
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: BHDnh8DvRYY1MO63PKk7CNrGbez0dcOerwqYTYvr7cg=
Subject key identifier: E0:C3:15:38:91:0C:F3:30:67:F3:4B:A8:B3:89:A3:E5:C2:A5:03:F6
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 0199FAD838A26BA6B4410BDACE2AAD7A3D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 0FAB
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: QwUGTuXpifn+CZAQfBaxg+zDY4MQnh1X3AeFfswDdpo=)
2: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:38:a2:6b:a6:b4:41:0b:da:ce:2a:ad:7a:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=e0c31538910cf33067f34ba8b389a3e5c2a503f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:c1:26:fa:e2:8e:06:2f:f5:18:e7:5b:f3:
87:41:54:97:4b:45:fd:24:7c:10:86:34:fe:a5:ec:
0c:7a:a6:12:dd:75:2d:31:ce:92:57:7c:2b:fe:d0:
8c:24:c2:4c:4f:cf:2c:5a:19:6d:ff:d9:6e:ef:00:
c7:0c:07:9f:c8:90:a0:ce:75:87:56:45:2a:d1:3b:
6b:5f:0b:11:e9:4a:3d:e9:42:0e:af:df:82:1c:09:
8f:38:fd:36:7b:d3:9b:5f:a2:e7:d1:59:7d:cb:0d:
29:4a:e3:c8:f7:79:7e:66:7d:9f:e4:1c:a7:4c:d5:
f0:90:6f:04:02:2f:43:f6:12:b8:93:8d:56:82:79:
38:56:3f:66:95:64:e5:3d:c4:fc:ca:1c:c1:f1:0a:
76:ea:43:49:7f:a9:d5:53:b5:fe:06:46:cc:fd:11:
bf:75:13:cb:27:cf:75:a0:db:ce:ee:07:26:34:5f:
ad:49:4b:6f:00:d9:fa:8e:1e:08:f1:53:35:21:58:
f5:99:35:77:63:30:70:4b:43:98:c9:d6:09:b1:7d:
70:db:53:89:d9:9a:9d:f0:90:94:fd:8f:40:f8:43:
50:5a:bd:09:29:85:3b:69:c7:7c:8d:36:2e:24:cd:
55:53:a4:20:09:dc:48:92:9d:92:92:08:7d:dd:10:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C3:15:38:91:0C:F3:30:67:F3:4B:A8:B3:89:A3:E5:C2:A5:03:F6
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:bc:46:17:4f:8d:98:80:b7:8e:a1:42:a9:69:87:b8:59:
a9:88:a7:40:72:d1:85:0e:d4:d8:db:f9:19:fb:8f:3d:00:4d:
89:60:73:96:d7:1f:94:c5:c3:7c:df:18:f1:4d:f3:0d:a6:44:
05:ca:bc:32:6a:d8:37:23:eb:20:4d:02:68:f0:9d:78:26:dc:
fa:d3:5a:7d:b2:45:96:5a:11:27:d3:86:65:34:5c:e5:8d:b8:
4b:6d:7a:2e:d9:0e:1e:94:59:b8:e0:00:08:53:3e:0d:9d:b6:
ff:19:b5:ba:2d:9c:16:8c:69:fc:8d:f2:92:a5:71:13:15:49:
76:de:3c:8f:69:f5:06:9a:06:ee:9e:90:12:41:e1:9a:f0:44:
cd:27:66:45:ad:c6:46:10:64:49:e0:db:76:02:6e:aa:6f:e9:
a4:7f:2c:8e:58:f2:d2:85:b1:46:84:58:27:c8:f6:11:24:5a:
ad:db:93:87:16:3a:66:80:e9:6b:c4:fd:9a:06:8b:14:dc:9c:
7e:f2:d2:da:3f:fe:27:ff:06:79:bf:de:05:cf:58:28:ad:8e:
1a:74:bd:74:00:2e:71:05:53:04:94:2b:0a:6c:c0:ae:02:ac:
b1:0d:b5:9f:1a:df:08:46:e6:17:15:34:9b:a2:0f:1c:09:0a:
61:3d:8f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62Diia6a0QQvaziqtej1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWE0NTFiNzgzZmM5MWEwNGI4MmY4MmYxNTZmMGI0ODk3
MTVkYzkwHhcNMjUxMDE5MDUwMTM4WhcNMjUxMDIwMDUwMTM4WjAzMTEwLwYDVQQD
EyhlMGMzMTUzODkxMGNmMzMwNjdmMzRiYThiMzg5YTNlNWMyYTUwM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjBJvrijgYv9RjnW/OHQVSXS0X9
JHwQhjT+pewMeqYS3XUtMc6SV3wr/tCMJMJMT88sWhlt/9lu7wDHDAefyJCgznWH
VkUq0TtrXwsR6Uo96UIOr9+CHAmPOP02e9ObX6Ln0Vl9yw0pSuPI93l+Zn2f5Byn
TNXwkG8EAi9D9hK4k41Wgnk4Vj9mlWTlPcT8yhzB8Qp26kNJf6nVU7X+BkbM/RG/
dRPLJ891oNvO7gcmNF+tSUtvANn6jh4I8VM1IVj1mTV3YzBwS0OYydYJsX1w21OJ
2Zqd8JCU/Y9A+ENQWr0JKYU7acd8jTYuJM1VU6QgCdxIkp2Skgh93RD/mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODDFTiRDPMwZ/NLqLOJo+XCpQP2MB8GA1UdIwQY
MBaAFGWqRRt4P8kaBLgvgvFW8LSJcV3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWIt
M2JjM2RmN2EyOThhLzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUxZWYtNzViNC00ZmU5LTg3MWItM2JjM2RmN2EyOThh
LzEvWmFwRkczZ195Um9FdUMtQzhWYnd0SWx4WGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBK8RhdP
jZiAt46hQqlph7hZqYinQHLRhQ7U2Nv5GfuPPQBNiWBzltcflMXDfN8Y8U3zDaZE
Bcq8MmrYNyPrIE0CaPCdeCbc+tNafbJFlloRJ9OGZTRc5Y24S216LtkOHpRZuOAA
CFM+DZ22/xm1ui2cFoxp/I3ykqVxExVJdt48j2n1BpoG7p6QEkHhmvBEzSdmRa3G
RhBkSeDbdgJuqm/ppH8sjljy0oWxRoRYJ8j2ESRarduThxY6ZoDpa8T9mgaLFNyc
fvLS2j/+J/8Geb/eBc9YKK2OGnS9dAAucQVTBJQrCmzArgKssQ21nxrfCEbmFxU0
m6IPHAkKYT2Ptg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:30 2025 by rpki-client