Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
File: ZD4bqRxWmoshptLWf1271sBOQ-o.mft (raw, json)
Hash identifier: 0nK152hQe9x8DWd5vS8FAZHWOCk+Y3fNc5CTd0yZYUM=
Subject key identifier: 93:96:74:BE:78:DF:92:17:2E:39:27:CD:1F:3C:9C:D2:C1:DD:E9:D9
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0199FCFD43FD511A0E0674FDA44B047C630D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: 1MBxY-L-G-PezNdSAum2Qznjvvk.roa (hash: WzqdlX3BQAdtrBN0mtz0qnp4BVXNCLlknuqqWLF2nEY=)
2: 64_MTb5KgxHA8ajybrrfkFaqSHo.roa (hash: 3HoEZ5o8a764cMBp72+Je8xSTOL3XWu1W9vfmUxztJY=)
3: NcFH54U_2J6k3O8FG01A4l3YkX4.roa (hash: /kjUMIh5yITP6UOhs7cpgkxUJuo6AlmV12M3gHqX+6U=)
4: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (hash: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=)
5: ZD4bqRxWmoshptLWf1271sBOQ-o.crl (hash: MYJkfpgXbvm50jZxpFBV/4omPf06RIoqktEAgLGOI7Q=)
6: ZKwCytxQwb2lA8HdN2ItTa-nGFE.roa (hash: YVehp3VlkVUX9qY7Jk5F+8RNoRR+lbS+MAT+mCdr+Tw=)
7: ymZdEzMVegQJBBFPgdqPQzW1-gk.roa (hash: RX7+2wwGNp6bGJxI7GKZlbgjxbbHN4LNuKVuwi5foZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:43:fd:51:1a:0e:06:74:fd:a4:4b:04:7c:63:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=939674be78df92172e3927cd1f3c9cd2c1dde9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:39:59:ad:67:12:8e:35:c3:8c:96:ee:09:
2f:19:3f:fd:05:52:13:89:8f:19:20:54:cd:49:6c:
98:1e:fb:25:20:4e:40:69:74:7c:a8:10:24:e8:ac:
0f:a3:68:22:51:c4:e7:64:48:1c:0c:96:8b:4f:de:
49:ba:83:a8:49:0c:d7:af:be:26:c0:db:b7:3c:cd:
ee:f9:04:87:e0:32:fc:15:37:32:7b:b6:dd:63:c8:
26:d7:51:72:36:92:15:d7:a0:db:8b:3e:87:a2:f6:
98:44:ed:7a:23:3a:9e:2d:57:48:30:4f:bd:8b:9b:
1b:4f:dd:d1:90:96:8f:2c:dc:3d:91:10:8b:16:c8:
44:1f:89:b5:48:0e:55:d0:db:40:f7:a7:d6:64:42:
af:34:10:b4:45:28:02:7d:8d:d1:89:c1:e5:70:11:
1d:9f:61:0b:3d:24:bf:f1:d6:b5:b0:87:f6:6e:ed:
ba:73:a1:f4:0c:b1:95:0a:ef:6c:31:81:34:65:2e:
c3:f3:ec:06:f9:44:d6:aa:d1:f6:1c:97:d2:8c:37:
0a:5d:86:e7:f7:e5:a8:f6:33:a5:99:27:6c:90:e2:
99:6f:6d:3d:2a:10:28:66:5d:4c:90:6d:ca:07:0e:
9f:7a:db:d7:9a:c3:c4:d1:35:bd:e3:a7:bf:cd:41:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:96:74:BE:78:DF:92:17:2E:39:27:CD:1F:3C:9C:D2:C1:DD:E9:D9
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6a:4c:d6:77:cd:d9:6c:c9:ca:86:d9:b7:c3:82:c6:a8:51:
32:42:9d:7b:f1:96:b4:a7:dc:85:0f:d7:85:33:63:1f:67:5e:
b3:38:02:c9:ff:77:53:94:63:88:7d:ab:f0:8c:19:f4:e2:d0:
a2:6a:14:15:34:0c:9d:17:3a:10:8d:2e:bc:0e:65:55:3c:e9:
87:5a:43:84:b1:4a:4c:5d:d9:d8:95:c9:2b:4b:19:35:1d:ab:
64:aa:fb:30:a3:2c:2a:97:03:b0:d9:a2:98:b1:15:87:b5:ce:
8a:66:87:5d:30:0f:74:b9:cf:9d:76:24:7f:a4:2b:6a:9b:39:
57:19:e1:f5:e3:dc:e0:d2:99:d9:00:3b:78:e6:81:93:6e:36:
b1:f0:d5:d2:af:d0:34:8a:b2:5a:61:40:ac:e5:17:3e:a7:21:
15:48:a4:84:f2:dc:60:53:3c:b2:a0:20:80:2a:d7:25:75:56:
fd:27:9c:68:fa:9e:df:eb:5b:0a:cb:10:f2:70:2a:b3:a2:2f:
d3:b0:d0:4e:b8:1b:5e:a6:9a:e9:f8:73:aa:17:f8:26:ed:9e:
cf:d1:31:3a:c3:cd:21:d3:16:ca:dd:02:93:f6:56:ac:1f:5f:
40:43:9b:11:f7:bc:a7:d4:cc:89:e6:3e:0a:98:d8:ed:b3:59:
4a:ff:0f:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/UP9URoOBnT9pEsEfGMNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0
ZTQzZWEwHhcNMjUxMDE5MTUwMTIwWhcNMjUxMDIwMTUwMTIwWjAzMTEwLwYDVQQD
Eyg5Mzk2NzRiZTc4ZGY5MjE3MmUzOTI3Y2QxZjNjOWNkMmMxZGRlOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L45Wa1nEo41w4yW7gkvGT/9BVIT
iY8ZIFTNSWyYHvslIE5AaXR8qBAk6KwPo2giUcTnZEgcDJaLT95JuoOoSQzXr74m
wNu3PM3u+QSH4DL8FTcye7bdY8gm11FyNpIV16Dbiz6HovaYRO16IzqeLVdIME+9
i5sbT93RkJaPLNw9kRCLFshEH4m1SA5V0NtA96fWZEKvNBC0RSgCfY3RicHlcBEd
n2ELPSS/8da1sIf2bu26c6H0DLGVCu9sMYE0ZS7D8+wG+UTWqtH2HJfSjDcKXYbn
9+Wo9jOlmSdskOKZb209KhAoZl1MkG3KBw6fetvXmsPE0TW946e/zUGVmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOWdL5435IXLjknzR88nNLB3enZMB8GA1UdIwQY
MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt
ZmVhMGFmZjM1OWY1LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1
LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGpM1nfN
2WzJyobZt8OCxqhRMkKde/GWtKfchQ/XhTNjH2deszgCyf93U5RjiH2r8IwZ9OLQ
omoUFTQMnRc6EI0uvA5lVTzph1pDhLFKTF3Z2JXJK0sZNR2rZKr7MKMsKpcDsNmi
mLEVh7XOimaHXTAPdLnPnXYkf6Qraps5Vxnh9ePc4NKZ2QA7eOaBk242sfDV0q/Q
NIqyWmFArOUXPqchFUikhPLcYFM8sqAggCrXJXVW/SecaPqe3+tbCssQ8nAqs6Iv
07DQTrgbXqaa6fhzqhf4Ju2ez9ExOsPNIdMWyt0Ck/ZWrB9fQEObEfe8p9TMieY+
CpjY7bNZSv8PJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:39 2025 by rpki-client