Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: WcMK/CEX2eILWtl2jQTR4lXPQBFQt9MyZcRhUcWNfzY=
Subject key identifier: 31:FD:CC:A8:69:20:53:0D:67:92:BA:2C:39:64:FF:B5:B0:CD:50:03
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 0199FB0F1953CEDE38B74CAF7964AE803717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0C9F
Signing time: Sun 19 Oct 2025 06:01:34 +0000
Manifest this update: Sun 19 Oct 2025 06:01:34 +0000
Manifest next update: Mon 20 Oct 2025 06:01:34 +0000
Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: txpVeClkkcRLKS3+PlnroZsjytOod/hyYfkd3ELlj3E=)
2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:19:53:ce:de:38:b7:4c:af:79:64:ae:80:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Oct 19 06:01:34 2025 GMT
Not After : Oct 20 06:01:34 2025 GMT
Subject: CN=31fdcca86920530d6792ba2c3964ffb5b0cd5003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f0:73:cd:11:e3:3e:13:ed:95:1a:66:01:07:
bc:03:f4:ec:dd:47:c3:b1:7f:75:cb:43:ea:33:0c:
7a:06:33:c8:68:e0:3f:ef:f9:05:0e:55:99:fd:be:
d9:57:5e:15:ee:1d:f9:49:7f:ce:5c:cb:18:49:40:
6a:f2:04:1a:32:c2:b8:52:1d:81:19:ec:dc:11:63:
0e:7d:52:4e:f9:8e:7e:25:f3:f9:a9:1a:ea:4c:89:
2a:93:9b:74:58:c1:49:c0:d4:6d:5a:aa:a6:7d:5a:
cc:3f:56:78:d4:9a:16:b6:3f:d8:45:9e:4d:98:1c:
2a:e7:f2:d5:be:b9:13:fb:9c:6d:56:62:a2:15:30:
6b:8a:5a:12:07:31:ab:73:08:1c:e6:f7:b7:6d:fb:
62:29:81:dd:e6:8d:3b:95:f0:45:8f:59:00:2b:74:
9d:b5:65:80:ad:bd:7f:9b:90:0a:cd:29:87:6e:d9:
5a:63:9b:b8:15:a0:e0:ed:9d:d6:10:77:a4:ae:52:
7b:60:90:d4:63:e0:fc:e6:1c:83:86:33:3f:e4:af:
3e:67:a5:61:22:ab:2f:24:10:c9:2b:bf:b4:b3:25:
51:2d:bf:dc:c1:76:07:90:94:fc:db:14:23:49:5a:
bf:a0:6d:91:6c:3f:e9:ae:f2:00:83:9e:a3:df:21:
05:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:CC:A8:69:20:53:0D:67:92:BA:2C:39:64:FF:B5:B0:CD:50:03
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:99:e4:c8:79:04:74:2e:e3:dc:b7:e5:d5:b8:2c:c5:eb:33:
24:c8:fa:e8:03:ad:f2:22:64:55:5c:4c:32:8e:a2:7d:ba:56:
a4:c3:98:8f:fc:bf:47:ac:e3:38:fa:cc:22:7d:e6:38:5e:cf:
dd:fa:8e:51:53:ef:51:b7:bd:b1:15:2a:82:45:c4:85:c6:fe:
fa:21:e2:27:8a:ab:b9:e9:eb:91:e3:f1:a2:53:53:7e:53:d0:
fd:c8:38:b2:37:39:9c:82:5d:62:4f:11:d2:0f:d5:b7:34:08:
97:a8:2e:2c:1d:7e:df:55:1b:78:f3:7c:e7:ba:4c:bb:f4:53:
56:da:d1:3b:bd:a3:9e:f1:9e:58:9c:28:06:2c:cd:67:c9:60:
05:ca:ae:e3:30:8c:b0:86:51:7f:bb:e1:f2:26:be:ee:62:40:
5e:74:25:e0:7d:68:ae:cf:a1:2d:7d:88:d7:a5:b4:55:56:f2:
10:57:31:78:e1:66:6b:67:b1:0d:14:7f:eb:29:f8:02:eb:46:
ca:64:98:00:89:0b:68:6b:1d:0c:a0:b5:a7:87:d1:f6:ef:72:
9b:b1:c8:aa:31:b6:c6:db:76:c3:40:c8:0d:01:80:44:72:ea:
6b:bf:3f:77:94:07:e0:fc:7d:64:35:5f:a2:85:87:44:d7:19:
9b:82:5b:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DxlTzt44t0yveWSugDcXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz
YzEzYmQwHhcNMjUxMDE5MDYwMTM0WhcNMjUxMDIwMDYwMTM0WjAzMTEwLwYDVQQD
EygzMWZkY2NhODY5MjA1MzBkNjc5MmJhMmMzOTY0ZmZiNWIwY2Q1MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fBzzRHjPhPtlRpmAQe8A/Ts3UfD
sX91y0PqMwx6BjPIaOA/7/kFDlWZ/b7ZV14V7h35SX/OXMsYSUBq8gQaMsK4Uh2B
GezcEWMOfVJO+Y5+JfP5qRrqTIkqk5t0WMFJwNRtWqqmfVrMP1Z41JoWtj/YRZ5N
mBwq5/LVvrkT+5xtVmKiFTBriloSBzGrcwgc5ve3bftiKYHd5o07lfBFj1kAK3Sd
tWWArb1/m5AKzSmHbtlaY5u4FaDg7Z3WEHekrlJ7YJDUY+D85hyDhjM/5K8+Z6Vh
IqsvJBDJK7+0syVRLb/cwXYHkJT82xQjSVq/oG2RbD/prvIAg56j3yEFPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH9zKhpIFMNZ5K6LDlk/7WwzVADMB8GA1UdIwQY
MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt
YWQ5ZTFhMDUxMGI5LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5
LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZnkyHkE
dC7j3Lfl1bgsxeszJMj66AOt8iJkVVxMMo6ifbpWpMOYj/y/R6zjOPrMIn3mOF7P
3fqOUVPvUbe9sRUqgkXEhcb++iHiJ4qruenrkePxolNTflPQ/cg4sjc5nIJdYk8R
0g/VtzQIl6guLB1+31UbePN857pMu/RTVtrRO72jnvGeWJwoBizNZ8lgBcqu4zCM
sIZRf7vh8ia+7mJAXnQl4H1ors+hLX2I16W0VVbyEFcxeOFma2exDRR/6yn4AutG
ymSYAIkLaGsdDKC1p4fR9u9ym7HIqjG2xtt2w0DIDQGARHLqa78/d5QH4Px9ZDVf
ooWHRNcZm4JbUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:15 2025 by rpki-client