Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
File: cZhnMZJb6FUaUwka_m0Jct-jgH4.mft (raw, json)
Hash identifier: cZ7xKbORAgDaVB2IKNKF9eamhF6hyLEZi1ybw8RKtRc=
Subject key identifier: FA:F2:46:7D:B9:DE:79:50:C2:68:85:15:6A:99:C1:C2:EF:27:E0:AF
Authority key identifier: 71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
Certificate issuer: /CN=71986731925be8551a53091afe6d0972dfa3807e
Certificate serial: 019A725CA82F1ECF057C70187B3083AE52C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
Manifest number: 07E2
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: cZhnMZJb6FUaUwka_m0Jct-jgH4.crl (hash: cnyMAn7o9nsP0wD0C6aV8j0ifyC105I6zj1OzaPZ+Q0=)
2: izKyNN07Ux3U5xT_e0LwmSxlm3g.roa (hash: 5sHxaNHhFHbIzK2JB6pJOwwX7f4oOth8b9V4EgOV6Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a8:2f:1e:cf:05:7c:70:18:7b:30:83:ae:52:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71986731925be8551a53091afe6d0972dfa3807e
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=faf2467db9de7950c26885156a99c1c2ef27e0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:5c:b8:35:9c:ea:3a:14:ae:cf:57:c1:d7:
a7:91:8a:a4:be:b0:e0:0d:54:fe:7e:56:52:a3:0f:
5c:6b:05:58:d2:66:7d:ce:74:73:44:0c:64:d6:fc:
c4:c7:d3:80:a4:fe:76:f1:6c:7a:fa:04:cf:42:b1:
c5:3f:ac:f8:49:77:86:9b:17:ac:76:14:6c:b6:ea:
7b:c6:0e:ca:01:4c:a3:fa:fc:35:ea:50:b8:90:96:
9e:cb:36:50:e7:5d:02:b3:90:36:2f:2b:8c:d1:25:
05:3d:34:d0:42:b4:37:39:94:08:d6:73:42:08:30:
70:a8:38:b9:80:15:c4:49:05:57:05:cb:a9:e7:90:
a7:9f:d9:df:bb:1d:33:a5:67:37:b5:7e:6c:77:1d:
9d:23:fa:75:6d:eb:6d:90:33:1b:82:ba:63:22:df:
63:6a:f8:58:63:ae:30:5c:ad:52:79:93:14:75:26:
55:4b:c9:98:a6:4d:41:d2:bb:68:70:6b:74:9c:3c:
50:05:1b:c0:e5:77:20:5d:ce:3e:f3:18:41:e0:53:
e6:ff:6f:ee:c0:b5:f4:1b:07:52:c4:63:e3:61:76:
41:10:82:75:4f:87:20:4b:ac:de:31:2d:33:06:f9:
06:6a:a3:14:1e:22:08:e7:35:ef:f1:db:f2:df:79:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:46:7D:B9:DE:79:50:C2:68:85:15:6A:99:C1:C2:EF:27:E0:AF
X509v3 Authority Key Identifier:
keyid:71:98:67:31:92:5B:E8:55:1A:53:09:1A:FE:6D:09:72:DF:A3:80:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZhnMZJb6FUaUwka_m0Jct-jgH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9a10c3-212f-4c5e-97bb-e0d576a5450e/1/cZhnMZJb6FUaUwka_m0Jct-jgH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:29:35:51:59:0c:ff:8b:e7:ea:70:07:93:5f:95:98:d4:22:
ba:f2:07:fb:5d:bc:8e:93:70:cf:6d:1f:2d:68:21:2f:f1:96:
af:67:52:d4:4e:f6:de:7e:48:2e:c7:53:a4:34:ee:66:b6:e4:
9a:63:96:19:e2:d7:19:7c:8f:b4:e6:62:e1:17:30:cf:86:f9:
db:2c:0e:b6:80:36:06:48:36:ef:7d:87:ae:1f:7f:b5:b9:41:
b4:d9:1a:70:28:9b:f0:a8:2a:03:4a:bb:86:5f:d3:3e:9b:ec:
c9:1d:f4:32:29:7f:8c:f0:51:80:9a:f4:6c:de:5e:d6:2f:b5:
61:b7:58:40:38:3f:c8:17:0e:9f:c5:11:42:2b:55:dd:17:d0:
d7:fd:01:d7:c7:1e:cb:bc:ef:9b:c4:f9:35:a9:6f:e0:e2:cc:
bc:8f:76:b0:58:b3:7b:e3:b6:b8:b4:ab:36:84:7b:c7:bb:26:
00:11:74:c0:14:ce:75:59:a2:3c:8d:12:94:ad:d7:18:e6:ec:
78:a0:45:d6:d6:70:63:f0:29:f9:43:cf:80:65:a8:49:13:c6:
95:e6:92:82:05:f6:ea:80:fe:03:6e:b4:0f:19:e8:5d:07:ad:
b8:75:f5:0f:d4:10:7e:bc:b0:6a:65:fe:9b:41:53:8d:2c:06:
0e:4b:11:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXKgvHs8FfHAYezCDrlLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTg2NzMxOTI1YmU4NTUxYTUzMDkxYWZlNmQwOTcyZGZh
MzgwN2UwHhcNMjUxMTExMTAwMTA2WhcNMjUxMTEyMTAwMTA2WjAzMTEwLwYDVQQD
EyhmYWYyNDY3ZGI5ZGU3OTUwYzI2ODg1MTU2YTk5YzFjMmVmMjdlMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUVcuDWc6joUrs9XwdenkYqkvrDg
DVT+flZSow9cawVY0mZ9znRzRAxk1vzEx9OApP528Wx6+gTPQrHFP6z4SXeGmxes
dhRstup7xg7KAUyj+vw16lC4kJaeyzZQ510Cs5A2LyuM0SUFPTTQQrQ3OZQI1nNC
CDBwqDi5gBXESQVXBcup55Cnn9nfux0zpWc3tX5sdx2dI/p1bettkDMbgrpjIt9j
avhYY64wXK1SeZMUdSZVS8mYpk1B0rtocGt0nDxQBRvA5XcgXc4+8xhB4FPm/2/u
wLX0GwdSxGPjYXZBEIJ1T4cgS6zeMS0zBvkGaqMUHiII5zXv8dvy33lHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPryRn253nlQwmiFFWqZwcLvJ+CvMB8GA1UdIwQY
MBaAFHGYZzGSW+hVGlMJGv5tCXLfo4B+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmIt
ZTBkNTc2YTU0NTBlLzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YTEwYzMtMjEyZi00YzVlLTk3YmItZTBkNTc2YTU0NTBl
LzEvY1pobk1aSmI2RlVhVXdrYV9tMEpjdC1qZ0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjyk1UVkM
/4vn6nAHk1+VmNQiuvIH+128jpNwz20fLWghL/GWr2dS1E723n5ILsdTpDTuZrbk
mmOWGeLXGXyPtOZi4Rcwz4b52ywOtoA2Bkg2732Hrh9/tblBtNkacCib8KgqA0q7
hl/TPpvsyR30Mil/jPBRgJr0bN5e1i+1YbdYQDg/yBcOn8URQitV3RfQ1/0B18ce
y7zvm8T5Nalv4OLMvI92sFize+O2uLSrNoR7x7smABF0wBTOdVmiPI0SlK3XGObs
eKBF1tZwY/Ap+UPPgGWoSRPGleaSggX26oD+A260DxnoXQetuHX1D9QQfrywamX+
m0FTjSwGDksRfg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:22 2025 by rpki-client