Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: gAy+a9g/UjsGXIyyux0TjuJ171KKxm36lxjaiOgm14s=
Subject key identifier: D6:86:B2:5D:3F:E6:F6:7C:BF:A7:6D:AD:71:08:DD:23:6B:AA:01:B3
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 019A71B79F76A732F45334A6813D4A7C8669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 1072
Signing time: Tue 11 Nov 2025 07:00:50 +0000
Manifest this update: Tue 11 Nov 2025 07:00:50 +0000
Manifest next update: Wed 12 Nov 2025 07:00:50 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: VMnhlbt/q4MG4bOgPM56zaRCJR9byTEvcZ7iu0u0QgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9f:76:a7:32:f4:53:34:a6:81:3d:4a:7c:86:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: Nov 11 07:00:50 2025 GMT
Not After : Nov 12 07:00:50 2025 GMT
Subject: CN=d686b25d3fe6f67cbfa76dad7108dd236baa01b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:e6:b2:1d:42:c6:84:29:9e:c2:6a:4a:6b:
55:b5:b2:08:b7:c5:e2:de:c4:f4:a3:65:73:75:70:
f7:b6:91:c8:e3:a9:3e:9a:3b:20:7f:5e:db:cc:46:
ff:d5:55:16:0e:79:f7:4e:ad:25:20:58:fb:19:4b:
47:f3:f2:34:ab:12:64:f1:de:d3:4d:33:8e:64:50:
45:97:b9:bb:fd:1e:d2:97:04:3c:d2:33:39:2e:ff:
eb:5e:77:c4:a2:b0:27:26:a3:2a:6f:73:ee:bf:25:
f6:cf:ec:e1:e6:29:c9:a1:a0:c1:9b:38:6d:25:e2:
5e:4d:5e:4c:c8:a6:ca:09:44:45:09:13:cc:ab:64:
bf:d6:b7:3f:71:b4:e5:d3:b6:6d:76:29:78:b2:0a:
68:99:25:e2:ab:36:3a:f5:48:54:e6:97:bb:8f:d3:
50:a0:14:04:99:fc:9e:dd:7d:8b:b2:83:1a:b4:d9:
2b:b4:a9:9d:93:e5:2f:5e:0c:7a:11:32:5c:07:c8:
cf:95:71:5f:74:a3:05:01:cb:35:cd:c1:54:11:4d:
13:03:42:b1:3d:ce:16:fb:9f:84:5e:26:78:2d:87:
e6:92:87:99:0f:46:93:97:35:cc:88:b7:9f:c5:c2:
60:c8:d7:ab:41:35:e2:5c:f0:0d:fa:d4:14:93:c9:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:B2:5D:3F:E6:F6:7C:BF:A7:6D:AD:71:08:DD:23:6B:AA:01:B3
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8d:5c:a5:c6:e5:7a:90:34:0f:86:67:72:3e:09:80:4d:cb:
79:e2:96:5a:c2:a1:9e:b0:1e:7e:3e:ba:74:3d:d2:f5:d4:d7:
1c:52:ce:9e:e0:ce:1d:96:97:f3:f3:47:fe:e0:fe:7c:dc:49:
1d:ee:16:dc:aa:0b:58:a1:d4:ef:8f:c4:ef:7b:d0:d3:96:25:
e1:de:d9:03:85:4c:d7:d6:d9:fa:c4:15:50:91:a2:0b:f2:a8:
9b:6a:01:ce:ae:b3:24:a2:93:7a:f9:85:60:10:bd:99:29:fb:
68:b9:00:79:52:dc:a4:99:f1:cd:82:09:e6:92:db:12:b1:0c:
0a:1b:26:c6:41:14:2f:63:de:fa:59:ce:e7:93:e8:99:f2:a6:
4a:bd:ae:14:76:f2:f0:1b:c7:bd:27:bc:aa:bd:84:0b:8f:77:
e9:f3:f2:7f:03:82:95:36:60:21:e4:57:a0:62:a4:d5:d0:a6:
da:19:a4:a2:d2:3a:38:a5:9c:52:07:9f:3f:59:6a:40:27:0e:
a6:fc:15:d8:a7:b6:67:99:8f:d8:76:9c:5f:65:5d:56:3d:dc:
fd:4c:2f:b5:0e:86:ad:26:7f:97:ba:da:37:dd:8a:49:0b:9b:
ea:57:f8:d6:e6:2b:c3:73:5f:64:e4:ee:c8:99:ae:ab:f6:5e:
05:a7:45:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt592pzL0UzSmgT1KfIZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk
N2EzYjEwHhcNMjUxMTExMDcwMDUwWhcNMjUxMTEyMDcwMDUwWjAzMTEwLwYDVQQD
EyhkNjg2YjI1ZDNmZTZmNjdjYmZhNzZkYWQ3MTA4ZGQyMzZiYWEwMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+vmsh1CxoQpnsJqSmtVtbIIt8Xi
3sT0o2VzdXD3tpHI46k+mjsgf17bzEb/1VUWDnn3Tq0lIFj7GUtH8/I0qxJk8d7T
TTOOZFBFl7m7/R7SlwQ80jM5Lv/rXnfEorAnJqMqb3PuvyX2z+zh5inJoaDBmzht
JeJeTV5MyKbKCURFCRPMq2S/1rc/cbTl07Ztdil4sgpomSXiqzY69UhU5pe7j9NQ
oBQEmfye3X2LsoMatNkrtKmdk+UvXgx6ETJcB8jPlXFfdKMFAcs1zcFUEU0TA0Kx
Pc4W+5+EXiZ4LYfmkoeZD0aTlzXMiLefxcJgyNerQTXiXPAN+tQUk8lkvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaGsl0/5vZ8v6dtrXEI3SNrqgGzMB8GA1UdIwQY
MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt
OWZiOGUyNTQ1ZDczLzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz
LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGY1cpcbl
epA0D4Zncj4JgE3LeeKWWsKhnrAefj66dD3S9dTXHFLOnuDOHZaX8/NH/uD+fNxJ
He4W3KoLWKHU74/E73vQ05Yl4d7ZA4VM19bZ+sQVUJGiC/Kom2oBzq6zJKKTevmF
YBC9mSn7aLkAeVLcpJnxzYIJ5pLbErEMChsmxkEUL2Pe+lnO55PomfKmSr2uFHby
8BvHvSe8qr2EC4936fPyfwOClTZgIeRXoGKk1dCm2hmkotI6OKWcUgefP1lqQCcO
pvwV2Ke2Z5mP2HacX2VdVj3c/UwvtQ6GrSZ/l7raN92KSQub6lf41uYrw3NfZOTu
yJmuq/ZeBadFTA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:38 2025 by rpki-client