Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: Stso33jQtanhw5C4leWnVy54dhBt/wNktGdSoBzHgNg=
Subject key identifier: 56:7C:B0:41:F6:54:AB:34:6B:E2:AA:6F:8C:27:82:56:C6:F1:02:87
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 0199228CB880C36FDE6A177CA46773F1ECE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0685
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: sqJJsUrIyR0Y0CuCGiiQoLBbD07knRPJ88zMp99ZLgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b8:80:c3:6f:de:6a:17:7c:a4:67:73:f1:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=567cb041f654ab346be2aa6f8c278256c6f10287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:4e:ab:3c:ab:0f:20:ce:a2:fa:2c:0d:bd:
32:29:a0:d8:c0:10:dd:93:15:4d:43:63:26:73:17:
d6:35:d1:30:2c:4d:30:f7:64:3b:eb:58:24:cd:d0:
d1:19:d5:b7:be:30:d8:b7:2d:77:68:b9:24:8e:00:
31:a1:7c:c1:ea:a7:e4:ba:bf:9c:02:5e:b2:20:0f:
45:3f:74:72:62:4a:b7:15:b0:42:72:e7:74:a6:fe:
db:e0:7a:76:15:a2:8a:e2:51:60:66:2e:8a:25:cf:
88:84:91:ae:90:96:fe:a0:25:37:59:8d:47:11:fd:
3e:5e:63:ce:ae:06:df:8f:11:8a:d4:9f:fd:27:13:
98:17:e1:27:90:33:bc:43:33:52:3f:29:a7:b6:d2:
7a:fb:04:55:aa:b8:cf:af:0b:53:a4:ae:5e:8e:f7:
49:5f:6f:55:95:4c:c7:3c:5d:9c:84:a2:82:37:73:
75:b6:7c:78:f4:93:40:77:17:01:a3:a2:03:b8:28:
d6:3b:c2:16:b5:08:8a:7e:6f:8b:d9:08:68:1e:f2:
50:10:c2:7e:94:b5:fa:08:48:82:af:17:4a:37:50:
19:28:61:f4:0b:46:5b:4d:22:5b:17:b3:d6:3b:d6:
e0:5f:92:d8:c3:d2:8b:96:df:ce:dc:69:ff:d9:d6:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:B0:41:F6:54:AB:34:6B:E2:AA:6F:8C:27:82:56:C6:F1:02:87
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bc:54:d2:6f:52:b1:57:d0:a2:cf:c2:94:64:94:5c:60:ef:
f4:13:7d:7c:6d:8e:8a:93:1b:8c:4f:53:a5:a5:93:32:46:6b:
83:f3:b3:d9:1c:87:10:aa:83:f5:e1:9c:f9:8a:be:d4:9b:de:
23:0a:53:68:26:7c:2f:e4:30:32:56:f2:55:d4:ce:d8:98:b2:
7f:c2:c4:05:df:3e:b7:d1:fa:6b:0e:e4:1a:04:f1:a8:7b:0a:
bc:ea:6c:12:c5:c2:ad:52:63:d5:2b:88:73:21:28:e6:7a:05:
02:f8:0f:83:bc:f2:74:d4:d7:43:2c:d4:19:14:30:d9:2b:c1:
61:9c:15:0d:b4:b7:59:fb:85:cc:2b:07:bd:16:e8:26:c3:27:
97:48:a6:40:a5:f0:3e:cb:d5:cc:13:d9:af:a9:90:04:17:8a:
b0:ba:7f:01:4e:19:08:4b:94:11:c2:4c:df:9e:f0:04:49:8d:
66:2f:36:74:24:3b:46:94:eb:30:0f:3d:e0:fe:50:f0:53:e4:
81:63:e2:92:d3:d6:ab:b8:79:7b:e0:90:c2:49:7d:d8:ee:f7:
4a:c3:b1:cf:58:08:f5:91:cb:19:91:0e:6a:a6:39:0b:86:1a:
96:21:93:73:0d:9b:4c:fe:88:69:42:00:c1:0c:b3:36:79:27:
86:9b:3f:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijLiAw2/eahd8pGdz8ezpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjUwOTA3MDUwMTExWhcNMjUwOTA4MDUwMTExWjAzMTEwLwYDVQQD
Eyg1NjdjYjA0MWY2NTRhYjM0NmJlMmFhNmY4YzI3ODI1NmM2ZjEwMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmllOqzyrDyDOovosDb0yKaDYwBDd
kxVNQ2MmcxfWNdEwLE0w92Q761gkzdDRGdW3vjDYty13aLkkjgAxoXzB6qfkur+c
Al6yIA9FP3RyYkq3FbBCcud0pv7b4Hp2FaKK4lFgZi6KJc+IhJGukJb+oCU3WY1H
Ef0+XmPOrgbfjxGK1J/9JxOYF+EnkDO8QzNSPymnttJ6+wRVqrjPrwtTpK5ejvdJ
X29VlUzHPF2chKKCN3N1tnx49JNAdxcBo6IDuCjWO8IWtQiKfm+L2QhoHvJQEMJ+
lLX6CEiCrxdKN1AZKGH0C0ZbTSJbF7PWO9bgX5LYw9KLlt/O3Gn/2dZ/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZ8sEH2VKs0a+Kqb4wnglbG8QKHMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLxU0m9S
sVfQos/ClGSUXGDv9BN9fG2OipMbjE9TpaWTMkZrg/Oz2RyHEKqD9eGc+Yq+1Jve
IwpTaCZ8L+QwMlbyVdTO2Jiyf8LEBd8+t9H6aw7kGgTxqHsKvOpsEsXCrVJj1SuI
cyEo5noFAvgPg7zydNTXQyzUGRQw2SvBYZwVDbS3WfuFzCsHvRboJsMnl0imQKXw
PsvVzBPZr6mQBBeKsLp/AU4ZCEuUEcJM357wBEmNZi82dCQ7RpTrMA894P5Q8FPk
gWPiktPWq7h5e+CQwkl92O73SsOxz1gI9ZHLGZEOaqY5C4YaliGTcw2bTP6IaUIA
wQyzNnknhps/Mw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:53 2025 by rpki-client