Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: /djIyNz0cev9q+ntM0elbgFF+Lu6MXwqi2YVqVRw6GE=
Subject key identifier: F6:50:09:0D:1E:C3:10:C7:F9:C2:CC:8F:1A:67:B6:82:35:4D:A9:5A
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 019A36472DD14F431568E022AA7E07E5A9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 13C7
Signing time: Thu 30 Oct 2025 18:00:25 +0000
Manifest this update: Thu 30 Oct 2025 18:00:25 +0000
Manifest next update: Fri 31 Oct 2025 18:00:25 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: kHtzzm+246MKczv7l98vJ2oqU0GggDE81lrrbsWJmXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:47:2d:d1:4f:43:15:68:e0:22:aa:7e:07:e5:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: Oct 30 18:00:25 2025 GMT
Not After : Oct 31 18:00:25 2025 GMT
Subject: CN=f650090d1ec310c7f9c2cc8f1a67b682354da95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:31:cc:c9:c0:ca:25:a8:19:db:f2:44:30:
c5:83:f7:3a:db:8d:fc:dd:0b:d1:dd:e9:32:5d:fd:
4d:b4:e7:2e:a0:2e:30:d0:61:17:9f:8c:5d:a3:5b:
ba:89:d1:9c:5c:61:ed:84:41:30:1a:4a:fb:ee:d7:
9e:7e:e0:2c:b5:57:0c:91:85:40:de:0e:d6:cb:ad:
34:ee:ed:c0:3e:28:d1:7d:53:4f:7b:d1:5c:84:92:
79:35:55:26:96:f0:7d:92:28:bf:eb:37:00:d7:80:
1b:8b:56:b6:a1:b2:a7:68:b3:1f:52:64:96:df:2e:
57:27:cb:a1:79:06:9f:a8:3a:59:8e:16:4b:36:8b:
46:dd:1c:76:5b:3b:da:d3:95:19:89:41:58:60:8c:
02:bf:3f:57:76:8d:58:2b:22:8f:50:60:be:14:6c:
26:f0:97:ce:60:e9:13:2f:eb:cc:f4:dd:16:e3:28:
5f:f6:8b:69:ad:55:c7:88:49:82:bf:94:52:a6:31:
bf:fb:0b:d8:f4:74:cf:fe:fe:94:a8:5e:7e:43:e4:
83:42:9b:4b:97:00:cf:93:8c:de:8a:a2:a8:76:34:
d8:4d:da:79:d9:62:fa:8f:99:e8:81:9e:81:c1:bd:
d5:a6:42:a9:36:80:64:87:08:05:9f:51:7a:b9:3e:
7b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:09:0D:1E:C3:10:C7:F9:C2:CC:8F:1A:67:B6:82:35:4D:A9:5A
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fc:32:2d:2a:74:2d:02:4e:85:f0:0f:fa:cd:04:55:2f:88:
bd:cb:9a:d5:10:46:47:88:8e:d3:1a:d9:26:35:de:53:8d:d4:
89:4b:74:ce:1f:29:d7:c7:bc:80:97:ce:b1:a6:3c:2c:03:4a:
53:b9:a9:9d:de:10:06:4d:33:76:76:59:89:6f:59:ff:af:49:
68:b5:64:87:67:66:8c:fd:1c:86:3c:c5:5b:6a:0a:76:6e:b9:
6c:0d:92:34:3e:7f:9f:1a:4a:b6:c7:05:47:bf:e2:48:76:14:
9e:8a:59:28:bc:01:6d:af:30:be:f4:6d:5c:36:63:cc:d7:1b:
2d:09:31:25:8e:f7:39:e4:9a:c5:7e:ff:a8:a3:23:4a:23:b9:
e2:e7:c1:f7:dc:da:6c:c3:d4:24:a5:6d:c1:9b:99:e2:3e:c6:
63:aa:aa:ea:03:9e:25:41:3b:7e:80:10:c4:70:13:fd:14:cb:
e9:b6:fe:10:bd:e4:94:6f:9e:3f:00:5a:d2:33:71:44:38:1c:
44:80:06:11:89:2e:63:d9:3b:fc:cb:6f:30:e4:47:17:5c:8f:
4e:d5:3c:eb:7c:89:b8:a1:5f:b1:23:08:30:fd:f7:fa:c6:4b:
e4:af:59:8e:d9:d0:f8:87:5e:19:94:91:8f:49:b7:c6:43:13:
99:2f:14:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo2Ry3RT0MVaOAiqn4H5am3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3
M2NhZjIwHhcNMjUxMDMwMTgwMDI1WhcNMjUxMDMxMTgwMDI1WjAzMTEwLwYDVQQD
EyhmNjUwMDkwZDFlYzMxMGM3ZjljMmNjOGYxYTY3YjY4MjM1NGRhOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaUxzMnAyiWoGdvyRDDFg/c62438
3QvR3ekyXf1NtOcuoC4w0GEXn4xdo1u6idGcXGHthEEwGkr77teefuAstVcMkYVA
3g7Wy6007u3APijRfVNPe9FchJJ5NVUmlvB9kii/6zcA14Abi1a2obKnaLMfUmSW
3y5XJ8uheQafqDpZjhZLNotG3Rx2Wzva05UZiUFYYIwCvz9Xdo1YKyKPUGC+FGwm
8JfOYOkTL+vM9N0W4yhf9otprVXHiEmCv5RSpjG/+wvY9HTP/v6UqF5+Q+SDQptL
lwDPk4zeiqKodjTYTdp52WL6j5nogZ6Bwb3VpkKpNoBkhwgFn1F6uT57fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZQCQ0ewxDH+cLMjxpntoI1TalaMB8GA1UdIwQY
MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt
NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2
LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/wyLSp0
LQJOhfAP+s0EVS+Ivcua1RBGR4iO0xrZJjXeU43UiUt0zh8p18e8gJfOsaY8LANK
U7mpnd4QBk0zdnZZiW9Z/69JaLVkh2dmjP0chjzFW2oKdm65bA2SND5/nxpKtscF
R7/iSHYUnopZKLwBba8wvvRtXDZjzNcbLQkxJY73OeSaxX7/qKMjSiO54ufB99za
bMPUJKVtwZuZ4j7GY6qq6gOeJUE7foAQxHAT/RTL6bb+EL3klG+ePwBa0jNxRDgc
RIAGEYkuY9k7/MtvMORHF1yPTtU863yJuKFfsSMIMP33+sZL5K9ZjtnQ+IdeGZSR
j0m3xkMTmS8UrQ==
-----END CERTIFICATE-----
Generated at Thu Oct 30 21:47:20 2025 by rpki-client