Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: zprvI7BJjG2dkBgkTy/KISVi7Iq+6FRVmLnM3U3vczc=
Subject key identifier: 5C:C2:BB:C2:F1:26:60:00:57:40:5D:E6:A0:AF:29:12:1B:66:CF:47
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 019A7112A2982E6A55DA4D1CB485821627E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 11CC
Signing time: Tue 11 Nov 2025 04:00:37 +0000
Manifest this update: Tue 11 Nov 2025 04:00:37 +0000
Manifest next update: Wed 12 Nov 2025 04:00:37 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: CfVI2kyzxGM15F2VnuxXoxnztREHTLZWhe6pbU3kz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a2:98:2e:6a:55:da:4d:1c:b4:85:82:16:27:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Nov 11 04:00:37 2025 GMT
Not After : Nov 12 04:00:37 2025 GMT
Subject: CN=5cc2bbc2f126600057405de6a0af29121b66cf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:78:d0:b5:70:d0:9f:ae:28:9c:e7:11:07:
2a:b6:6e:1e:f4:60:7e:fb:35:64:f9:b4:bb:b2:05:
0b:f2:52:ce:e7:de:67:c6:cc:c6:2b:8c:74:bd:13:
f2:92:1a:3a:93:c0:8a:f9:66:f1:66:23:f6:70:2c:
c4:07:41:db:6a:9b:71:bf:0f:86:ab:99:19:ee:1f:
32:bd:f1:f7:4e:52:ed:a7:6f:6b:9a:07:80:e0:15:
b8:12:72:11:05:c4:81:9d:ba:7a:30:8f:d6:4f:3b:
b2:3c:05:a7:85:9d:48:2b:be:7d:40:26:85:55:4c:
c4:4c:28:25:4e:87:5e:df:51:fd:65:7e:21:14:22:
f4:70:d8:00:24:f1:c2:4d:ce:fd:6d:d8:39:b4:14:
d0:65:58:63:ec:41:42:7b:7f:2e:ad:84:63:00:5f:
d9:84:d8:7d:9a:df:7a:93:77:e7:62:8d:a3:0f:cb:
85:98:75:6f:b2:fd:98:c9:97:b6:25:7f:15:88:2c:
41:94:2a:c4:72:e7:6a:4c:43:93:c4:8a:b5:0a:0e:
c4:1f:ba:3e:91:45:1b:96:7b:68:68:c3:62:c3:ba:
15:45:c2:84:2d:78:1d:ee:e5:23:4e:f3:56:b9:da:
2a:16:ff:62:a2:c9:8e:fb:39:51:f2:d9:57:89:5f:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:BB:C2:F1:26:60:00:57:40:5D:E6:A0:AF:29:12:1B:66:CF:47
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:72:e1:5a:1a:f2:3f:e1:45:46:0e:5d:25:44:fa:fd:d2:
30:ca:02:82:1e:6e:2b:fa:07:f1:6d:49:8a:02:63:0e:d0:b0:
97:32:ed:10:cb:f1:d6:bf:57:cf:ee:11:56:ef:4e:fe:19:71:
62:ca:9e:ea:d6:a9:45:27:4d:aa:0a:ca:37:21:28:84:b5:19:
41:0c:dc:84:08:77:d1:82:f2:9c:f8:96:c8:e9:58:5d:46:7b:
5b:a8:1a:ba:99:f9:09:c3:35:dd:4f:2e:36:3c:8d:b9:8b:30:
42:b7:cf:7e:3b:3a:23:c2:e7:a5:c6:0a:4c:21:3d:07:78:f1:
e4:42:28:1e:7f:a5:35:c0:a1:a3:a6:94:f3:9a:2e:03:76:b5:
e7:ab:4d:d8:36:bd:cc:bf:9f:bf:90:95:d3:45:00:5f:be:ae:
6d:bf:40:83:0a:ee:c0:c7:c7:eb:2c:cb:90:86:53:93:d4:00:
e6:e1:a2:39:85:3d:39:a7:9f:72:73:45:e8:50:0d:2b:e7:85:
70:8b:26:4a:bb:0d:0b:d3:9f:25:b9:1d:09:9c:4a:30:ca:a5:
e2:42:df:d8:58:70:3b:5d:be:f7:99:30:1d:04:9e:9f:bb:53:
b7:90:1d:bf:f5:f0:c5:c7:39:dd:72:4c:44:00:79:3e:86:97:
7b:49:26:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqKYLmpV2k0ctIWCFifmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTBkMDcyMjE0MDBlMzdiMDFlNzRhNzEyZmFlN2M2ZDcw
MzE1OTUwHhcNMjUxMTExMDQwMDM3WhcNMjUxMTEyMDQwMDM3WjAzMTEwLwYDVQQD
Eyg1Y2MyYmJjMmYxMjY2MDAwNTc0MDVkZTZhMGFmMjkxMjFiNjZjZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69J40LVw0J+uKJznEQcqtm4e9GB+
+zVk+bS7sgUL8lLO595nxszGK4x0vRPykho6k8CK+WbxZiP2cCzEB0Hbaptxvw+G
q5kZ7h8yvfH3TlLtp29rmgeA4BW4EnIRBcSBnbp6MI/WTzuyPAWnhZ1IK759QCaF
VUzETCglTode31H9ZX4hFCL0cNgAJPHCTc79bdg5tBTQZVhj7EFCe38urYRjAF/Z
hNh9mt96k3fnYo2jD8uFmHVvsv2YyZe2JX8ViCxBlCrEcudqTEOTxIq1Cg7EH7o+
kUUblntoaMNiw7oVRcKELXgd7uUjTvNWudoqFv9iosmO+zlR8tlXiV8S0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzCu8LxJmAAV0Bd5qCvKRIbZs9HMB8GA1UdIwQY
MBaAFGaQ0HIhQA43sB50pxL658bXAxWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDIt
NDYxYWNiOGExYzlmLzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDItNDYxYWNiOGExYzlm
LzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTty4Voa
8j/hRUYOXSVE+v3SMMoCgh5uK/oH8W1JigJjDtCwlzLtEMvx1r9Xz+4RVu9O/hlx
Ysqe6tapRSdNqgrKNyEohLUZQQzchAh30YLynPiWyOlYXUZ7W6gaupn5CcM13U8u
NjyNuYswQrfPfjs6I8LnpcYKTCE9B3jx5EIoHn+lNcCho6aU85ouA3a156tN2Da9
zL+fv5CV00UAX76ubb9AgwruwMfH6yzLkIZTk9QA5uGiOYU9OaefcnNF6FANK+eF
cIsmSrsNC9OfJbkdCZxKMMql4kLf2FhwO12+95kwHQSen7tTt5Adv/Xwxcc53XJM
RAB5PoaXe0kmSA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client