Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
File: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft (raw, json)
Hash identifier: mSTZ1sp1ibt40UfLZ5txkzUzGZbGBNp+4uJZFL/9p5U=
Subject key identifier: 18:05:3D:5F:3A:BE:1A:B3:52:F5:E6:97:2D:75:40:C6:F4:B2:96:93
Authority key identifier: D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
Certificate issuer: /CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Certificate serial: 019A19F43CDFA5DCA301DC15419E3AA887E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
Manifest number: 0254
Signing time: Sat 25 Oct 2025 06:00:28 +0000
Manifest this update: Sat 25 Oct 2025 06:00:28 +0000
Manifest next update: Sun 26 Oct 2025 06:00:28 +0000
Files and hashes: 1: 0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl (hash: g8KtX74ZWyjAf65dY3bdpprF6k3cTfLgeO4WNTOoeSc=)
2: 7YhU_vK5G08AkR9W5LfWHGVyypQ.roa (hash: RlhL4E2mBOXIjwSddZ4sZnexQ4dNTH+ubROkoPIYvn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:3c:df:a5:dc:a3:01:dc:15:41:9e:3a:a8:87:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1988341d3607865f50f5bb02a9a3f5c2de58a92
Validity
Not Before: Oct 25 06:00:28 2025 GMT
Not After : Oct 26 06:00:28 2025 GMT
Subject: CN=18053d5f3abe1ab352f5e6972d7540c6f4b29693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:bb:03:0b:90:d1:bd:49:47:e0:5f:32:f3:
ad:3d:1d:ba:98:98:7a:a4:a2:1c:10:42:49:3b:64:
c6:11:a9:04:9a:18:af:7c:a6:09:b3:98:89:54:6d:
96:d7:ea:68:e5:f7:53:4a:5a:fa:30:31:f2:ea:c6:
0d:8e:23:af:07:ad:a8:50:1c:79:e8:7c:53:69:0f:
b3:cf:a9:47:dd:e6:f1:15:36:0e:dc:0d:69:25:94:
05:18:c7:85:69:23:b8:5d:89:cd:93:aa:ba:9f:e8:
53:ef:c6:84:13:fb:f0:e0:73:ca:2c:23:ca:7d:15:
39:25:4b:58:29:c3:43:a4:51:a9:dc:d5:82:20:c2:
f5:82:3c:f4:9d:4c:38:87:28:31:fb:d9:df:77:39:
06:a2:61:e1:e8:c9:98:f0:77:dc:67:e7:6a:d3:d8:
13:51:5c:ae:4b:91:4b:fc:c2:4f:9f:a7:93:b6:f5:
40:eb:1f:24:f0:b8:92:cc:51:09:02:b1:be:a3:32:
de:1b:7c:bc:44:19:05:c2:7c:e9:86:65:da:9d:db:
b1:44:09:29:d4:d8:64:e1:36:b3:b8:7b:93:fb:68:
04:ce:0c:82:a5:59:86:ad:1b:3b:f6:59:1c:2e:7d:
6d:6e:db:8c:38:5f:7b:64:7f:a4:e2:19:b5:79:72:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:05:3D:5F:3A:BE:1A:B3:52:F5:E6:97:2D:75:40:C6:F4:B2:96:93
X509v3 Authority Key Identifier:
keyid:D1:98:83:41:D3:60:78:65:F5:0F:5B:B0:2A:9A:3F:5C:2D:E5:8A:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZiDQdNgeGX1D1uwKpo_XC3lipI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2329f3-a28e-49de-98a3-9320a1c73b1d/1/0ZiDQdNgeGX1D1uwKpo_XC3lipI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d9:c0:a1:6b:0a:43:c2:1a:a5:6a:3d:03:32:ee:7a:79:d7:
09:52:ae:3f:ca:1c:f9:e7:c7:41:63:3c:aa:18:fb:20:20:26:
cb:de:e9:07:52:43:29:0a:c6:e7:a3:5a:a7:6c:60:1d:dc:13:
f6:b3:be:37:37:73:20:da:4a:8a:e1:7c:eb:81:93:0e:a3:81:
22:e6:d9:63:75:ec:bb:99:62:db:3e:2c:95:a8:2c:76:ed:48:
e2:a6:6f:34:2a:21:45:2b:9f:cd:77:73:c0:e2:63:f8:78:0c:
17:10:e7:9e:36:84:00:e5:95:ee:3e:f4:f1:3c:8f:d4:04:61:
f0:7b:fc:db:cd:25:f9:5b:1f:d2:a3:5a:f5:da:28:be:04:08:
08:d5:69:63:7b:8c:99:1e:49:7b:8d:a9:e0:47:9d:fb:d2:41:
c5:c0:1a:bb:80:7b:82:b7:7c:13:8b:70:d7:3e:cc:eb:d0:91:
e4:90:33:54:ee:40:5b:76:5e:f5:28:4d:74:32:db:21:ad:80:
72:cc:79:14:55:8e:59:ba:7f:c9:df:af:6f:fc:f8:29:ea:41:
f3:34:d9:e8:e2:c6:71:7d:ce:0d:1a:09:36:24:2a:eb:45:c5:
c5:fa:28:19:6a:a3:34:d6:35:fb:67:9b:d5:04:b3:0b:e3:7b:
d7:0f:16:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoZ9DzfpdyjAdwVQZ46qIflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTg4MzQxZDM2MDc4NjVmNTBmNWJiMDJhOWEzZjVjMmRl
NThhOTIwHhcNMjUxMDI1MDYwMDI4WhcNMjUxMDI2MDYwMDI4WjAzMTEwLwYDVQQD
EygxODA1M2Q1ZjNhYmUxYWIzNTJmNWU2OTcyZDc1NDBjNmY0YjI5NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1267AwuQ0b1JR+BfMvOtPR26mJh6
pKIcEEJJO2TGEakEmhivfKYJs5iJVG2W1+po5fdTSlr6MDHy6sYNjiOvB62oUBx5
6HxTaQ+zz6lH3ebxFTYO3A1pJZQFGMeFaSO4XYnNk6q6n+hT78aEE/vw4HPKLCPK
fRU5JUtYKcNDpFGp3NWCIML1gjz0nUw4hygx+9nfdzkGomHh6MmY8HfcZ+dq09gT
UVyuS5FL/MJPn6eTtvVA6x8k8LiSzFEJArG+ozLeG3y8RBkFwnzphmXanduxRAkp
1Nhk4TazuHuT+2gEzgyCpVmGrRs79lkcLn1tbtuMOF97ZH+k4hm1eXKRlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgFPV86vhqzUvXmly11QMb0spaTMB8GA1UdIwQY
MBaAFNGYg0HTYHhl9Q9bsCqaP1wt5YqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMt
OTMyMGExYzczYjFkLzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMzI5ZjMtYTI4ZS00OWRlLTk4YTMtOTMyMGExYzczYjFk
LzEvMFppRFFkTmdlR1gxRDF1d0twb19YQzNsaXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNnAoWsK
Q8IapWo9AzLuennXCVKuP8oc+efHQWM8qhj7ICAmy97pB1JDKQrG56Nap2xgHdwT
9rO+NzdzINpKiuF864GTDqOBIubZY3Xsu5li2z4slagsdu1I4qZvNCohRSufzXdz
wOJj+HgMFxDnnjaEAOWV7j708TyP1ARh8Hv8280l+Vsf0qNa9doovgQICNVpY3uM
mR5Je42p4Eed+9JBxcAau4B7grd8E4tw1z7M69CR5JAzVO5AW3Ze9ShNdDLbIa2A
csx5FFWOWbp/yd+vb/z4KepB8zTZ6OLGcX3ODRoJNiQq60XFxfooGWqjNNY1+2eb
1QSzC+N71w8WMQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:04 2025 by rpki-client