Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: Lsy+qHicIPcZhb5kPEqN3v3GGSWz87fT9x15C5MIwf8=
Subject key identifier: 49:CE:9F:34:5A:F9:8E:9D:9A:5E:62:65:52:33:F5:2B:8C:9F:27:AB
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019A3E6EC02CAA9C25C3EC7DFD1231D27ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0718
Signing time: Sat 01 Nov 2025 08:00:36 +0000
Manifest this update: Sat 01 Nov 2025 08:00:36 +0000
Manifest next update: Sun 02 Nov 2025 08:00:36 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: Z7iU+NEymlqQeRSb8oY2vOKPUZKCyQjkWQt5bkq4C3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:6e:c0:2c:aa:9c:25:c3:ec:7d:fd:12:31:d2:7e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Nov 1 08:00:36 2025 GMT
Not After : Nov 2 08:00:36 2025 GMT
Subject: CN=49ce9f345af98e9d9a5e62655233f52b8c9f27ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:72:9f:bb:e7:b0:ef:c5:e0:a1:6d:eb:fe:
13:e8:5a:fa:e9:bd:59:58:3d:1e:f8:ab:8e:10:40:
43:36:bb:ef:cd:62:b1:59:d6:74:ba:1c:c7:4b:ab:
df:b6:cd:a4:2f:bb:82:34:c2:0f:4f:a4:ea:b2:6d:
47:34:7c:da:44:70:7d:38:78:0b:2a:92:95:34:57:
e9:46:20:3d:b7:15:f3:a8:24:24:7f:ac:d3:3a:16:
20:9c:15:92:3a:b8:c2:5e:36:2a:4d:b7:32:5e:72:
c6:cb:07:25:9f:08:18:64:bc:af:3f:ee:fd:ac:6b:
9c:84:bb:75:bf:36:d9:cb:43:5e:ed:40:9a:6f:95:
a3:ba:3f:2a:05:84:83:a5:93:09:ab:03:51:cb:5d:
12:7c:c3:87:67:bb:b2:e1:8a:77:42:9e:e0:f9:23:
22:71:5f:f5:aa:3b:97:b4:d9:33:e5:f3:1c:9f:26:
54:72:a1:e8:74:f7:7b:cb:72:aa:aa:7c:03:71:23:
85:71:b6:7a:de:4b:13:e0:48:7b:22:61:39:b0:52:
1f:70:1f:05:80:76:28:fb:a0:87:a6:e7:13:d7:23:
1c:aa:f5:a0:c3:67:27:5b:a1:c8:74:16:96:44:01:
ba:c0:c8:0c:b2:74:ec:36:47:ee:fe:72:1d:81:a0:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:9F:34:5A:F9:8E:9D:9A:5E:62:65:52:33:F5:2B:8C:9F:27:AB
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:56:aa:60:09:ab:56:2d:0e:1b:88:40:0e:32:6a:3b:d5:b9:
c4:82:57:4a:43:a7:ea:7c:fa:d8:72:27:85:91:9d:5f:06:38:
5f:6e:74:2e:40:9e:82:a8:35:70:32:03:1b:02:db:0e:03:bd:
c9:c9:eb:01:0d:b2:2a:91:9c:56:47:93:50:7c:db:29:ac:a6:
8e:80:bb:50:aa:70:0e:e5:86:f6:36:27:42:8a:ff:71:b6:2e:
10:1d:62:17:66:14:af:6e:97:ee:e2:2c:8e:98:8b:6f:ee:da:
46:f4:84:49:6d:0d:d2:ce:0f:0c:40:96:fd:40:b6:1b:41:1e:
18:39:3f:6e:98:bb:b7:49:a4:6f:2c:3c:a8:d6:17:cf:23:d0:
a5:be:01:2b:3a:ee:94:7a:7c:15:ac:fd:79:c9:cb:5f:a4:cf:
a9:00:86:c6:ad:36:2a:82:e4:5b:d8:1e:af:5e:09:8b:f5:32:
3c:9a:a7:4f:19:35:e6:bd:67:01:2a:cc:63:d3:67:ff:8d:db:
25:ad:2f:84:1d:26:9b:07:96:19:a0:d3:9b:bb:00:f8:6a:6b:
48:36:3a:0e:e7:1a:98:30:0c:ab:7d:9a:ec:7a:5c:26:40:63:
0b:df:18:db:50:0b:1a:e3:47:c9:1e:80:5d:5a:bc:ea:52:9b:
63:ed:46:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo+bsAsqpwlw+x9/RIx0n7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjUxMTAxMDgwMDM2WhcNMjUxMTAyMDgwMDM2WjAzMTEwLwYDVQQD
Eyg0OWNlOWYzNDVhZjk4ZTlkOWE1ZTYyNjU1MjMzZjUyYjhjOWYyN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr65yn7vnsO/F4KFt6/4T6Fr66b1Z
WD0e+KuOEEBDNrvvzWKxWdZ0uhzHS6vfts2kL7uCNMIPT6Tqsm1HNHzaRHB9OHgL
KpKVNFfpRiA9txXzqCQkf6zTOhYgnBWSOrjCXjYqTbcyXnLGywclnwgYZLyvP+79
rGuchLt1vzbZy0Ne7UCab5Wjuj8qBYSDpZMJqwNRy10SfMOHZ7uy4Yp3Qp7g+SMi
cV/1qjuXtNkz5fMcnyZUcqHodPd7y3KqqnwDcSOFcbZ63ksT4Eh7ImE5sFIfcB8F
gHYo+6CHpucT1yMcqvWgw2cnW6HIdBaWRAG6wMgMsnTsNkfu/nIdgaALlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnOnzRa+Y6dml5iZVIz9SuMnyerMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVaqYAmr
Vi0OG4hADjJqO9W5xIJXSkOn6nz62HInhZGdXwY4X250LkCegqg1cDIDGwLbDgO9
ycnrAQ2yKpGcVkeTUHzbKaymjoC7UKpwDuWG9jYnQor/cbYuEB1iF2YUr26X7uIs
jpiLb+7aRvSESW0N0s4PDECW/UC2G0EeGDk/bpi7t0mkbyw8qNYXzyPQpb4BKzru
lHp8Faz9ecnLX6TPqQCGxq02KoLkW9ger14Ji/UyPJqnTxk15r1nASrMY9Nn/43b
Ja0vhB0mmweWGaDTm7sA+GprSDY6DucamDAMq32a7HpcJkBjC98Y21ALGuNHyR6A
XVq86lKbY+1Ghw==
-----END CERTIFICATE-----
Generated at Sat Nov 1 15:02:41 2025 by rpki-client