Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier: CnlGTEhDjhBIAfzsq1a5pSV+SNpZVVbvl2BO3sJI/OU=
Subject key identifier: D5:FE:59:8F:38:40:2A:21:51:4D:65:C3:68:DC:02:C1:53:B8:00:27
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial: 0199FDD94E1EBAE5F9F6EB99A90301873518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number: 026B
Signing time: Sun 19 Oct 2025 19:01:40 +0000
Manifest this update: Sun 19 Oct 2025 19:01:40 +0000
Manifest next update: Mon 20 Oct 2025 19:01:40 +0000
Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=)
2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: R0WlMXYhG5s0K3W41BE6QB7O3LJlSaJ1xb/vrmoenjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4e:1e:ba:e5:f9:f6:eb:99:a9:03:01:87:35:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Validity
Not Before: Oct 19 19:01:40 2025 GMT
Not After : Oct 20 19:01:40 2025 GMT
Subject: CN=d5fe598f38402a21514d65c368dc02c153b80027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:20:b7:00:07:8b:e9:56:d8:d0:bf:91:9d:be:
95:e4:9e:01:98:df:1d:be:ef:ae:a9:b2:47:08:1a:
1a:61:e3:a9:29:dd:72:6a:90:b3:b6:5f:f1:4d:3f:
f0:34:f1:81:0b:a0:ba:1a:a1:09:bc:11:95:19:c8:
fa:6c:76:22:57:56:d6:2f:62:10:88:03:96:ba:14:
8b:9f:a6:12:7c:6c:ce:3c:cb:76:8b:da:ae:e4:1f:
cd:40:b6:66:81:b0:b0:1b:c5:b3:85:0f:1c:72:79:
ba:63:e4:46:62:05:2b:54:54:7f:19:0d:ce:56:59:
19:a9:40:95:60:28:b4:b6:3b:31:11:52:f7:bf:19:
b9:70:13:c7:61:eb:46:3e:d6:90:df:e9:b3:47:a0:
e3:1c:d9:35:8f:79:b9:a2:2a:5d:96:10:2a:6a:45:
2f:f6:8a:d3:7d:09:19:61:7a:01:6a:7c:b6:58:cc:
71:d7:13:29:45:15:4e:eb:e2:df:83:76:68:0a:a4:
7a:ed:e5:74:ae:6d:06:3e:ff:25:2b:4e:1a:37:67:
24:00:f2:f2:a1:bf:1e:5d:3a:f7:2b:23:b4:5c:63:
9e:68:6c:ba:5b:37:eb:fc:a5:c0:41:87:c1:5b:2a:
c8:62:e9:6b:7e:0b:c8:d1:8e:cb:cd:38:3d:1d:08:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FE:59:8F:38:40:2A:21:51:4D:65:C3:68:DC:02:C1:53:B8:00:27
X509v3 Authority Key Identifier:
keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:9b:db:8a:98:de:92:ea:83:c5:87:ad:14:d8:31:97:c3:
47:35:a9:ee:e3:c9:10:fa:24:51:ce:24:2a:8a:39:28:3e:49:
7f:72:de:60:4a:02:9a:02:7e:f9:67:01:b8:a1:ea:b4:fb:5e:
50:8d:b7:ea:39:11:85:b7:48:70:f1:0a:26:aa:d2:1c:f0:de:
ba:e5:ec:71:02:d0:8a:d2:df:85:22:ed:6b:18:ef:b2:1b:33:
b6:8b:0c:93:0a:b6:85:e9:13:38:ae:b8:7c:36:1f:6b:47:fc:
6c:52:21:80:0b:c3:8a:1f:49:ec:c1:44:5c:0e:3c:d6:63:30:
59:56:f5:ab:4f:dc:e6:c2:53:a8:2e:f0:01:da:74:72:82:65:
4e:b9:8b:70:2a:5a:82:a5:54:97:1a:45:35:55:88:8a:2b:e8:
e2:7c:f6:4b:12:73:79:a6:53:a4:0b:d1:7a:8c:7b:29:aa:b8:
54:29:a7:cc:97:e7:aa:54:c2:5f:e2:4e:95:48:dc:d2:4b:fc:
2f:b4:88:48:cf:7c:30:29:7d:2f:5a:4e:a8:ed:19:17:9a:86:
da:a9:5d:6e:bc:4d:a6:54:5c:0f:e6:51:a5:26:4c:07:8a:18:
98:59:db:15:f2:0e:ec:d4:be:97:8c:56:3e:8f:b3:9a:b3:e6:
9a:e6:64:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92U4euuX59uuZqQMBhzUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWE5ZjcyOTM4OGMxNjliYWNjMWNiYWY5OGUyMzZkNGU4
MDhhYjQwHhcNMjUxMDE5MTkwMTQwWhcNMjUxMDIwMTkwMTQwWjAzMTEwLwYDVQQD
EyhkNWZlNTk4ZjM4NDAyYTIxNTE0ZDY1YzM2OGRjMDJjMTUzYjgwMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCC3AAeL6VbY0L+Rnb6V5J4BmN8d
vu+uqbJHCBoaYeOpKd1yapCztl/xTT/wNPGBC6C6GqEJvBGVGcj6bHYiV1bWL2IQ
iAOWuhSLn6YSfGzOPMt2i9qu5B/NQLZmgbCwG8WzhQ8ccnm6Y+RGYgUrVFR/GQ3O
VlkZqUCVYCi0tjsxEVL3vxm5cBPHYetGPtaQ3+mzR6DjHNk1j3m5oipdlhAqakUv
9orTfQkZYXoBany2WMxx1xMpRRVO6+Lfg3ZoCqR67eV0rm0GPv8lK04aN2ckAPLy
ob8eXTr3KyO0XGOeaGy6Wzfr/KXAQYfBWyrIYulrfgvI0Y7LzTg9HQiq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX+WY84QCohUU1lw2jcAsFTuAAnMB8GA1UdIwQY
MBaAFMwan3KTiMFpuswcuvmOI21OgIq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEt
N2ZmYzRmNDAzNjZhLzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEtN2ZmYzRmNDAzNjZh
LzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUab24qY
3pLqg8WHrRTYMZfDRzWp7uPJEPokUc4kKoo5KD5Jf3LeYEoCmgJ++WcBuKHqtPte
UI236jkRhbdIcPEKJqrSHPDeuuXscQLQitLfhSLtaxjvshsztosMkwq2hekTOK64
fDYfa0f8bFIhgAvDih9J7MFEXA481mMwWVb1q0/c5sJTqC7wAdp0coJlTrmLcCpa
gqVUlxpFNVWIiivo4nz2SxJzeaZTpAvReox7Kaq4VCmnzJfnqlTCX+JOlUjc0kv8
L7SISM98MCl9L1pOqO0ZF5qG2qldbrxNplRcD+ZRpSZMB4oYmFnbFfIO7NS+l4xW
Po+zmrPmmuZkLg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:58 2025 by rpki-client