8V5brsW72kSPqS0ZeVxOLU7n
edE1oqHvZWdgkMnwdkhQ7RLnHTHSD1X5UhiGT9t0liGsdXQm5m3i2jjt+TC74Tf2
IKfK2heGs6bC7tzGpGLuu3/7LJRHYxh3DZ+oES+6oz2btsCr/m499Hn/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9L1nHej7iTKYzBxzaI4702nko5MB8GA1UdIwQY
MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt
MWQwMjBlY2UwN2VhLzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh
LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVUPHCq+
/ukm314udKYcK4EIZn8NFUEpTguX5zigZ7MAMOQJKe75WxNYn/sdg8beHxiqPe0O
D7tT1rjZDBGaC29Gx+3k3tQaoj3Hpw7/YYAbLwhPCCxSIKzXEwhSVqYge6UbNH1v
lYnltUO+NoQpZr1pL7fJzCtFsosLBdKBERCpwPQTyFDeinNdqwA6fWSLtYKQRF3T
oA6UfSAH7JsUDLVybsKV4QI3oSYbF+EFSZEEH24poTrY0Q2zqzPcpt1afTeuX+SE
yLjnrw49+wmJad4tU6dGaOo12OqOs0vt1qmFH8NgM8TyhcJNvLYTe60BKzvNXO4n
VxHsCN6ptWNPTA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 00:24:14 2025 by rpki-client