Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft (raw, json)
Hash identifier: KFDFMfQ1VwKY7bAw70hNWthcBvfor+OIcgkE+EYpI2A=
Subject key identifier: 2F:75:F4:9B:DE:7C:E8:C9:18:90:30:D6:37:09:0A:61:CC:7C:5D:64
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 019A4E863E693E026EF2E125BF4217DEF0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl (hash: 3iO71+1/VKNsufTw+7ch+GMcTFMDGnxkT2217raA9WA=)
2: _NGd2dVtQzthWCISF-Y9kIv0e2s.roa (hash: AShb2mdu/vRA1Xh3lQqV4RVoMvbduHSzrk68dqeVwU0=)
3: bQ3rdpybFWSSg24nniUWCWtv9Z0.roa (hash: Udp019RNIUS5kM1bsNno1+vbsm4XNBOuegHKERqhO0U=)
4: qBoHuNv7znixCyhzyH3L6b4JjMs.roa (hash: 8FVJ5zW+hXKUbs3QXSxUyH4ee1KWcw96gUoDz4eFoqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3e:69:3e:02:6e:f2:e1:25:bf:42:17:de:f0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=2f75f49bde7ce8c9189030d637090a61cc7c5d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:33:49:43:ed:af:2d:06:0b:6a:75:ef:14:
46:5b:0b:36:3b:1c:05:ab:52:28:0c:0f:6e:48:e4:
4d:2a:c5:a2:c2:93:93:8c:e0:8e:76:52:b5:ba:c8:
d0:05:90:01:de:61:26:62:f4:24:d5:bb:ae:06:44:
35:2c:44:a8:5e:b4:37:fd:a7:93:b6:d1:3f:d9:ff:
40:65:c6:9c:7b:24:c7:c5:f1:49:4c:ea:37:d5:44:
a9:5b:a9:24:ad:d1:c0:4f:6b:fb:48:5c:c1:7e:29:
5a:9f:31:f2:16:80:7a:7f:cf:f6:56:6b:14:1b:08:
68:c2:e9:e8:11:8b:79:c1:d4:92:f1:3a:56:7f:a1:
57:0c:18:f2:59:7a:62:08:b7:cf:fe:dc:b2:f5:cb:
f8:d2:72:73:bd:55:71:26:58:17:88:cd:6b:42:b7:
04:f4:5b:48:86:fe:f5:96:bd:17:85:ce:5b:b6:18:
54:2c:a9:bf:32:c6:a8:d7:4c:4f:8e:eb:3c:ed:1f:
0f:c1:3c:13:5c:c6:74:93:91:e7:76:97:2e:f4:17:
f6:72:50:51:01:ee:e8:7b:f1:d2:dd:35:86:f7:0f:
f2:cb:44:0a:23:b2:c3:52:df:72:85:e1:e0:e6:1e:
8a:85:56:6c:cc:de:a1:cb:ae:b9:b9:a8:1c:dc:0a:
4a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:F4:9B:DE:7C:E8:C9:18:90:30:D6:37:09:0A:61:CC:7C:5D:64
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8f:e7:2b:0d:e0:75:a0:1b:fc:7e:b6:5c:d0:bb:bc:28:31:
ea:e1:0f:82:bd:d1:5b:40:d7:67:b6:78:32:03:9a:68:93:20:
7e:d1:74:37:1e:b3:74:f1:bf:16:7c:f9:35:8e:fa:f6:b4:0f:
0c:a5:50:22:0d:7f:91:c5:27:f9:8a:fc:7b:a1:b9:be:a4:41:
36:28:79:43:ba:c1:42:75:1c:35:b0:41:9b:ae:6e:38:62:29:
95:66:69:ad:00:53:45:bb:ec:f7:de:a4:e9:38:48:83:ce:38:
ef:3c:c0:e0:5f:27:13:53:57:d2:a7:1a:ae:1e:d5:83:57:6f:
f3:a0:e7:3d:b4:d2:b6:9e:6d:9a:93:db:e1:9a:71:02:73:e1:
d6:22:52:d6:d5:4f:45:ca:d3:0e:24:a7:e8:98:4f:3e:e2:39:
45:38:d3:00:fa:ed:7d:2e:b2:8e:4d:bc:d9:3c:1b:e4:b5:3e:
05:0c:9f:6f:1d:1e:b9:81:56:89:9c:b3:66:02:3d:f4:8f:de:
b8:d6:66:1a:d0:c6:bc:24:da:76:81:19:55:4d:cd:21:44:ef:
cc:57:71:d8:af:68:1a:58:7b:70:4f:b5:0d:1a:5e:0c:8b:0a:
bf:27:cb:e2:99:97:f6:42:4c:fc:08:2b:7f:71:c4:91:a9:14:
22:a8:d9:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhj5pPgJu8uElv0IX3vCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj
ZDJhOTcwHhcNMjUxMTA0MTEwMDExWhcNMjUxMTA1MTEwMDExWjAzMTEwLwYDVQQD
EygyZjc1ZjQ5YmRlN2NlOGM5MTg5MDMwZDYzNzA5MGE2MWNjN2M1ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6QzSUPtry0GC2p17xRGWws2OxwF
q1IoDA9uSORNKsWiwpOTjOCOdlK1usjQBZAB3mEmYvQk1buuBkQ1LESoXrQ3/aeT
ttE/2f9AZcaceyTHxfFJTOo31USpW6kkrdHAT2v7SFzBfilanzHyFoB6f8/2VmsU
GwhowunoEYt5wdSS8TpWf6FXDBjyWXpiCLfP/tyy9cv40nJzvVVxJlgXiM1rQrcE
9FtIhv71lr0Xhc5bthhULKm/Msao10xPjus87R8PwTwTXMZ0k5Hndpcu9Bf2clBR
Ae7oe/HS3TWG9w/yy0QKI7LDUt9yheHg5h6KhVZszN6hy665uagc3ApKrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC919JvefOjJGJAw1jcJCmHMfF1kMB8GA1UdIwQY
MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct
NTVjM2QxMjllYzI4LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4
LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4/nKw3g
daAb/H62XNC7vCgx6uEPgr3RW0DXZ7Z4MgOaaJMgftF0Nx6zdPG/Fnz5NY769rQP
DKVQIg1/kcUn+Yr8e6G5vqRBNih5Q7rBQnUcNbBBm65uOGIplWZprQBTRbvs996k
6ThIg8447zzA4F8nE1NX0qcarh7Vg1dv86DnPbTStp5tmpPb4ZpxAnPh1iJS1tVP
RcrTDiSn6JhPPuI5RTjTAPrtfS6yjk282Twb5LU+BQyfbx0euYFWiZyzZgI99I/e
uNZmGtDGvCTadoEZVU3NIUTvzFdx2K9oGlh7cE+1DRpeDIsKvyfL4pmX9kJM/Agr
f3HEkakUIqjZ+Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:20 2025 by rpki-client