Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: B0pTzcYimrtYBneKI0liORf/F2jYsiRoEBOMYqiNpbQ=
Subject key identifier: BE:62:E2:B4:A2:2F:BE:95:97:00:6D:33:76:6A:F8:82:57:61:63:23
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 019A4B8577BDD224DBC307949B5CA3FA3D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 15DE
Signing time: Mon 03 Nov 2025 21:00:29 +0000
Manifest this update: Mon 03 Nov 2025 21:00:29 +0000
Manifest next update: Tue 04 Nov 2025 21:00:29 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: 2Tco2iZmiHroDpuLCwMBYrMrXp+GYDWyKYO9K1zJDiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:77:bd:d2:24:db:c3:07:94:9b:5c:a3:fa:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Nov 3 21:00:29 2025 GMT
Not After : Nov 4 21:00:29 2025 GMT
Subject: CN=be62e2b4a22fbe9597006d33766af88257616323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:63:c0:0f:27:ae:ef:73:9c:ec:d6:cb:25:
3a:f5:49:df:78:bb:ff:29:8d:ba:54:46:c6:54:32:
86:10:b6:7b:2c:80:bd:91:b2:28:61:46:74:a1:96:
fa:fd:cd:fd:c1:2c:d3:19:0c:19:8f:fe:77:1f:a9:
d8:38:21:3b:f2:ea:91:50:91:67:01:19:31:63:61:
85:aa:3e:61:72:19:52:5e:97:95:46:98:14:77:4b:
dd:aa:23:b2:82:0b:6a:38:8e:da:db:f6:43:96:03:
24:f5:dd:28:d5:7d:7c:4f:9b:55:d7:12:a5:c7:21:
2c:00:9b:7a:75:5a:98:43:67:e5:8b:e7:f6:e4:ca:
82:03:d8:c6:12:ba:b2:c7:6b:fc:8f:be:1f:0f:5c:
3e:2b:b7:b4:96:5f:d3:08:07:33:60:40:92:35:ae:
f1:7b:5b:f5:20:dc:d1:dc:33:db:45:48:cd:d7:15:
84:b6:bf:bf:14:ac:9f:55:c2:76:f9:f6:41:c2:69:
a6:dc:47:0f:22:a7:f0:6b:c9:a1:f1:0a:93:53:d4:
87:87:dd:39:88:b2:09:02:c5:8d:7d:17:4a:45:42:
fc:ed:50:d8:03:b0:82:85:f5:81:0b:13:6d:e3:33:
20:ed:4b:c5:eb:9a:d0:09:a1:df:6c:fb:1a:de:1a:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:E2:B4:A2:2F:BE:95:97:00:6D:33:76:6A:F8:82:57:61:63:23
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6d:39:a0:19:1e:bb:ca:dd:c3:6d:b9:84:b3:1d:0a:0c:bb:
a2:ff:f5:5d:a8:7b:a6:a1:72:88:ab:72:8d:90:0f:85:87:c3:
46:7e:bb:43:ee:30:33:10:bb:07:dd:83:dd:61:bf:a0:39:35:
ff:4c:9f:cb:97:25:53:c9:8c:f0:01:4a:bc:e6:d5:8f:6a:1f:
b8:7e:a7:ff:a2:9b:e7:2a:f7:2d:45:d6:b8:cb:1a:8c:18:02:
de:ef:13:3e:c2:4b:a6:13:ac:78:20:fc:03:79:3d:98:ca:e6:
1a:09:2d:33:40:e1:5e:49:75:42:06:7c:03:72:d1:bb:79:be:
78:da:10:b9:24:d9:e8:16:57:92:03:b1:9d:b7:9b:3e:b2:28:
3f:d6:bf:bf:88:42:cf:35:33:39:1d:21:80:1e:42:83:b3:fa:
66:9c:c9:73:5e:20:97:c4:5e:09:86:64:a2:3d:d3:60:ca:b2:
60:a3:7d:7e:70:26:a0:11:7b:53:00:bc:e9:3d:a5:a7:40:cc:
91:b3:12:12:09:1c:6e:f5:73:0a:25:e9:24:4d:8f:70:55:03:
3a:be:42:a6:fc:c4:e3:1c:14:3a:f6:1e:5d:57:04:af:fe:dd:
4f:17:d3:f4:8c:52:32:af:43:74:0f:39:1d:68:c6:56:ce:ae:
a4:9d:45:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpLhXe90iTbwweUm1yj+j1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh
MGNmNmEwHhcNMjUxMTAzMjEwMDI5WhcNMjUxMTA0MjEwMDI5WjAzMTEwLwYDVQQD
EyhiZTYyZTJiNGEyMmZiZTk1OTcwMDZkMzM3NjZhZjg4MjU3NjE2MzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM1jwA8nru9znOzWyyU69UnfeLv/
KY26VEbGVDKGELZ7LIC9kbIoYUZ0oZb6/c39wSzTGQwZj/53H6nYOCE78uqRUJFn
ARkxY2GFqj5hchlSXpeVRpgUd0vdqiOyggtqOI7a2/ZDlgMk9d0o1X18T5tV1xKl
xyEsAJt6dVqYQ2fli+f25MqCA9jGErqyx2v8j74fD1w+K7e0ll/TCAczYECSNa7x
e1v1INzR3DPbRUjN1xWEtr+/FKyfVcJ2+fZBwmmm3EcPIqfwa8mh8QqTU9SHh905
iLIJAsWNfRdKRUL87VDYA7CChfWBCxNt4zMg7UvF65rQCaHfbPsa3hoSOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5i4rSiL76VlwBtM3Zq+IJXYWMjMB8GA1UdIwQY
MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt
ZTIzMDQ2MmZjNTdiLzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi
LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzG05oBke
u8rdw225hLMdCgy7ov/1Xah7pqFyiKtyjZAPhYfDRn67Q+4wMxC7B92D3WG/oDk1
/0yfy5clU8mM8AFKvObVj2ofuH6n/6Kb5yr3LUXWuMsajBgC3u8TPsJLphOseCD8
A3k9mMrmGgktM0DhXkl1QgZ8A3LRu3m+eNoQuSTZ6BZXkgOxnbebPrIoP9a/v4hC
zzUzOR0hgB5Cg7P6ZpzJc14gl8ReCYZkoj3TYMqyYKN9fnAmoBF7UwC86T2lp0DM
kbMSEgkcbvVzCiXpJE2PcFUDOr5CpvzE4xwUOvYeXVcEr/7dTxfT9IxSMq9DdA85
HWjGVs6upJ1FSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:22 2025 by rpki-client