Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: BMuV7Kehp7gXs38F39myfPdF7PRTL9ko3IWRc4WDizY=
Subject key identifier: F8:A9:0C:D5:7C:2F:5E:5E:DC:00:75:CC:95:9C:E6:C4:F5:CA:E3:7A
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 019A2177540BF8790330427DBF0798919D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0517
Signing time: Sun 26 Oct 2025 17:00:59 +0000
Manifest this update: Sun 26 Oct 2025 17:00:59 +0000
Manifest next update: Mon 27 Oct 2025 17:00:59 +0000
Files and hashes: 1: 5RDrxvpk6f6_CeHaE5maQdmSM44.roa (hash: ki187Iv+O6q2r1ZkIX9WA+gL/Pc275QX3Xeem+p1Izk=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: 1BqwkF9WvQZWNQ5L3pJVCur3zao/C98zzkSWHcoIPl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:54:0b:f8:79:03:30:42:7d:bf:07:98:91:9d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: Oct 26 17:00:59 2025 GMT
Not After : Oct 27 17:00:59 2025 GMT
Subject: CN=f8a90cd57c2f5e5edc0075cc959ce6c4f5cae37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:f8:9b:e5:a3:08:34:f7:0f:d0:5a:5c:0d:
96:20:df:bf:65:d5:d7:09:69:71:3a:1d:c6:56:df:
e4:17:8b:a8:63:b7:71:19:bb:54:92:f3:18:aa:0b:
66:e7:3a:f2:9f:9c:80:be:34:af:8f:ea:13:f4:45:
60:af:6a:0a:96:b5:09:83:63:56:cc:dc:c0:3c:8c:
28:b9:a6:00:17:11:6b:fa:f9:16:9e:f0:25:89:90:
b6:a1:13:30:e4:73:6a:80:9b:a0:f6:a3:5f:db:b0:
82:ab:16:1d:df:c8:ab:d2:a4:78:ff:82:50:d0:67:
88:ee:f7:5b:8d:c7:d4:25:1c:dc:3c:6c:15:2c:a3:
fd:08:32:41:ad:d5:e9:9c:58:3a:b9:4a:61:88:90:
65:81:5c:36:97:e6:93:73:a8:09:8d:4d:a9:07:60:
8d:14:45:44:7f:b1:96:83:e5:de:b3:0b:7c:5e:a9:
37:2f:70:a2:e9:22:d9:56:6c:20:16:a5:8a:29:a7:
11:30:ae:41:9f:c7:2d:7b:bd:6e:71:14:44:65:1f:
fe:8c:7c:aa:fb:f6:49:37:f9:27:4c:fe:39:22:c6:
ad:4a:a2:f3:2a:2f:97:c8:a4:af:95:1a:86:07:c4:
c4:33:11:b4:49:6c:ac:af:e9:7c:de:a4:cf:6c:c9:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A9:0C:D5:7C:2F:5E:5E:DC:00:75:CC:95:9C:E6:C4:F5:CA:E3:7A
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3b:6b:78:ff:a9:b0:bd:54:50:cb:74:52:0b:0d:50:6b:87:
24:47:42:c5:19:3c:54:f6:a7:e4:8b:20:fe:be:74:eb:47:e1:
4d:e3:81:3b:30:db:47:b3:69:01:b0:21:92:b5:47:59:61:1f:
14:92:29:00:e0:ea:21:88:4b:e8:e7:3f:3e:8a:c4:32:b1:b9:
52:d7:37:27:1e:40:05:02:63:f5:b9:91:e3:76:5b:aa:ec:0a:
7e:fd:13:bf:6a:7e:90:8a:24:3f:89:61:bc:14:09:fe:a4:35:
22:32:a2:74:8d:4f:84:4d:a6:6b:7b:e7:e9:4e:e9:67:63:6d:
e1:65:f8:ca:da:c3:d8:c8:3d:8b:86:d6:2a:ce:45:c1:9d:7a:
33:dc:05:4c:3b:c7:87:39:8a:0e:d9:e0:09:da:7d:7b:6c:39:
a1:b6:4b:21:af:e1:39:86:da:f7:5f:54:a2:75:55:f8:e6:ff:
52:84:06:ee:6c:91:82:27:99:6c:84:d6:d6:51:a6:2f:b8:2c:
0a:87:19:51:8a:e0:b6:df:9b:90:af:5c:59:d2:3e:2a:a6:96:
2c:07:25:23:3c:4b:ce:b1:26:5f:50:11:60:8e:03:81:f1:22:
3c:d3:c1:91:b8:d6:c1:20:bb:0f:3b:9c:50:ce:9f:05:cb:e1:
95:f6:c1:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohd1QL+HkDMEJ9vweYkZ2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTRmY2U5YjE5YTVlZWE1MzJlMTdkODNkYThjMWRjZDFk
ZTE4YzAwHhcNMjUxMDI2MTcwMDU5WhcNMjUxMDI3MTcwMDU5WjAzMTEwLwYDVQQD
EyhmOGE5MGNkNTdjMmY1ZTVlZGMwMDc1Y2M5NTljZTZjNGY1Y2FlMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK34m+WjCDT3D9BaXA2WIN+/ZdXX
CWlxOh3GVt/kF4uoY7dxGbtUkvMYqgtm5zryn5yAvjSvj+oT9EVgr2oKlrUJg2NW
zNzAPIwouaYAFxFr+vkWnvAliZC2oRMw5HNqgJug9qNf27CCqxYd38ir0qR4/4JQ
0GeI7vdbjcfUJRzcPGwVLKP9CDJBrdXpnFg6uUphiJBlgVw2l+aTc6gJjU2pB2CN
FEVEf7GWg+Xeswt8Xqk3L3Ci6SLZVmwgFqWKKacRMK5Bn8cte71ucRREZR/+jHyq
+/ZJN/knTP45IsatSqLzKi+XyKSvlRqGB8TEMxG0SWysr+l83qTPbMku2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPipDNV8L15e3AB1zJWc5sT1yuN6MB8GA1UdIwQY
MBaAFM8U/Omxml7qUy4X2D2owdzR3hjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMt
NTljMTA4N2U0ODU2LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hZDNhZTUtY2UyYS00ODVmLWFhYjMtNTljMTA4N2U0ODU2
LzEvenhUODZiR2FYdXBUTGhmWVBhakIzTkhlR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATztreP+p
sL1UUMt0UgsNUGuHJEdCxRk8VPan5Isg/r5060fhTeOBOzDbR7NpAbAhkrVHWWEf
FJIpAODqIYhL6Oc/PorEMrG5Utc3Jx5ABQJj9bmR43ZbquwKfv0Tv2p+kIokP4lh
vBQJ/qQ1IjKidI1PhE2ma3vn6U7pZ2Nt4WX4ytrD2Mg9i4bWKs5FwZ16M9wFTDvH
hzmKDtngCdp9e2w5obZLIa/hOYba919UonVV+Ob/UoQG7myRgieZbITW1lGmL7gs
CocZUYrgtt+bkK9cWdI+KqaWLAclIzxLzrEmX1ARYI4DgfEiPNPBkbjWwSC7Dzuc
UM6fBcvhlfbBIQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:34 2025 by rpki-client