Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: jVc7AkdZTN0vg/PehsoegcylHCSzb9NZVNAtlofixvQ=
Subject key identifier: 94:67:F6:30:32:8F:E3:FB:BA:38:66:CB:9E:0B:69:1B:2E:F5:C5:35
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 019A251C72080C520FD34E8EE386AF13B789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 1283
Signing time: Mon 27 Oct 2025 10:00:12 +0000
Manifest this update: Mon 27 Oct 2025 10:00:12 +0000
Manifest next update: Tue 28 Oct 2025 10:00:12 +0000
Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: L5HIuteLStOE8zQNMcYVWbOrWUC685rxszsS4zvizjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:72:08:0c:52:0f:d3:4e:8e:e3:86:af:13:b7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Oct 27 10:00:12 2025 GMT
Not After : Oct 28 10:00:12 2025 GMT
Subject: CN=9467f630328fe3fbba3866cb9e0b691b2ef5c535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:25:ac:8d:2e:a8:ac:a9:34:aa:87:3c:3d:
82:a5:6b:f7:13:ef:9b:09:b5:38:44:8d:67:f5:63:
07:d2:39:59:0a:00:b0:c5:86:f2:7b:e4:bc:16:c9:
84:fd:88:1e:51:d8:4b:6c:05:45:a4:71:8a:e9:88:
6c:16:f0:dc:bf:80:56:bd:cf:61:53:d6:23:2f:99:
28:44:db:d5:e0:ca:d7:5b:5e:93:a9:49:7e:e8:2b:
15:e9:80:4a:19:e9:14:75:aa:97:78:eb:6d:f1:c2:
64:b5:f6:02:ee:80:69:cd:98:b4:0a:fd:2a:16:65:
69:16:a5:75:c6:ee:de:c5:49:d1:4e:2d:35:5e:8e:
84:75:e6:87:0b:0a:35:ad:a7:07:22:ee:90:e4:ea:
06:ae:59:ba:d8:40:27:4c:57:fe:1e:cd:ed:3f:5c:
9b:28:01:0e:90:e7:bd:9d:7a:b7:dd:34:58:9c:28:
e9:a6:a5:6a:78:1c:75:b0:8c:be:bf:99:c9:cf:ed:
d6:35:b2:32:b3:4a:93:9d:d7:40:ac:1c:28:a5:66:
f1:16:c2:b2:17:c7:9f:16:a6:fb:da:38:c7:49:91:
ed:13:05:4f:4f:4f:e9:61:d1:35:97:80:3e:2b:68:
6e:2a:3c:bf:65:46:64:25:76:b1:09:c3:3b:49:03:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:F6:30:32:8F:E3:FB:BA:38:66:CB:9E:0B:69:1B:2E:F5:C5:35
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f8:c8:ea:23:b9:f4:4c:93:22:fc:45:53:37:0d:b7:a9:4e:
8f:74:fa:a1:b9:f1:bd:be:c2:d1:c3:db:96:4e:bf:fc:86:0b:
47:42:63:c2:a9:9b:59:36:7c:35:e9:76:3e:90:5a:df:41:86:
2b:df:9c:d5:02:82:83:72:ee:12:3b:40:91:d1:88:fd:93:6b:
ca:63:26:52:45:4c:fa:67:f9:d2:52:d8:4d:6d:f5:69:11:03:
cb:1f:ee:ea:a1:04:94:07:2a:22:d9:cb:c3:7e:0a:1f:16:ba:
6f:f3:b7:2d:1b:9a:b1:f3:c2:41:b5:3b:f1:84:f2:55:c2:57:
03:a3:02:9b:a7:5c:8e:b9:29:d0:17:4f:21:ee:42:cd:63:b6:
e0:0f:92:2b:91:10:51:60:bc:94:ff:fb:3d:4f:c9:30:da:7f:
6f:00:f2:f5:77:6e:87:0a:44:0d:03:be:fa:0e:0d:54:eb:ca:
25:65:59:b4:92:6b:fe:b2:90:65:51:33:31:86:d7:75:1f:24:
22:de:d6:d7:8d:38:66:38:7a:ad:83:2e:ad:ca:c0:74:da:89:
c9:d9:34:25:d4:c3:fe:cc:db:ab:91:c0:82:0a:d8:af:d5:db:
ff:b6:c6:f4:71:86:0f:ba:6f:ba:d2:14:94:7b:ea:1d:05:12:
04:8a:2c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHHIIDFIP006O44avE7eJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh
YWVlMTQwHhcNMjUxMDI3MTAwMDEyWhcNMjUxMDI4MTAwMDEyWjAzMTEwLwYDVQQD
Eyg5NDY3ZjYzMDMyOGZlM2ZiYmEzODY2Y2I5ZTBiNjkxYjJlZjVjNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWElrI0uqKypNKqHPD2CpWv3E++b
CbU4RI1n9WMH0jlZCgCwxYbye+S8FsmE/YgeUdhLbAVFpHGK6YhsFvDcv4BWvc9h
U9YjL5koRNvV4MrXW16TqUl+6CsV6YBKGekUdaqXeOtt8cJktfYC7oBpzZi0Cv0q
FmVpFqV1xu7exUnRTi01Xo6EdeaHCwo1racHIu6Q5OoGrlm62EAnTFf+Hs3tP1yb
KAEOkOe9nXq33TRYnCjppqVqeBx1sIy+v5nJz+3WNbIys0qTnddArBwopWbxFsKy
F8efFqb72jjHSZHtEwVPT0/pYdE1l4A+K2huKjy/ZUZkJXaxCcM7SQP5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRn9jAyj+P7ujhmy54LaRsu9cU1MB8GA1UdIwQY
MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt
NjQyMzZmYzM2ZDFkLzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk
LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfjI6iO5
9EyTIvxFUzcNt6lOj3T6obnxvb7C0cPblk6//IYLR0JjwqmbWTZ8Nel2PpBa30GG
K9+c1QKCg3LuEjtAkdGI/ZNrymMmUkVM+mf50lLYTW31aREDyx/u6qEElAcqItnL
w34KHxa6b/O3LRuasfPCQbU78YTyVcJXA6MCm6dcjrkp0BdPIe5CzWO24A+SK5EQ
UWC8lP/7PU/JMNp/bwDy9XduhwpEDQO++g4NVOvKJWVZtJJr/rKQZVEzMYbXdR8k
It7W1404Zjh6rYMurcrAdNqJydk0JdTD/szbq5HAggrYr9Xb/7bG9HGGD7pvutIU
lHvqHQUSBIosmw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:32 2025 by rpki-client