Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: TGwylss4T/lYQ4TdbRmniMq0SxE8hsywntBJXry4tc4=
Subject key identifier: 05:D6:50:B5:B4:EB:0E:39:D9:9B:ED:E0:1C:CE:0B:6A:CF:CE:3F:0C
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 019A733867FEC89CB24BA06503F9C924B2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0F23
Signing time: Tue 11 Nov 2025 14:01:07 +0000
Manifest this update: Tue 11 Nov 2025 14:01:07 +0000
Manifest next update: Wed 12 Nov 2025 14:01:07 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: aktSTB5upxg6Jrh3lQFtNzCfQ5D5ghR5m3BK4QT1OsM=)
2: wkjfrbnsCzTaC-aAcjv50o1HMDE.roa (hash: dQtuR5zZvWV7UZVnWgEUEkCk6dSEncyOV819xoZiAcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:67:fe:c8:9c:b2:4b:a0:65:03:f9:c9:24:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Nov 11 14:01:07 2025 GMT
Not After : Nov 12 14:01:07 2025 GMT
Subject: CN=05d650b5b4eb0e39d99bede01cce0b6acfce3f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:ea:90:af:17:17:c7:ca:3e:6a:8e:66:09:
66:2a:de:ee:67:0e:a2:f5:35:27:3f:aa:ea:b5:69:
4c:18:06:78:a5:79:a8:da:91:e5:20:d5:af:4b:65:
44:81:70:aa:62:d1:38:29:fb:b1:30:da:ac:1f:0b:
c2:24:55:90:99:5c:58:9b:89:ba:88:e4:a0:8f:d1:
04:48:35:76:7a:68:3d:25:be:dd:04:7d:35:cb:d9:
fd:1c:22:36:e1:64:90:78:a4:c8:a5:77:6e:8a:d1:
08:bd:f9:e4:c9:68:c0:f0:cc:47:e5:6d:12:fb:60:
77:87:27:e9:bc:be:3f:17:81:be:83:14:1a:07:9f:
80:76:1f:7f:be:1b:7d:6a:1a:25:88:57:8c:46:90:
52:f8:7e:83:81:36:51:86:db:1f:ec:14:db:24:ab:
9e:ff:09:a4:0b:41:42:4b:48:55:71:b1:35:91:4f:
5b:74:8d:d4:37:83:3b:9d:6a:4b:13:c6:51:f9:95:
ea:f5:ad:26:98:8b:e9:b6:5e:ec:85:43:78:ee:f4:
99:21:3b:0f:41:6e:b2:51:d2:65:ba:c5:a5:04:17:
11:91:1c:5f:ae:fb:fe:20:21:74:60:1f:ad:3f:be:
94:d5:68:8d:9f:29:48:70:32:7e:d6:a7:81:91:5b:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:50:B5:B4:EB:0E:39:D9:9B:ED:E0:1C:CE:0B:6A:CF:CE:3F:0C
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d6:1d:97:36:f3:62:07:e1:c4:1e:30:fa:32:ec:c8:1f:c8:
f9:5e:0d:28:51:4c:55:7f:d0:22:b5:19:f6:ed:9a:12:59:9f:
c3:25:78:cf:36:10:ef:f9:b8:01:54:ec:9c:05:7c:96:a5:b9:
48:f0:04:f3:45:72:b2:bd:01:69:71:81:13:3a:96:47:bd:1c:
3b:7a:f1:a9:e8:e4:39:3b:69:36:bf:2f:0d:41:fe:9f:a1:1e:
d8:c2:02:cb:b2:8b:ac:83:43:40:ec:39:4a:9c:d6:83:e7:37:
40:a6:72:d4:1f:ec:6f:50:e0:64:aa:8d:64:38:14:a4:54:d3:
ee:36:44:dd:9a:e9:be:28:30:0a:c1:c7:99:46:d5:43:73:85:
2a:4e:cc:e0:75:30:04:67:e3:5b:b1:32:48:4b:e2:69:69:37:
ae:47:a7:b8:4f:25:3a:1b:60:0e:60:5d:33:91:d2:ba:1d:3f:
2e:4a:d3:36:3a:dc:e7:1c:f6:d2:60:5a:c0:5c:fd:52:f1:86:
fd:13:fb:79:27:9c:66:5c:5e:08:68:fb:b2:cb:62:4f:49:4e:
77:cf:5f:d5:12:37:df:14:8c:f4:3f:8e:fe:f8:55:47:29:c6:
f5:c0:75:a9:ad:88:15:ce:d2:b7:87:cd:9b:d0:ef:5d:a8:6a:
98:76:6b:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOGf+yJyyS6BlA/nJJLL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YzVmZDFkYzBjNDU3ZDllYzExM2QyM2JkNDkzNWM3MjNl
OWVjZjQwHhcNMjUxMTExMTQwMTA3WhcNMjUxMTEyMTQwMTA3WjAzMTEwLwYDVQQD
EygwNWQ2NTBiNWI0ZWIwZTM5ZDk5YmVkZTAxY2NlMGI2YWNmY2UzZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucnqkK8XF8fKPmqOZglmKt7uZw6i
9TUnP6rqtWlMGAZ4pXmo2pHlINWvS2VEgXCqYtE4KfuxMNqsHwvCJFWQmVxYm4m6
iOSgj9EESDV2emg9Jb7dBH01y9n9HCI24WSQeKTIpXduitEIvfnkyWjA8MxH5W0S
+2B3hyfpvL4/F4G+gxQaB5+Adh9/vht9aholiFeMRpBS+H6DgTZRhtsf7BTbJKue
/wmkC0FCS0hVcbE1kU9bdI3UN4M7nWpLE8ZR+ZXq9a0mmIvptl7shUN47vSZITsP
QW6yUdJlusWlBBcRkRxfrvv+ICF0YB+tP76U1WiNnylIcDJ+1qeBkVtBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXWULW06w452Zvt4BzOC2rPzj8MMB8GA1UdIwQY
MBaAFGTF/R3AxFfZ7BE9I71JNccj6ez0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEt
NGNiMDY3OWFjZTdmLzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hNDY0MGMtZTY5YS00MzM3LWIxYWEtNGNiMDY3OWFjZTdm
LzEvWk1YOUhjREVWOW5zRVQwanZVazF4eVBwN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdYdlzbz
YgfhxB4w+jLsyB/I+V4NKFFMVX/QIrUZ9u2aElmfwyV4zzYQ7/m4AVTsnAV8lqW5
SPAE80Vysr0BaXGBEzqWR70cO3rxqejkOTtpNr8vDUH+n6Ee2MICy7KLrINDQOw5
SpzWg+c3QKZy1B/sb1DgZKqNZDgUpFTT7jZE3ZrpvigwCsHHmUbVQ3OFKk7M4HUw
BGfjW7EySEviaWk3rkenuE8lOhtgDmBdM5HSuh0/LkrTNjrc5xz20mBawFz9UvGG
/RP7eSecZlxeCGj7sstiT0lOd89f1RI33xSM9D+O/vhVRynG9cB1qa2IFc7St4fN
m9DvXahqmHZrMA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:59 2025 by rpki-client