Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: OLhhIzZjY5wDsKRbR3Xdx6uPp16LaEq6wRqb5KfZz5w=
Subject key identifier: E8:80:FC:A5:88:96:89:1C:1B:47:3E:C2:68:29:8A:6A:87:A1:BF:6E
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 0199FBEBCD9734D5E215693CB696E54A3C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 07D1
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: ZJh0iS8mEIWoRJViwZoOmM7wZnRHyhTTN/5aO+L96as=)
2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cd:97:34:d5:e2:15:69:3c:b6:96:e5:4a:3c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=e880fca58896891c1b473ec268298a6a87a1bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:ef:58:71:8d:8d:23:3f:06:53:90:c9:ea:
4b:7c:0f:da:e6:98:aa:51:ba:0f:98:1a:8d:74:2d:
d4:e5:59:78:0c:66:e2:dd:76:5a:ab:57:0f:0a:99:
a2:2e:9c:47:02:c0:9f:33:65:c5:96:dc:a4:f7:09:
32:4e:c0:c5:1c:f2:e2:72:cd:2f:73:d1:0c:91:08:
14:48:ff:17:70:80:06:5b:39:9c:8d:f8:6b:2c:0d:
78:94:d9:30:8f:c7:81:15:dc:83:1a:48:8b:4d:c4:
71:1c:86:2c:aa:f0:14:6f:a3:0f:d1:6f:ba:34:15:
1c:84:47:31:a9:88:4b:55:8c:43:0c:16:ae:d2:d9:
09:7e:f8:f5:96:38:88:d3:5e:83:f3:bd:0e:79:38:
93:22:58:e2:57:9d:3d:4a:fc:3a:c8:6d:cc:a3:ad:
02:10:8e:04:42:a1:f0:fe:a5:60:62:38:bc:59:ab:
d1:a3:27:21:a4:b2:28:cf:cb:d7:e3:3f:09:ca:ed:
ca:60:cb:af:7a:7d:98:9b:5b:8b:b1:2b:e9:e8:1e:
57:17:48:ba:df:2c:c4:20:43:aa:45:6b:67:6b:73:
76:05:c3:b2:43:4c:b9:64:e8:40:91:a6:b4:6c:82:
fa:f1:30:f8:aa:7a:66:c2:9f:68:fe:27:55:65:8c:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:80:FC:A5:88:96:89:1C:1B:47:3E:C2:68:29:8A:6A:87:A1:BF:6E
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4d:28:ae:17:ca:23:f0:4c:cd:d7:1f:5c:a0:ce:f0:37:2d:
69:0f:38:d4:ca:b1:ee:b3:c8:8a:46:fd:31:fb:1a:3c:f1:19:
f1:97:d7:13:42:d2:9d:e0:3a:59:6b:31:f8:d0:68:c9:08:8c:
4e:ea:81:f0:aa:10:1c:75:ce:84:3d:17:b5:3f:f6:94:e1:e7:
5b:03:58:55:60:d1:ef:e0:f0:51:dd:5b:8e:4d:b5:00:4c:ae:
9c:c4:30:98:69:e4:8f:6f:7f:2b:1c:a1:43:f5:dd:1e:12:fb:
a1:0d:c6:5c:76:33:a2:9f:d7:0a:d8:ff:c9:a6:bb:ef:2a:33:
91:7b:61:49:78:6e:7e:75:99:f5:9b:73:29:8a:dd:de:75:d6:
0a:bb:54:d8:60:ac:00:68:f0:09:38:60:3a:3c:96:d8:fd:8e:
55:dc:11:5e:32:17:6f:46:cf:2d:d4:4d:58:2f:6b:cd:36:ef:
c9:4d:a0:e4:dd:9d:ed:01:66:41:82:16:fb:68:96:63:62:8c:
53:9c:7f:da:e3:05:b9:a1:63:5c:67:b1:2e:56:e5:1f:ba:d1:
18:d8:00:d1:e0:ad:60:d7:23:33:2a:9d:ea:da:74:2d:58:20:
f6:b9:90:35:f4:ec:bd:6c:f1:a8:06:4d:73:8b:97:37:03:42:
41:bd:04:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7682XNNXiFWk8tpblSjyJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz
Yzc1NTYwHhcNMjUxMDE5MTAwMjM4WhcNMjUxMDIwMTAwMjM4WjAzMTEwLwYDVQQD
EyhlODgwZmNhNTg4OTY4OTFjMWI0NzNlYzI2ODI5OGE2YTg3YTFiZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1/vWHGNjSM/BlOQyepLfA/a5piq
UboPmBqNdC3U5Vl4DGbi3XZaq1cPCpmiLpxHAsCfM2XFltyk9wkyTsDFHPLics0v
c9EMkQgUSP8XcIAGWzmcjfhrLA14lNkwj8eBFdyDGkiLTcRxHIYsqvAUb6MP0W+6
NBUchEcxqYhLVYxDDBau0tkJfvj1ljiI016D870OeTiTIljiV509Svw6yG3Mo60C
EI4EQqHw/qVgYji8WavRoychpLIoz8vX4z8Jyu3KYMuven2Ym1uLsSvp6B5XF0i6
3yzEIEOqRWtna3N2BcOyQ0y5ZOhAkaa0bIL68TD4qnpmwp9o/idVZYyP0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOiA/KWIlokcG0c+wmgpimqHob9uMB8GA1UdIwQY
MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt
NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw
LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg00orhfK
I/BMzdcfXKDO8DctaQ841Mqx7rPIikb9MfsaPPEZ8ZfXE0LSneA6WWsx+NBoyQiM
TuqB8KoQHHXOhD0XtT/2lOHnWwNYVWDR7+DwUd1bjk21AEyunMQwmGnkj29/Kxyh
Q/XdHhL7oQ3GXHYzop/XCtj/yaa77yozkXthSXhufnWZ9ZtzKYrd3nXWCrtU2GCs
AGjwCThgOjyW2P2OVdwRXjIXb0bPLdRNWC9rzTbvyU2g5N2d7QFmQYIW+2iWY2KM
U5x/2uMFuaFjXGexLlblH7rRGNgA0eCtYNcjMyqd6tp0LVgg9rmQNfTsvWzxqAZN
c4uXNwNCQb0ENA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:56 2025 by rpki-client