Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
File: Zckgon4-U6Nn-eqW23uve9Zag-o.mft (raw, json)
Hash identifier: qgXLPAtnGrWVxyBkTHg3QjHvkLtT5Km6gjWVHZtIg2A=
Subject key identifier: 76:31:41:FE:B4:D4:C4:4D:0A:02:78:00:D3:E2:37:FB:49:A9:AA:A3
Authority key identifier: 65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
Certificate issuer: /CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Certificate serial: 0199FAD836660F2DAC610D019EA47F20C159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
Manifest number: 1285
Signing time: Sun 19 Oct 2025 05:01:37 +0000
Manifest this update: Sun 19 Oct 2025 05:01:37 +0000
Manifest next update: Mon 20 Oct 2025 05:01:37 +0000
Files and hashes: 1: Zckgon4-U6Nn-eqW23uve9Zag-o.crl (hash: JmHVJFRg+wXo935OHaQf9XV8dykcZn3IKV6sOvrkfrk=)
2: fWdcwSs6zepV4nyngmDbMNEhJgc.roa (hash: xKdKIOHrNEbxshe+Nt7u4EYPgDXnCkWil6RpBaiRPJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:36:66:0f:2d:ac:61:0d:01:9e:a4:7f:20:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c920a27e3e53a367f9ea96db7baf7bd65a83ea
Validity
Not Before: Oct 19 05:01:37 2025 GMT
Not After : Oct 20 05:01:37 2025 GMT
Subject: CN=763141feb4d4c44d0a027800d3e237fb49a9aaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:f3:8e:95:bf:49:b7:4e:2b:84:3b:39:51:
de:35:8b:c3:06:b4:81:fa:51:01:b1:1e:03:47:29:
88:a9:86:73:29:c7:2e:44:3c:84:e5:c6:01:32:ad:
f9:95:b2:4c:fc:db:ab:f8:71:41:90:aa:ee:51:8b:
a6:7d:60:01:f8:08:85:5a:3d:88:f2:ed:cf:a4:e4:
da:60:73:01:a6:8e:56:4f:15:6a:88:64:1c:41:0e:
14:d2:29:fd:e6:ca:d4:cd:61:b6:e6:48:8e:1d:4d:
41:30:2c:7f:78:89:83:7c:49:ec:f6:f0:ff:63:29:
54:9c:0a:ce:a3:d6:ad:d8:8b:19:e1:be:b8:1a:24:
06:6f:a1:4f:ce:6f:21:81:ff:7a:54:33:07:d1:a2:
63:1d:4b:7d:1f:a1:8c:f2:74:ab:24:d0:95:af:a6:
7e:5e:a8:e2:e8:f3:20:a9:db:9d:81:8d:c9:ee:c0:
e4:cd:31:a1:b1:2b:16:94:ff:5b:5e:49:e5:2b:53:
42:ef:c6:c5:4e:74:ce:11:41:43:8c:13:e4:04:6c:
51:f0:23:22:81:41:3a:24:ae:95:e3:41:ff:2d:36:
a5:2d:a4:a3:5a:d9:51:cb:b7:d7:09:07:dd:c3:61:
91:53:82:08:cf:12:6b:8b:e2:cc:e5:ac:b1:c5:a9:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:31:41:FE:B4:D4:C4:4D:0A:02:78:00:D3:E2:37:FB:49:A9:AA:A3
X509v3 Authority Key Identifier:
keyid:65:C9:20:A2:7E:3E:53:A3:67:F9:EA:96:DB:7B:AF:7B:D6:5A:83:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zckgon4-U6Nn-eqW23uve9Zag-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b2dd00-a621-49a9-bbab-37f9bf7861b6/1/Zckgon4-U6Nn-eqW23uve9Zag-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:8d:e1:1d:c7:77:cd:7b:4f:53:98:8c:d2:7d:7a:19:2a:
ab:9d:21:24:08:15:40:f4:65:66:c5:bc:60:73:28:de:73:c9:
e8:95:1d:6e:81:1e:a0:d4:f7:3f:a1:49:81:0f:80:86:89:d6:
c5:07:09:b7:d2:e1:b6:64:a0:1e:7e:a0:61:3f:cc:8c:e5:79:
71:c2:17:07:ed:d0:54:f1:7f:77:a4:2b:22:2d:91:e3:3f:d1:
3c:bb:ce:aa:20:45:d5:e0:f8:54:85:ba:21:c9:aa:88:dd:8a:
ba:ca:62:a3:f3:ce:7a:65:b9:36:9b:7d:f0:10:29:ec:c1:ce:
55:d9:98:f8:aa:b5:17:1d:a9:43:2f:93:01:3f:ae:dc:58:04:
99:a5:42:db:05:55:10:e8:d1:20:cb:b0:41:4e:91:3e:65:5b:
ab:0b:a4:9a:f1:50:02:e9:95:c7:e8:28:39:91:89:90:fd:29:
d1:f1:6c:fa:75:a9:ea:d4:c6:35:79:13:13:f9:2f:4f:8f:07:
e3:fb:96:1a:8d:4e:6d:0b:98:68:27:91:a4:8f:fb:e5:ae:14:
22:26:5e:9e:08:10:d4:ea:b5:e3:a5:c0:2c:dd:67:4e:25:57:
49:1c:b5:21:3b:90:56:be:e8:c5:70:5f:e8:ec:e3:e4:14:83:
97:31:74:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62DZmDy2sYQ0BnqR/IMFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YzkyMGEyN2UzZTUzYTM2N2Y5ZWE5NmRiN2JhZjdiZDY1
YTgzZWEwHhcNMjUxMDE5MDUwMTM3WhcNMjUxMDIwMDUwMTM3WjAzMTEwLwYDVQQD
Eyg3NjMxNDFmZWI0ZDRjNDRkMGEwMjc4MDBkM2UyMzdmYjQ5YTlhYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukrzjpW/SbdOK4Q7OVHeNYvDBrSB
+lEBsR4DRymIqYZzKccuRDyE5cYBMq35lbJM/Nur+HFBkKruUYumfWAB+AiFWj2I
8u3PpOTaYHMBpo5WTxVqiGQcQQ4U0in95srUzWG25kiOHU1BMCx/eImDfEns9vD/
YylUnArOo9at2IsZ4b64GiQGb6FPzm8hgf96VDMH0aJjHUt9H6GM8nSrJNCVr6Z+
Xqji6PMgqdudgY3J7sDkzTGhsSsWlP9bXknlK1NC78bFTnTOEUFDjBPkBGxR8CMi
gUE6JK6V40H/LTalLaSjWtlRy7fXCQfdw2GRU4IIzxJri+LM5ayxxalpWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYxQf601MRNCgJ4ANPiN/tJqaqjMB8GA1UdIwQY
MBaAFGXJIKJ+PlOjZ/nqltt7r3vWWoPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWIt
MzdmOWJmNzg2MWI2LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMmRkMDAtYTYyMS00OWE5LWJiYWItMzdmOWJmNzg2MWI2
LzEvWmNrZ29uNC1VNk5uLWVxVzIzdXZlOVphZy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiO2N4R3H
d817T1OYjNJ9ehkqq50hJAgVQPRlZsW8YHMo3nPJ6JUdboEeoNT3P6FJgQ+AhonW
xQcJt9LhtmSgHn6gYT/MjOV5ccIXB+3QVPF/d6QrIi2R4z/RPLvOqiBF1eD4VIW6
IcmqiN2Kuspio/POemW5Npt98BAp7MHOVdmY+Kq1Fx2pQy+TAT+u3FgEmaVC2wVV
EOjRIMuwQU6RPmVbqwukmvFQAumVx+goOZGJkP0p0fFs+nWp6tTGNXkTE/kvT48H
4/uWGo1ObQuYaCeRpI/75a4UIiZenggQ1Oq146XALN1nTiVXSRy1ITuQVr7oxXBf
6Ozj5BSDlzF0DQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:10 2025 by rpki-client