Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: O3AQQUlcA/CFehr6ubFXc5++vFC69owzmPiVTz+dNeY=
Subject key identifier: 71:89:8A:99:1B:32:E6:78:3A:20:1C:89:6B:5A:A2:44:B6:D9:6B:17
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 019A71B81E5EE9AE8CD31313B8E146DD238B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 091C
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: BnlJClylPxQ5Hjplu2s1EdIjJZNwn8C9zm2dwR2XgEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1e:5e:e9:ae:8c:d3:13:13:b8:e1:46:dd:23:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=71898a991b32e6783a201c896b5aa244b6d96b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:7d:5d:4c:0b:cf:bb:ab:df:9f:0a:74:63:
42:81:6d:ac:93:3b:4a:c8:a8:79:07:01:fe:b5:44:
cf:c4:b8:87:0d:d2:16:7f:bf:f2:01:48:25:2c:dc:
ce:ae:ac:15:4d:af:21:f1:26:03:7f:ae:15:33:08:
9c:19:ad:11:6d:82:a6:98:6b:99:96:09:fd:fb:3c:
0b:6e:d1:4e:55:52:65:ef:5b:e1:d0:eb:45:90:df:
27:66:b6:50:e7:a5:53:90:ce:0a:0d:3a:af:34:4b:
f9:52:9b:e5:fe:2d:cb:50:5e:a5:8f:20:22:35:17:
a9:db:59:d4:07:e3:d5:6a:94:b5:09:2a:19:1e:63:
cf:66:79:6c:ef:fa:3d:15:d5:2a:1b:d9:74:9e:d8:
55:7f:14:8d:ec:fa:f3:f8:52:fc:24:95:52:f4:22:
ce:84:7c:2e:de:eb:36:b8:65:35:64:1b:ce:b2:f4:
30:e4:c2:9f:0d:8e:74:fc:14:40:9b:6f:15:66:9e:
20:30:91:4e:75:d3:35:f9:ba:5a:b4:a8:60:81:3f:
d7:3d:8c:45:03:96:f0:e4:d2:21:64:8a:3a:35:1d:
df:fb:ec:d7:3f:08:84:b1:57:be:d5:9e:58:f7:eb:
d0:06:a9:09:7f:b0:22:05:b8:05:77:01:c5:45:f2:
4a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:8A:99:1B:32:E6:78:3A:20:1C:89:6B:5A:A2:44:B6:D9:6B:17
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bd:97:16:f4:15:39:46:78:47:ee:7b:14:40:6c:cd:e0:c6:
8d:13:63:4f:6a:13:8b:05:db:91:b9:20:e5:c0:60:03:53:13:
59:e4:4b:c5:c7:a1:67:34:87:4e:ec:dd:50:56:aa:3b:97:0d:
62:ff:bb:1b:a5:db:64:e1:5a:e5:fe:70:8c:7a:f6:40:32:55:
81:06:18:66:f5:ec:4d:42:92:41:65:80:dd:3e:04:18:06:61:
31:bd:b6:3d:16:c5:80:ba:54:a2:fe:c7:1f:0a:15:81:61:95:
23:37:9b:27:a5:05:e6:95:b3:13:42:d4:0a:0d:b0:34:b4:d6:
1b:8e:8f:57:0a:6b:08:c1:94:99:03:ac:55:9c:ba:52:b6:6c:
7c:8e:91:46:48:de:b8:79:52:d9:2f:1a:4f:1f:ab:0b:f4:51:
83:98:d2:34:51:32:6a:c1:f1:cc:f0:a4:40:b8:6d:f3:4e:1d:
e7:2a:2c:7e:bc:11:fa:1e:e6:c1:1d:13:d5:0d:b4:a0:9c:8c:
f1:56:da:ba:08:c5:3c:70:25:7d:f6:06:64:1e:10:bd:86:62:
c1:f9:37:61:49:d8:5b:4e:4c:ff:92:83:01:8e:69:57:86:bb:
99:d9:d3:65:6f:2b:6b:e7:c2:af:01:ff:2d:b8:2e:33:ff:73:
08:32:4f:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuB5e6a6M0xMTuOFG3SOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTRjMzFlMTVkZjRiN2E2MGU1ZDQwZGYzYWFjMTg1MmU4
ZGE3NGIwHhcNMjUxMTExMDcwMTIzWhcNMjUxMTEyMDcwMTIzWjAzMTEwLwYDVQQD
Eyg3MTg5OGE5OTFiMzJlNjc4M2EyMDFjODk2YjVhYTI0NGI2ZDk2YjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgV9XUwLz7ur358KdGNCgW2skztK
yKh5BwH+tUTPxLiHDdIWf7/yAUglLNzOrqwVTa8h8SYDf64VMwicGa0RbYKmmGuZ
lgn9+zwLbtFOVVJl71vh0OtFkN8nZrZQ56VTkM4KDTqvNEv5Upvl/i3LUF6ljyAi
NRep21nUB+PVapS1CSoZHmPPZnls7/o9FdUqG9l0nthVfxSN7Prz+FL8JJVS9CLO
hHwu3us2uGU1ZBvOsvQw5MKfDY50/BRAm28VZp4gMJFOddM1+bpatKhggT/XPYxF
A5bw5NIhZIo6NR3f++zXPwiEsVe+1Z5Y9+vQBqkJf7AiBbgFdwHFRfJKpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGJipkbMuZ4OiAciWtaokS22WsXMB8GA1UdIwQY
MBaAFM6Uwx4V30t6YOXUDfOqwYUujadLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEt
MDhmMjI2M2E0MTNjLzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEtMDhmMjI2M2E0MTNj
LzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL72XFvQV
OUZ4R+57FEBszeDGjRNjT2oTiwXbkbkg5cBgA1MTWeRLxcehZzSHTuzdUFaqO5cN
Yv+7G6XbZOFa5f5wjHr2QDJVgQYYZvXsTUKSQWWA3T4EGAZhMb22PRbFgLpUov7H
HwoVgWGVIzebJ6UF5pWzE0LUCg2wNLTWG46PVwprCMGUmQOsVZy6UrZsfI6RRkje
uHlS2S8aTx+rC/RRg5jSNFEyasHxzPCkQLht804d5yosfrwR+h7mwR0T1Q20oJyM
8VbaugjFPHAlffYGZB4QvYZiwfk3YUnYW05M/5KDAY5pV4a7mdnTZW8ra+fCrwH/
LbguM/9zCDJPhw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:07 2025 by rpki-client