Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: KK8+J+BBZgCNyoJzoI/6O2s90AysCfY42K077Qi9QRY=
Subject key identifier: F4:AD:49:AE:BD:71:87:6E:3C:BD:E0:17:98:46:BD:A3:D0:D4:B2:F9
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 019A29675B6096CC20E2EF8CDBAF4C0C474A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 168C
Signing time: Tue 28 Oct 2025 06:00:30 +0000
Manifest this update: Tue 28 Oct 2025 06:00:30 +0000
Manifest next update: Wed 29 Oct 2025 06:00:30 +0000
Files and hashes: 1: 40_j8EnMOslOGeaUGeLQNCGHg64.roa (hash: BOU6u1kQjKsVBkJf+h9lI/7YbpbYLn1ZXJQhHit/Gyg=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: hiXaD122vpgWDK0peHIKI6/TRGYm2XcmSrS2Ihmvkhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:5b:60:96:cc:20:e2:ef:8c:db:af:4c:0c:47:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Oct 28 06:00:30 2025 GMT
Not After : Oct 29 06:00:30 2025 GMT
Subject: CN=f4ad49aebd71876e3cbde0179846bda3d0d4b2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:16:a1:c6:c4:59:5d:bb:6d:f4:9c:9b:03:
6d:c0:5b:44:2d:6a:b1:d4:1c:c9:30:b2:c2:ac:1f:
9a:2a:83:a7:41:fb:22:00:71:82:4c:d2:0d:ce:1c:
cf:da:c2:ea:92:1d:eb:66:09:11:37:8d:df:b9:ac:
3c:80:7a:63:70:af:b1:fa:2f:94:2a:b0:6d:a4:80:
ac:d2:54:2f:9b:b5:04:2c:dc:f5:53:9a:14:a1:8c:
21:8f:c8:ba:26:d8:9c:6b:53:3b:2e:1c:45:e9:2b:
de:ad:5d:97:21:4c:fc:1d:41:70:73:a6:19:57:a5:
c4:f5:db:38:f8:8e:61:13:d1:58:f8:83:09:90:34:
e8:75:55:46:60:b5:01:26:4a:02:86:27:95:7d:9d:
49:c5:7a:70:a0:c4:e7:4b:51:38:92:e9:17:d5:c6:
a8:91:18:7e:8b:3b:58:22:ec:29:8e:ac:e5:c9:6e:
5a:62:97:c1:d4:c0:99:97:53:09:85:f5:37:e5:b8:
f9:47:88:97:8c:f0:a8:e0:48:c4:03:85:fa:ed:31:
2a:d5:ca:ca:7b:49:43:0b:7b:78:5c:07:68:c3:5d:
0d:5b:9f:99:97:54:f1:f2:27:e1:68:d7:9d:47:25:
62:cf:d1:4f:71:07:b2:8b:b0:46:5b:c4:db:6d:63:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AD:49:AE:BD:71:87:6E:3C:BD:E0:17:98:46:BD:A3:D0:D4:B2:F9
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c8:a6:e4:40:70:7e:f4:96:41:bf:e7:d8:3d:98:05:d8:47:
54:9d:e9:4b:32:16:9a:ce:b5:8f:2c:02:c9:dc:a3:f6:e7:16:
df:34:e5:05:d2:89:0e:64:37:f4:d5:2a:6e:31:fc:e4:1e:9e:
91:68:f3:7a:d9:b8:ea:20:ef:36:bc:a7:a3:bd:ec:04:e7:c4:
41:08:0d:b7:61:f5:d1:0b:5f:2e:f3:e6:08:e2:80:13:c0:95:
61:98:c1:d2:92:7d:8d:84:ce:30:61:41:6f:1c:72:d6:04:1b:
70:02:91:93:57:9b:d0:9a:76:e3:05:a8:56:1a:b3:ed:51:52:
85:42:a8:c4:11:3c:58:10:81:37:fd:a3:af:b7:21:77:01:5f:
60:c4:39:2a:cf:17:d5:b3:ab:45:08:68:69:16:cd:b6:2b:e1:
26:d8:17:67:30:7e:ca:3f:2d:58:3a:82:44:51:14:3e:95:0c:
75:f8:a2:74:f8:11:8c:a2:52:89:9d:fe:cd:22:9c:62:ba:2a:
b2:6f:8c:36:95:6b:1b:11:6e:0c:8c:60:0a:d8:dd:66:36:de:
67:9f:4f:fe:14:9f:ac:8f:ae:09:7f:0e:06:4c:0f:76:cf:1d:
84:24:93:68:59:3a:b3:5d:31:e7:42:01:63:a4:34:37:cc:05:
90:7e:b9:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZ1tglswg4u+M269MDEdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGE1YjRjZTk1ZmEwYmRmNjA1NDE2OWU3N2FlZmM4MjY1
ZGRiYzQwHhcNMjUxMDI4MDYwMDMwWhcNMjUxMDI5MDYwMDMwWjAzMTEwLwYDVQQD
EyhmNGFkNDlhZWJkNzE4NzZlM2NiZGUwMTc5ODQ2YmRhM2QwZDRiMmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1gWocbEWV27bfScmwNtwFtELWqx
1BzJMLLCrB+aKoOnQfsiAHGCTNINzhzP2sLqkh3rZgkRN43fuaw8gHpjcK+x+i+U
KrBtpICs0lQvm7UELNz1U5oUoYwhj8i6Jtica1M7LhxF6SverV2XIUz8HUFwc6YZ
V6XE9ds4+I5hE9FY+IMJkDTodVVGYLUBJkoChieVfZ1JxXpwoMTnS1E4kukX1cao
kRh+iztYIuwpjqzlyW5aYpfB1MCZl1MJhfU35bj5R4iXjPCo4EjEA4X67TEq1crK
e0lDC3t4XAdow10NW5+Zl1Tx8ifhaNedRyViz9FPcQeyi7BGW8TbbWNFEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPStSa69cYduPL3gF5hGvaPQ1LL5MB8GA1UdIwQY
MBaAFM3aW0zpX6C99gVBaed678gmXdvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemRwYlRPbGZvTDMyQlVGcDUzcnZ5Q1pkMjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84ZTIzZTUtZGIyOC00NWVkLWI2N2Yt
MmFkZDVlNzk3Yzc1LzEvemRwYlRPbGZvTDMyQlVGcDUzcnZ5Q1pkMjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84ZTIzZTUtZGIyOC00NWVkLWI2N2YtMmFkZDVlNzk3Yzc1
LzEvemRwYlRPbGZvTDMyQlVGcDUzcnZ5Q1pkMjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsim5EBw
fvSWQb/n2D2YBdhHVJ3pSzIWms61jywCydyj9ucW3zTlBdKJDmQ39NUqbjH85B6e
kWjzetm46iDvNryno73sBOfEQQgNt2H10QtfLvPmCOKAE8CVYZjB0pJ9jYTOMGFB
bxxy1gQbcAKRk1eb0Jp24wWoVhqz7VFShUKoxBE8WBCBN/2jr7chdwFfYMQ5Ks8X
1bOrRQhoaRbNtivhJtgXZzB+yj8tWDqCRFEUPpUMdfiidPgRjKJSiZ3+zSKcYroq
sm+MNpVrGxFuDIxgCtjdZjbeZ59P/hSfrI+uCX8OBkwPds8dhCSTaFk6s10x50IB
Y6Q0N8wFkH657g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 08:52:47 2025 by rpki-client