Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: AZlJ75lbxv1dJR+R5pSzhyxKidJ8LUWFu+yiIowoje0=
Subject key identifier: F7:A1:33:89:39:C3:2D:6A:BB:57:8F:F5:D6:7B:08:88:E3:2C:9D:CF
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 0199FBEB28FBBF34FFD87F023AB1EEC3A842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 13E2
Signing time: Sun 19 Oct 2025 10:01:56 +0000
Manifest this update: Sun 19 Oct 2025 10:01:56 +0000
Manifest next update: Mon 20 Oct 2025 10:01:56 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: 7PbuM589SG0CXDaFZMDF84UIksTo7BmDbwO4tbrUX9s=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:28:fb:bf:34:ff:d8:7f:02:3a:b1:ee:c3:a8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Oct 19 10:01:56 2025 GMT
Not After : Oct 20 10:01:56 2025 GMT
Subject: CN=f7a1338939c32d6abb578ff5d67b0888e32c9dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:2f:98:ab:e6:ab:8a:4d:13:06:1a:31:19:
45:5f:46:a1:62:e8:70:98:fa:a4:8e:8a:18:b6:43:
dc:db:4f:e8:63:3c:0f:a2:27:dd:52:11:46:0e:6d:
5d:f5:ea:5c:8f:00:77:ba:44:1f:0f:ee:3f:fb:1a:
2b:58:c3:83:da:9b:2f:db:2f:bb:b0:99:98:dd:46:
3a:17:94:2b:a5:2d:61:8b:35:5d:31:11:b3:3b:0f:
a3:7e:9c:b7:6a:b1:90:6a:de:d0:53:5a:b9:2e:aa:
f7:37:9c:e2:8a:fb:bc:ca:0e:ef:30:3c:bb:81:35:
ba:64:c2:38:50:62:1c:a2:07:02:41:18:fd:e1:04:
97:fa:07:6b:13:87:52:7f:50:19:5a:52:f1:57:8b:
9b:9e:e6:44:95:a7:2a:5c:a3:ae:91:17:42:9c:2d:
b5:31:5f:60:9c:84:83:65:21:a0:37:33:88:f6:83:
e7:bd:dd:49:7e:c7:9b:7e:f0:8b:e7:b5:fa:0e:61:
f1:b9:2f:86:c4:ef:83:0f:fc:98:2a:50:61:49:0e:
40:ac:e2:40:a8:00:45:5c:a2:4d:68:e6:03:8a:ae:
78:89:73:32:c4:82:3f:a9:10:45:a7:71:72:6c:a7:
94:2f:f8:28:36:9d:34:1b:b0:43:10:d4:80:94:0c:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A1:33:89:39:C3:2D:6A:BB:57:8F:F5:D6:7B:08:88:E3:2C:9D:CF
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:20:72:3a:b1:f9:26:8f:54:f0:97:c7:91:c1:81:3d:89:
81:f2:50:44:9c:a5:a4:98:fc:18:b8:66:5d:a9:68:70:7c:e0:
e4:01:72:df:b0:56:2a:15:2a:f8:ac:97:b6:e2:d8:7f:93:86:
d8:73:94:77:da:d6:dc:4f:75:d2:ff:85:08:7a:2a:de:ca:1f:
53:cf:13:b0:be:76:a5:cb:1d:f0:79:fa:02:9b:65:e1:cc:4e:
41:8b:dc:87:16:bc:f6:4f:3e:af:ca:bb:2b:3b:f3:c3:2f:9b:
5e:a5:71:88:02:44:b9:c4:af:4c:8c:a3:5c:55:fd:af:fd:b2:
33:dc:ee:2d:5b:d3:2e:9a:74:4d:d1:24:22:66:1d:db:7c:4f:
12:2b:b5:ea:e7:01:88:8f:6d:08:7c:9c:e9:91:29:5a:0e:f0:
27:0b:ba:16:8e:d5:87:49:5f:d6:f5:b5:81:63:2e:88:4b:4b:
76:cb:d3:0d:d7:bc:10:07:1a:d5:4a:92:b6:01:96:d2:da:3d:
4f:b8:af:f1:df:d4:14:be:a9:32:83:34:f9:9f:c9:f6:3b:67:
d7:76:c6:56:c1:7d:35:76:90:fa:6f:41:01:2c:96:c7:9e:79:
a3:a4:53:55:c6:3a:ba:7a:25:b9:76:b0:88:1a:a8:83:a3:f1:
3f:1a:13:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yj7vzT/2H8COrHuw6hCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjQ4ZDBhMzdhYmZjMzRiNDFkMmQyYmFlOGM2ODJlZDIz
ZWM0MjYwHhcNMjUxMDE5MTAwMTU2WhcNMjUxMDIwMTAwMTU2WjAzMTEwLwYDVQQD
EyhmN2ExMzM4OTM5YzMyZDZhYmI1NzhmZjVkNjdiMDg4OGUzMmM5ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20gvmKvmq4pNEwYaMRlFX0ahYuhw
mPqkjooYtkPc20/oYzwPoifdUhFGDm1d9epcjwB3ukQfD+4/+xorWMOD2psv2y+7
sJmY3UY6F5QrpS1hizVdMRGzOw+jfpy3arGQat7QU1q5Lqr3N5ziivu8yg7vMDy7
gTW6ZMI4UGIcogcCQRj94QSX+gdrE4dSf1AZWlLxV4ubnuZElacqXKOukRdCnC21
MV9gnISDZSGgNzOI9oPnvd1JfsebfvCL57X6DmHxuS+GxO+DD/yYKlBhSQ5ArOJA
qABFXKJNaOYDiq54iXMyxII/qRBFp3FybKeUL/goNp00G7BDENSAlAwQawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPehM4k5wy1qu1eP9dZ7CIjjLJ3PMB8GA1UdIwQY
MBaAFGW0jQo3q/w0tB0tK66MaC7SPsQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUt
OWExNWJjMGQzOTg4LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUtOWExNWJjMGQzOTg4
LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU44gcjqx
+SaPVPCXx5HBgT2JgfJQRJylpJj8GLhmXalocHzg5AFy37BWKhUq+KyXtuLYf5OG
2HOUd9rW3E910v+FCHoq3sofU88TsL52pcsd8Hn6Aptl4cxOQYvchxa89k8+r8q7
Kzvzwy+bXqVxiAJEucSvTIyjXFX9r/2yM9zuLVvTLpp0TdEkImYd23xPEiu16ucB
iI9tCHyc6ZEpWg7wJwu6Fo7Vh0lf1vW1gWMuiEtLdsvTDde8EAca1UqStgGW0to9
T7iv8d/UFL6pMoM0+Z/J9jtn13bGVsF9NXaQ+m9BASyWx555o6RTVcY6unoluXaw
iBqog6PxPxoTZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:29 2025 by rpki-client