Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File: zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier: /eTf/ka2KTE6fMVSLJLSAhQxefF9eB0SnT25ND1GYEE=
Subject key identifier: B3:F1:85:6D:70:83:AA:2D:69:D5:32:B7:CC:C9:D0:7A:15:6D:B6:5E
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer: /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial: 019A714A2FE35F5C63D0185B774222497556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number: 025A
Signing time: Tue 11 Nov 2025 05:01:18 +0000
Manifest this update: Tue 11 Nov 2025 05:01:18 +0000
Manifest next update: Wed 12 Nov 2025 05:01:18 +0000
Files and hashes: 1: BE_olsmmnp-joM_N2rLYKLd8dek.roa (hash: ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=)
2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: y2Q6+YM9DA72PuBxLmVSxiUK0txfE4LUZBhGwz5q35I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2f:e3:5f:5c:63:d0:18:5b:77:42:22:49:75:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Validity
Not Before: Nov 11 05:01:18 2025 GMT
Not After : Nov 12 05:01:18 2025 GMT
Subject: CN=b3f1856d7083aa2d69d532b7ccc9d07a156db65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:de:e9:9e:e7:91:02:61:dd:0c:cc:47:b8:
63:d0:ce:31:5c:3a:13:af:c8:67:22:8d:fa:e6:56:
e5:fc:50:43:b0:c8:b5:7a:6d:79:b4:45:48:eb:6a:
2e:e3:04:fb:f7:df:5c:80:82:11:bd:1b:3b:6e:0d:
78:f3:13:59:37:b0:a1:0e:46:fd:39:96:50:1f:8e:
60:d8:99:fd:2f:9a:97:67:d3:a3:a8:fe:32:0b:48:
7a:48:c0:0a:b3:bc:32:55:81:6c:9e:23:b1:e6:8c:
7e:e5:9a:60:2f:f4:82:2f:91:95:55:7c:74:a7:5b:
24:18:29:4a:46:00:c4:0e:7c:74:9b:b0:fc:b6:b8:
a1:76:3c:b2:b1:b4:7b:30:e9:db:c0:e2:92:6e:d6:
71:37:c3:bf:79:f7:0b:3d:1e:e7:0e:dc:46:d4:dc:
9a:61:3b:95:f2:55:3f:1c:80:85:82:f2:33:25:9a:
0f:c8:3c:a9:ff:8d:ee:14:38:bd:00:fe:bc:41:f3:
61:60:af:d6:9a:c6:76:2e:4f:d5:91:8e:16:e0:70:
e3:3e:1f:c8:1e:11:e3:ae:f0:ed:c3:3f:ad:c5:0a:
42:9e:92:7e:28:4c:5b:78:06:9a:97:47:21:c0:68:
79:2c:25:92:18:50:23:60:b5:40:00:c8:a7:70:90:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F1:85:6D:70:83:AA:2D:69:D5:32:B7:CC:C9:D0:7A:15:6D:B6:5E
X509v3 Authority Key Identifier:
keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ca:67:c9:d1:3a:2d:37:a3:1a:c9:ff:6a:2d:7d:3a:be:c9:
c8:0f:e7:ad:f3:c3:e5:50:c3:fe:6f:bd:b3:5e:7e:ca:d8:31:
3a:e5:29:44:15:49:dd:34:10:6e:f1:9b:bc:dd:79:25:1c:5d:
0b:ec:81:16:b9:f4:e3:c7:28:5c:7b:26:6d:87:23:c5:0a:c9:
e9:26:7a:e7:59:39:b5:2f:3f:4b:65:a4:83:c4:7d:f8:d4:32:
f1:fb:c9:43:f5:c8:17:d7:04:4f:07:71:9d:fe:7f:6b:74:a0:
b9:46:94:45:68:16:fa:c5:f3:fe:c1:b0:61:7a:c9:e6:ee:47:
fe:86:2a:8e:35:f7:f6:9c:31:2f:67:3f:43:38:33:d2:25:ed:
da:a5:c5:13:d1:6e:16:d6:92:55:62:f6:f4:0a:59:bd:ca:f1:
97:f1:5c:94:58:22:f7:b9:17:2b:19:e7:0e:2b:cc:56:66:c5:
02:85:75:51:19:1f:f8:52:0e:17:c8:2d:65:71:29:82:95:4a:
9b:be:a9:2a:d7:50:00:de:7e:98:e2:d0:2a:ca:58:98:7b:55:
7e:21:63:a8:18:89:b5:8e:c2:0c:43:fb:61:3c:0d:3d:bc:00:
ca:cb:52:29:19:78:93:08:34:6b:c8:ff:68:b6:be:0b:7d:b3:
f0:7d:c3:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSi/jX1xj0Bhbd0IiSXVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTRjNDY1ZDJkZjM0NThjMDI2MTBmODc4MjBjOWJjMmVi
MzMyNTMwHhcNMjUxMTExMDUwMTE4WhcNMjUxMTEyMDUwMTE4WjAzMTEwLwYDVQQD
EyhiM2YxODU2ZDcwODNhYTJkNjlkNTMyYjdjY2M5ZDA3YTE1NmRiNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ze6Z7nkQJh3QzMR7hj0M4xXDoT
r8hnIo365lbl/FBDsMi1em15tEVI62ou4wT7999cgIIRvRs7bg148xNZN7ChDkb9
OZZQH45g2Jn9L5qXZ9OjqP4yC0h6SMAKs7wyVYFsniOx5ox+5ZpgL/SCL5GVVXx0
p1skGClKRgDEDnx0m7D8trihdjyysbR7MOnbwOKSbtZxN8O/efcLPR7nDtxG1Nya
YTuV8lU/HICFgvIzJZoPyDyp/43uFDi9AP68QfNhYK/WmsZ2Lk/VkY4W4HDjPh/I
HhHjrvDtwz+txQpCnpJ+KExbeAaal0chwGh5LCWSGFAjYLVAAMincJA/pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPxhW1wg6otadUyt8zJ0HoVbbZeMB8GA1UdIwQY
MBaAFM3kxGXS3zRYwCYQ+HggybwuszJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMmI4MDItZWNjMS00MWFmLTg5ZWUt
ZmM5NTQ2OGNiNmFhLzEvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMmI4MDItZWNjMS00MWFmLTg5ZWUtZmM5NTQ2OGNiNmFh
LzEvemVURVpkTGZORmpBSmhENGVDREp2QzZ6TWxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMpnydE6
LTejGsn/ai19Or7JyA/nrfPD5VDD/m+9s15+ytgxOuUpRBVJ3TQQbvGbvN15JRxd
C+yBFrn048coXHsmbYcjxQrJ6SZ651k5tS8/S2Wkg8R9+NQy8fvJQ/XIF9cETwdx
nf5/a3SguUaURWgW+sXz/sGwYXrJ5u5H/oYqjjX39pwxL2c/Qzgz0iXt2qXFE9Fu
FtaSVWL29ApZvcrxl/FclFgi97kXKxnnDivMVmbFAoV1URkf+FIOF8gtZXEpgpVK
m76pKtdQAN5+mOLQKspYmHtVfiFjqBiJtY7CDEP7YTwNPbwAystSKRl4kwg0a8j/
aLa+C32z8H3D7g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client