Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: FCaKdu8AGWSuavcnPA2gimqB1QEPOcwu6D0MGPmJuQk=
Subject key identifier: 10:42:53:1D:32:1F:00:6F:61:E5:68:E8:6D:78:D6:CF:FB:4D:AE:11
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 0199FB45844F095951BA6DBAC137485AB09B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0BEA
Signing time: Sun 19 Oct 2025 07:01:01 +0000
Manifest this update: Sun 19 Oct 2025 07:01:01 +0000
Manifest next update: Mon 20 Oct 2025 07:01:01 +0000
Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: NlfqqeaOzJqHYQBJp9Iszvk7SrHJ8KGoSqj5quL0ePg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:84:4f:09:59:51:ba:6d:ba:c1:37:48:5a:b0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Oct 19 07:01:01 2025 GMT
Not After : Oct 20 07:01:01 2025 GMT
Subject: CN=1042531d321f006f61e568e86d78d6cffb4dae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:12:2c:1e:cc:1a:2e:2a:2e:b7:17:fe:02:
90:7d:a7:2a:d3:a2:ce:48:53:64:2e:87:91:9d:99:
1d:22:f1:24:b7:e5:a8:6a:1f:a6:e1:04:84:2b:2a:
8a:66:91:d6:18:c1:81:5d:12:6a:b3:a9:ba:78:64:
b2:ce:12:0c:d7:a2:d0:a7:af:00:75:8c:d8:29:95:
b5:d0:2c:39:c2:81:fc:b6:91:6e:25:07:0b:0b:8a:
26:27:ef:7c:b3:06:3d:7c:ff:45:41:00:12:68:ae:
dd:c3:99:19:7b:9d:2c:9e:24:19:0a:e3:61:23:0e:
3a:0e:af:d7:32:63:ce:6f:20:d0:e2:49:5d:74:67:
2a:f5:77:f4:a6:77:2a:b5:05:e3:2a:93:60:49:d1:
c2:51:2d:45:7d:d8:56:12:cc:7c:8b:de:25:e7:44:
10:49:7e:da:12:d6:fe:44:93:c9:69:3e:3c:0f:14:
e7:45:8e:41:db:7b:ba:9b:71:9d:2c:75:13:49:55:
ee:20:81:01:c9:5f:1c:70:57:8c:14:fc:d1:ac:72:
dd:a8:9d:53:36:4a:55:a3:a3:27:7d:96:39:20:eb:
c9:36:5f:4a:6a:b2:4a:ed:31:e9:05:d6:31:2f:07:
b9:60:e3:e9:29:c0:84:d2:8c:36:d4:4d:6e:02:b8:
4d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:42:53:1D:32:1F:00:6F:61:E5:68:E8:6D:78:D6:CF:FB:4D:AE:11
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e3:9f:04:30:4c:56:4a:b9:ea:01:56:dc:10:81:76:50:0d:
1e:f6:f9:7c:0a:c6:0c:4e:3c:da:db:41:c1:ae:a5:d4:fb:df:
87:27:b3:d4:b6:23:82:3c:95:25:2f:ba:5b:39:58:aa:f2:1a:
3c:ad:24:10:8e:48:2e:13:7c:d8:0f:73:d5:77:33:94:c5:57:
03:d2:54:2e:6b:ad:fa:e2:0d:c5:91:8d:86:64:2c:56:17:2d:
ff:eb:fe:99:85:e7:98:f1:18:ee:06:41:71:da:22:de:c6:db:
e1:c8:7b:fd:a6:de:50:b1:37:37:3b:78:96:57:39:b1:bf:10:
2c:47:74:27:ba:20:0c:f2:1c:59:c9:60:e2:f8:1f:fb:93:17:
19:b1:10:ad:a9:43:4e:e4:94:a4:bf:9e:47:10:64:7d:30:39:
f8:d0:34:48:dd:bd:99:25:83:23:ac:19:02:c7:b3:f9:76:c4:
75:91:f1:12:c9:2d:91:fb:72:18:ab:9c:b3:82:9e:d8:95:6b:
85:a5:f5:04:96:9f:d2:0f:e4:f3:cc:6c:6b:6e:1a:f8:09:43:
9c:2b:5e:10:d3:e7:54:27:82:67:83:16:2f:9c:42:70:3c:2c:
19:c5:24:18:72:af:64:6b:4b:d1:db:26:d9:e9:7e:96:c6:84:
a9:3d:b2:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RYRPCVlRum26wTdIWrCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzYzYjg3YThhZWMwOTNkYmU0N2RjY2E5Mjg2MGVhODQx
MjI4ZTAwHhcNMjUxMDE5MDcwMTAxWhcNMjUxMDIwMDcwMTAxWjAzMTEwLwYDVQQD
EygxMDQyNTMxZDMyMWYwMDZmNjFlNTY4ZTg2ZDc4ZDZjZmZiNGRhZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnloSLB7MGi4qLrcX/gKQfacq06LO
SFNkLoeRnZkdIvEkt+Woah+m4QSEKyqKZpHWGMGBXRJqs6m6eGSyzhIM16LQp68A
dYzYKZW10Cw5woH8tpFuJQcLC4omJ+98swY9fP9FQQASaK7dw5kZe50sniQZCuNh
Iw46Dq/XMmPObyDQ4klddGcq9Xf0pncqtQXjKpNgSdHCUS1FfdhWEsx8i94l50QQ
SX7aEtb+RJPJaT48DxTnRY5B23u6m3GdLHUTSVXuIIEByV8ccFeMFPzRrHLdqJ1T
NkpVo6MnfZY5IOvJNl9KarJK7THpBdYxLwe5YOPpKcCE0ow21E1uArhNlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBCUx0yHwBvYeVo6G141s/7Ta4RMB8GA1UdIwQY
MBaAFM7GO4eorsCT2+R9zKkoYOqEEijgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hODJmNDMtNTAyYi00MmZiLTg4ZWIt
ODNiZDY2ZjRlNmY2LzEvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hODJmNDMtNTAyYi00MmZiLTg4ZWItODNiZDY2ZjRlNmY2
LzEvenNZN2g2aXV3SlBiNUgzTXFTaGc2b1FTS09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuOfBDBM
Vkq56gFW3BCBdlANHvb5fArGDE482ttBwa6l1Pvfhyez1LYjgjyVJS+6WzlYqvIa
PK0kEI5ILhN82A9z1XczlMVXA9JULmut+uINxZGNhmQsVhct/+v+mYXnmPEY7gZB
cdoi3sbb4ch7/abeULE3Nzt4llc5sb8QLEd0J7ogDPIcWclg4vgf+5MXGbEQralD
TuSUpL+eRxBkfTA5+NA0SN29mSWDI6wZAsez+XbEdZHxEsktkftyGKucs4Ke2JVr
haX1BJaf0g/k88xsa24a+AlDnCteENPnVCeCZ4MWL5xCcDwsGcUkGHKvZGtL0dsm
2el+lsaEqT2ysw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:40 2025 by rpki-client