Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: gkYESFlo/LVJKI2itQlQTGz+VlvixJER7xVmWAR+dC4=
Subject key identifier: 5E:22:8B:CE:06:40:E7:59:3A:15:28:70:1B:BC:DB:62:54:6A:61:9A
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 019A03DA847DA40BB951AA7DF7D9F9A4BBEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 23:00:43 +0000
Manifest this update: Mon 20 Oct 2025 23:00:43 +0000
Manifest next update: Tue 21 Oct 2025 23:00:43 +0000
Files and hashes: 1: 5iOaoXB5nkYwr8tIgFWyVnXEhjk.roa (hash: 75KyluwEydMP2XQT86kr0piX0sxxFkty1yXB3kElNns=)
2: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: 99nNUEFumgdV1ezmaB1S4zpx6iIi7rFtND1K8ftkVak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:da:84:7d:a4:0b:b9:51:aa:7d:f7:d9:f9:a4:bb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: Oct 20 23:00:43 2025 GMT
Not After : Oct 21 23:00:43 2025 GMT
Subject: CN=5e228bce0640e7593a1528701bbcdb62546a619a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:71:c9:10:db:9c:53:f4:0f:4c:e8:c1:e9:
4a:53:b9:3f:43:7c:9d:c8:b7:9a:76:b7:72:97:ea:
87:98:78:4c:e0:81:4c:9e:2b:ec:c8:0d:94:b2:c0:
32:85:b0:76:db:f2:cc:4f:d0:8a:66:65:14:68:a3:
56:c7:3b:0d:66:3c:a0:87:9c:f6:78:c8:5d:a3:03:
44:1d:53:81:28:f7:b7:c9:00:14:3c:44:d1:a2:80:
a4:6f:61:b8:ff:86:8a:29:b7:76:42:af:e2:b4:40:
9d:f4:8a:46:88:61:6c:18:bc:b6:53:a7:dc:fb:ed:
a6:05:28:45:29:75:6b:dc:9e:55:86:d3:a2:0c:33:
df:f4:6d:77:bd:8d:f2:bc:52:21:dd:2d:ee:59:ee:
0c:4a:e7:ae:cd:55:5c:b6:a5:59:21:34:26:81:28:
49:3d:fc:56:f7:3e:1f:0b:14:cd:c1:79:f1:33:8e:
e2:2a:13:9a:52:05:6f:96:37:fe:7b:ce:6a:ac:a6:
b4:91:a4:c8:88:9c:d4:1c:7d:30:dd:e0:8d:36:90:
d8:c6:41:d0:87:c1:40:13:af:b6:b0:34:d5:2d:08:
6c:13:c3:16:62:cd:60:5a:d2:9b:cf:ff:e7:3a:14:
df:d5:00:b7:11:5a:af:d5:28:37:19:4f:b0:ea:3f:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:22:8B:CE:06:40:E7:59:3A:15:28:70:1B:BC:DB:62:54:6A:61:9A
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3a:7e:de:f9:f1:0e:d3:ad:2d:12:74:e3:f9:29:b8:a5:09:
54:6f:c0:fd:0d:03:43:ad:4e:aa:ae:a7:1e:08:62:d6:43:33:
11:dc:ab:d5:41:20:a2:3d:cb:8c:9e:33:b0:16:1f:2f:81:04:
9c:79:0c:fd:d7:97:30:43:ec:03:44:5e:14:f4:9b:6d:1c:fc:
82:a3:f4:27:89:96:0c:c5:f8:b6:6b:98:60:1a:2b:a8:28:1e:
7a:ae:30:f2:e7:22:f4:b1:45:96:dd:36:f3:95:ae:1d:38:9a:
15:f1:07:ec:4e:ee:33:48:c8:bb:30:b0:3a:03:82:67:31:63:
c8:07:1d:19:b7:7e:e1:35:4e:ff:c1:86:f8:c2:10:5d:83:4b:
2d:0e:0d:8f:67:e6:d5:a6:69:dc:8f:f5:23:6c:75:b3:91:b1:
6d:db:b5:3f:94:bf:d1:f5:86:b2:52:33:5f:8a:f5:d7:35:0c:
8a:67:87:88:c0:f6:a8:6d:af:f0:e9:11:78:54:9c:36:2b:42:
df:93:c0:d2:6f:b6:92:0d:82:fc:ea:80:45:d1:a2:57:53:8f:
d3:cb:00:58:d3:87:94:ad:98:f2:52:c2:fe:76:e6:4e:65:48:
b0:9f:69:1f:d5:e9:b0:35:3d:9f:88:40:8f:df:1e:4e:64:df:
7a:f6:7a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoD2oR9pAu5Uap999n5pLvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGYzNzlmYWFmMjEwYTcwMzZkYWMwNWRlNmI1NzcyZGJl
NGRkNmMwHhcNMjUxMDIwMjMwMDQzWhcNMjUxMDIxMjMwMDQzWjAzMTEwLwYDVQQD
Eyg1ZTIyOGJjZTA2NDBlNzU5M2ExNTI4NzAxYmJjZGI2MjU0NmE2MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidFxyRDbnFP0D0zowelKU7k/Q3yd
yLeadrdyl+qHmHhM4IFMnivsyA2UssAyhbB22/LMT9CKZmUUaKNWxzsNZjygh5z2
eMhdowNEHVOBKPe3yQAUPETRooCkb2G4/4aKKbd2Qq/itECd9IpGiGFsGLy2U6fc
++2mBShFKXVr3J5VhtOiDDPf9G13vY3yvFIh3S3uWe4MSueuzVVctqVZITQmgShJ
PfxW9z4fCxTNwXnxM47iKhOaUgVvljf+e85qrKa0kaTIiJzUHH0w3eCNNpDYxkHQ
h8FAE6+2sDTVLQhsE8MWYs1gWtKbz//nOhTf1QC3EVqv1Sg3GU+w6j/P5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4ii84GQOdZOhUocBu822JUamGaMB8GA1UdIwQY
MBaAFGXfN5+q8hCnA22sBd5rV3Lb5N1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgt
MDc2Yzg4Yjg4MDJmLzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lZDUxZWMtNzhlNi00ZmYwLWJhNTgtMDc2Yzg4Yjg4MDJm
LzEvWmQ4M242cnlFS2NEYmF3RjNtdFhjdHZrM1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzp+3vnx
DtOtLRJ04/kpuKUJVG/A/Q0DQ61Oqq6nHghi1kMzEdyr1UEgoj3LjJ4zsBYfL4EE
nHkM/deXMEPsA0ReFPSbbRz8gqP0J4mWDMX4tmuYYBorqCgeeq4w8uci9LFFlt02
85WuHTiaFfEH7E7uM0jIuzCwOgOCZzFjyAcdGbd+4TVO/8GG+MIQXYNLLQ4Nj2fm
1aZp3I/1I2x1s5Gxbdu1P5S/0fWGslIzX4r11zUMimeHiMD2qG2v8OkReFScNitC
35PA0m+2kg2C/OqARdGiV1OP08sAWNOHlK2Y8lLC/nbmTmVIsJ9pH9XpsDU9n4hA
j98eTmTfevZ62w==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:49 2025 by rpki-client