Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: 3Vno5yvDb62bew+cL+GVXUKrjwI2SDfjOpq/NK9wFSE=
Subject key identifier: C1:CD:39:4B:B8:B3:27:98:17:D6:16:66:4B:BA:8C:6E:89:49:A3:45
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 019A2C31BCF82D449F3AFC242B50FB1D30E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 13B5
Signing time: Tue 28 Oct 2025 19:00:48 +0000
Manifest this update: Tue 28 Oct 2025 19:00:48 +0000
Manifest next update: Wed 29 Oct 2025 19:00:48 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: 23Jgm8bAK8zKmoOaWd95xcNwfzXlpscYZZt4x2d4IEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:bc:f8:2d:44:9f:3a:fc:24:2b:50:fb:1d:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Oct 28 19:00:48 2025 GMT
Not After : Oct 29 19:00:48 2025 GMT
Subject: CN=c1cd394bb8b3279817d616664bba8c6e8949a345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:a7:38:ea:1a:ac:d1:47:ad:1e:46:cc:3f:
83:ae:01:9c:1f:40:55:66:22:eb:98:2a:29:01:3a:
7d:3d:92:d5:d5:f6:c0:24:90:a0:96:b8:dc:da:8b:
cc:07:a0:7f:b2:6d:8a:68:f4:0b:32:c7:2c:0d:61:
1a:0f:9c:33:6d:f2:e8:d3:88:e7:7e:7f:64:63:5f:
3c:85:db:79:48:31:1c:1a:6e:43:32:46:fd:0f:1c:
60:68:d2:57:af:6d:0b:65:5c:a6:5a:10:54:71:01:
6b:49:e1:1f:17:51:73:0f:d2:f6:98:73:77:d4:00:
7c:4a:87:d1:f4:d8:ac:70:f3:7a:29:1f:a4:51:4d:
2d:ca:06:29:28:a2:0d:97:72:fb:82:1a:e3:0a:34:
85:ca:55:7a:c7:e0:68:74:85:7a:55:c9:f9:73:3c:
0d:77:2a:63:94:a2:5d:78:3d:62:f6:85:05:02:09:
72:ff:d8:6f:a6:51:d9:db:64:45:89:9b:b7:77:78:
18:ca:0e:66:34:e4:ae:4a:8d:20:70:f7:c7:b1:4c:
81:55:3f:2e:02:f3:8f:fd:e8:08:e8:9d:c7:17:21:
17:4e:cb:99:53:22:cc:2d:87:4a:ed:a6:bd:af:bb:
8c:2a:ad:9c:a6:79:c9:2c:4f:6b:2e:d4:0e:53:08:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:39:4B:B8:B3:27:98:17:D6:16:66:4B:BA:8C:6E:89:49:A3:45
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:57:7d:5c:11:30:ac:2e:d8:f9:88:3b:54:1e:7d:5f:3b:
28:7c:d2:8e:79:87:a1:53:cb:1b:1c:07:49:9d:6f:75:76:85:
3d:81:a7:19:67:d9:c4:8c:e7:30:45:a7:23:ae:aa:87:f3:4a:
b9:b3:b2:7c:fb:13:7b:56:0d:cc:21:81:34:ec:1e:ef:32:60:
6e:1c:ad:ae:f5:f3:8b:9f:c7:a9:9b:ed:a5:c4:ea:cd:8f:a4:
59:af:60:e1:7e:9e:f5:5d:66:6f:0f:bb:e5:fc:03:0f:68:cc:
3e:57:8f:0a:cc:01:b5:94:10:fe:2c:0d:06:97:85:04:95:83:
9d:53:eb:4e:30:e7:72:ee:76:3b:6e:21:ef:d4:1a:bf:87:9f:
31:e3:2b:c1:df:b5:11:df:7a:5c:ee:b9:2f:ee:35:48:f0:c6:
a5:cd:6c:6a:3d:ff:2f:67:3e:d9:ae:ff:2f:42:69:84:fc:73:
b4:e3:22:a5:01:23:40:e1:26:11:d7:f5:7d:4f:8d:52:12:94:
1f:84:81:e6:b4:79:54:f4:9e:63:b0:24:02:a2:a5:24:c1:62:
1e:8e:1b:d6:a6:42:c7:8c:8c:07:8a:83:0b:ce:48:56:69:e0:
32:d5:c0:ea:9d:00:ac:57:3f:10:31:d3:d3:b5:95:66:59:43:
ff:1d:4a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosMbz4LUSfOvwkK1D7HTDjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjVlY2Q2MTVmM2E2YzU2MzljNTFlOWUzMTk3NjczMTUy
MDc4YjgwHhcNMjUxMDI4MTkwMDQ4WhcNMjUxMDI5MTkwMDQ4WjAzMTEwLwYDVQQD
EyhjMWNkMzk0YmI4YjMyNzk4MTdkNjE2NjY0YmJhOGM2ZTg5NDlhMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmenOOoarNFHrR5GzD+DrgGcH0BV
ZiLrmCopATp9PZLV1fbAJJCglrjc2ovMB6B/sm2KaPQLMscsDWEaD5wzbfLo04jn
fn9kY188hdt5SDEcGm5DMkb9DxxgaNJXr20LZVymWhBUcQFrSeEfF1FzD9L2mHN3
1AB8SofR9NiscPN6KR+kUU0tygYpKKINl3L7ghrjCjSFylV6x+BodIV6Vcn5czwN
dypjlKJdeD1i9oUFAgly/9hvplHZ22RFiZu3d3gYyg5mNOSuSo0gcPfHsUyBVT8u
AvOP/egI6J3HFyEXTsuZUyLMLYdK7aa9r7uMKq2cpnnJLE9rLtQOUwhCRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHNOUu4syeYF9YWZku6jG6JSaNFMB8GA1UdIwQY
MBaAFGRl7NYV86bFY5xR6eMZdnMVIHi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMt
NTRjN2M0ZWU1YmI1LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NjA0MDQtYjY2NC00MGNjLTljYWMtNTRjN2M0ZWU1YmI1
LzEvWkdYczFoWHpwc1ZqbkZIcDR4bDJjeFVnZUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+VXfVwR
MKwu2PmIO1QefV87KHzSjnmHoVPLGxwHSZ1vdXaFPYGnGWfZxIznMEWnI66qh/NK
ubOyfPsTe1YNzCGBNOwe7zJgbhytrvXzi5/HqZvtpcTqzY+kWa9g4X6e9V1mbw+7
5fwDD2jMPlePCswBtZQQ/iwNBpeFBJWDnVPrTjDncu52O24h79Qav4efMeMrwd+1
Ed96XO65L+41SPDGpc1saj3/L2c+2a7/L0JphPxztOMipQEjQOEmEdf1fU+NUhKU
H4SB5rR5VPSeY7AkAqKlJMFiHo4b1qZCx4yMB4qDC85IVmngMtXA6p0ArFc/EDHT
07WVZllD/x1Kiw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 01:25:48 2025 by rpki-client