Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: 1Ms6pL9Ue7I3XYOEJ5JGxKFU+lag/Kk59TIT0YZssis=
Subject key identifier: C1:87:5D:E1:11:6A:30:49:5D:F8:3A:FF:CB:A7:DB:7C:FF:03:43:52
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 019A71B8E623BFE04F99FACD3F3AF668A478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: CncUoHucI4kMIqMeDUYSjOy1DxrTs272fqi8qLIenlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e6:23:bf:e0:4f:99:fa:cd:3f:3a:f6:68:a4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=c1875de1116a30495df83affcba7db7cff034352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:26:ae:ca:ff:1b:69:2a:12:f6:09:2a:ce:
9f:6f:e5:65:76:8e:18:39:19:ec:1f:94:0f:2e:cd:
a2:14:97:99:47:95:04:00:8d:19:95:f2:5a:6c:21:
2f:86:6d:5b:d2:ff:27:8c:70:11:60:ab:f3:88:dc:
c7:3c:ad:fb:7c:9a:65:ba:e7:cf:b7:1c:43:2d:b6:
01:fb:b2:38:fb:c5:c6:8d:32:e3:75:88:ba:31:98:
41:12:c8:bc:fa:07:71:93:24:59:b9:14:69:34:dc:
5b:db:7b:2d:5d:af:69:14:4f:4e:08:78:c6:41:0f:
65:69:8f:03:e6:77:b9:cc:43:ab:ce:d2:b1:6a:8e:
a6:f9:2e:30:55:04:48:cb:3a:6c:44:01:73:8e:28:
13:17:da:3a:4b:c2:e7:30:88:b9:73:b4:c9:a7:a0:
82:d8:eb:23:a1:70:6e:d9:d8:e9:47:87:eb:82:43:
22:e0:7f:c9:35:c1:c1:a5:e1:26:f5:7e:cd:eb:e5:
97:f2:fb:7a:0d:6e:fa:e7:27:d6:d4:54:b6:53:ef:
59:68:e6:99:a1:35:d1:e7:b5:a3:29:1e:4a:24:b2:
11:cc:7b:e4:54:c0:0c:8f:56:5b:2c:f4:e7:59:d5:
ad:ab:d5:bc:50:7a:91:ba:70:78:ff:82:17:83:e8:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:87:5D:E1:11:6A:30:49:5D:F8:3A:FF:CB:A7:DB:7C:FF:03:43:52
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d4:85:04:cb:36:4b:eb:fc:9f:f7:2c:7a:71:fb:0f:6c:ee:
47:c8:62:65:98:bc:cb:75:b9:07:37:ef:59:53:30:a5:7a:dc:
ac:92:59:ca:63:fd:fc:ff:f4:50:38:72:d7:62:44:63:c5:d6:
f8:d5:7b:49:e0:a6:91:b8:dd:e9:4c:5d:d5:ac:55:82:c3:da:
8d:22:15:e0:1b:ee:ca:b3:83:b0:b9:51:c3:42:ac:61:e7:5d:
e1:88:30:b1:17:53:ee:4a:f2:84:0c:59:b8:13:af:05:2f:45:
e6:fe:9b:6f:1d:c4:e2:5f:95:e8:a3:92:22:7c:c0:7e:95:a3:
22:29:b2:85:d2:91:94:46:aa:73:57:a2:8e:e5:cd:99:6d:48:
bd:d4:ee:79:98:8e:47:3f:78:55:e3:35:ec:10:6b:ea:86:e4:
61:75:f9:6e:ee:8a:c2:5a:9c:9d:31:bb:17:4d:e5:c5:90:42:
29:94:69:05:36:0a:d5:b0:07:e6:75:5e:fe:af:60:ae:b4:a1:
d7:4b:20:bd:bc:9f:4d:be:30:10:5b:f0:8f:d8:ff:fa:c2:6a:
1b:c8:47:6f:e3:6c:c4:a7:84:6a:63:63:3f:2d:79:20:54:3e:
b7:3d:83:0d:98:15:be:33:53:2d:0c:85:97:fd:05:b6:54:e2:
69:bf:f0:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOYjv+BPmfrNPzr2aKR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk
YzA4OWMwHhcNMjUxMTExMDcwMjE0WhcNMjUxMTEyMDcwMjE0WjAzMTEwLwYDVQQD
EyhjMTg3NWRlMTExNmEzMDQ5NWRmODNhZmZjYmE3ZGI3Y2ZmMDM0MzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQEmrsr/G2kqEvYJKs6fb+Vldo4Y
ORnsH5QPLs2iFJeZR5UEAI0ZlfJabCEvhm1b0v8njHARYKvziNzHPK37fJpluufP
txxDLbYB+7I4+8XGjTLjdYi6MZhBEsi8+gdxkyRZuRRpNNxb23stXa9pFE9OCHjG
QQ9laY8D5ne5zEOrztKxao6m+S4wVQRIyzpsRAFzjigTF9o6S8LnMIi5c7TJp6CC
2OsjoXBu2djpR4frgkMi4H/JNcHBpeEm9X7N6+WX8vt6DW765yfW1FS2U+9ZaOaZ
oTXR57WjKR5KJLIRzHvkVMAMj1ZbLPTnWdWtq9W8UHqRunB4/4IXg+jBgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGHXeERajBJXfg6/8un23z/A0NSMB8GA1UdIwQY
MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt
MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz
LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINSFBMs2
S+v8n/csenH7D2zuR8hiZZi8y3W5BzfvWVMwpXrcrJJZymP9/P/0UDhy12JEY8XW
+NV7SeCmkbjd6Uxd1axVgsPajSIV4BvuyrODsLlRw0KsYedd4YgwsRdT7kryhAxZ
uBOvBS9F5v6bbx3E4l+V6KOSInzAfpWjIimyhdKRlEaqc1eijuXNmW1IvdTueZiO
Rz94VeM17BBr6obkYXX5bu6KwlqcnTG7F03lxZBCKZRpBTYK1bAH5nVe/q9grrSh
10sgvbyfTb4wEFvwj9j/+sJqG8hHb+NsxKeEamNjPy15IFQ+tz2DDZgVvjNTLQyF
l/0FtlTiab/wLQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:24 2025 by rpki-client