
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: U+ydRNyt2YTote6KP0zaOqC0XPE1YPb4g4U/pXk2R/g=
Subject key identifier: A1:4E:BB:B7:AC:BA:58:5D:BF:CE:04:39:31:95:25:FB:1C:0E:C4:D3
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 019880C23D3A887DDE6A07D7830EBC86026E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 132B
Signing time: Wed 06 Aug 2025 19:01:09 +0000
Manifest this update: Wed 06 Aug 2025 19:01:09 +0000
Manifest next update: Thu 07 Aug 2025 19:01:09 +0000
Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: 334tXd0FkwhA/q5mWwP/kZPhBm4IMe/1RUe9JfklHPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:3d:3a:88:7d:de:6a:07:d7:83:0e:bc:86:02:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Aug 6 19:01:09 2025 GMT
Not After : Aug 7 19:01:09 2025 GMT
Subject: CN=a14ebbb7acba585dbfce0439319525fb1c0ec4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:e8:0b:71:aa:da:bd:e2:c9:b6:91:58:4c:
42:69:58:0e:fc:23:bf:2e:0b:6a:f4:e3:e8:6d:37:
2c:e9:fd:67:fe:e8:67:ff:d0:11:bc:92:6f:d4:bd:
ff:06:ad:7d:dd:ef:5b:b0:bb:49:5a:f6:9b:46:79:
16:aa:f2:8a:75:ae:bc:a3:3d:9f:15:f7:84:60:05:
f9:68:d9:e3:09:18:10:e9:66:fa:15:1c:15:7f:c2:
b6:01:fb:14:79:eb:25:0b:17:e9:df:de:f3:e1:02:
78:e0:27:e0:24:e7:1d:01:0a:4b:7e:dd:43:7a:6e:
4e:6c:68:4f:09:7b:f2:b3:31:a2:5e:4f:75:fd:92:
12:92:ff:6b:d5:19:1d:73:59:de:b8:61:32:3a:db:
9c:43:6c:57:cc:de:20:19:50:a6:1c:64:bb:01:7d:
5d:d7:43:aa:19:44:2f:81:1d:d8:56:dc:93:e0:99:
ed:33:45:9f:ca:ed:5a:2a:dc:88:28:ce:ae:94:d6:
7d:a5:ac:4f:e4:82:2f:5c:d4:63:af:05:16:5b:89:
60:40:bd:92:64:d0:24:05:47:67:e5:5d:9d:f4:c3:
24:7a:25:0c:d8:71:7a:46:a7:8e:ec:6d:a4:30:cf:
72:4d:86:5c:0b:7b:2e:80:18:5e:44:43:79:0b:bf:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4E:BB:B7:AC:BA:58:5D:BF:CE:04:39:31:95:25:FB:1C:0E:C4:D3
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e4:87:f3:5a:84:7a:36:90:1b:79:46:0c:0d:de:6b:03:14:
f8:83:68:37:ad:29:ff:f1:b2:fa:ce:56:9d:93:af:c7:e2:af:
ea:d1:78:91:11:9c:c2:fa:19:3e:54:01:58:03:4b:20:fc:10:
ba:6a:e4:a7:55:c6:b6:18:f5:ec:e1:06:2c:5d:db:9d:8c:30:
55:64:eb:89:64:bb:2d:81:e3:31:7f:9d:c1:f0:56:63:b9:1e:
ea:a7:b5:aa:6f:d7:b5:ff:7f:34:7f:fc:a7:bd:22:4d:58:61:
a9:45:b9:b7:da:05:7c:3e:69:7f:b4:5c:83:b6:f3:16:69:f0:
8a:7b:cd:e4:84:73:92:21:82:38:e4:14:82:06:22:e2:3c:c7:
77:9a:38:3d:64:45:8d:f1:da:ae:85:07:55:f0:b3:9a:fc:e8:
73:31:b1:8b:c1:2c:22:91:13:13:56:57:11:4a:98:ff:56:7f:
5c:24:c3:11:6b:04:e8:9f:b1:d4:98:c7:97:b2:13:fc:6c:b8:
43:a5:4b:20:d1:72:54:5a:fc:1e:bc:93:69:89:10:53:03:3e:
42:7f:58:cb:2a:36:7b:f5:cc:8a:d6:af:e3:53:bc:76:f1:9f:
ac:a0:01:5b:67:49:fe:9c:3b:13:e6:39:b2:7d:61:81:c5:6b:
9e:43:fb:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwj06iH3eagfXgw68hgJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjUwODA2MTkwMTA5WhcNMjUwODA3MTkwMTA5WjAzMTEwLwYDVQQD
EyhhMTRlYmJiN2FjYmE1ODVkYmZjZTA0MzkzMTk1MjVmYjFjMGVjNGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkboC3Gq2r3iybaRWExCaVgO/CO/
Lgtq9OPobTcs6f1n/uhn/9ARvJJv1L3/Bq193e9bsLtJWvabRnkWqvKKda68oz2f
FfeEYAX5aNnjCRgQ6Wb6FRwVf8K2AfsUeeslCxfp397z4QJ44CfgJOcdAQpLft1D
em5ObGhPCXvyszGiXk91/ZISkv9r1Rkdc1neuGEyOtucQ2xXzN4gGVCmHGS7AX1d
10OqGUQvgR3YVtyT4JntM0Wfyu1aKtyIKM6ulNZ9paxP5IIvXNRjrwUWW4lgQL2S
ZNAkBUdn5V2d9MMkeiUM2HF6RqeO7G2kMM9yTYZcC3sugBheREN5C79B+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFOu7esulhdv84EOTGVJfscDsTTMB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+SH81qE
ejaQG3lGDA3eawMU+INoN60p//Gy+s5WnZOvx+Kv6tF4kRGcwvoZPlQBWANLIPwQ
umrkp1XGthj17OEGLF3bnYwwVWTriWS7LYHjMX+dwfBWY7ke6qe1qm/Xtf9/NH/8
p70iTVhhqUW5t9oFfD5pf7Rcg7bzFmnwinvN5IRzkiGCOOQUggYi4jzHd5o4PWRF
jfHaroUHVfCzmvzoczGxi8EsIpETE1ZXEUqY/1Z/XCTDEWsE6J+x1JjHl7IT/Gy4
Q6VLINFyVFr8HryTaYkQUwM+Qn9Yyyo2e/XMitav41O8dvGfrKABW2dJ/pw7E+Y5
sn1hgcVrnkP7qg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:03:20 2025 by rpki-client