Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
File: ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft (raw, json)
Hash identifier: n+uwsF8IOZhMC8Uo2+qWUMI7dtTyTwKMZEaK705KRzs=
Subject key identifier: D1:67:04:22:C9:20:EF:3E:8F:E8:C4:45:C0:9F:93:3A:0E:F8:36:DD
Authority key identifier: 66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4
Certificate issuer: /CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4
Certificate serial: 019A706E4F387415146178B6D1D35748E7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
Manifest number: 11
Signing time: Tue 11 Nov 2025 01:01:08 +0000
Manifest this update: Tue 11 Nov 2025 01:01:08 +0000
Manifest next update: Wed 12 Nov 2025 01:01:08 +0000
Files and hashes: 1: MjDiSya5rSIxCbP2JLylYPClbHU.roa (hash: sVwKHPoYwVN9YVNb0RadzlN6+FZIECFGTzUXxcescyI=)
2: ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl (hash: SQggm7YIB22kMWqHhqkLLOY3E/vE52pzs4knaSXsOpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:4f:38:74:15:14:61:78:b6:d1:d3:57:48:e7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a2fe934ed1def75f0636ae7cf0198c81d348b4
Validity
Not Before: Nov 11 01:01:08 2025 GMT
Not After : Nov 12 01:01:08 2025 GMT
Subject: CN=d1670422c920ef3e8fe8c445c09f933a0ef836dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:45:e1:ac:a6:f2:ae:f9:b9:38:09:35:f8:
16:a2:48:b0:fa:e4:89:6d:ac:aa:0b:90:9b:e4:e9:
f6:24:9b:e1:47:0d:26:04:32:c1:92:fd:7a:ca:bc:
5e:a3:da:28:2d:69:ac:3b:37:eb:6c:38:72:c2:8f:
30:ee:c8:ca:51:fb:6a:2a:cc:2e:3a:25:0f:dd:98:
90:e0:68:69:3f:ec:07:25:1c:9e:10:10:f1:94:10:
c5:1e:b0:c1:70:fa:8b:45:0d:59:71:0b:42:2b:fc:
6f:e5:c4:02:88:3a:86:4f:f6:9e:a1:a2:ed:12:76:
4e:52:4b:79:9f:ad:c4:b2:65:8b:b4:3e:87:e4:3a:
0a:f3:4e:f1:67:3a:e4:71:79:85:91:1e:23:38:c2:
0c:3f:cf:da:b3:87:b1:c0:15:29:bf:17:61:f0:53:
e5:6a:92:94:dd:9d:df:bd:53:c7:2b:05:c9:51:85:
a5:6e:87:43:ed:82:34:06:af:a9:a9:8d:54:db:4c:
aa:c6:26:25:fd:14:73:82:8d:59:b3:c6:81:05:88:
0d:fe:ce:88:55:f6:e4:28:c1:23:75:3b:6a:18:5b:
da:20:23:f0:c8:31:f3:39:02:89:2e:25:7d:78:ec:
bf:1d:28:05:19:e9:35:cb:03:68:f4:60:2b:02:b9:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:67:04:22:C9:20:EF:3E:8F:E8:C4:45:C0:9F:93:3A:0E:F8:36:DD
X509v3 Authority Key Identifier:
keyid:66:A2:FE:93:4E:D1:DE:F7:5F:06:36:AE:7C:F0:19:8C:81:D3:48:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqL-k07R3vdfBjaufPAZjIHTSLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ce8e59-e062-421a-9f46-4edf19b35eca/1/ZqL-k07R3vdfBjaufPAZjIHTSLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2f:69:f0:63:9c:0d:a8:ab:59:9a:86:96:fc:e6:9e:a6:fb:
b3:e1:3c:4e:77:dd:cc:a0:74:48:6d:f6:65:23:da:16:98:e7:
a9:f9:ca:70:a4:f8:42:cf:4b:05:0e:a7:82:0b:be:1f:36:08:
77:cd:f0:59:f9:90:d3:91:5c:26:d2:99:98:c6:4e:c9:9d:f2:
a0:3f:5b:5f:0d:b0:fb:68:83:ac:ff:a5:13:13:e8:25:f0:e4:
6b:66:57:7a:49:00:dd:b0:d2:d7:14:d9:0a:09:ab:4d:b7:ac:
e6:2a:d3:b1:f6:fa:6c:42:ee:f5:77:a6:67:06:e6:3d:e6:48:
fd:93:97:bc:85:35:be:96:2e:7b:66:38:9b:a9:e0:f9:ff:a6:
47:90:c5:e3:ca:58:22:dd:e7:12:fc:26:59:fe:35:ce:c1:03:
81:5b:5c:d1:d1:7b:44:31:98:7f:30:0e:12:cb:24:97:e5:00:
6a:4f:be:f4:a7:e8:5b:fe:fb:77:f6:0a:1d:ba:48:ba:12:cd:
af:9f:68:e5:12:f7:c9:6d:89:00:cd:4f:bd:4e:ee:d8:a4:7b:
fa:35:45:9b:14:07:13:e8:32:ca:f4:7e:df:5d:e2:55:47:c4:
29:e4:ff:6a:94:16:53:60:11:62:93:a1:9f:37:e1:9b:b4:d7:
f8:6e:c0:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbk84dBUUYXi20dNXSOffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTJmZTkzNGVkMWRlZjc1ZjA2MzZhZTdjZjAxOThjODFk
MzQ4YjQwHhcNMjUxMTExMDEwMTA4WhcNMjUxMTEyMDEwMTA4WjAzMTEwLwYDVQQD
EyhkMTY3MDQyMmM5MjBlZjNlOGZlOGM0NDVjMDlmOTMzYTBlZjgzNmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37VF4aym8q75uTgJNfgWokiw+uSJ
bayqC5Cb5On2JJvhRw0mBDLBkv16yrxeo9ooLWmsOzfrbDhywo8w7sjKUftqKswu
OiUP3ZiQ4GhpP+wHJRyeEBDxlBDFHrDBcPqLRQ1ZcQtCK/xv5cQCiDqGT/aeoaLt
EnZOUkt5n63EsmWLtD6H5DoK807xZzrkcXmFkR4jOMIMP8/as4exwBUpvxdh8FPl
apKU3Z3fvVPHKwXJUYWlbodD7YI0Bq+pqY1U20yqxiYl/RRzgo1Zs8aBBYgN/s6I
VfbkKMEjdTtqGFvaICPwyDHzOQKJLiV9eOy/HSgFGek1ywNo9GArArnvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFnBCLJIO8+j+jERcCfkzoO+DbdMB8GA1UdIwQY
MBaAFGai/pNO0d73XwY2rnzwGYyB00i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYt
NGVkZjE5YjM1ZWNhLzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9jZThlNTktZTA2Mi00MjFhLTlmNDYtNGVkZjE5YjM1ZWNh
LzEvWnFMLWswN1IzdmRmQmphdWZQQVpqSUhUU0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAty9p8GOc
DairWZqGlvzmnqb7s+E8TnfdzKB0SG32ZSPaFpjnqfnKcKT4Qs9LBQ6nggu+HzYI
d83wWfmQ05FcJtKZmMZOyZ3yoD9bXw2w+2iDrP+lExPoJfDka2ZXekkA3bDS1xTZ
CgmrTbes5irTsfb6bELu9XemZwbmPeZI/ZOXvIU1vpYue2Y4m6ng+f+mR5DF48pY
It3nEvwmWf41zsEDgVtc0dF7RDGYfzAOEsskl+UAak++9KfoW/77d/YKHbpIuhLN
r59o5RL3yW2JAM1PvU7u2KR7+jVFmxQHE+gyyvR+313iVUfEKeT/apQWU2ARYpOh
nzfhm7TX+G7A2Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:59 2025 by rpki-client