Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: CVwh/BXW9NLk5+cjcuYH2b7jBj0qGEPZqIv4lXA6nXY=
Subject key identifier: 0F:3B:0C:14:11:44:BD:B2:53:4B:4F:F7:19:CD:E6:05:CA:16:13:3A
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 019A706E1C3F0872D8DE6EC731F9392B97AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 13DE
Signing time: Tue 11 Nov 2025 01:00:55 +0000
Manifest this update: Tue 11 Nov 2025 01:00:55 +0000
Manifest next update: Wed 12 Nov 2025 01:00:55 +0000
Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: R/OR9/dykbhYlCdurP7BvCl3l1v+0QEHrox+TyhWTtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:1c:3f:08:72:d8:de:6e:c7:31:f9:39:2b:97:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: Nov 11 01:00:55 2025 GMT
Not After : Nov 12 01:00:55 2025 GMT
Subject: CN=0f3b0c141144bdb2534b4ff719cde605ca16133a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:cc:b9:2e:f9:99:ed:42:9b:18:9b:7f:f2:
cc:a3:66:fe:9e:71:44:36:c7:ba:0c:ef:28:43:2f:
56:ab:9f:4f:4d:38:d0:6e:50:37:d0:0f:a8:2b:ab:
0f:0c:c6:5d:28:47:9e:38:a6:01:ba:35:3c:a0:73:
56:42:f9:8c:c5:c5:1f:51:e2:17:25:1e:eb:e6:cc:
28:47:f0:35:67:61:e9:b0:68:2f:41:02:a9:aa:92:
7e:06:26:22:25:8d:47:8b:fa:bd:d4:24:55:d6:4f:
5f:ab:20:93:34:20:07:ee:56:68:05:de:65:89:ce:
b7:9e:c4:99:f8:ab:89:9d:b5:c2:c6:48:fe:27:97:
15:15:e3:77:6f:9d:c0:ec:ba:ff:49:e8:80:88:c7:
c9:2f:31:e9:29:80:4a:f1:97:d5:3e:8c:98:79:e5:
1e:60:d2:6f:95:d3:1a:ef:45:ee:56:d6:70:ea:a5:
eb:22:24:f1:c7:b3:ae:85:1a:10:7e:1d:1c:1c:5d:
03:af:c9:44:1e:56:92:1a:62:3e:a1:06:09:7b:9c:
5a:09:9f:2b:d0:a0:82:17:48:2d:47:e4:a8:91:5d:
46:4f:a0:7f:66:c4:72:4d:92:eb:03:42:0b:7c:29:
e1:b2:a7:b5:25:22:a2:90:44:cc:a4:5c:47:ce:72:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:0C:14:11:44:BD:B2:53:4B:4F:F7:19:CD:E6:05:CA:16:13:3A
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ce:42:fd:1c:51:dd:cb:c3:b1:91:98:dc:f6:41:5d:65:72:
37:05:29:3f:f1:69:90:31:2d:fe:85:88:90:e6:75:09:7b:b8:
14:08:61:ea:65:bd:02:02:0e:02:78:9d:c1:46:9b:9d:f6:04:
c2:cc:f9:b7:0b:d7:01:d0:55:64:02:66:e6:51:2f:34:58:45:
c3:1b:d1:f1:e6:fd:5d:66:dd:52:fb:b0:d3:e9:f6:8b:c8:a3:
84:6f:09:a1:5c:e0:e2:70:45:68:c9:7d:1f:f4:d4:5d:c9:3b:
85:d4:74:1b:48:06:85:0c:3b:3d:78:dc:df:21:53:02:c0:a7:
38:9d:77:db:6a:58:71:8b:a0:3a:a3:de:55:dd:2a:42:a7:c9:
22:a3:13:7e:2a:8b:29:7f:f0:97:72:e2:4a:92:52:e5:a1:02:
70:44:7d:33:9e:99:17:87:26:fd:3a:b8:42:4f:95:b0:ba:72:
1c:1a:10:b1:bf:96:a9:6f:6a:7a:e6:df:f8:2f:1f:d7:f7:5c:
f6:e1:32:a1:fd:c9:2a:2a:b1:8d:49:2a:74:c0:1b:3a:0d:c4:
02:d5:b9:a0:a7:bb:fe:8a:a4:f4:37:ea:8a:40:98:f0:57:e2:
3e:2e:21:b1:1c:1e:21:de:fc:17:bd:7e:48:32:6b:68:d7:97:
fc:96:10:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbhw/CHLY3m7HMfk5K5esMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNjVjMmY5NThhN2UyMWEzMTM1OTE2ZWVkMWE0ZDk3ODZl
MDlkYTMwHhcNMjUxMTExMDEwMDU1WhcNMjUxMTEyMDEwMDU1WjAzMTEwLwYDVQQD
EygwZjNiMGMxNDExNDRiZGIyNTM0YjRmZjcxOWNkZTYwNWNhMTYxMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHfMuS75me1Cmxibf/LMo2b+nnFE
Nse6DO8oQy9Wq59PTTjQblA30A+oK6sPDMZdKEeeOKYBujU8oHNWQvmMxcUfUeIX
JR7r5swoR/A1Z2HpsGgvQQKpqpJ+BiYiJY1Hi/q91CRV1k9fqyCTNCAH7lZoBd5l
ic63nsSZ+KuJnbXCxkj+J5cVFeN3b53A7Lr/SeiAiMfJLzHpKYBK8ZfVPoyYeeUe
YNJvldMa70XuVtZw6qXrIiTxx7OuhRoQfh0cHF0Dr8lEHlaSGmI+oQYJe5xaCZ8r
0KCCF0gtR+SokV1GT6B/ZsRyTZLrA0ILfCnhsqe1JSKikETMpFxHznJNmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA87DBQRRL2yU0tP9xnN5gXKFhM6MB8GA1UdIwQY
MBaAFM5lwvlYp+IaMTWRbu0aTZeG4J2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2It
NWQ1OTZkMDBkZTljLzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2ItNWQ1OTZkMDBkZTlj
LzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC85C/RxR
3cvDsZGY3PZBXWVyNwUpP/FpkDEt/oWIkOZ1CXu4FAhh6mW9AgIOAnidwUabnfYE
wsz5twvXAdBVZAJm5lEvNFhFwxvR8eb9XWbdUvuw0+n2i8ijhG8JoVzg4nBFaMl9
H/TUXck7hdR0G0gGhQw7PXjc3yFTAsCnOJ1322pYcYugOqPeVd0qQqfJIqMTfiqL
KX/wl3LiSpJS5aECcER9M56ZF4cm/Tq4Qk+VsLpyHBoQsb+WqW9qeubf+C8f1/dc
9uEyof3JKiqxjUkqdMAbOg3EAtW5oKe7/oqk9DfqikCY8FfiPi4hsRweId78F71+
SDJraNeX/JYQOg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:59 2025 by rpki-client