Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: xk+5c/grhCqC3KZe5QJMlr7F/XZwARId0DtsoEw+K5Y=
Subject key identifier: CB:C4:33:44:2D:E7:E3:8F:F4:5E:FB:B4:03:3A:91:98:36:53:D6:B0
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 0199FE469555E5185EAD00BEE54F75ABCB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 15B6
Signing time: Sun 19 Oct 2025 21:01:02 +0000
Manifest this update: Sun 19 Oct 2025 21:01:02 +0000
Manifest next update: Mon 20 Oct 2025 21:01:02 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: 2cUDaYKJUIO+XP4bUH71qulIrIZ2m5anBU0vmUhwH2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:95:55:e5:18:5e:ad:00:be:e5:4f:75:ab:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Oct 19 21:01:02 2025 GMT
Not After : Oct 20 21:01:02 2025 GMT
Subject: CN=cbc433442de7e38ff45efbb4033a91983653d6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:48:50:e9:25:ce:3f:56:40:54:6d:72:e0:
75:db:f4:f3:bd:4b:cd:76:9b:46:76:c7:3b:07:cd:
79:84:8f:5f:18:af:d9:0f:60:2b:99:2a:d6:c5:17:
25:e9:90:b8:60:bf:d8:ad:f1:f5:af:9b:d1:32:c5:
e2:3d:15:68:14:d0:3a:b0:74:6a:57:5d:ef:6b:c2:
90:07:22:7e:69:9a:8b:f4:af:6c:aa:5c:a8:ac:f1:
51:dc:fd:a5:ee:35:13:3d:38:c2:30:1b:3d:02:0e:
a8:32:25:4d:79:d0:73:83:7b:41:f1:36:a2:1e:b4:
9f:2a:53:57:d7:95:cc:31:dd:96:79:f4:09:47:37:
6a:8a:28:16:32:73:26:5f:3d:74:76:ef:ea:8d:45:
99:5d:11:ca:2e:8c:3e:85:eb:fc:74:89:0d:2a:28:
44:f8:54:31:67:2f:71:f4:0c:07:6e:1e:bf:6e:c7:
85:90:ff:fe:6b:5f:b6:3f:60:0b:26:5d:62:46:63:
b3:6a:61:b0:87:55:07:18:fd:51:fa:d8:ea:b8:a3:
93:52:27:8c:f4:ab:8a:86:5d:05:88:f3:2d:36:01:
9d:d5:52:d9:c9:a2:f5:34:32:3b:40:34:31:be:71:
dc:ed:90:37:33:12:f9:ed:e2:b7:3b:54:f2:14:80:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C4:33:44:2D:E7:E3:8F:F4:5E:FB:B4:03:3A:91:98:36:53:D6:B0
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:1d:16:45:33:0c:ad:37:87:0e:e9:cd:b7:d7:2a:f5:8d:
50:41:e8:ac:fa:26:6d:28:c5:64:7c:18:c9:52:a7:93:04:d6:
2a:8f:40:26:fd:3e:1c:79:87:be:dc:38:c3:ff:65:ef:67:99:
3b:2d:3a:86:a8:b0:17:29:36:06:ae:57:d1:ca:22:48:39:07:
e2:0c:80:bb:ba:26:06:ee:82:80:dd:d9:de:5e:ca:0a:62:97:
39:9b:a9:b2:3b:33:e6:a9:bc:7c:79:09:7a:73:80:f2:be:ce:
84:ce:a1:e4:53:28:4a:27:cb:ba:0f:50:23:8a:60:ec:c2:ae:
79:52:0b:ba:10:70:1d:07:30:f9:45:91:eb:cb:9c:cf:dc:bd:
93:99:24:79:eb:04:c7:15:c4:63:85:44:94:87:55:2b:a3:db:
b6:53:80:49:9b:94:41:4d:1a:03:e3:8a:b7:93:f7:d7:f0:d4:
c6:5c:81:ee:e5:9f:62:0d:20:b2:d2:06:40:f4:5c:31:37:70:
99:8f:19:d4:80:0d:b1:2c:76:2b:49:f9:59:d1:f9:fe:0c:2d:
51:59:df:fd:ae:6f:09:cd:dd:c5:9d:bb:80:ec:b9:fd:c1:fb:
85:76:53:c4:fe:84:81:32:c0:dc:a8:8d:30:e4:38:c6:d2:26:
a8:26:9b:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RpVV5RherQC+5U91q8syMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOTc3ZTlkNTJhZmJjNDc3OTlkMzk3NWZjZWU4YWM1MWNh
MGNmNmEwHhcNMjUxMDE5MjEwMTAyWhcNMjUxMDIwMjEwMTAyWjAzMTEwLwYDVQQD
EyhjYmM0MzM0NDJkZTdlMzhmZjQ1ZWZiYjQwMzNhOTE5ODM2NTNkNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDxIUOklzj9WQFRtcuB12/TzvUvN
dptGdsc7B815hI9fGK/ZD2ArmSrWxRcl6ZC4YL/YrfH1r5vRMsXiPRVoFNA6sHRq
V13va8KQByJ+aZqL9K9sqlyorPFR3P2l7jUTPTjCMBs9Ag6oMiVNedBzg3tB8Tai
HrSfKlNX15XMMd2WefQJRzdqiigWMnMmXz10du/qjUWZXRHKLow+hev8dIkNKihE
+FQxZy9x9AwHbh6/bseFkP/+a1+2P2ALJl1iRmOzamGwh1UHGP1R+tjquKOTUieM
9KuKhl0FiPMtNgGd1VLZyaL1NDI7QDQxvnHc7ZA3MxL57eK3O1TyFIDOsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvEM0Qt5+OP9F77tAM6kZg2U9awMB8GA1UdIwQY
MBaAFMyXfp1Sr7xHeZ05dfzuisUcoM9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTkt
ZTIzMDQ2MmZjNTdiLzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy85NWE1ZTYtNTU4My00Y2NlLTg2ZTktZTIzMDQ2MmZjNTdi
LzEvekpkLW5WS3Z2RWQ1blRsMV9PNkt4UnlnejJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv8dFkUz
DK03hw7pzbfXKvWNUEHorPombSjFZHwYyVKnkwTWKo9AJv0+HHmHvtw4w/9l72eZ
Oy06hqiwFyk2Bq5X0coiSDkH4gyAu7omBu6CgN3Z3l7KCmKXOZupsjsz5qm8fHkJ
enOA8r7OhM6h5FMoSifLug9QI4pg7MKueVILuhBwHQcw+UWR68ucz9y9k5kkeesE
xxXEY4VElIdVK6PbtlOASZuUQU0aA+OKt5P31/DUxlyB7uWfYg0gstIGQPRcMTdw
mY8Z1IANsSx2K0n5WdH5/gwtUVnf/a5vCc3dxZ27gOy5/cH7hXZTxP6EgTLA3KiN
MOQ4xtImqCabCQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:25 2025 by rpki-client