Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: 5x4Rr4l/YLAHqLsEpZRSXqIKr1ieO6AwJjS43c4rF88=
Subject key identifier: 5F:C9:AF:1C:EC:6B:7D:2B:BE:6A:61:B8:09:CF:19:D8:C0:D3:B0:3F
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 019A70DC6245D3C9456B0D783D5129E103B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 16B9
Signing time: Tue 11 Nov 2025 03:01:22 +0000
Manifest this update: Tue 11 Nov 2025 03:01:22 +0000
Manifest next update: Wed 12 Nov 2025 03:01:22 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: VXzM9Vszq863ZMeFohT/MeI6fJ8h3O0b0QOZPwwPosc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:62:45:d3:c9:45:6b:0d:78:3d:51:29:e1:03:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Nov 11 03:01:22 2025 GMT
Not After : Nov 12 03:01:22 2025 GMT
Subject: CN=5fc9af1cec6b7d2bbe6a61b809cf19d8c0d3b03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:6e:c9:d3:a0:8d:76:44:c0:92:2f:ac:78:
a1:ce:50:57:c2:88:11:5d:be:a9:9b:a0:e1:77:2c:
30:f8:9a:6d:93:10:35:3c:c6:32:3f:ed:ae:4c:ce:
1a:2c:1d:cb:1a:78:43:37:71:89:57:c5:f0:80:4c:
d7:a4:0e:f2:a2:7b:c1:23:14:e8:6d:86:a7:b1:f5:
0f:5e:30:ff:ba:ff:83:d0:ca:72:3b:f5:55:94:62:
be:81:e2:72:5c:2f:a3:1e:cf:25:1d:de:a3:60:9d:
84:4b:f3:f1:b7:64:23:ee:02:ad:8e:b7:39:0a:2a:
c0:0c:75:69:13:8b:6f:f1:7f:4f:d1:73:b9:7c:a2:
cf:7b:35:d7:e7:97:34:b5:9f:d2:33:f3:a0:27:7e:
2d:50:31:06:36:27:6a:70:4a:41:29:17:05:6e:94:
31:4a:d7:30:db:c5:c9:cb:28:ed:65:45:bf:6c:10:
89:12:4f:f5:54:65:fe:80:63:7e:db:8c:9d:8d:1e:
72:c4:ca:f4:8c:dd:ba:e0:c3:36:0b:14:d8:9e:b9:
a5:0f:97:91:57:af:d8:d4:d3:5f:c2:1c:db:1a:d1:
3b:d3:99:4a:a3:92:f0:d6:15:ff:ef:c6:02:33:ea:
c6:a6:b6:b5:43:4e:ea:37:21:ee:3d:f2:ba:97:9c:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C9:AF:1C:EC:6B:7D:2B:BE:6A:61:B8:09:CF:19:D8:C0:D3:B0:3F
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ee:4e:9e:7a:38:d2:57:90:18:83:64:4e:2e:f1:b5:8f:1a:
e2:0d:7e:5d:87:78:20:aa:0c:c0:ac:da:24:42:00:f1:a5:39:
1a:c3:23:ee:c9:73:ac:fd:63:73:11:db:92:09:9a:5f:c5:57:
65:f6:88:b3:63:7f:a3:7a:1d:cd:8b:d4:66:81:9b:c5:1f:f1:
6f:82:98:00:a5:5b:10:89:d2:5f:4f:ee:4b:09:ab:6f:5c:66:
8b:c6:22:de:c3:74:49:ee:ea:3f:0c:48:27:88:a6:f3:63:94:
6d:39:29:68:af:9a:d4:91:31:2e:34:95:9d:eb:1c:f7:5b:f0:
8e:ad:c8:4f:29:10:c2:7a:bc:25:8c:2c:70:49:1a:7b:1d:e9:
b2:f8:66:d0:2a:6a:f6:58:b1:3a:56:c0:95:89:ff:96:c8:33:
bc:bb:5b:49:5a:29:2a:a9:f2:13:58:4d:cf:03:ca:71:3a:e8:
19:0b:ba:6b:7b:f8:01:50:7d:81:f3:d2:24:80:5e:d7:57:0b:
d7:08:a9:97:9f:d6:5d:8e:f5:43:ad:92:f5:9f:04:1d:1e:8f:
ac:e7:2c:ab:cb:42:3b:be:70:af:f3:f7:c5:44:4c:53:fb:87:
ab:37:88:f8:61:13:17:98:44:3b:40:db:b2:23:bc:ce:53:0d:
0f:84:38:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3GJF08lFaw14PVEp4QOyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh
ZWQyMzgwHhcNMjUxMTExMDMwMTIyWhcNMjUxMTEyMDMwMTIyWjAzMTEwLwYDVQQD
Eyg1ZmM5YWYxY2VjNmI3ZDJiYmU2YTYxYjgwOWNmMTlkOGMwZDNiMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAVuydOgjXZEwJIvrHihzlBXwogR
Xb6pm6Dhdyww+JptkxA1PMYyP+2uTM4aLB3LGnhDN3GJV8XwgEzXpA7yonvBIxTo
bYansfUPXjD/uv+D0MpyO/VVlGK+geJyXC+jHs8lHd6jYJ2ES/Pxt2Qj7gKtjrc5
CirADHVpE4tv8X9P0XO5fKLPezXX55c0tZ/SM/OgJ34tUDEGNidqcEpBKRcFbpQx
Stcw28XJyyjtZUW/bBCJEk/1VGX+gGN+24ydjR5yxMr0jN264MM2CxTYnrmlD5eR
V6/Y1NNfwhzbGtE705lKo5Lw1hX/78YCM+rGpra1Q07qNyHuPfK6l5zo7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/Jrxzsa30rvmphuAnPGdjA07A/MB8GA1UdIwQY
MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt
YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy
LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKe5Onno4
0leQGINkTi7xtY8a4g1+XYd4IKoMwKzaJEIA8aU5GsMj7slzrP1jcxHbkgmaX8VX
ZfaIs2N/o3odzYvUZoGbxR/xb4KYAKVbEInSX0/uSwmrb1xmi8Yi3sN0Se7qPwxI
J4im82OUbTkpaK+a1JExLjSVnesc91vwjq3ITykQwnq8JYwscEkaex3psvhm0Cpq
9lixOlbAlYn/lsgzvLtbSVopKqnyE1hNzwPKcTroGQu6a3v4AVB9gfPSJIBe11cL
1wipl5/WXY71Q62S9Z8EHR6PrOcsq8tCO75wr/P3xURMU/uHqzeI+GETF5hEO0Db
siO8zlMND4Q4bQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:47 2025 by rpki-client