Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: baaM4H2Ov20E/3EM6ejP6DNuiIaQFBpBfVmn67Lcvs8=
Subject key identifier: E8:9F:6D:B7:C8:24:38:68:02:E1:10:51:A4:30:D3:95:CD:6D:DE:AA
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 0199FD33FFD06F693C1817A9816F33715534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 13F0
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: 931LjTVw2mToUpM44vXUoqhChKAtP7+LvNI0lQfI9ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ff:d0:6f:69:3c:18:17:a9:81:6f:33:71:55:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=e89f6db7c824386802e11051a430d395cd6ddeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:78:e2:93:4d:35:f8:b4:8a:95:a5:c1:e6:
2d:94:7d:d0:68:56:ba:c8:36:ea:22:27:b1:c3:3b:
59:b8:93:ae:47:c2:f9:15:a5:a8:45:2b:8f:e8:a5:
76:db:f1:f6:eb:f3:36:be:46:d2:74:87:35:f7:5b:
23:aa:70:9b:5c:b7:ac:0b:0e:7f:17:8f:bf:be:b5:
13:a7:8b:31:f5:4c:1b:0c:f5:1f:c6:a0:47:4b:2c:
f8:1a:ac:98:58:4c:35:37:5a:68:c2:66:8f:80:1b:
0b:3d:0c:40:bf:11:ee:a4:26:53:3c:52:f1:c4:29:
ef:c8:a2:2d:f6:75:12:24:e7:ee:47:4d:a5:5e:b9:
85:cc:be:0d:42:4f:02:9c:ce:6e:d9:b9:a2:7c:e8:
82:b5:c3:a8:8a:ca:67:49:f7:4d:ce:fb:ff:cf:44:
b9:dd:24:44:d7:09:31:2e:ae:a1:9a:9b:3d:21:f0:
b0:29:fd:ec:84:6c:27:09:3e:c7:b1:93:8c:45:b9:
19:ae:8a:1a:12:2c:a1:9b:11:ac:d5:0f:61:65:4e:
d1:e1:e0:dd:0f:40:f5:9d:14:81:e8:3a:49:7f:3d:
be:19:21:48:e2:a5:eb:40:a7:3a:7f:7c:06:64:cd:
5a:ca:c3:94:34:c9:21:81:49:45:07:e1:36:6c:b0:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9F:6D:B7:C8:24:38:68:02:E1:10:51:A4:30:D3:95:CD:6D:DE:AA
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b8:86:fe:f9:3a:96:3b:70:c9:8d:4b:96:cc:f7:53:91:2b:
f4:8a:f6:c0:bc:4c:fa:86:56:a2:12:46:7e:ee:7d:4d:3f:bc:
a4:ca:63:8f:7d:b4:ee:fa:44:d5:c5:c6:38:b6:6a:80:4b:4f:
c1:57:96:a7:f2:21:ac:20:95:41:a0:30:c2:21:42:5d:9c:5b:
a7:6c:0e:93:94:32:7c:ea:65:7d:73:1d:eb:d6:8a:d7:b8:07:
57:aa:3b:ad:9d:62:ba:e7:b5:43:ae:44:03:15:eb:d1:7c:a6:
04:b8:aa:ba:c0:d8:d0:70:0a:b1:ac:66:a0:c6:a6:45:93:16:
da:bb:34:98:51:ba:b3:a3:6e:6c:6d:af:09:1b:2a:26:70:e8:
fc:75:43:b4:b2:9f:c9:02:8d:9b:00:9e:21:d7:55:c5:d1:c2:
ff:23:53:16:cf:a5:4e:c4:50:97:a8:ea:df:ee:81:71:e0:06:
72:07:da:f8:a3:00:ef:45:e6:8a:e2:a1:06:26:53:d5:45:db:
35:30:99:8d:fe:87:bf:66:b7:e7:9f:cd:b4:f0:fa:5b:35:50:
1d:00:93:8f:56:af:cf:f7:66:1f:07:b6:9f:b4:bf:10:ab:d4:
95:f5:31:c1:c5:5e:d3:c3:40:fe:38:56:91:4c:23:e0:fc:ec:
c0:bc:22:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M//Qb2k8GBepgW8zcVU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjUxMDE5MTYwMTA3WhcNMjUxMDIwMTYwMTA3WjAzMTEwLwYDVQQD
EyhlODlmNmRiN2M4MjQzODY4MDJlMTEwNTFhNDMwZDM5NWNkNmRkZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VB44pNNNfi0ipWlweYtlH3QaFa6
yDbqIiexwztZuJOuR8L5FaWoRSuP6KV22/H26/M2vkbSdIc191sjqnCbXLesCw5/
F4+/vrUTp4sx9UwbDPUfxqBHSyz4GqyYWEw1N1powmaPgBsLPQxAvxHupCZTPFLx
xCnvyKIt9nUSJOfuR02lXrmFzL4NQk8CnM5u2bmifOiCtcOoispnSfdNzvv/z0S5
3SRE1wkxLq6hmps9IfCwKf3shGwnCT7HsZOMRbkZrooaEiyhmxGs1Q9hZU7R4eDd
D0D1nRSB6DpJfz2+GSFI4qXrQKc6f3wGZM1aysOUNMkhgUlFB+E2bLAiZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOifbbfIJDhoAuEQUaQw05XNbd6qMB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABriG/vk6
ljtwyY1Llsz3U5Er9Ir2wLxM+oZWohJGfu59TT+8pMpjj3207vpE1cXGOLZqgEtP
wVeWp/IhrCCVQaAwwiFCXZxbp2wOk5QyfOplfXMd69aK17gHV6o7rZ1iuue1Q65E
AxXr0XymBLiqusDY0HAKsaxmoMamRZMW2rs0mFG6s6NubG2vCRsqJnDo/HVDtLKf
yQKNmwCeIddVxdHC/yNTFs+lTsRQl6jq3+6BceAGcgfa+KMA70XmiuKhBiZT1UXb
NTCZjf6Hv2a355/NtPD6WzVQHQCTj1avz/dmHwe2n7S/EKvUlfUxwcVe08NA/jhW
kUwj4PzswLwi+Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:56 2025 by rpki-client