Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: Vx+dfmUfk1BdIJYUzPQUmDWRWTfzttMgt4PXjuTd96o=
Subject key identifier: 47:F1:1A:76:0D:50:AD:A6:C9:A3:63:7E:89:E0:A6:AE:ED:83:F1:CD
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 0199FAD82AED034C8AF3FF596516D178F569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 06F5
Signing time: Sun 19 Oct 2025 05:01:34 +0000
Manifest this update: Sun 19 Oct 2025 05:01:34 +0000
Manifest next update: Mon 20 Oct 2025 05:01:34 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: CNk99Q1ko9tB0PLv3l2T6BX0UkqgM03wpDmo7BuZHE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:2a:ed:03:4c:8a:f3:ff:59:65:16:d1:78:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Oct 19 05:01:34 2025 GMT
Not After : Oct 20 05:01:34 2025 GMT
Subject: CN=47f11a760d50ada6c9a3637e89e0a6aeed83f1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:94:6e:41:7a:8c:39:17:6c:88:90:c3:62:
ce:b9:3e:db:37:a9:2e:d1:cd:7b:f7:a2:22:9c:4f:
99:e0:7f:5b:a1:c5:ae:c6:02:27:df:fb:d1:fe:7e:
45:78:8b:33:a2:53:7a:9a:fb:2a:4f:dc:c5:f2:0d:
f3:55:68:4d:1d:e1:c0:f8:67:e4:17:32:b9:a6:86:
72:d4:42:93:37:aa:47:31:de:18:39:ec:7a:6b:ba:
36:cf:54:82:5d:7c:21:1f:44:73:cb:5b:f8:a6:32:
db:44:97:90:63:51:78:b1:82:46:cc:59:d0:f9:61:
a8:e5:10:46:38:a0:96:3e:1d:64:35:ea:b6:9b:a7:
5e:c1:06:04:73:92:6f:77:75:c3:09:70:79:7d:dd:
fe:57:2e:fe:db:9a:c5:e6:59:f8:44:53:74:eb:47:
b6:4b:8d:3c:ba:fa:eb:46:0e:12:bb:13:c5:b5:cf:
a7:57:a2:04:de:36:a8:d0:c5:74:61:b9:ff:c5:c5:
e0:a7:82:b5:a0:2f:b5:41:88:9d:44:6c:e0:c1:4d:
3c:89:46:7b:8d:49:7b:1f:f1:bc:ae:be:9a:27:a7:
4a:8b:d1:cf:a0:3e:91:e4:b0:39:53:f7:8a:35:74:
3e:fb:9e:c0:dd:89:77:fe:d4:27:20:b2:da:23:51:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F1:1A:76:0D:50:AD:A6:C9:A3:63:7E:89:E0:A6:AE:ED:83:F1:CD
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:ef:a1:bb:86:75:5b:c9:a3:5e:e1:73:ff:79:a9:6b:92:
09:53:5b:72:40:79:e5:78:f5:d7:38:29:8d:d4:31:93:2b:21:
83:bc:2f:80:6a:b8:fd:c4:da:d8:85:b6:0c:3e:dd:76:a5:e1:
91:8d:9c:28:2e:b0:31:32:c5:98:c6:59:26:7d:c8:90:34:59:
0e:7a:65:00:01:42:ee:48:1e:37:dc:ae:cc:a2:ab:c7:33:64:
45:da:fc:e6:fb:04:b5:77:62:59:5b:a3:3d:f0:84:30:b4:0e:
f6:90:6d:11:9a:f7:c3:50:95:cb:72:56:c8:e5:c6:93:5c:3f:
91:cb:26:f7:c1:62:42:8c:c3:d3:69:da:35:32:8e:3f:69:38:
b2:39:8a:57:ff:f6:70:02:81:d1:57:71:46:8e:e0:e0:ba:f6:
c6:92:2a:e5:65:d5:2d:79:7f:75:83:79:35:e3:86:b4:34:38:
1e:1e:4f:57:45:81:a6:cf:16:b7:67:8a:96:00:54:7d:a6:93:
ba:46:e8:fd:a5:f9:20:b4:34:6a:f5:10:77:91:80:98:1f:14:
73:b3:20:d2:33:64:7b:a4:13:11:34:e5:33:f3:46:f5:34:9b:
df:51:59:4c:65:23:22:4d:b8:e6:9e:39:8b:4b:0d:9a:59:da:
47:da:56:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62CrtA0yK8/9ZZRbRePVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOWQwNjQ3ZGMxNzE0MWQ4NDJiMzJmNTExNWQ5OWFhOWM5
ZjMzZGQwHhcNMjUxMDE5MDUwMTM0WhcNMjUxMDIwMDUwMTM0WjAzMTEwLwYDVQQD
Eyg0N2YxMWE3NjBkNTBhZGE2YzlhMzYzN2U4OWUwYTZhZWVkODNmMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl6UbkF6jDkXbIiQw2LOuT7bN6ku
0c1796IinE+Z4H9bocWuxgIn3/vR/n5FeIszolN6mvsqT9zF8g3zVWhNHeHA+Gfk
FzK5poZy1EKTN6pHMd4YOex6a7o2z1SCXXwhH0Rzy1v4pjLbRJeQY1F4sYJGzFnQ
+WGo5RBGOKCWPh1kNeq2m6dewQYEc5Jvd3XDCXB5fd3+Vy7+25rF5ln4RFN060e2
S408uvrrRg4SuxPFtc+nV6IE3jao0MV0Ybn/xcXgp4K1oC+1QYidRGzgwU08iUZ7
jUl7H/G8rr6aJ6dKi9HPoD6R5LA5U/eKNXQ++57A3Yl3/tQnILLaI1GqxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfxGnYNUK2myaNjfongpq7tg/HNMB8GA1UdIwQY
MBaAFM6dBkfcFxQdhCsy9RFdmaqcnzPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGIt
ODBmYWVjYTljMmVlLzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83ODUwOTAtZjg2NC00ZGJlLTlhNGItODBmYWVjYTljMmVl
LzEvenAwR1I5d1hGQjJFS3pMMUVWMlpxcHlmTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXjvobuG
dVvJo17hc/95qWuSCVNbckB55Xj11zgpjdQxkyshg7wvgGq4/cTa2IW2DD7ddqXh
kY2cKC6wMTLFmMZZJn3IkDRZDnplAAFC7kgeN9yuzKKrxzNkRdr85vsEtXdiWVuj
PfCEMLQO9pBtEZr3w1CVy3JWyOXGk1w/kcsm98FiQozD02naNTKOP2k4sjmKV//2
cAKB0VdxRo7g4Lr2xpIq5WXVLXl/dYN5NeOGtDQ4Hh5PV0WBps8Wt2eKlgBUfaaT
ukbo/aX5ILQ0avUQd5GAmB8Uc7Mg0jNke6QTETTlM/NG9TSb31FZTGUjIk245p45
i0sNmlnaR9pWNg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:57 2025 by rpki-client