Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: GfvrVF/zDlblArDs3SVvG0GXnA2fF31FdvYdWM4d5YI=
Subject key identifier: 00:15:E0:3E:DF:B4:21:CC:11:9D:D5:AE:C3:CA:F7:0C:76:D5:CC:6E
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 019A72CA535C4DB29A99A3062ABCCC111A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 04A8
Signing time: Tue 11 Nov 2025 12:00:53 +0000
Manifest this update: Tue 11 Nov 2025 12:00:53 +0000
Manifest next update: Wed 12 Nov 2025 12:00:53 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: d8ZCB84g5wJrwuP6dHKJNR8LcUelo0/jd51Dml7Rssg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:53:5c:4d:b2:9a:99:a3:06:2a:bc:cc:11:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Nov 11 12:00:53 2025 GMT
Not After : Nov 12 12:00:53 2025 GMT
Subject: CN=0015e03edfb421cc119dd5aec3caf70c76d5cc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:9f:e1:10:3e:73:cd:f0:79:b8:46:8e:4d:
6f:6f:43:26:4d:6c:03:b3:e7:b9:f1:68:3f:66:27:
86:88:65:b1:20:3f:d1:4a:5b:b1:69:10:65:fb:d6:
81:75:ad:bf:ee:49:45:8e:e0:4d:e9:75:a6:8f:32:
c5:61:7a:4a:c0:d8:3e:18:77:53:96:05:d9:11:db:
76:e8:db:67:b3:74:d3:24:26:67:7c:54:dd:ce:c3:
40:11:ff:27:e8:5c:49:24:ea:81:cc:14:a8:e8:81:
89:28:2c:3d:22:7c:fd:28:5e:47:53:44:4e:02:33:
73:e3:28:9e:06:55:26:f7:a3:78:76:86:59:18:53:
9d:51:73:c3:00:6e:62:d6:4b:4a:91:ff:70:d4:9f:
7c:18:98:f8:9d:ff:0b:9e:d4:44:09:3e:cc:bd:a4:
4c:0f:fd:2d:2f:2b:68:7c:7a:e0:21:46:f4:a2:7d:
e8:30:ea:c8:98:7c:e1:5c:dc:57:e4:76:f8:77:e0:
ab:8c:1d:7c:cb:97:98:19:08:7a:5c:a2:7e:31:9a:
a0:cd:13:04:60:55:4e:6d:b5:8c:a5:d7:6b:d4:4b:
53:a7:f8:68:7f:5c:9e:91:51:a8:70:38:25:6e:0a:
17:81:57:e0:49:2f:fb:ce:40:a2:6a:b5:bd:58:00:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:E0:3E:DF:B4:21:CC:11:9D:D5:AE:C3:CA:F7:0C:76:D5:CC:6E
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d1:10:54:dd:48:c8:ca:bb:7d:e9:72:42:6c:e0:6d:b2:57:
8f:df:74:5e:2e:64:f7:5d:3a:28:e0:96:de:53:50:69:4b:27:
11:77:b0:58:23:9c:47:94:52:dd:a7:cc:f3:2f:00:d8:c9:f2:
60:02:0e:4a:ec:aa:ce:4f:fa:d3:a6:83:95:32:00:3d:49:47:
ed:a0:7b:6f:13:2e:39:e6:e7:6b:3f:d5:c3:32:ca:28:2f:e7:
5a:20:5f:ca:ee:ce:cd:38:25:38:61:48:fa:01:3d:99:e7:dc:
1c:1b:05:d8:81:03:c4:9d:6b:99:7f:8d:0e:15:0f:3a:c1:3e:
c8:78:68:38:5f:af:07:5c:b3:38:e3:c9:c1:f1:4d:68:2b:e3:
9f:89:ad:7b:38:c6:c1:11:23:e1:28:42:6a:50:cc:13:86:2d:
5a:60:fc:4c:3b:3f:8a:54:26:fb:af:32:53:05:a4:ba:ff:a0:
9a:95:7c:fc:5d:00:c5:8b:31:0d:9d:16:7a:71:2d:6e:d8:59:
28:03:9b:0e:3c:15:d8:b5:af:7a:a2:3e:6c:ea:f0:1a:25:75:
29:0a:8a:05:ee:0f:53:8a:6b:29:bd:25:25:75:84:f2:e9:49:
53:92:77:f6:6b:f4:97:2f:95:00:e5:82:20:86:2f:71:d1:ff:
73:0c:7c:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylNcTbKamaMGKrzMERovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOWRlMDhiMzA1M2JhYzYxNzEzYzQ2YjQzZDQwOTM4MThj
MjA0NmYwHhcNMjUxMTExMTIwMDUzWhcNMjUxMTEyMTIwMDUzWjAzMTEwLwYDVQQD
EygwMDE1ZTAzZWRmYjQyMWNjMTE5ZGQ1YWVjM2NhZjcwYzc2ZDVjYzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr+f4RA+c83webhGjk1vb0MmTWwD
s+e58Wg/ZieGiGWxID/RSluxaRBl+9aBda2/7klFjuBN6XWmjzLFYXpKwNg+GHdT
lgXZEdt26Ntns3TTJCZnfFTdzsNAEf8n6FxJJOqBzBSo6IGJKCw9Inz9KF5HU0RO
AjNz4yieBlUm96N4doZZGFOdUXPDAG5i1ktKkf9w1J98GJj4nf8LntRECT7MvaRM
D/0tLytofHrgIUb0on3oMOrImHzhXNxX5Hb4d+CrjB18y5eYGQh6XKJ+MZqgzRME
YFVObbWMpddr1EtTp/hof1yekVGocDglbgoXgVfgSS/7zkCiarW9WADiMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAV4D7ftCHMEZ3VrsPK9wx21cxuMB8GA1UdIwQY
MBaAFM2d4IswU7rGFxPEa0PUCTgYwgRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMt
NTAxNmNlOTJmMTIyLzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMtNTAxNmNlOTJmMTIy
LzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtEQVN1I
yMq7felyQmzgbbJXj990Xi5k9106KOCW3lNQaUsnEXewWCOcR5RS3afM8y8A2Mny
YAIOSuyqzk/606aDlTIAPUlH7aB7bxMuOebnaz/VwzLKKC/nWiBfyu7OzTglOGFI
+gE9mefcHBsF2IEDxJ1rmX+NDhUPOsE+yHhoOF+vB1yzOOPJwfFNaCvjn4mtezjG
wREj4ShCalDME4YtWmD8TDs/ilQm+68yUwWkuv+gmpV8/F0AxYsxDZ0WenEtbthZ
KAObDjwV2LWveqI+bOrwGiV1KQqKBe4PU4prKb0lJXWE8ulJU5J39mv0ly+VAOWC
IIYvcdH/cwx8NQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:56 2025 by rpki-client