Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
File: ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft (raw, json)
Hash identifier: LgFp5SK5M+qBgIup2KsGC9UueCJqj3/zGNL69i2al20=
Subject key identifier: 34:2B:16:E0:D0:1B:79:AC:81:8D:96:10:70:09:36:87:18:C5:48:D1
Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13
Certificate serial: 019A6F24550A22D9612D04F863EAD8AB4552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
Manifest number: 1720
Signing time: Mon 10 Nov 2025 19:00:43 +0000
Manifest this update: Mon 10 Nov 2025 19:00:43 +0000
Manifest next update: Tue 11 Nov 2025 19:00:43 +0000
Files and hashes: 1: ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl (hash: tjCMcmqSsQU1zNbi1/gs9z+xFEWKrqqE3aTPVrdU0YM=)
2: hMmPM9uQjSpja4bSUK9zc_akA0w.roa (hash: hrlNP/K4kHD/OY4z6+CaOp00xjs5GduVuaQsaUliKXM=)
3: hq1zxN1P7ODqyzoFL2dWnE0-qB0.roa (hash: dCbnfgImnpSOcXJjI96J3fJxTUfan9KZXuyelbOpBm8=)
4: kXDtSEP8wehej7ozup3ULNF_kxE.roa (hash: pFGVv12QjKqbl/zBNnLTn7joQ5O/ICyXPOVOcqhZ97Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 15:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6f:24:55:0a:22:d9:61:2d:04:f8:63:ea:d8:ab:45:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13
Validity
Not Before: Nov 10 19:00:43 2025 GMT
Not After : Nov 11 19:00:43 2025 GMT
Subject: CN=342b16e0d01b79ac818d96107009368718c548d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:71:d8:f0:fc:98:ba:01:74:50:b4:5a:4a:
c3:01:fc:a8:77:76:ac:c9:c2:c1:a9:f6:a6:22:7e:
10:91:19:9c:af:5e:26:58:f3:6f:9e:87:e2:ee:76:
e4:ec:c3:6e:47:e0:b5:05:63:f5:c0:7d:cd:df:97:
39:4e:2b:ea:52:ea:a5:a7:5f:27:12:e5:ba:4c:a3:
39:46:17:32:2b:c9:88:a2:33:9d:36:d9:8e:cb:12:
cb:4e:d5:0d:b7:ea:76:88:a5:d4:84:31:2c:ad:87:
c7:68:e5:37:35:84:74:82:46:53:cd:c9:43:f9:98:
36:f8:d2:71:1d:e0:73:fd:52:b8:3a:df:b1:6f:82:
24:9b:08:29:bf:f6:42:55:40:7b:04:23:c7:91:52:
8e:3c:63:2c:75:c4:c4:ea:1b:3c:8f:dc:dd:fa:0c:
76:ca:b3:db:e2:06:5b:96:60:68:d1:9b:e2:7b:a0:
50:e4:bf:71:9a:cc:e8:f2:bf:21:ea:2b:58:d8:4a:
d2:42:79:77:ec:64:d9:15:62:ab:62:e6:b5:cd:f7:
77:33:00:da:58:99:02:3c:90:9a:69:73:30:cf:fa:
b6:b8:d5:b0:33:51:6a:06:fa:7e:1e:a7:37:00:8c:
af:c1:8b:cb:41:3b:93:03:06:8a:d4:cf:f7:c5:6e:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:16:E0:D0:1B:79:AC:81:8D:96:10:70:09:36:87:18:C5:48:D1
X509v3 Authority Key Identifier:
keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ee:c4:9d:a9:4b:90:a5:52:02:1f:6f:d9:10:27:0d:2b:b9:
81:ce:dc:c4:37:b0:aa:91:61:a2:20:4e:34:42:91:cf:80:29:
35:7a:27:75:d9:b5:d6:95:ce:88:15:3b:5b:46:e4:20:59:40:
b3:9d:14:d4:18:18:ce:61:b5:1e:00:f0:c2:a6:29:f2:21:46:
01:b4:9b:81:0b:03:35:82:a7:54:63:e3:48:ec:49:e8:79:dc:
3f:40:40:a8:5d:11:50:be:eb:60:c2:d0:d6:fa:49:f8:00:4b:
b6:06:93:cd:5a:52:0e:71:de:78:3d:1e:41:cc:3e:13:03:e1:
78:60:38:e0:7d:72:b0:7e:e9:d7:30:8c:d1:4f:78:a6:69:b5:
b6:52:f0:b3:ec:b4:7d:e3:c1:4f:2e:d8:6d:cf:01:72:cb:26:
51:4f:6e:ac:34:dd:33:98:a7:64:04:72:c6:2e:36:3f:43:15:
aa:d0:a0:25:02:94:01:6f:f5:15:b9:4a:21:9c:8c:75:99:54:
0a:0b:a5:59:c8:72:46:09:c3:60:5b:fc:a6:fc:53:3a:c9:fd:
8d:a0:e2:fb:e8:4f:f2:d3:ef:92:98:d7:97:9b:ae:36:0a:d5:
63:f4:af:23:8a:82:4f:96:79:6f:78:35:2a:37:b8:a2:a1:e0:
c2:6d:c9:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpvJFUKItlhLQT4Y+rYq0VSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5
ZmJjMTMwHhcNMjUxMTEwMTkwMDQzWhcNMjUxMTExMTkwMDQzWjAzMTEwLwYDVQQD
EygzNDJiMTZlMGQwMWI3OWFjODE4ZDk2MTA3MDA5MzY4NzE4YzU0OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj1x2PD8mLoBdFC0WkrDAfyod3as
ycLBqfamIn4QkRmcr14mWPNvnofi7nbk7MNuR+C1BWP1wH3N35c5TivqUuqlp18n
EuW6TKM5RhcyK8mIojOdNtmOyxLLTtUNt+p2iKXUhDEsrYfHaOU3NYR0gkZTzclD
+Zg2+NJxHeBz/VK4Ot+xb4Ikmwgpv/ZCVUB7BCPHkVKOPGMsdcTE6hs8j9zd+gx2
yrPb4gZblmBo0Zvie6BQ5L9xmszo8r8h6itY2ErSQnl37GTZFWKrYua1zfd3MwDa
WJkCPJCaaXMwz/q2uNWwM1FqBvp+Hqc3AIyvwYvLQTuTAwaK1M/3xW5oeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQrFuDQG3msgY2WEHAJNocYxUjRMB8GA1UdIwQY
MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt
MzMzZjBjOTkyNzllLzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll
LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkO7EnalL
kKVSAh9v2RAnDSu5gc7cxDewqpFhoiBONEKRz4ApNXonddm11pXOiBU7W0bkIFlA
s50U1BgYzmG1HgDwwqYp8iFGAbSbgQsDNYKnVGPjSOxJ6HncP0BAqF0RUL7rYMLQ
1vpJ+ABLtgaTzVpSDnHeeD0eQcw+EwPheGA44H1ysH7p1zCM0U94pmm1tlLws+y0
fePBTy7Ybc8BcssmUU9urDTdM5inZARyxi42P0MVqtCgJQKUAW/1FblKIZyMdZlU
CgulWchyRgnDYFv8pvxTOsn9jaDi++hP8tPvkpjXl5uuNgrVY/SvI4qCT5Z5b3g1
Kje4oqHgwm3J/w==
-----END CERTIFICATE-----
Generated at Mon Nov 10 23:22:30 2025 by rpki-client