Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
File: _zKbmJBKLs6EguDyWPXDT-rVjOI.mft (raw, json)
Hash identifier: IH2MH+p2kVGhRi62YSRbiqo1bSukWLN6IRREwCH2iK0=
Subject key identifier: 97:B1:56:2C:4C:AB:22:31:5A:70:6C:B7:3C:80:CF:A8:E9:29:84:20
Authority key identifier: FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
Certificate issuer: /CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Certificate serial: 0199FDD9A74D303C9DB5F4F4DDA249DD3773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 19:02:03 +0000
Manifest this update: Sun 19 Oct 2025 19:02:03 +0000
Manifest next update: Mon 20 Oct 2025 19:02:03 +0000
Files and hashes: 1: PEJYOS_vVNkG3PT0lDgVcUmmsls.roa (hash: KVkQ78uD9atyqWMvkFGtksD/JLOGloRiyuEg1Z4DFEc=)
2: _zKbmJBKLs6EguDyWPXDT-rVjOI.crl (hash: RZTCdZzlX7Sa29h3kPlgYtq3ZMfYZYBrk4ghm1HCBYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a7:4d:30:3c:9d:b5:f4:f4:dd:a2:49:dd:37:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff329b98904a2ece8482e0f258f5c34fead58ce2
Validity
Not Before: Oct 19 19:02:03 2025 GMT
Not After : Oct 20 19:02:03 2025 GMT
Subject: CN=97b1562c4cab22315a706cb73c80cfa8e9298420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:46:5b:92:8e:16:7c:16:24:20:ad:e9:62:
6d:e8:e7:55:e4:f1:50:f1:d6:5f:27:c9:a4:91:91:
5c:a2:71:48:fc:3b:8a:a3:40:ab:16:cf:28:e1:1b:
fe:76:1a:e8:38:a7:6e:19:df:79:59:79:91:70:70:
36:45:d9:cd:dd:64:bb:ce:2e:77:8e:85:6c:c7:e6:
63:88:6b:b5:71:80:5f:03:aa:89:db:a0:d0:41:f0:
f7:8e:49:86:4c:b3:f5:17:a1:16:07:a9:a4:68:8b:
c0:21:cb:97:55:37:d2:8b:b4:76:90:3c:0f:94:96:
4e:4c:56:e7:87:2b:bd:21:c9:d0:fc:3c:7a:ef:73:
9e:85:4c:43:c6:f5:e5:8e:72:af:5e:c9:32:7b:97:
8d:06:95:3e:03:93:ce:cf:36:ba:6c:76:3a:ef:6d:
6b:f0:5f:53:17:c9:a2:65:d1:ed:f8:e6:4b:b2:ee:
d8:b6:5f:e2:9c:12:02:e4:fa:f0:21:a0:78:77:ba:
ee:6c:04:6d:75:02:bd:a8:a9:37:ab:a4:7d:0d:c5:
9d:71:29:78:af:64:fc:52:ce:8b:b5:a5:d6:6b:59:
31:62:91:53:a3:a6:8d:43:09:15:c3:9a:f9:56:44:
06:8d:cf:8a:10:16:79:e8:47:1c:25:cf:29:45:7a:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B1:56:2C:4C:AB:22:31:5A:70:6C:B7:3C:80:CF:A8:E9:29:84:20
X509v3 Authority Key Identifier:
keyid:FF:32:9B:98:90:4A:2E:CE:84:82:E0:F2:58:F5:C3:4F:EA:D5:8C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zKbmJBKLs6EguDyWPXDT-rVjOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c7cbb1-0dcd-42f4-bf63-3df471c01c9e/1/_zKbmJBKLs6EguDyWPXDT-rVjOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:60:d9:88:08:7d:76:13:7a:54:b7:9c:2c:ee:7a:40:0b:3c:
2f:7c:12:9c:22:73:f3:8f:80:4c:34:f8:f0:62:43:e2:65:55:
1d:e9:1e:3b:78:2a:b5:03:01:22:67:3e:54:c8:e6:ae:fb:4c:
78:e5:51:0d:19:6b:ef:d8:56:41:70:c7:21:ac:c3:06:83:79:
20:a5:b5:44:da:3b:65:97:f7:50:f3:87:3e:6a:ba:ab:ce:f4:
a5:dd:12:45:c9:15:45:46:94:c3:1d:81:78:ec:4d:e4:6a:8c:
07:18:81:3a:02:72:a5:f2:02:f6:42:30:cc:87:26:19:40:0b:
38:00:63:37:b3:77:af:f8:48:de:eb:b4:56:bc:df:19:17:86:
19:8e:b7:c3:49:4d:19:86:91:8f:bc:27:4c:dc:d2:b3:df:94:
5c:4f:b0:59:e9:cd:6c:e8:8c:f4:7d:e1:f7:c4:ad:40:cb:7e:
b6:42:d1:b2:d1:c1:41:84:63:95:b7:e0:b9:29:a6:a2:d6:6a:
e7:4b:84:f4:3d:be:9e:2c:cd:93:a4:34:39:94:b6:7d:9f:52:
ec:15:06:48:95:28:e3:3a:fc:fa:e0:9e:f9:10:06:59:5e:07:
34:dd:b2:4a:89:2c:18:a9:77:a9:30:06:71:85:16:ef:61:f7:
9e:65:b7:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92adNMDydtfT03aJJ3TdzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzI5Yjk4OTA0YTJlY2U4NDgyZTBmMjU4ZjVjMzRmZWFk
NThjZTIwHhcNMjUxMDE5MTkwMjAzWhcNMjUxMDIwMTkwMjAzWjAzMTEwLwYDVQQD
Eyg5N2IxNTYyYzRjYWIyMjMxNWE3MDZjYjczYzgwY2ZhOGU5Mjk4NDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUxGW5KOFnwWJCCt6WJt6OdV5PFQ
8dZfJ8mkkZFconFI/DuKo0CrFs8o4Rv+dhroOKduGd95WXmRcHA2RdnN3WS7zi53
joVsx+ZjiGu1cYBfA6qJ26DQQfD3jkmGTLP1F6EWB6mkaIvAIcuXVTfSi7R2kDwP
lJZOTFbnhyu9IcnQ/Dx673OehUxDxvXljnKvXskye5eNBpU+A5POzza6bHY6721r
8F9TF8miZdHt+OZLsu7Ytl/inBIC5PrwIaB4d7rubARtdQK9qKk3q6R9DcWdcSl4
r2T8Us6LtaXWa1kxYpFTo6aNQwkVw5r5VkQGjc+KEBZ56EccJc8pRXpQ+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJexVixMqyIxWnBstzyAz6jpKYQgMB8GA1UdIwQY
MBaAFP8ym5iQSi7OhILg8lj1w0/q1YziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMt
M2RmNDcxYzAxYzllLzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9jN2NiYjEtMGRjZC00MmY0LWJmNjMtM2RmNDcxYzAxYzll
LzEvX3pLYm1KQktMczZFZ3VEeVdQWERULXJWak9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGDZiAh9
dhN6VLecLO56QAs8L3wSnCJz84+ATDT48GJD4mVVHekeO3gqtQMBImc+VMjmrvtM
eOVRDRlr79hWQXDHIazDBoN5IKW1RNo7ZZf3UPOHPmq6q870pd0SRckVRUaUwx2B
eOxN5GqMBxiBOgJypfIC9kIwzIcmGUALOABjN7N3r/hI3uu0VrzfGReGGY63w0lN
GYaRj7wnTNzSs9+UXE+wWenNbOiM9H3h98StQMt+tkLRstHBQYRjlbfguSmmotZq
50uE9D2+nizNk6Q0OZS2fZ9S7BUGSJUo4zr8+uCe+RAGWV4HNN2ySoksGKl3qTAG
cYUW72H3nmW33A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:18 2025 by rpki-client