Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: PB7OqGuGjHYF1XQZ6/WPigLzBcL8CvG3sbTmDSASTgw=
Subject key identifier: 85:04:1D:54:FE:93:66:B1:97:20:4C:13:A7:5B:5E:7A:1F:23:29:36
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 0199FFC806661AE20A68A0EAEE871FBDC2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:02 +0000
Manifest this update: Mon 20 Oct 2025 04:02:02 +0000
Manifest next update: Tue 21 Oct 2025 04:02:02 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: v0ecByc8q70PIDgSjTS5jssYods5kRXFd42HkXrslWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:06:66:1a:e2:0a:68:a0:ea:ee:87:1f:bd:c2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Oct 20 04:02:02 2025 GMT
Not After : Oct 21 04:02:02 2025 GMT
Subject: CN=85041d54fe9366b197204c13a75b5e7a1f232936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:a0:3c:c1:cc:6a:ac:41:59:5c:2c:a8:ac:
68:8d:9d:97:ff:d1:6f:02:ba:ef:bc:2e:9b:c0:c3:
80:2f:a1:cc:cd:ef:7a:d7:b7:80:fc:ea:97:a0:24:
83:67:88:81:8a:ec:0f:7e:67:ae:a8:4d:7f:1c:a6:
53:40:ad:ab:db:04:7f:aa:31:b4:28:a5:9b:cd:49:
d5:4d:52:19:77:c4:22:9c:8c:e9:d9:a3:2a:c0:f4:
4d:11:32:fc:2a:1d:fa:04:ab:29:b1:25:01:88:21:
8d:35:d2:58:5a:a4:59:f6:b0:b1:bc:ab:b0:ec:93:
a5:2a:42:d9:a6:f7:48:be:67:b0:49:fc:c4:e8:b9:
66:a7:da:fe:bf:0f:66:6d:e6:1c:aa:99:bb:cf:91:
77:e6:49:07:87:72:57:89:f2:f6:c9:10:36:96:17:
10:04:61:13:d5:fa:48:1f:8b:94:4c:2f:4c:fc:fb:
15:9d:2f:ea:cf:7f:31:e2:13:5a:8d:bf:df:0c:c3:
43:47:e6:39:c1:d3:46:7b:5b:8a:0c:a8:d9:6a:76:
47:42:b7:f8:ea:bd:1d:4a:61:f7:c3:35:ab:d5:8b:
dd:7e:b1:b3:23:52:4d:56:d7:2a:5c:f7:b1:cd:96:
d2:91:9e:90:b5:55:04:49:3b:a5:20:0c:bf:cd:f0:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:1D:54:FE:93:66:B1:97:20:4C:13:A7:5B:5E:7A:1F:23:29:36
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:09:13:25:9e:31:56:ae:e7:64:5e:f6:c5:fb:e6:1f:fc:66:
37:13:66:f4:6b:85:16:41:e8:31:ad:fd:09:35:28:0d:70:3f:
ce:c4:2c:37:3c:61:03:d6:29:c0:db:e0:f7:fc:45:eb:71:b5:
a7:73:92:5e:fa:61:6d:fe:04:06:c3:ef:66:27:91:92:b5:d7:
24:b6:21:fb:62:26:fd:db:9f:f6:28:42:75:0a:8b:6d:69:8d:
22:23:4a:f9:e6:44:8c:95:4c:9a:6c:97:0c:73:9b:dc:ae:6f:
b8:98:68:fa:3c:c5:39:52:1d:6e:5e:7f:8c:59:cb:86:39:f2:
fb:48:57:2b:0c:5d:f3:31:c5:e8:f9:22:37:54:bd:61:04:29:
52:0f:13:9e:43:4b:20:b3:7b:ad:7a:21:9c:45:0b:84:ab:8c:
cb:9b:65:7f:8f:0e:8b:92:53:92:15:eb:b4:0c:48:01:b1:95:
7b:da:19:66:bf:52:86:77:84:f4:48:c9:08:83:ad:49:85:36:
98:7d:10:39:77:33:6f:45:8b:9e:b8:32:0a:59:9c:73:e4:dc:
9f:c6:73:23:7a:30:99:f4:a0:f2:35:36:fb:68:dd:78:11:36:
7f:2f:f6:82:7f:a5:30:83:9b:f7:b1:7b:14:e4:5f:10:77:35:
17:ee:4d:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yAZmGuIKaKDq7ocfvcK0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm
ZDg1NWIwHhcNMjUxMDIwMDQwMjAyWhcNMjUxMDIxMDQwMjAyWjAzMTEwLwYDVQQD
Eyg4NTA0MWQ1NGZlOTM2NmIxOTcyMDRjMTNhNzViNWU3YTFmMjMyOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupWgPMHMaqxBWVwsqKxojZ2X/9Fv
ArrvvC6bwMOAL6HMze9617eA/OqXoCSDZ4iBiuwPfmeuqE1/HKZTQK2r2wR/qjG0
KKWbzUnVTVIZd8QinIzp2aMqwPRNETL8Kh36BKspsSUBiCGNNdJYWqRZ9rCxvKuw
7JOlKkLZpvdIvmewSfzE6Llmp9r+vw9mbeYcqpm7z5F35kkHh3JXifL2yRA2lhcQ
BGET1fpIH4uUTC9M/PsVnS/qz38x4hNajb/fDMNDR+Y5wdNGe1uKDKjZanZHQrf4
6r0dSmH3wzWr1YvdfrGzI1JNVtcqXPexzZbSkZ6QtVUESTulIAy/zfBYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUEHVT+k2axlyBME6dbXnofIyk2MB8GA1UdIwQY
MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt
NzgxYWRhNmJlM2EwLzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew
LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigkTJZ4x
Vq7nZF72xfvmH/xmNxNm9GuFFkHoMa39CTUoDXA/zsQsNzxhA9YpwNvg9/xF63G1
p3OSXvphbf4EBsPvZieRkrXXJLYh+2Im/duf9ihCdQqLbWmNIiNK+eZEjJVMmmyX
DHOb3K5vuJho+jzFOVIdbl5/jFnLhjny+0hXKwxd8zHF6PkiN1S9YQQpUg8TnkNL
ILN7rXohnEULhKuMy5tlf48Oi5JTkhXrtAxIAbGVe9oZZr9ShneE9EjJCIOtSYU2
mH0QOXczb0WLnrgyClmcc+Tcn8ZzI3owmfSg8jU2+2jdeBE2fy/2gn+lMIOb97F7
FORfEHc1F+5N0A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:53 2025 by rpki-client