Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: fdASPPzlCdcQo/IOlRsjvjd+olqS3O8jX2P+E4AOZuA=
Subject key identifier: DE:CC:B1:B9:26:D6:95:A6:D1:0F:8B:1C:D2:39:72:0C:01:D3:1F:00
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 0199FB7CACCDCBAB0BCF7383E68F793C56E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 13F1
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: p6f70AE0jwyQIRU4jox3CbUionBJceoULD5tCdRJVzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ac:cd:cb:ab:0b:cf:73:83:e6:8f:79:3c:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=deccb1b926d695a6d10f8b1cd239720c01d31f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:a3:71:f6:c4:f4:cf:fd:ff:28:90:be:ec:
ff:e7:3b:da:3a:d8:18:56:44:7e:da:b8:28:23:64:
7a:e0:ef:c3:38:bd:09:4e:f6:2d:9b:39:47:85:9f:
3b:09:bb:a1:ee:bd:f4:24:a1:13:67:44:63:f1:35:
45:87:72:66:21:d8:87:37:4a:58:40:2a:4a:a7:66:
51:fc:bc:b3:0a:7a:8e:69:0f:ad:78:6e:f8:19:d6:
bd:a4:e5:84:98:ac:06:d4:47:f1:17:b0:a5:1f:0b:
8c:44:cb:7e:ab:b2:ce:b1:28:57:1b:36:fd:31:1b:
93:76:cb:aa:e9:3e:53:0d:49:99:77:32:5c:12:ed:
39:fc:64:b7:a6:93:c0:4c:f9:cb:c5:d6:50:e4:7d:
29:2b:e0:64:92:dc:6d:a6:8e:f3:96:63:f0:c7:d2:
90:b6:a6:b8:3c:61:bd:df:a8:bc:94:e7:b1:79:b8:
b5:a0:6a:91:92:31:ff:1b:c7:f8:87:33:26:9f:97:
42:27:7d:5c:59:27:84:22:f4:54:e8:ce:7b:e1:f2:
42:f5:66:e2:f4:0e:85:67:0c:2b:40:ba:84:52:36:
c9:b1:dd:71:aa:b3:65:d1:0d:27:1d:bc:f1:28:b3:
5a:9a:6d:23:6d:2f:79:f0:9b:01:82:34:bf:4b:ff:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:B1:B9:26:D6:95:A6:D1:0F:8B:1C:D2:39:72:0C:01:D3:1F:00
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9f:9d:dd:46:c4:67:da:a0:e4:68:23:52:55:90:f9:b3:a2:
58:b5:2a:fd:92:6d:27:a1:c2:11:29:d5:29:07:b9:c4:c6:b8:
1b:3e:af:d5:27:60:88:60:57:7c:ae:58:94:d2:d1:71:66:a3:
0e:b9:7a:bb:37:64:2d:a9:43:6e:d2:61:fb:44:f8:d6:8e:e7:
c8:0f:ab:77:47:6a:99:1e:2d:c3:e1:81:11:90:f9:76:07:0e:
17:32:43:9b:fc:06:61:02:07:48:ac:d6:c1:c1:bd:56:71:88:
cb:1d:b7:03:87:94:a7:0f:e6:5b:8c:a3:50:5d:77:01:40:14:
2b:d7:3b:4e:c9:5d:e3:36:1b:b2:cc:68:28:24:84:56:6d:a2:
92:f7:38:cf:19:77:33:94:13:9a:4f:a1:e5:8d:93:18:60:d0:
c8:ce:e2:a3:ed:2e:bd:1a:e8:2d:a3:ef:06:52:d2:d1:65:2a:
3c:44:f2:68:aa:f8:02:c0:a7:ef:2c:ea:d3:4f:1b:0f:a9:3f:
74:b1:15:1d:64:10:73:34:40:ca:ec:07:5f:f6:09:4a:c3:1f:
c2:f3:16:47:9f:91:3a:4f:1b:2f:6a:ba:8c:61:02:03:6a:a2:
39:c1:13:22:db:d7:32:77:e6:14:ac:66:87:1c:1e:61:c6:16:
13:8a:f2:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fKzNy6sLz3OD5o95PFbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGRjMzA4ZmU2ZDg2MTIxMDI2Zjk3NDRhZGQ0MGUxMTcz
NTQzZGUwHhcNMjUxMDE5MDgwMTE1WhcNMjUxMDIwMDgwMTE1WjAzMTEwLwYDVQQD
EyhkZWNjYjFiOTI2ZDY5NWE2ZDEwZjhiMWNkMjM5NzIwYzAxZDMxZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFOjcfbE9M/9/yiQvuz/5zvaOtgY
VkR+2rgoI2R64O/DOL0JTvYtmzlHhZ87Cbuh7r30JKETZ0Rj8TVFh3JmIdiHN0pY
QCpKp2ZR/LyzCnqOaQ+teG74Gda9pOWEmKwG1EfxF7ClHwuMRMt+q7LOsShXGzb9
MRuTdsuq6T5TDUmZdzJcEu05/GS3ppPATPnLxdZQ5H0pK+Bkktxtpo7zlmPwx9KQ
tqa4PGG936i8lOexebi1oGqRkjH/G8f4hzMmn5dCJ31cWSeEIvRU6M574fJC9Wbi
9A6FZwwrQLqEUjbJsd1xqrNl0Q0nHbzxKLNamm0jbS958JsBgjS/S/8ZewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7Msbkm1pWm0Q+LHNI5cgwB0x8AMB8GA1UdIwQY
MBaAFMxNwwj+bYYSECb5dErdQOEXNUPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQt
ZDIyNmEzYjFmNDJkLzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGNmYTYtYzQ0Ni00ODg2LTk2ZWQtZDIyNmEzYjFmNDJk
LzEvekUzRENQNXRoaElRSnZsMFN0MUE0UmMxUTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5+d3UbE
Z9qg5GgjUlWQ+bOiWLUq/ZJtJ6HCESnVKQe5xMa4Gz6v1SdgiGBXfK5YlNLRcWaj
Drl6uzdkLalDbtJh+0T41o7nyA+rd0dqmR4tw+GBEZD5dgcOFzJDm/wGYQIHSKzW
wcG9VnGIyx23A4eUpw/mW4yjUF13AUAUK9c7Tsld4zYbssxoKCSEVm2ikvc4zxl3
M5QTmk+h5Y2TGGDQyM7io+0uvRroLaPvBlLS0WUqPETyaKr4AsCn7yzq008bD6k/
dLEVHWQQczRAyuwHX/YJSsMfwvMWR5+ROk8bL2q6jGECA2qiOcETItvXMnfmFKxm
hxweYcYWE4rySg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:14 2025 by rpki-client