Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: knB5qTgkEvziyIJuQHWrSNCxO1nDGbm3SpgUv5cwjOQ=
Subject key identifier: 30:06:9A:80:79:72:B9:06:89:06:13:6B:27:95:0D:EA:C9:54:21:A3
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 019933EE71B747EB1455175E2D78A7158C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0CE3
Signing time: Wed 10 Sep 2025 14:01:28 +0000
Manifest this update: Wed 10 Sep 2025 14:01:28 +0000
Manifest next update: Thu 11 Sep 2025 14:01:28 +0000
Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: jDUF/y3HzGIFA8l+9i6mvTG6GKw8t8l05QLclLaHrrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:71:b7:47:eb:14:55:17:5e:2d:78:a7:15:8c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Sep 10 14:01:28 2025 GMT
Not After : Sep 11 14:01:28 2025 GMT
Subject: CN=30069a807972b9068906136b27950deac95421a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:8f:97:a5:08:db:7b:23:25:dc:16:50:5d:
05:7d:7b:be:5a:9d:4a:dd:25:52:57:bb:7e:2e:f5:
1c:32:e6:33:d0:c4:7e:78:94:00:63:6b:17:f7:c8:
13:65:26:a7:1e:05:44:3b:63:a6:00:28:c9:31:93:
3b:6d:cc:e0:f9:33:bb:20:e0:9f:39:4b:98:4e:19:
ab:4e:be:db:4e:2f:b6:83:2a:70:39:30:88:6a:c7:
bf:ef:7b:c1:15:85:39:75:3e:bc:ec:e5:d5:3e:0d:
87:e3:7e:01:dd:ea:da:14:4a:1f:a5:ed:48:e1:b7:
d4:92:f6:7b:19:b7:4b:54:98:0d:83:14:b5:3c:11:
1d:2a:9e:77:91:a7:12:f5:d7:08:b5:c0:c2:15:52:
d1:09:44:32:c9:50:65:94:f6:4b:43:8e:c5:01:90:
d8:35:5f:2b:04:7f:ff:a4:6f:44:b5:d2:99:93:7e:
d2:f0:42:7e:9c:02:14:91:c2:ec:e3:c6:af:3d:1e:
22:06:c1:61:ee:b2:51:51:60:e8:61:a7:b8:eb:0c:
06:50:4f:e6:de:94:51:40:35:54:d6:14:ad:a3:2c:
98:91:6e:85:62:19:cb:c0:d4:00:98:76:f9:e9:d2:
b5:5e:75:0a:40:be:14:b4:e5:7e:e2:4f:0a:32:7f:
75:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:06:9A:80:79:72:B9:06:89:06:13:6B:27:95:0D:EA:C9:54:21:A3
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:48:c2:e4:35:6b:27:0f:94:b6:0d:c0:7b:ae:06:68:b6:c7:
13:bd:55:53:00:45:a9:79:8c:be:61:95:61:b9:74:3d:2d:83:
9a:17:f5:f6:74:2d:90:40:69:82:46:00:02:6f:10:b4:51:13:
d3:b1:4c:e6:1b:3b:3e:30:a3:88:ad:df:4a:58:c0:fe:54:4a:
eb:57:84:a6:c3:6f:e4:28:8a:05:80:54:0e:00:00:b6:ed:55:
33:70:30:a5:3a:f9:d6:77:ad:e6:e8:95:92:64:a5:45:cf:63:
02:fa:65:b9:c6:06:ea:40:91:31:52:e7:6c:1c:44:1d:19:36:
7c:a2:40:40:25:72:f0:d8:ab:cd:47:ce:1e:db:ad:53:28:46:
87:61:49:78:86:93:2e:d5:4f:2d:d8:71:01:ef:7a:2b:2c:bc:
46:98:0c:8a:e4:8f:e9:38:5c:22:4d:de:de:94:99:51:23:15:
24:f8:2a:a9:1b:c4:f5:64:cc:d9:dd:e1:07:cf:8f:44:83:f8:
82:1a:74:e2:89:e0:7c:32:5d:48:bb:32:5e:64:7d:fd:c6:91:
f3:eb:0e:20:fb:a3:5f:5e:45:6c:38:e6:bc:3e:82:40:f2:85:
69:23:f9:dc:d6:ec:27:6a:27:14:64:60:52:e7:28:bc:07:22:
47:b9:85:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkz7nG3R+sUVRdeLXinFYwiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTc5OGE4ZGE5OTk5ZGRmNTNhM2M4ZDM4ZjM2ZjE3ZWNk
NDU0MzIwHhcNMjUwOTEwMTQwMTI4WhcNMjUwOTExMTQwMTI4WjAzMTEwLwYDVQQD
EygzMDA2OWE4MDc5NzJiOTA2ODkwNjEzNmIyNzk1MGRlYWM5NTQyMWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntuPl6UI23sjJdwWUF0FfXu+Wp1K
3SVSV7t+LvUcMuYz0MR+eJQAY2sX98gTZSanHgVEO2OmACjJMZM7bczg+TO7IOCf
OUuYThmrTr7bTi+2gypwOTCIase/73vBFYU5dT687OXVPg2H434B3eraFEofpe1I
4bfUkvZ7GbdLVJgNgxS1PBEdKp53kacS9dcItcDCFVLRCUQyyVBllPZLQ47FAZDY
NV8rBH//pG9EtdKZk37S8EJ+nAIUkcLs48avPR4iBsFh7rJRUWDoYae46wwGUE/m
3pRRQDVU1hStoyyYkW6FYhnLwNQAmHb56dK1XnUKQL4UtOV+4k8KMn91MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAGmoB5crkGiQYTayeVDerJVCGjMB8GA1UdIwQY
MBaAFM6XmKjamZnd9To8jTjzbxfs1FQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYt
OThmY2IzYThiYzllLzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYtOThmY2IzYThiYzll
LzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkjC5DVr
Jw+Utg3Ae64GaLbHE71VUwBFqXmMvmGVYbl0PS2Dmhf19nQtkEBpgkYAAm8QtFET
07FM5hs7PjCjiK3fSljA/lRK61eEpsNv5CiKBYBUDgAAtu1VM3AwpTr51net5uiV
kmSlRc9jAvplucYG6kCRMVLnbBxEHRk2fKJAQCVy8NirzUfOHtutUyhGh2FJeIaT
LtVPLdhxAe96Kyy8RpgMiuSP6ThcIk3e3pSZUSMVJPgqqRvE9WTM2d3hB8+PRIP4
ghp04ongfDJdSLsyXmR9/caR8+sOIPujX15FbDjmvD6CQPKFaSP53NbsJ2onFGRg
UucovAciR7mF9Q==
-----END CERTIFICATE-----
Generated at Wed Sep 10 16:04:39 2025 by rpki-client