Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: 85P6/w6b0dcmhXjde+JeTP7H8AVRsar7MrIKPFpq4DA=
Subject key identifier: E8:87:CC:0F:AA:08:88:C1:29:2C:ED:AC:46:DF:63:FE:73:DA:8C:3E
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 0199FDD9BCF2EB4D738486855C345A549655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0D41
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: r1YmgnqiuTAw+UB2FqkEMjTvOcatBof1xKcVJMqiyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:bc:f2:eb:4d:73:84:86:85:5c:34:5a:54:96:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=e887cc0faa0888c1292cedac46df63fe73da8c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:1d:d2:7e:87:f8:e2:b9:27:2a:64:22:d4:
b8:b5:de:00:cc:ed:21:ee:27:97:8d:27:5e:21:9c:
ad:be:7a:a0:58:37:73:fe:31:4f:e1:53:61:84:b8:
9c:11:81:73:7a:7f:2e:b9:b4:86:1e:ec:10:bc:16:
f2:b9:65:7c:cf:6f:a4:52:03:f6:54:4a:2f:a7:39:
92:31:f7:e5:6c:5f:b0:7d:81:f6:55:fd:43:de:55:
a2:f6:16:db:1f:65:9e:5a:ad:5b:0c:39:7d:5e:dd:
1d:7e:6c:c1:69:1d:93:30:bb:51:14:91:fc:70:be:
7f:2f:9c:6b:32:cf:12:70:8e:23:bc:31:48:19:88:
de:f2:4a:a1:ba:d4:4b:8c:a4:44:93:2a:db:ab:bb:
76:49:a2:2f:d2:7d:24:ef:d1:15:cc:02:ac:00:b4:
79:a3:27:dc:c6:54:f2:2e:dc:81:16:d8:12:28:95:
76:51:22:07:ec:63:fa:0a:16:57:3d:b2:a3:20:ba:
59:1b:93:7d:78:eb:e7:86:8a:e1:38:f9:37:61:b7:
20:78:15:27:14:ab:7a:12:c4:8f:9f:f2:97:c4:bd:
64:e2:a3:d0:eb:97:03:df:cc:4a:a4:60:86:34:59:
84:d2:9f:ff:39:95:6c:94:56:e3:7f:71:0c:1e:80:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:87:CC:0F:AA:08:88:C1:29:2C:ED:AC:46:DF:63:FE:73:DA:8C:3E
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4d:da:5f:7b:5a:9e:4f:05:b2:b7:7e:4e:92:f1:f9:ce:72:
e5:20:7b:09:d9:d0:07:af:be:38:ab:86:ab:77:dd:ce:36:a2:
3d:8a:86:03:eb:0f:8c:b6:42:b8:1e:3c:ae:28:98:6b:05:8e:
3e:5f:48:90:e6:dd:ac:64:21:19:b0:2e:c4:cf:02:39:ed:2e:
d6:35:c7:28:09:c1:8d:f2:52:dc:a0:4c:8f:d2:f4:fe:24:bd:
09:37:ff:e1:2c:6f:90:aa:72:c9:29:82:b9:a1:3b:76:05:bc:
c9:cb:fb:d9:8a:4a:de:75:68:cd:b3:fb:bc:72:b7:1d:4b:a3:
4a:31:26:1b:58:a8:6a:d5:e1:8a:ed:7c:28:1c:6a:7f:27:4a:
5e:5e:1d:da:6e:f3:b8:69:be:b2:7e:00:c9:44:33:6c:86:7e:
41:71:8c:5b:6f:29:1b:d8:d7:e2:6c:67:f5:f4:f2:99:5f:5b:
67:97:61:30:ef:4e:a2:65:d6:66:27:6a:c6:db:2e:85:a5:ee:
40:f1:2b:e7:da:a3:66:30:4d:9f:2b:e5:0c:eb:04:53:39:5e:
8a:aa:98:4f:c8:f4:61:83:fc:e6:bf:e6:9d:ad:32:01:f8:ff:
36:12:b2:17:a3:08:4d:77:ea:23:d0:1f:9d:1a:b7:f2:49:61:
bc:d5:17:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92bzy601zhIaFXDRaVJZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDA3MmRhOTgxMTQxOTNjMTA0Y2UxYTYwOWQ5MmE2OTc2
ZjljNDAwHhcNMjUxMDE5MTkwMjA5WhcNMjUxMDIwMTkwMjA5WjAzMTEwLwYDVQQD
EyhlODg3Y2MwZmFhMDg4OGMxMjkyY2VkYWM0NmRmNjNmZTczZGE4YzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm4d0n6H+OK5JypkItS4td4AzO0h
7ieXjSdeIZytvnqgWDdz/jFP4VNhhLicEYFzen8uubSGHuwQvBbyuWV8z2+kUgP2
VEovpzmSMfflbF+wfYH2Vf1D3lWi9hbbH2WeWq1bDDl9Xt0dfmzBaR2TMLtRFJH8
cL5/L5xrMs8ScI4jvDFIGYje8kqhutRLjKREkyrbq7t2SaIv0n0k79EVzAKsALR5
oyfcxlTyLtyBFtgSKJV2USIH7GP6ChZXPbKjILpZG5N9eOvnhorhOPk3YbcgeBUn
FKt6EsSPn/KXxL1k4qPQ65cD38xKpGCGNFmE0p//OZVslFbjf3EMHoAlkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiHzA+qCIjBKSztrEbfY/5z2ow+MB8GA1UdIwQY
MBaAFMwActqYEUGTwQTOGmCdkqaXb5xAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQt
YzBlYzhiOTVhYjc3LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MDdjYWEtOGY0OS00NTliLWFhNzQtYzBlYzhiOTVhYjc3
LzEvekFCeTJwZ1JRWlBCQk00YVlKMlNwcGR2bkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATk3aX3ta
nk8Fsrd+TpLx+c5y5SB7CdnQB6++OKuGq3fdzjaiPYqGA+sPjLZCuB48riiYawWO
Pl9IkObdrGQhGbAuxM8COe0u1jXHKAnBjfJS3KBMj9L0/iS9CTf/4SxvkKpyySmC
uaE7dgW8ycv72YpK3nVozbP7vHK3HUujSjEmG1ioatXhiu18KBxqfydKXl4d2m7z
uGm+sn4AyUQzbIZ+QXGMW28pG9jX4mxn9fTymV9bZ5dhMO9OomXWZidqxtsuhaXu
QPEr59qjZjBNnyvlDOsEUzleiqqYT8j0YYP85r/mna0yAfj/NhKyF6MITXfqI9Af
nRq38klhvNUX0w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:11 2025 by rpki-client