Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: hfOl98jUMQzekUtB7x3Ei+1NoBy1rpMtAvVIDHljhxU=
Subject key identifier: D1:8D:21:AA:12:A7:D6:23:18:F7:E3:8A:FD:B7:C8:F7:C9:A4:F3:1D
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0199FAD81D01F999BEDA2C8F579374FC6437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 05:01:31 +0000
Manifest this update: Sun 19 Oct 2025 05:01:31 +0000
Manifest next update: Mon 20 Oct 2025 05:01:31 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: T79i4t8bM+HBeE0FS5YKcSypXlL5lLCOhIdkR3JGqsI=)
2: qyP6ZOFyUvmIxsAwvIR1crurzkA.roa (hash: ATCZOmbWRgy8PLsqpH1t1OGoSYpKTwjDGworctuzaMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:1d:01:f9:99:be:da:2c:8f:57:93:74:fc:64:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Oct 19 05:01:31 2025 GMT
Not After : Oct 20 05:01:31 2025 GMT
Subject: CN=d18d21aa12a7d62318f7e38afdb7c8f7c9a4f31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:a7:1f:ea:7f:8d:02:6f:20:31:3b:99:47:
5c:13:23:35:91:33:a4:87:26:68:ec:bb:bf:cd:4b:
c5:fe:44:18:31:13:f0:ec:85:9a:ac:bb:66:f8:da:
2d:56:89:71:c0:43:e7:81:aa:15:8c:de:d4:d7:9e:
17:aa:81:45:9e:15:26:98:77:00:af:66:60:c2:e5:
5e:f1:57:a9:99:11:7f:1a:17:c0:54:4b:b3:37:02:
04:60:5d:06:19:1b:09:72:29:4a:29:4b:53:f9:df:
82:57:82:78:e8:3b:ac:62:ec:81:1c:c9:f4:a2:e9:
c1:8a:28:e4:62:5f:45:a4:7d:65:0f:5b:62:36:9e:
2a:ef:6e:56:25:1e:13:fa:82:21:d7:dd:e3:ea:20:
5b:55:26:42:71:a7:72:8b:d5:37:58:af:02:b4:9d:
97:5d:5f:78:ec:4c:9e:b3:be:06:62:0f:02:93:7b:
2c:3e:2b:83:91:63:e4:e6:38:f2:13:6c:3a:87:2f:
1b:67:78:b9:d3:a7:e5:c8:ce:be:7a:33:94:26:f4:
8f:8e:b6:52:09:0a:de:3f:37:c5:82:14:ba:4b:2a:
ca:07:6b:8d:1f:7f:68:54:b8:39:f7:e5:c1:49:97:
84:3b:e7:c5:85:86:13:63:b1:b3:ce:bb:e9:08:bf:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:21:AA:12:A7:D6:23:18:F7:E3:8A:FD:B7:C8:F7:C9:A4:F3:1D
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:77:d0:db:fa:f0:d9:24:55:95:68:9d:ab:bf:c0:52:ca:eb:
48:d6:9a:0c:96:bb:4c:3c:56:ab:cb:73:fe:70:36:6f:3c:bf:
06:82:9f:72:19:e2:b8:70:a5:91:4d:d5:98:9f:be:b1:05:8e:
58:71:84:a2:52:e1:3e:8f:35:6f:75:fa:28:97:9e:71:a5:2d:
f9:c7:01:e2:9d:e1:a7:33:22:ee:d3:e5:31:ab:18:16:af:a6:
74:3e:4f:96:65:a1:e8:aa:b3:1b:79:23:b6:16:9d:9b:22:46:
3a:bc:dc:c1:aa:42:ed:9a:5b:17:24:79:a8:4d:5d:8b:fb:83:
b4:30:ab:56:ce:0f:d2:ba:c6:bd:7d:d4:06:8a:3f:b1:36:0c:
7d:6c:44:4d:0e:df:01:09:92:2e:f5:ed:75:c7:8d:59:b1:84:
69:9d:bd:46:25:9a:67:15:b0:43:83:a0:bd:90:dc:93:df:04:
e7:83:2d:12:ff:54:96:25:5f:f9:45:dd:ee:e0:88:14:31:1b:
b7:1c:9c:c3:75:2c:f3:27:1e:f9:37:13:0f:f9:ae:46:06:b8:
3c:fe:bb:e6:a5:9d:f2:f3:b8:4d:4a:4b:63:91:e6:73:9b:87:
da:46:5c:ea:6a:7a:9d:9a:59:84:aa:87:fd:19:e0:3d:63:b5:
90:6d:70:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62B0B+Zm+2iyPV5N0/GQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTQyNGNlZTJmZGIwMDcyYjU0MTQzOGQ5MTNkMjY2MzZh
OWI4OGIwHhcNMjUxMDE5MDUwMTMxWhcNMjUxMDIwMDUwMTMxWjAzMTEwLwYDVQQD
EyhkMThkMjFhYTEyYTdkNjIzMThmN2UzOGFmZGI3YzhmN2M5YTRmMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ROnH+p/jQJvIDE7mUdcEyM1kTOk
hyZo7Lu/zUvF/kQYMRPw7IWarLtm+NotVolxwEPngaoVjN7U154XqoFFnhUmmHcA
r2ZgwuVe8VepmRF/GhfAVEuzNwIEYF0GGRsJcilKKUtT+d+CV4J46DusYuyBHMn0
ounBiijkYl9FpH1lD1tiNp4q725WJR4T+oIh193j6iBbVSZCcadyi9U3WK8CtJ2X
XV947Eyes74GYg8Ck3ssPiuDkWPk5jjyE2w6hy8bZ3i506flyM6+ejOUJvSPjrZS
CQrePzfFghS6SyrKB2uNH39oVLg59+XBSZeEO+fFhYYTY7GzzrvpCL+WVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGNIaoSp9YjGPfjiv23yPfJpPMdMB8GA1UdIwQY
MBaAFGWkJM7i/bAHK1QUONkT0mY2qbiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWIt
MmI4MDM4MjgzMDE3LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9lYjgzN2ItM2FlNS00ZjYwLTgyOWItMmI4MDM4MjgzMDE3
LzEvWmFRa3p1TDlzQWNyVkJRNDJSUFNaamFwdUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnfQ2/rw
2SRVlWidq7/AUsrrSNaaDJa7TDxWq8tz/nA2bzy/BoKfchniuHClkU3VmJ++sQWO
WHGEolLhPo81b3X6KJeecaUt+ccB4p3hpzMi7tPlMasYFq+mdD5PlmWh6KqzG3kj
thadmyJGOrzcwapC7ZpbFyR5qE1di/uDtDCrVs4P0rrGvX3UBoo/sTYMfWxETQ7f
AQmSLvXtdceNWbGEaZ29RiWaZxWwQ4OgvZDck98E54MtEv9UliVf+UXd7uCIFDEb
txycw3Us8yce+TcTD/muRga4PP675qWd8vO4TUpLY5Hmc5uH2kZc6mp6nZpZhKqH
/RngPWO1kG1w/Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:05 2025 by rpki-client