Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: 3vZpDSz1ziWNrdjmvi6zWouE+CioSNi4Ii/m8BydZeg=
Subject key identifier: C9:4C:67:B9:31:05:45:7E:C3:66:E2:9D:02:5C:B3:1A:6C:6E:AF:C4
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 019A7149D74273AAEBDD5E6E75157EB586C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 068A
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: K5apfLH74hizxWSCrdX8SkDkHdNHstMpMzCo78Qfc2k=)
2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d7:42:73:aa:eb:dd:5e:6e:75:15:7e:b5:86:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=c94c67b93105457ec366e29d025cb31a6c6eafc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:6e:c4:2d:41:1f:f5:f6:fe:d5:40:2b:ba:
43:26:8f:f1:5c:f1:cb:7b:b8:66:25:7c:19:41:58:
d8:14:cd:03:c7:5b:9d:d2:56:e6:9f:df:0c:96:24:
b8:d2:98:90:0e:40:1d:29:5c:be:05:79:74:75:40:
1b:c9:75:33:16:c8:43:8e:6f:10:61:11:93:06:97:
bf:9a:f2:59:c3:39:d7:b8:83:48:96:f8:46:bc:9a:
25:11:c1:14:ac:7d:f2:a7:d5:a7:d7:cc:93:38:5d:
5a:dd:bc:47:6e:02:98:4a:18:e9:94:f6:1a:38:07:
2b:ac:38:3a:99:08:4f:bc:66:7e:5b:86:f9:f2:88:
5c:b3:8f:37:31:83:f1:fe:60:ce:8c:01:f4:d6:be:
48:57:25:62:6c:ab:24:ac:30:89:99:52:96:3f:ba:
c6:7c:33:95:0c:e9:89:79:41:3e:d0:8d:db:da:21:
91:a5:1e:83:5a:de:b1:29:c7:33:e7:d8:d2:d6:09:
97:2a:c1:a7:06:0e:e7:41:db:7b:02:cc:06:32:eb:
7e:10:ea:b1:74:de:8f:f9:81:97:f4:d5:08:da:4b:
69:68:b9:2d:31:2e:3e:31:c7:a9:8a:f1:54:5d:a1:
93:e3:83:e6:d4:64:e3:2e:1d:39:cc:b2:71:be:be:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:67:B9:31:05:45:7E:C3:66:E2:9D:02:5C:B3:1A:6C:6E:AF:C4
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:97:58:f9:c1:94:6b:07:8b:e1:cf:1c:73:91:77:69:d0:
aa:ea:8a:b9:1d:18:46:bf:e3:58:1d:14:7f:a5:75:f6:50:9d:
9d:ed:e3:49:7c:19:d3:0f:00:ea:cc:96:d3:55:a6:3d:ca:ac:
1a:1d:c5:c0:87:1b:a2:9f:c4:6f:24:4b:23:e7:1f:13:03:62:
36:22:c1:e2:0b:9e:1c:8f:c7:48:86:0d:77:93:c5:b4:74:03:
f5:8b:3a:3f:28:45:7e:7c:df:f7:42:23:30:1a:ac:aa:bf:f3:
83:00:da:48:03:f4:7e:94:2b:bb:cc:e0:28:0a:7b:ea:19:82:
e8:03:f3:05:ad:12:40:c7:d0:f1:ce:a5:03:e5:ed:ef:ff:18:
8d:f8:6a:c6:10:75:05:fa:19:78:c1:f8:08:9e:ee:b7:6c:6e:
b1:41:76:b4:9a:89:09:cf:a1:69:0b:a8:a2:bf:aa:e1:b1:86:
94:a5:f1:26:df:b7:a7:fc:c3:eb:82:a0:32:a1:56:37:d5:d1:
d1:31:cb:5a:fe:9b:fa:b9:7a:23:b9:b9:6e:95:aa:59:2f:73:
01:07:37:a4:de:dc:e5:9d:f6:f7:38:8f:bb:b9:db:5c:cd:bf:
95:fb:3a:80:ef:1a:ff:b9:f2:a4:76:11:ab:27:bb:d1:23:c1:
3b:b4:73:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSddCc6rr3V5udRV+tYbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTU2Y2IyZThiYmI0ZDQyOTcyOGUwMWUyMGZkM2M4ZTA1
ZjMzMjgwHhcNMjUxMTExMDUwMDU1WhcNMjUxMTEyMDUwMDU1WjAzMTEwLwYDVQQD
EyhjOTRjNjdiOTMxMDU0NTdlYzM2NmUyOWQwMjVjYjMxYTZjNmVhZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uFuxC1BH/X2/tVAK7pDJo/xXPHL
e7hmJXwZQVjYFM0Dx1ud0lbmn98MliS40piQDkAdKVy+BXl0dUAbyXUzFshDjm8Q
YRGTBpe/mvJZwznXuINIlvhGvJolEcEUrH3yp9Wn18yTOF1a3bxHbgKYShjplPYa
OAcrrDg6mQhPvGZ+W4b58ohcs483MYPx/mDOjAH01r5IVyVibKskrDCJmVKWP7rG
fDOVDOmJeUE+0I3b2iGRpR6DWt6xKccz59jS1gmXKsGnBg7nQdt7AswGMut+EOqx
dN6P+YGX9NUI2ktpaLktMS4+McepivFUXaGT44Pm1GTjLh05zLJxvr4QyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlMZ7kxBUV+w2binQJcsxpsbq/EMB8GA1UdIwQY
MBaAFNWVbLLou7TUKXKOAeIP08jgXzMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQt
OThkYWJlM2UyNjYyLzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jYmE3MTgtYWE3My00ZDM3LTlhMDQtOThkYWJlM2UyNjYy
LzEvMVpWc3N1aTd0TlFwY280QjRnX1R5T0JmTXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaiXWPnB
lGsHi+HPHHORd2nQquqKuR0YRr/jWB0Uf6V19lCdne3jSXwZ0w8A6syW01WmPcqs
Gh3FwIcbop/EbyRLI+cfEwNiNiLB4gueHI/HSIYNd5PFtHQD9Ys6PyhFfnzf90Ij
MBqsqr/zgwDaSAP0fpQru8zgKAp76hmC6APzBa0SQMfQ8c6lA+Xt7/8YjfhqxhB1
BfoZeMH4CJ7ut2xusUF2tJqJCc+haQuoor+q4bGGlKXxJt+3p/zD64KgMqFWN9XR
0THLWv6b+rl6I7m5bpWqWS9zAQc3pN7c5Z329ziPu7nbXM2/lfs6gO8a/7nypHYR
qye70SPBO7RznA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:27 2025 by rpki-client