Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File: zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier: ZqlD0gXS82rXBC7P2OmfIMBXNw8gV7uHi40FVl3Meic=
Subject key identifier: FF:48:A3:A4:59:00:E1:15:39:D0:55:FE:B6:DA:32:86:E1:2D:2C:F9
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer: /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial: 0199FBEA862F02153AEA9212D98282FAEB1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number: 06CA
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: EsGGI1P8V7qCIrWJmfPudsu7pMI.roa (hash: RgD/iTo2o3seqIZhRljS2dvXiiazUq7PXVkPQR+sYAc=)
2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: goFZek7cZ+R9DXlQktiXAaOrWV/NxGK0rYWbZ92OUE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:86:2f:02:15:3a:ea:92:12:d9:82:82:fa:eb:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=ff48a3a45900e11539d055feb6da3286e12d2cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:78:31:8c:a4:f8:b2:66:f2:02:77:fc:38:
40:05:ca:7c:c4:67:fb:25:d5:64:bc:f6:89:9c:c8:
87:1b:31:65:1a:1a:91:83:01:4c:1d:ca:30:30:5d:
fd:4e:e8:3b:e6:5e:fa:fa:a8:de:c3:8b:63:8b:4b:
42:91:f3:c7:b9:aa:56:3e:51:7e:f0:30:1d:d2:c5:
06:a0:4f:95:61:3c:a6:8f:e2:c5:17:b8:99:ee:ba:
16:d7:8d:9d:70:e9:22:5c:12:66:55:b3:55:3d:2a:
0a:b7:aa:e9:4d:c6:19:1d:16:ab:c3:a9:17:4c:fa:
56:02:cc:cc:da:a9:13:aa:1a:9f:6c:6f:cd:e1:3c:
2f:66:f1:00:e1:be:76:33:68:a5:b7:10:2d:9f:9c:
0f:c1:1c:c2:5e:49:f9:77:04:46:ba:45:5e:ee:21:
1c:8c:91:fd:bb:e2:aa:19:36:25:d9:62:74:24:cb:
41:b3:fb:2d:03:04:05:65:a1:cf:4b:60:42:38:b5:
16:e5:0f:38:bc:14:20:99:5d:ab:6c:2a:5f:46:b1:
a4:86:17:29:fd:d7:22:d4:c2:47:b4:86:71:c7:c5:
96:72:92:c0:a4:31:43:fe:27:2d:37:f0:1e:3a:3e:
a7:49:43:49:66:00:56:30:33:77:2e:57:be:12:0d:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:48:A3:A4:59:00:E1:15:39:D0:55:FE:B6:DA:32:86:E1:2D:2C:F9
X509v3 Authority Key Identifier:
keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:92:7b:1a:ce:6f:56:d6:1e:53:00:8b:81:17:44:33:84:52:
ec:e8:ea:99:4f:cf:28:6f:4a:a6:b7:7e:d0:e0:3d:b5:12:14:
5b:58:d7:ed:d0:0f:66:a6:f0:5e:de:85:32:f6:e2:27:88:d4:
a9:d8:a9:45:6d:8a:89:82:6b:03:1e:5b:90:d8:4b:6d:85:39:
2a:09:4c:a6:22:fd:38:12:86:2c:d9:7f:47:6b:72:0c:49:fe:
13:7c:57:9c:1d:c5:2d:eb:3c:29:a4:fe:43:f4:5a:25:a8:ac:
83:2c:f4:92:23:e6:a8:49:b6:81:20:30:c5:2a:ee:ca:16:d1:
8d:1f:f5:ad:82:20:7d:83:cb:cf:da:85:41:7c:e6:e8:cc:9f:
d2:bd:e8:e3:e6:53:a8:e2:1e:88:ae:59:19:3e:88:3f:af:f4:
e3:e0:5c:d3:c4:3d:7c:3f:13:a0:ea:6c:ec:9a:4f:5b:de:7c:
a5:bb:9e:03:55:af:dc:0c:2e:6b:f5:7e:b7:9b:fd:60:4e:8c:
f2:29:f8:38:b1:e5:48:46:1c:06:6f:af:cf:03:7b:a2:43:0f:
7e:d2:ea:cf:7a:73:74:ff:53:83:37:0c:1a:3c:a8:37:55:71:
ae:8a:6f:89:c0:33:58:32:4c:c9:70:48:3e:78:83:c9:4b:8e:
8f:55:60:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76oYvAhU66pIS2YKC+usbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMWY3MzM0NTc5NGNlNDgxN2VhOTllOGQ4Y2ZjZWE3MWJk
NzgzNjcwHhcNMjUxMDE5MTAwMTE0WhcNMjUxMDIwMTAwMTE0WjAzMTEwLwYDVQQD
EyhmZjQ4YTNhNDU5MDBlMTE1MzlkMDU1ZmViNmRhMzI4NmUxMmQyY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym54MYyk+LJm8gJ3/DhABcp8xGf7
JdVkvPaJnMiHGzFlGhqRgwFMHcowMF39Tug75l76+qjew4tji0tCkfPHuapWPlF+
8DAd0sUGoE+VYTymj+LFF7iZ7roW142dcOkiXBJmVbNVPSoKt6rpTcYZHRarw6kX
TPpWAszM2qkTqhqfbG/N4TwvZvEA4b52M2iltxAtn5wPwRzCXkn5dwRGukVe7iEc
jJH9u+KqGTYl2WJ0JMtBs/stAwQFZaHPS2BCOLUW5Q84vBQgmV2rbCpfRrGkhhcp
/dci1MJHtIZxx8WWcpLApDFD/ictN/AeOj6nSUNJZgBWMDN3Lle+Eg0HDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9Io6RZAOEVOdBV/rbaMobhLSz5MB8GA1UdIwQY
MBaAFM0fczRXlM5IF+qZ6NjPzqcb14NnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQt
N2YwZDA3YmE0YWYzLzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MDExNzAtZTYwNi00ZmQxLTg1MDQtN2YwZDA3YmE0YWYz
LzEvelI5ek5GZVV6a2dYNnBubzJNX09weHZYZzJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJJ7Gs5v
VtYeUwCLgRdEM4RS7OjqmU/PKG9Kprd+0OA9tRIUW1jX7dAPZqbwXt6FMvbiJ4jU
qdipRW2KiYJrAx5bkNhLbYU5KglMpiL9OBKGLNl/R2tyDEn+E3xXnB3FLes8KaT+
Q/RaJaisgyz0kiPmqEm2gSAwxSruyhbRjR/1rYIgfYPLz9qFQXzm6Myf0r3o4+ZT
qOIeiK5ZGT6IP6/04+Bc08Q9fD8ToOps7JpPW958pbueA1Wv3Awua/V+t5v9YE6M
8in4OLHlSEYcBm+vzwN7okMPftLqz3pzdP9TgzcMGjyoN1VxropvicAzWDJMyXBI
PniDyUuOj1Vgtw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:36 2025 by rpki-client