Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier: Fa0Vk2Zdj4i9wb4tiOkS5Kl+nyzWwAsykBB6vkuf7W4=
Subject key identifier: 6D:05:7C:0F:61:E6:9C:83:60:DA:A4:BF:1D:B1:68:81:FB:6F:09:C3
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer: /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial: 019A7149CE34A50251B5EE26602A2A8127AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number: 12A2
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: NDTrxWHn0mAI5100xovMW7+8vgVGPlOAnY3JZ2qAItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ce:34:a5:02:51:b5:ee:26:60:2a:2a:81:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=6d057c0f61e69c8360daa4bf1db16881fb6f09c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:3b:ad:cf:dd:3b:0e:16:6d:31:35:7f:b7:
4f:ee:a5:54:cf:85:a7:9c:4a:eb:cf:11:a5:05:3a:
08:09:c7:49:81:7e:1a:8d:85:65:87:3d:c6:1c:58:
c5:b9:72:ae:f3:8b:e7:e8:4a:4d:42:b3:2c:d0:f3:
53:f0:a7:78:4b:60:cf:eb:8a:17:49:ab:a1:5c:cf:
2a:1a:5c:4b:91:8e:2b:63:a6:c6:0b:8d:33:98:f0:
bb:8d:6e:29:99:59:68:a9:45:b5:ba:28:2f:24:9f:
f9:c9:07:2e:c0:4d:1f:15:8d:1e:19:df:11:16:1e:
ce:c3:ae:5c:5c:39:e3:dd:42:1d:bd:28:72:cf:9a:
ed:f3:60:59:1e:9e:47:02:51:1b:13:21:22:20:cf:
7f:57:eb:04:e6:e7:8b:1b:e6:6b:87:b6:41:99:a9:
62:6a:bd:c8:e6:8f:21:58:9a:3b:a4:9d:3b:82:bf:
9b:8c:5e:38:43:fe:e2:19:3d:f0:d7:90:98:f2:34:
88:d5:36:d6:df:52:af:86:b5:1b:a4:18:ef:8d:c8:
aa:34:4b:70:92:f9:5f:b2:18:ee:01:81:9f:9a:55:
4d:40:a3:6a:5c:21:96:75:15:c7:47:09:3f:08:2a:
ae:c2:b1:37:71:81:c9:26:fb:22:3a:c2:c9:07:43:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:7C:0F:61:E6:9C:83:60:DA:A4:BF:1D:B1:68:81:FB:6F:09:C3
X509v3 Authority Key Identifier:
keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:98:15:b3:ca:e2:9c:13:9e:36:dd:5f:6d:5f:5b:83:49:bb:
23:16:59:b2:94:83:6e:79:5c:d0:94:7f:f8:7b:4f:14:40:ce:
63:5c:9e:38:29:4b:57:c1:18:2f:63:e0:48:a8:4a:7c:49:b1:
16:dd:a3:30:5c:26:83:45:f4:e7:d1:65:99:51:96:0f:59:9e:
35:ed:df:7a:19:99:fe:0a:6f:f9:27:00:db:f6:cc:7d:1c:ad:
cd:a8:40:57:91:b8:73:3b:80:a4:c3:9b:92:65:14:06:67:e1:
f2:5f:bf:ae:39:c7:72:83:9b:cc:4a:13:39:52:2d:0f:e5:e6:
87:bc:75:d4:43:42:91:3c:ce:c0:ab:f5:95:06:0d:56:17:a8:
14:e5:39:9a:78:94:ee:90:bc:b1:a0:2d:c9:41:ab:87:f6:e6:
c3:2e:53:3e:38:85:df:02:3e:5c:47:dc:a4:92:e7:ea:a6:0b:
8b:35:8e:04:af:33:3a:04:14:4d:2d:7c:70:07:fc:80:26:5a:
8a:b3:87:0e:ba:df:60:28:f3:76:62:29:be:de:75:bb:69:89:
0b:f3:64:e6:b5:4a:86:1d:1e:61:30:10:48:e2:50:34:ff:66:
69:f2:7d:e4:c0:08:f2:7a:1e:42:bf:6a:60:d1:6d:cc:ae:88:
0d:96:f7:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSc40pQJRte4mYCoqgSesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZjY2NTIyZjQwM2Q4Yzk5NGE0ODQ2ODI4NzA3OTk0MTdj
ZTFlODEwHhcNMjUxMTExMDUwMDUzWhcNMjUxMTEyMDUwMDUzWjAzMTEwLwYDVQQD
Eyg2ZDA1N2MwZjYxZTY5YzgzNjBkYWE0YmYxZGIxNjg4MWZiNmYwOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlY7rc/dOw4WbTE1f7dP7qVUz4Wn
nErrzxGlBToICcdJgX4ajYVlhz3GHFjFuXKu84vn6EpNQrMs0PNT8Kd4S2DP64oX
SauhXM8qGlxLkY4rY6bGC40zmPC7jW4pmVloqUW1uigvJJ/5yQcuwE0fFY0eGd8R
Fh7Ow65cXDnj3UIdvShyz5rt82BZHp5HAlEbEyEiIM9/V+sE5ueLG+Zrh7ZBmali
ar3I5o8hWJo7pJ07gr+bjF44Q/7iGT3w15CY8jSI1TbW31KvhrUbpBjvjciqNEtw
kvlfshjuAYGfmlVNQKNqXCGWdRXHRwk/CCquwrE3cYHJJvsiOsLJB0NftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0FfA9h5pyDYNqkvx2xaIH7bwnDMB8GA1UdIwQY
MBaAFKf2ZSL0A9jJlKSEaChweZQXzh6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMt
YzVkMzYwZmNkZjBlLzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81MmQwZmUtY2M2ZS00MWQ5LTk2NDMtYzVkMzYwZmNkZjBl
LzEvcF9abEl2UUQyTW1VcElSb0tIQjVsQmZPSG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5gVs8ri
nBOeNt1fbV9bg0m7IxZZspSDbnlc0JR/+HtPFEDOY1yeOClLV8EYL2PgSKhKfEmx
Ft2jMFwmg0X059FlmVGWD1meNe3fehmZ/gpv+ScA2/bMfRytzahAV5G4czuApMOb
kmUUBmfh8l+/rjnHcoObzEoTOVItD+Xmh7x11ENCkTzOwKv1lQYNVheoFOU5mniU
7pC8saAtyUGrh/bmwy5TPjiF3wI+XEfcpJLn6qYLizWOBK8zOgQUTS18cAf8gCZa
irOHDrrfYCjzdmIpvt51u2mJC/Nk5rVKhh0eYTAQSOJQNP9mafJ95MAI8noeQr9q
YNFtzK6IDZb3Gw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:44 2025 by rpki-client