Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: TxflPtkuqYm40TJmjL582C3ydVtEcQ4tM2LDHkli1NQ=
Subject key identifier: 29:5D:3D:5C:25:60:6B:26:DA:DC:FE:57:4E:E2:C1:9C:7F:DE:F2:97
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 019A4F2B585127310E3ABE4DDDE32063A7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 0686
Signing time: Tue 04 Nov 2025 14:00:31 +0000
Manifest this update: Tue 04 Nov 2025 14:00:31 +0000
Manifest next update: Wed 05 Nov 2025 14:00:31 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: uFNciTuqqqgpIZqeg/Iah8bL8GNAArZccnpbycUbjn0=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:58:51:27:31:0e:3a:be:4d:dd:e3:20:63:a7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Nov 4 14:00:31 2025 GMT
Not After : Nov 5 14:00:31 2025 GMT
Subject: CN=295d3d5c25606b26dadcfe574ee2c19c7fdef297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:58:c1:c9:6e:ad:fe:8e:02:e2:11:c9:c8:
f1:e7:15:8b:e4:ca:66:17:9b:91:79:5d:68:06:a7:
8e:b6:c1:bc:00:cc:dd:4a:f1:74:cc:15:b6:96:09:
49:fa:71:bf:f2:30:82:42:5b:73:d9:d7:59:71:3a:
53:05:d0:51:5b:ca:c1:b4:8b:a9:1c:94:54:e2:c9:
69:48:19:0a:f6:d0:d6:8e:0d:d2:9e:09:e3:a8:ce:
58:bf:5e:7b:98:ab:fc:87:7f:33:68:74:f7:81:38:
d9:22:11:80:0b:73:e6:12:e4:c6:92:ff:85:7d:39:
98:72:4b:0c:e9:ec:0c:a8:36:49:5e:b4:65:8e:1c:
bd:19:72:4f:89:35:f1:05:39:5a:10:2a:59:62:2c:
66:03:68:77:ac:27:fb:19:54:4b:43:da:9c:ae:b4:
67:31:d7:b5:52:2b:5e:a9:63:26:8f:5a:5a:35:e5:
dc:92:07:9d:ce:0d:b2:21:6f:ec:7c:5e:0b:4f:ad:
52:c3:b7:ea:ea:ff:42:b7:ab:48:06:c4:02:bf:04:
f9:32:52:20:7a:11:c6:89:41:67:43:a2:25:5c:3f:
5b:c6:15:a3:78:89:e3:c9:63:07:5f:99:b3:de:8a:
2f:f0:c9:aa:7b:49:65:69:45:0e:9d:29:ee:0d:8c:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5D:3D:5C:25:60:6B:26:DA:DC:FE:57:4E:E2:C1:9C:7F:DE:F2:97
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:95:54:fa:0d:d8:65:7d:19:58:f3:31:7e:fd:76:b4:24:62:
bd:5a:8c:86:ff:b6:78:05:6c:25:b8:16:42:36:29:9b:cd:8a:
01:5d:39:37:d0:fb:48:cb:6b:20:fb:2a:28:84:4f:62:b0:a2:
2e:6a:72:cf:ec:02:a3:f5:86:67:20:07:75:e1:6f:fa:5b:8e:
28:57:24:fa:ce:aa:1c:ec:fc:47:04:61:bc:b5:f6:4b:6c:b8:
d2:5b:c5:ac:09:46:93:68:d4:9a:a3:19:73:ad:17:9e:24:6e:
04:70:be:2a:0d:cd:3b:dd:07:43:e5:3b:9c:54:85:a5:7b:00:
f0:65:c6:b1:24:93:b2:51:27:32:9c:08:c1:15:70:0f:ef:40:
1a:b5:2c:21:7e:ef:5e:10:90:1b:72:41:18:3a:a5:11:90:b5:
d0:dd:8e:12:6e:7f:40:ac:a6:06:b3:46:2b:a7:4f:f7:0b:39:
56:3d:7a:07:5b:e0:b3:2d:74:41:b6:5a:b0:f8:18:60:82:35:
4a:4b:a9:87:a2:64:f8:d6:9f:57:69:d8:ee:3d:91:4b:0d:a4:
a5:fa:89:32:d5:96:59:bc:86:a3:43:f8:02:f9:51:06:87:97:
9b:a7:ac:71:06:67:0a:49:fc:61:54:45:a6:94:19:fe:3f:66:
83:bc:72:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK1hRJzEOOr5N3eMgY6fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzU5ZjdhOGY5MDY3MmVhODM1M2FmNGQxMWQ2YWM1ZTlm
ZDgyMDYwHhcNMjUxMTA0MTQwMDMxWhcNMjUxMTA1MTQwMDMxWjAzMTEwLwYDVQQD
EygyOTVkM2Q1YzI1NjA2YjI2ZGFkY2ZlNTc0ZWUyYzE5YzdmZGVmMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky1Ywclurf6OAuIRycjx5xWL5Mpm
F5uReV1oBqeOtsG8AMzdSvF0zBW2lglJ+nG/8jCCQltz2ddZcTpTBdBRW8rBtIup
HJRU4slpSBkK9tDWjg3SngnjqM5Yv157mKv8h38zaHT3gTjZIhGAC3PmEuTGkv+F
fTmYcksM6ewMqDZJXrRljhy9GXJPiTXxBTlaECpZYixmA2h3rCf7GVRLQ9qcrrRn
Mde1UiteqWMmj1paNeXckgedzg2yIW/sfF4LT61Sw7fq6v9Ct6tIBsQCvwT5MlIg
ehHGiUFnQ6IlXD9bxhWjeInjyWMHX5mz3oov8Mmqe0llaUUOnSnuDYw0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCldPVwlYGsm2tz+V07iwZx/3vKXMB8GA1UdIwQY
MBaAFGZ1n3qPkGcuqDU69NEdasXp/YIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3Yjgt
ZTRlMTdlNGI1MTgwLzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3YjgtZTRlMTdlNGI1MTgw
LzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJVU+g3Y
ZX0ZWPMxfv12tCRivVqMhv+2eAVsJbgWQjYpm82KAV05N9D7SMtrIPsqKIRPYrCi
Lmpyz+wCo/WGZyAHdeFv+luOKFck+s6qHOz8RwRhvLX2S2y40lvFrAlGk2jUmqMZ
c60XniRuBHC+Kg3NO90HQ+U7nFSFpXsA8GXGsSSTslEnMpwIwRVwD+9AGrUsIX7v
XhCQG3JBGDqlEZC10N2OEm5/QKymBrNGK6dP9ws5Vj16B1vgsy10QbZasPgYYII1
Skuph6Jk+NafV2nY7j2RSw2kpfqJMtWWWbyGo0P4AvlRBoeXm6escQZnCkn8YVRF
ppQZ/j9mg7xyUg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:39:30 2025 by rpki-client