Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json)
Hash identifier: kvJoR2BOU7D4aB5j4qV7JHAy4T6p96iicbWAm2RzzVI=
Subject key identifier: 73:B4:87:77:BF:B9:93:67:0E:A2:BF:C2:59:28:A4:D1:83:A5:2B:97
Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Certificate serial: 019A03A48F3DDEBA37D1D7C8E58C52D8C842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
Manifest number: 1227
Signing time: Mon 20 Oct 2025 22:01:47 +0000
Manifest this update: Mon 20 Oct 2025 22:01:47 +0000
Manifest next update: Tue 21 Oct 2025 22:01:47 +0000
Files and hashes: 1: 1DNJXUdN9aHYwhJ0OLj39VSopnQ.roa (hash: QBTrHThXdQY8h/nmwy8ckGzuWyt8cYLb33EN8JyG6aE=)
2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: ImDAw/QUx+hMtGd1gCfp+7tdOObWrvYsb7M+rBpz6Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:8f:3d:de:ba:37:d1:d7:c8:e5:8c:52:d8:c8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629
Validity
Not Before: Oct 20 22:01:47 2025 GMT
Not After : Oct 21 22:01:47 2025 GMT
Subject: CN=73b48777bfb993670ea2bfc25928a4d183a52b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:56:31:67:1e:ed:1c:79:a3:75:51:47:0d:
9b:19:c2:4e:a0:77:d2:eb:16:41:1b:13:2c:7c:9c:
1c:42:15:80:ab:5c:5e:36:0d:63:00:ef:1c:07:32:
28:a5:6e:d8:3d:a2:da:d5:ce:ca:2e:e5:88:0b:d6:
79:28:e6:9c:47:d3:f4:2f:40:42:13:bc:17:e8:d2:
b2:d2:7d:e6:15:7e:3a:71:b1:99:1d:49:32:52:35:
42:4d:46:2a:20:d5:a1:f9:be:7f:30:ab:dd:7a:15:
c4:b6:b9:70:85:ef:d8:ce:1a:2c:73:a4:a4:b1:5c:
b8:a1:1f:9e:fe:7c:14:ee:c9:61:41:44:1a:f0:d0:
ae:9a:d1:18:f1:a9:28:82:40:2e:29:ec:fb:ea:f5:
77:18:b0:4a:4a:b4:5f:bb:2f:80:a8:cd:39:a4:3d:
7f:de:2b:b8:36:4f:0f:03:37:c9:93:7a:a1:54:1c:
57:98:d7:7d:83:43:62:37:8f:95:94:19:ca:3f:e2:
df:13:bf:c8:ee:ed:a4:94:6a:43:3b:6c:cf:b0:0a:
a5:15:76:fb:81:cd:11:9a:80:43:5f:aa:20:fb:d8:
29:83:a9:72:cd:85:0b:69:1f:ae:89:5a:f3:9e:2a:
31:fe:da:e4:37:fe:cd:03:11:fa:6b:06:f1:40:84:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:87:77:BF:B9:93:67:0E:A2:BF:C2:59:28:A4:D1:83:A5:2B:97
X509v3 Authority Key Identifier:
keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9a:ba:ea:a3:3c:b7:f7:ff:f1:00:d0:52:57:cf:f0:76:52:
28:e6:8f:13:ef:62:cc:3b:ff:bc:94:36:6d:19:91:ed:17:06:
57:7c:7c:4e:a8:b0:ad:3f:38:bc:9b:08:ef:79:75:dc:42:05:
23:53:48:a1:26:af:59:a8:d8:59:13:bd:e5:b0:97:2d:39:77:
47:c5:05:f1:39:92:ce:38:5e:58:44:92:3a:9b:ca:67:c7:4a:
77:77:ce:89:66:b1:f3:53:26:36:2f:81:89:c2:dc:89:4a:75:
bb:0d:e9:e5:d9:e1:2e:1b:84:84:44:19:00:d2:41:9b:e6:99:
78:53:f9:ee:8d:5a:d9:ea:36:22:e3:2e:b9:ed:a2:bd:a4:02:
91:06:c5:0f:71:8d:7c:82:2d:da:86:ae:63:e1:33:bb:86:2d:
14:77:2c:e6:f9:36:3d:53:81:7b:14:90:0c:38:68:48:56:db:
85:d7:33:d2:3a:70:1f:36:a4:e7:27:17:8b:bb:2b:27:66:5c:
c7:4f:00:05:b3:10:40:84:47:3a:70:7e:2a:65:b2:02:8f:2b:
67:99:81:11:79:4a:7f:f8:9d:29:8a:33:19:2e:36:97:cf:4c:
ae:31:1d:f4:cb:61:3a:80:33:4e:da:24:60:03:81:2b:c4:51:
07:b0:cb:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDpI893ro30dfI5YxS2MhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTAwNjJlNTRhNWZjYjZhMGM5OWU1OTg1NTdmZWQ2ZjM3
YTQ2MjkwHhcNMjUxMDIwMjIwMTQ3WhcNMjUxMDIxMjIwMTQ3WjAzMTEwLwYDVQQD
Eyg3M2I0ODc3N2JmYjk5MzY3MGVhMmJmYzI1OTI4YTRkMTgzYTUyYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIpWMWce7Rx5o3VRRw2bGcJOoHfS
6xZBGxMsfJwcQhWAq1xeNg1jAO8cBzIopW7YPaLa1c7KLuWIC9Z5KOacR9P0L0BC
E7wX6NKy0n3mFX46cbGZHUkyUjVCTUYqINWh+b5/MKvdehXEtrlwhe/Yzhosc6Sk
sVy4oR+e/nwU7slhQUQa8NCumtEY8akogkAuKez76vV3GLBKSrRfuy+AqM05pD1/
3iu4Nk8PAzfJk3qhVBxXmNd9g0NiN4+VlBnKP+LfE7/I7u2klGpDO2zPsAqlFXb7
gc0RmoBDX6og+9gpg6lyzYULaR+uiVrzniox/trkN/7NAxH6awbxQIRwpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO0h3e/uZNnDqK/wlkopNGDpSuXMB8GA1UdIwQY
MBaAFGXgBi5Upfy2oMmeWYVX/tbzekYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDIt
YWFlOTdlNjUwMTVjLzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDItYWFlOTdlNjUwMTVj
LzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpq66qM8
t/f/8QDQUlfP8HZSKOaPE+9izDv/vJQ2bRmR7RcGV3x8TqiwrT84vJsI73l13EIF
I1NIoSavWajYWRO95bCXLTl3R8UF8TmSzjheWESSOpvKZ8dKd3fOiWax81MmNi+B
icLciUp1uw3p5dnhLhuEhEQZANJBm+aZeFP57o1a2eo2IuMuue2ivaQCkQbFD3GN
fIIt2oauY+Ezu4YtFHcs5vk2PVOBexSQDDhoSFbbhdcz0jpwHzak5ycXi7srJ2Zc
x08ABbMQQIRHOnB+KmWyAo8rZ5mBEXlKf/idKYozGS42l89MrjEd9MthOoAzTtok
YAOBK8RRB7DL7g==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:37 2025 by rpki-client