Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
File: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft (raw, json)
Hash identifier: GrN3cD7f38QN5E8GWiatY4uwg5UJClO4BUJJHPoSWUg=
Subject key identifier: 9D:4B:6A:3E:F9:4B:53:C5:A4:25:1E:8B:15:DE:04:76:B1:CA:CE:87
Authority key identifier: 66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
Certificate issuer: /CN=66d1233f112a4a3435575a3a219dccc021068d99
Certificate serial: 019A706E03290095EF4DF8B7BDF2D06F4122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
Manifest number: 59
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: 7BZgrIdyubMi7Kxr3pcbEsxsTVs.roa (hash: 07a2Z1bP4ZM4lvBNnIbYpGRZq/i+QW1+w8DIMuAxBRM=)
2: ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl (hash: h7Jon3NnqK1IbnMmDyOLX0d0hKin2J6adMW868gbZ1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:03:29:00:95:ef:4d:f8:b7:bd:f2:d0:6f:41:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d1233f112a4a3435575a3a219dccc021068d99
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=9d4b6a3ef94b53c5a4251e8b15de0476b1cace87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:5f:50:27:f5:84:f1:e3:3d:f5:1b:98:5a:
31:22:19:81:11:10:b1:2f:d0:df:5f:87:fe:02:7e:
5d:f4:43:ab:f8:43:61:af:7b:49:b9:b6:d2:81:1b:
3f:a1:54:6f:12:87:4a:3b:e8:fb:00:a7:3c:65:aa:
9e:0a:e2:60:27:d0:53:cd:de:14:49:74:32:f6:1e:
0b:c0:7d:d4:5f:fb:38:cf:98:43:f2:90:c5:86:77:
40:7a:a4:28:39:b2:cb:11:4f:9e:82:fc:16:d9:d4:
3c:f2:e0:59:50:01:31:dd:d2:be:4d:6d:01:81:06:
98:58:ad:cd:11:3b:a0:c3:07:ac:2f:07:66:a6:06:
0e:5c:3e:b2:ea:ec:67:1d:4e:ea:f4:83:f9:45:a2:
10:50:b9:4a:07:1f:0b:2e:2e:ce:02:47:bf:3b:b3:
d0:9d:b1:3a:6e:21:32:e9:cb:32:f2:d0:91:7d:ff:
d6:6c:e8:5a:2b:2d:81:f7:22:38:b0:bf:70:b6:7e:
38:c4:2b:bd:61:7f:de:b2:11:7b:cc:75:d6:2c:2f:
c0:e5:ff:19:56:9b:f0:77:b3:4c:d7:7d:e1:d3:bd:
1f:4d:ba:9e:48:58:dd:55:17:44:5e:d2:ae:80:23:
8b:ec:fa:c9:9a:c9:8c:bd:0c:c3:49:ea:f2:62:1e:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4B:6A:3E:F9:4B:53:C5:A4:25:1E:8B:15:DE:04:76:B1:CA:CE:87
X509v3 Authority Key Identifier:
keyid:66:D1:23:3F:11:2A:4A:34:35:57:5A:3A:21:9D:CC:C0:21:06:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06205d-e6a5-4d54-96e8-fe4cd2712306/1/ZtEjPxEqSjQ1V1o6IZ3MwCEGjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:de:6b:81:49:fc:41:3e:c7:dd:ee:29:c2:c9:39:c5:00:b6:
a8:08:10:ac:1b:28:93:e8:43:9d:47:47:82:50:af:e9:65:af:
42:57:a7:e9:e9:08:a8:16:e1:43:dd:1d:66:ec:2a:9f:93:9a:
da:e2:e4:3e:0c:63:96:a2:4b:b8:a1:a2:da:d8:42:9a:ea:46:
b0:0f:0b:2c:91:f6:1b:9d:fb:32:48:79:4b:a4:4c:0d:52:98:
0c:9e:b0:3e:89:59:a7:8f:ac:15:a7:7b:f1:de:f8:1a:4d:f7:
ee:07:0b:b9:6f:39:96:aa:4c:52:10:78:46:e5:79:77:76:56:
30:7b:f8:a0:1e:e1:3b:3e:2a:57:4a:b3:a4:10:a8:5f:3c:0e:
7a:05:2f:5b:1d:82:01:44:dc:ef:1d:c0:3d:cb:97:c8:91:6c:
e1:3f:6d:76:38:d6:54:53:34:7a:a9:cf:f7:bc:ad:22:5c:a8:
9c:b8:e0:97:82:b1:6f:a6:2a:ea:31:5a:7d:c9:04:0f:85:72:
28:b6:a8:8f:dc:f1:0f:05:66:44:84:4a:1d:6c:3b:8b:d5:94:
06:6d:bd:c8:50:dd:50:75:13:6b:f4:cc:0f:1e:c1:94:b5:02:
c7:67:ba:32:68:b4:ff:e2:ff:68:3e:82:32:2f:21:a9:6e:05:
a1:a5:eb:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbgMpAJXvTfi3vfLQb0EiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDEyMzNmMTEyYTRhMzQzNTU3NWEzYTIxOWRjY2MwMjEw
NjhkOTkwHhcNMjUxMTExMDEwMDQ5WhcNMjUxMTEyMDEwMDQ5WjAzMTEwLwYDVQQD
Eyg5ZDRiNmEzZWY5NGI1M2M1YTQyNTFlOGIxNWRlMDQ3NmIxY2FjZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+dfUCf1hPHjPfUbmFoxIhmBERCx
L9DfX4f+An5d9EOr+ENhr3tJubbSgRs/oVRvEodKO+j7AKc8ZaqeCuJgJ9BTzd4U
SXQy9h4LwH3UX/s4z5hD8pDFhndAeqQoObLLEU+egvwW2dQ88uBZUAEx3dK+TW0B
gQaYWK3NETugwwesLwdmpgYOXD6y6uxnHU7q9IP5RaIQULlKBx8LLi7OAke/O7PQ
nbE6biEy6csy8tCRff/WbOhaKy2B9yI4sL9wtn44xCu9YX/eshF7zHXWLC/A5f8Z
Vpvwd7NM133h070fTbqeSFjdVRdEXtKugCOL7PrJmsmMvQzDSeryYh4R6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1Laj75S1PFpCUeixXeBHaxys6HMB8GA1UdIwQY
MBaAFGbRIz8RKko0NVdaOiGdzMAhBo2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgt
ZmU0Y2QyNzEyMzA2LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNjIwNWQtZTZhNS00ZDU0LTk2ZTgtZmU0Y2QyNzEyMzA2
LzEvWnRFalB4RXFTalExVjFvNklaM013Q0VHalprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW95rgUn8
QT7H3e4pwsk5xQC2qAgQrBsok+hDnUdHglCv6WWvQlen6ekIqBbhQ90dZuwqn5Oa
2uLkPgxjlqJLuKGi2thCmupGsA8LLJH2G537Mkh5S6RMDVKYDJ6wPolZp4+sFad7
8d74Gk337gcLuW85lqpMUhB4RuV5d3ZWMHv4oB7hOz4qV0qzpBCoXzwOegUvWx2C
AUTc7x3APcuXyJFs4T9tdjjWVFM0eqnP97ytIlyonLjgl4Kxb6Yq6jFafckED4Vy
KLaoj9zxDwVmRIRKHWw7i9WUBm29yFDdUHUTa/TMDx7BlLUCx2e6Mmi0/+L/aD6C
Mi8hqW4FoaXrTg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:56 2025 by rpki-client