Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: gedVUMEFrBO8jLBzG6zRNvBgiJ5tcVue+hQN5qC5QCo=
Subject key identifier: E7:83:3B:CC:26:B9:D9:5E:57:26:B0:BA:19:E4:B6:BC:83:A7:11:C5
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 019A71B8CC9E99563584590E83E313655316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 080E
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: wDdUetEesZrIyBLhoNq8Wr7H7Q1M/vVobAoDt2XkJ+k=)
2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cc:9e:99:56:35:84:59:0e:83:e3:13:65:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=e7833bcc26b9d95e5726b0ba19e4b6bc83a711c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:6e:b5:e8:de:c4:c4:bc:22:4a:ec:30:99:
27:99:9a:f1:04:fc:7c:87:d4:ea:38:6b:0c:13:ba:
29:53:3d:c5:fe:78:3c:09:6b:8f:27:80:ba:06:e6:
da:bb:c1:fc:18:35:2c:16:82:f7:90:f2:92:d5:0f:
07:c4:43:8f:e1:a7:e9:d8:cd:88:b7:ed:e2:23:ac:
c4:67:5a:67:37:cc:3c:c0:67:17:6d:bb:ba:0c:9a:
10:5f:ee:77:bc:96:45:ed:32:4b:3a:58:7e:d8:5d:
85:69:f1:5e:de:77:4c:e1:ac:cf:47:4e:8d:dc:ae:
a7:db:34:fc:82:b1:bb:5a:77:65:c3:47:42:e8:53:
2e:c2:74:2c:aa:ae:1c:ba:90:c4:35:05:96:29:86:
44:2a:1c:f1:ba:13:96:70:d6:c5:15:94:8d:29:b8:
10:57:46:d4:f7:e2:b3:09:fe:2c:ab:df:23:39:90:
55:f4:2b:ac:18:fa:5c:dd:d3:9d:82:c3:28:91:da:
10:bc:49:ee:56:38:7e:fb:57:9f:0c:6b:14:bc:73:
e9:89:58:17:e9:4b:90:6b:30:af:d5:83:aa:0d:da:
94:a3:0a:f0:40:84:26:02:71:58:51:f1:b2:b2:98:
a4:09:ef:9e:d6:30:44:fa:90:66:f1:e6:27:fb:fe:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:3B:CC:26:B9:D9:5E:57:26:B0:BA:19:E4:B6:BC:83:A7:11:C5
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:ce:f0:f0:5d:1a:3b:83:eb:36:e8:e0:b1:40:fe:95:4c:
a5:50:8b:82:0a:36:c2:5a:7b:4c:e6:c6:e4:97:16:2c:f0:99:
c0:45:c9:9a:a4:a4:8b:f8:f1:8c:fa:fd:ac:20:87:4b:05:1d:
56:51:a5:15:cb:1f:66:44:f0:80:3a:3b:f1:7b:9a:a1:70:97:
fd:e9:5c:58:8b:65:e2:e9:df:a0:5e:44:d1:8e:fa:56:d6:bd:
ee:85:5f:cb:39:99:e6:6e:40:c9:50:5e:6e:c8:5b:f7:04:6e:
b7:52:e6:e6:8f:08:89:21:8d:7e:49:f5:d7:4b:53:7d:70:71:
d3:2d:48:d3:8f:f4:43:2b:9c:74:04:f9:90:0d:3f:da:3c:5b:
b1:8f:c6:2c:98:b7:22:23:78:9d:f5:a2:9e:54:92:8f:af:ca:
d2:be:d5:f1:af:db:8f:12:c8:3f:87:ce:cf:b2:23:1e:6d:f1:
1f:6e:71:67:8d:48:01:0e:e1:40:f0:8d:af:5a:73:58:7d:77:
6d:b0:3d:b5:b0:f9:2e:cd:f9:f5:57:0f:f3:17:b1:ce:33:e5:
39:96:37:26:b5:d1:d5:2e:c0:e5:dc:d5:3c:b5:7a:6e:34:71:
d5:3b:dc:88:36:e5:c2:c6:5e:f5:68:67:68:ee:1d:3e:41:b9:
a1:12:69:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMyemVY1hFkOg+MTZVMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz
Yzc1NTYwHhcNMjUxMTExMDcwMjA3WhcNMjUxMTEyMDcwMjA3WjAzMTEwLwYDVQQD
EyhlNzgzM2JjYzI2YjlkOTVlNTcyNmIwYmExOWU0YjZiYzgzYTcxMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpJutejexMS8IkrsMJknmZrxBPx8
h9TqOGsME7opUz3F/ng8CWuPJ4C6Bubau8H8GDUsFoL3kPKS1Q8HxEOP4afp2M2I
t+3iI6zEZ1pnN8w8wGcXbbu6DJoQX+53vJZF7TJLOlh+2F2FafFe3ndM4azPR06N
3K6n2zT8grG7Wndlw0dC6FMuwnQsqq4cupDENQWWKYZEKhzxuhOWcNbFFZSNKbgQ
V0bU9+KzCf4sq98jOZBV9CusGPpc3dOdgsMokdoQvEnuVjh++1efDGsUvHPpiVgX
6UuQazCv1YOqDdqUowrwQIQmAnFYUfGyspikCe+e1jBE+pBm8eYn+/4RRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeDO8wmudleVyawuhnktryDpxHFMB8GA1UdIwQY
MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt
NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw
LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcnO8PBd
GjuD6zbo4LFA/pVMpVCLggo2wlp7TObG5JcWLPCZwEXJmqSki/jxjPr9rCCHSwUd
VlGlFcsfZkTwgDo78XuaoXCX/elcWItl4unfoF5E0Y76Vta97oVfyzmZ5m5AyVBe
bshb9wRut1Lm5o8IiSGNfkn110tTfXBx0y1I04/0QyucdAT5kA0/2jxbsY/GLJi3
IiN4nfWinlSSj6/K0r7V8a/bjxLIP4fOz7IjHm3xH25xZ41IAQ7hQPCNr1pzWH13
bbA9tbD5Ls359VcP8xexzjPlOZY3JrXR1S7A5dzVPLV6bjRx1TvciDblwsZe9Whn
aO4dPkG5oRJp9A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:36 2025 by rpki-client