Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: smr49yILa9ps6edMmtBRtjIzJLqdQtRPZRGLHtFEqOk=
Subject key identifier: 0F:34:62:67:C9:59:72:0A:0E:5A:60:5D:81:6C:F5:1A:7F:49:3F:07
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0199FC213C5762FD7A3DA92568897D927BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0DCA
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: /TrfHVcmNUeoJaIdj8NhBW/eq0gvyiI54O+Z/rLzlhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3c:57:62:fd:7a:3d:a9:25:68:89:7d:92:7b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=0f346267c959720a0e5a605d816cf51a7f493f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:43:66:88:a8:78:93:74:bf:3c:cc:b4:c7:
86:31:67:dd:c9:5d:64:de:d4:c8:a0:d5:20:7c:2c:
d4:16:3a:4b:10:ae:53:cb:2b:81:fa:5a:ec:3d:e4:
4c:6c:1e:ac:18:f9:8f:48:ff:47:3a:11:69:85:74:
1a:c7:53:a1:cc:29:54:95:ee:86:89:85:aa:c2:b4:
2d:40:71:9c:71:72:49:fd:9a:42:58:9e:ec:b1:c0:
17:e3:84:e6:8b:ed:de:02:94:6a:21:c9:5e:ba:69:
af:2d:4e:5a:7f:80:46:69:f2:34:86:1f:a0:2e:e7:
7f:78:da:75:37:e8:e0:8d:84:09:53:5e:65:2b:ed:
0f:48:bd:58:1c:f1:51:56:2b:13:1e:b2:e5:75:0e:
e0:1a:02:79:5e:20:dc:d2:75:68:2e:19:b3:3c:eb:
c5:df:f2:f8:bd:a1:72:9b:8b:e0:ff:29:f3:a8:5f:
28:80:08:67:f1:28:5c:64:ae:4c:c3:d5:05:64:44:
26:47:5c:9b:b6:0d:b1:d9:00:6d:7d:ca:48:d4:2d:
7a:9a:73:af:11:08:f6:3a:a9:07:93:c4:ba:16:0e:
12:20:41:f5:63:20:5f:ca:ab:48:d1:d1:0e:e4:bc:
bb:da:cb:96:b4:a6:30:fd:08:b4:c3:88:83:30:9a:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:62:67:C9:59:72:0A:0E:5A:60:5D:81:6C:F5:1A:7F:49:3F:07
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:03:0c:37:51:94:4c:f3:ab:25:8f:96:3e:0c:ab:80:de:11:
d6:82:5b:3d:d9:3c:b7:63:5f:df:7e:27:86:d2:25:f3:03:9b:
5f:0c:2b:55:91:c4:80:8c:94:87:96:88:26:ae:b4:fb:6e:63:
a1:ff:32:65:85:c1:81:cf:fe:d9:42:c3:a6:3e:56:73:e4:e6:
9a:ba:83:17:8e:64:99:d9:f8:36:67:ef:31:80:fb:cb:7e:f9:
39:bc:66:d0:82:8b:99:c4:ac:9b:c6:fa:7d:57:b2:02:e6:03:
00:c1:7e:0f:5d:23:2e:a2:74:b8:73:9c:1d:19:ca:44:77:17:
c5:fc:5c:91:a6:10:d7:78:60:6a:c4:14:30:8f:c5:1c:a9:21:
c8:24:a2:d6:de:97:25:c7:09:1d:e2:60:db:8a:12:ac:1c:93:
11:d1:1d:e5:da:45:e5:19:0d:fc:fc:84:ae:8f:eb:54:ac:5c:
02:64:92:39:06:fb:8d:77:d3:14:e1:96:3b:2d:78:83:bb:f6:
05:2b:32:03:f9:a2:eb:73:97:0b:1b:7c:86:9d:f0:fa:3b:d3:
ad:01:2a:30:08:7b:2a:2f:db:8d:83:3c:1d:6f:09:83:cf:4c:
26:ca:31:58:45:84:6e:6f:cf:de:3d:f4:7c:20:ff:29:b7:1e:
a0:84:90:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8ITxXYv16PaklaIl9knv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjc1MzQxNTAwODA3YTk3NTBhOGNmNTViZjRlNDVmZjAz
ZjMxMmEwHhcNMjUxMDE5MTEwMTAwWhcNMjUxMDIwMTEwMTAwWjAzMTEwLwYDVQQD
EygwZjM0NjI2N2M5NTk3MjBhMGU1YTYwNWQ4MTZjZjUxYTdmNDkzZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtpDZoioeJN0vzzMtMeGMWfdyV1k
3tTIoNUgfCzUFjpLEK5TyyuB+lrsPeRMbB6sGPmPSP9HOhFphXQax1OhzClUle6G
iYWqwrQtQHGccXJJ/ZpCWJ7sscAX44Tmi+3eApRqIcleummvLU5af4BGafI0hh+g
Lud/eNp1N+jgjYQJU15lK+0PSL1YHPFRVisTHrLldQ7gGgJ5XiDc0nVoLhmzPOvF
3/L4vaFym4vg/ynzqF8ogAhn8ShcZK5Mw9UFZEQmR1ybtg2x2QBtfcpI1C16mnOv
EQj2OqkHk8S6Fg4SIEH1YyBfyqtI0dEO5Ly72suWtKYw/Qi0w4iDMJo9EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA80YmfJWXIKDlpgXYFs9Rp/ST8HMB8GA1UdIwQY
MBaAFMy3U0FQCAepdQqM9Vv05F/wPzEqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUt
YTk5YTIxMDE1OTM3LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZmZiMmYtOWZiZi00ODhiLTkzMTUtYTk5YTIxMDE1OTM3
LzEvekxkVFFWQUlCNmwxQ296MVdfVGtYX0FfTVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQMMN1GU
TPOrJY+WPgyrgN4R1oJbPdk8t2Nf334nhtIl8wObXwwrVZHEgIyUh5aIJq60+25j
of8yZYXBgc/+2ULDpj5Wc+TmmrqDF45kmdn4NmfvMYD7y375Obxm0IKLmcSsm8b6
fVeyAuYDAMF+D10jLqJ0uHOcHRnKRHcXxfxckaYQ13hgasQUMI/FHKkhyCSi1t6X
JccJHeJg24oSrByTEdEd5dpF5RkN/PyEro/rVKxcAmSSOQb7jXfTFOGWOy14g7v2
BSsyA/mi63OXCxt8hp3w+jvTrQEqMAh7Ki/bjYM8HW8Jg89MJsoxWEWEbm/P3j30
fCD/KbceoISQSw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:25 2025 by rpki-client