Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: VkMPzoF0h0YC7ASxO6xw6C23bdz20PmO29RAqHwSJT4=
Subject key identifier: 43:05:E6:0D:F0:F8:DA:77:F5:7A:B6:D1:97:CB:24:05:79:95:25:80
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 0199FDD9B3CEE3AB8CACCF8924B643E19EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0C36
Signing time: Sun 19 Oct 2025 19:02:06 +0000
Manifest this update: Sun 19 Oct 2025 19:02:06 +0000
Manifest next update: Mon 20 Oct 2025 19:02:06 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: 0Lfj5GP0qUifKVASBSFY7RiY5GK0Cd/v9FKAorWFHD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b3:ce:e3:ab:8c:ac:cf:89:24:b6:43:e1:9e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: Oct 19 19:02:06 2025 GMT
Not After : Oct 20 19:02:06 2025 GMT
Subject: CN=4305e60df0f8da77f57ab6d197cb240579952580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:e0:29:66:48:e3:24:79:87:50:41:47:97:
ba:2e:df:0c:2e:d9:8a:34:e9:33:60:78:75:52:9a:
e6:35:62:a6:10:a3:64:7b:2d:57:d2:91:d6:33:6b:
3b:81:9c:94:4f:cf:cc:d5:92:8b:0c:07:c1:a0:fa:
d3:55:b7:f7:f6:42:8a:4c:61:8b:a2:1f:42:be:d3:
5c:b3:8c:c1:43:1e:ed:83:3b:77:d1:fd:33:c5:7c:
bb:e1:93:98:ff:83:69:77:c2:ee:7b:c0:db:74:52:
68:d8:36:91:ad:a3:14:e7:6a:04:67:3b:e0:a8:76:
1a:5c:b3:f1:5b:11:f0:d2:cb:2b:0c:d0:35:24:d6:
0e:c5:44:02:80:e6:7b:a6:02:42:67:7b:a6:37:64:
cf:b8:9f:3d:a7:67:29:82:0b:a5:5d:04:80:3b:59:
7c:9b:0d:0e:55:15:23:50:0a:8a:ca:c0:42:ea:b4:
55:56:7f:12:23:8f:df:d2:89:7a:08:40:3c:47:50:
44:cc:4a:25:be:b5:9c:4f:9b:c1:a5:ef:28:50:ec:
97:a6:dd:eb:63:6e:5a:2a:af:4f:a4:c4:cb:33:78:
be:d1:ed:be:de:35:6d:a0:52:20:34:7d:fa:4e:5e:
40:45:07:72:49:0d:ad:ca:96:2b:65:86:13:89:2d:
56:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:E6:0D:F0:F8:DA:77:F5:7A:B6:D1:97:CB:24:05:79:95:25:80
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:ba:99:7f:de:d8:af:c0:f5:5f:23:82:6d:21:f0:86:cd:
53:26:c6:dc:80:d3:d2:c8:ac:f0:b3:25:da:e9:ab:79:d0:e2:
36:42:14:72:8f:d8:4d:3e:15:0b:41:68:f4:bb:32:2a:aa:53:
7a:8f:f7:28:da:b6:6f:5c:a0:79:72:d7:d3:32:ad:84:b3:d1:
0f:c7:77:f8:83:f6:c2:38:a0:55:54:2f:17:b0:a9:6e:79:81:
38:27:d7:89:70:32:b6:b1:fd:58:52:75:1e:67:60:ee:f9:1d:
c0:52:da:1f:f8:ab:d2:f5:a4:e4:fe:43:fb:08:06:ed:43:69:
d1:25:4a:23:57:aa:6b:dc:15:d9:3e:cf:5f:96:9c:2c:92:81:
f9:b0:1c:0d:e0:6d:26:27:cf:26:ce:59:32:ca:fb:41:8a:7a:
5c:5b:c6:37:9d:b6:64:8f:b6:3a:4a:94:ea:d1:f4:e9:21:41:
31:73:75:11:95:3b:2d:7c:d3:f0:53:9c:20:37:c5:d7:74:0b:
02:9b:32:9b:cf:d3:ee:a5:8a:0f:ed:12:34:3f:d4:4d:6f:4a:
e6:68:76:b3:f5:e8:62:2e:c7:ee:c3:72:ac:d9:30:ca:c2:6c:
be:e7:83:8d:38:0c:e4:ed:83:ab:5c:87:bc:7c:54:cc:f3:cb:
54:83:75:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92bPO46uMrM+JJLZD4Z6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MjVkOGI3ZjE5ZTJmYjc1Y2I3Zjk1Nzg5ZDkxMThmNmIx
Yjk3MDUwHhcNMjUxMDE5MTkwMjA2WhcNMjUxMDIwMTkwMjA2WjAzMTEwLwYDVQQD
Eyg0MzA1ZTYwZGYwZjhkYTc3ZjU3YWI2ZDE5N2NiMjQwNTc5OTUyNTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtHgKWZI4yR5h1BBR5e6Lt8MLtmK
NOkzYHh1UprmNWKmEKNkey1X0pHWM2s7gZyUT8/M1ZKLDAfBoPrTVbf39kKKTGGL
oh9CvtNcs4zBQx7tgzt30f0zxXy74ZOY/4Npd8Lue8DbdFJo2DaRraMU52oEZzvg
qHYaXLPxWxHw0ssrDNA1JNYOxUQCgOZ7pgJCZ3umN2TPuJ89p2cpggulXQSAO1l8
mw0OVRUjUAqKysBC6rRVVn8SI4/f0ol6CEA8R1BEzEolvrWcT5vBpe8oUOyXpt3r
Y25aKq9PpMTLM3i+0e2+3jVtoFIgNH36Tl5ARQdySQ2typYrZYYTiS1WDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMF5g3w+Np39Xq20ZfLJAV5lSWAMB8GA1UdIwQY
MBaAFGUl2Lfxni+3XLf5V4nZEY9rG5cFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUt
NDY2MDNkZTgwNWVjLzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jYWEzODUtYjJhNS00MzIzLWFkYzUtNDY2MDNkZTgwNWVj
LzEvWlNYWXRfR2VMN2RjdF9sWGlka1JqMnNibHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYa6mX/e
2K/A9V8jgm0h8IbNUybG3IDT0sis8LMl2umredDiNkIUco/YTT4VC0Fo9LsyKqpT
eo/3KNq2b1ygeXLX0zKthLPRD8d3+IP2wjigVVQvF7CpbnmBOCfXiXAytrH9WFJ1
Hmdg7vkdwFLaH/ir0vWk5P5D+wgG7UNp0SVKI1eqa9wV2T7PX5acLJKB+bAcDeBt
JifPJs5ZMsr7QYp6XFvGN522ZI+2OkqU6tH06SFBMXN1EZU7LXzT8FOcIDfF13QL
Apsym8/T7qWKD+0SND/UTW9K5mh2s/XoYi7H7sNyrNkwysJsvueDjTgM5O2Dq1yH
vHxUzPPLVIN1bw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:47 2025 by rpki-client