Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: q7N+kMJ/BIHVuzLVIpMpmJsoIXYa4hYTugR9VDqvsqc=
Subject key identifier: 6D:18:C8:E5:42:4D:13:DD:EC:5E:2C:D1:4E:73:FA:A7:DD:57:8B:35
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 019A533ECCC023BD8A5A60415ED3979AE2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 0428
Signing time: Wed 05 Nov 2025 09:00:15 +0000
Manifest this update: Wed 05 Nov 2025 09:00:15 +0000
Manifest next update: Thu 06 Nov 2025 09:00:15 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: l+QJPCH0EUPN2qapJzfPbdVdkrawW0gxkor80wlxbIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:cc:c0:23:bd:8a:5a:60:41:5e:d3:97:9a:e2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Nov 5 09:00:15 2025 GMT
Not After : Nov 6 09:00:15 2025 GMT
Subject: CN=6d18c8e5424d13ddec5e2cd14e73faa7dd578b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:59:4f:18:a4:c4:36:aa:6b:00:3d:22:f8:
c5:c7:b8:f9:c7:3f:2e:21:a6:b4:30:93:a6:c1:c1:
57:03:46:f4:5c:ba:32:10:e1:42:82:ef:d1:ef:4d:
97:78:a5:a3:09:e5:f9:6f:40:15:be:84:f0:c4:8e:
28:09:37:3a:7c:2d:2c:1b:74:2d:0c:5d:be:95:69:
5e:3d:7c:05:1c:01:01:1a:c1:5c:67:a5:17:42:2f:
bd:b5:b1:16:2a:9e:81:77:f5:59:69:da:1b:8c:b0:
0b:79:70:64:d3:e0:df:94:03:cc:06:a3:eb:47:ce:
b9:18:99:c1:d8:a9:96:f0:77:f2:e2:59:c4:26:44:
be:6b:87:ca:22:bb:ce:51:f1:b2:b1:29:b1:30:44:
aa:6c:91:7e:e1:3b:df:dc:9a:d5:62:6e:aa:db:05:
1f:38:e4:0e:8e:73:5c:ef:1f:c6:37:40:3d:63:b8:
84:fc:e2:f3:69:43:a6:99:a9:c8:23:9c:57:1d:e8:
9a:29:9c:27:9b:f0:1b:2a:2f:37:fc:24:2a:8a:c5:
5f:e5:cf:de:40:c6:e3:e9:5c:fc:39:65:08:af:72:
a3:e3:70:a0:46:31:4d:c0:e1:bf:4a:43:e8:1a:2c:
bc:80:ce:d5:38:f4:a3:e5:30:d3:a6:41:4a:45:d7:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:C8:E5:42:4D:13:DD:EC:5E:2C:D1:4E:73:FA:A7:DD:57:8B:35
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2f:84:9a:ca:95:d1:4e:a8:45:aa:ed:42:63:04:9c:81:51:
05:5a:cc:1e:69:06:1c:fd:91:99:39:ec:ff:ea:18:97:de:b8:
56:ab:2b:1d:08:58:9f:91:5e:d3:b5:b2:1a:e6:ef:7f:32:a2:
f8:6a:ab:e1:09:6f:21:55:a3:ba:9f:f5:27:ac:1f:b6:28:44:
60:88:10:8d:3a:95:cb:1d:dc:45:75:52:78:86:fe:73:d6:96:
40:29:ab:72:e6:29:de:a4:50:bb:ae:3a:1b:30:db:e3:d0:1f:
ca:a3:c9:3d:b4:37:22:c9:1e:55:da:49:b4:eb:27:16:9a:9f:
87:96:a3:8f:19:c0:a0:70:ff:6d:c9:59:d7:42:81:36:3d:73:
66:65:08:f5:8d:88:24:9a:91:01:20:35:5b:1a:f0:1c:f7:42:
ed:51:56:4c:53:85:7c:e6:f0:06:0a:c9:0d:4e:4e:ba:58:76:
88:02:d9:b4:66:7b:c3:d1:27:01:7a:58:51:4a:51:b1:21:5e:
ec:7a:eb:39:5a:d8:4f:0c:e4:ac:13:36:bc:14:e8:9f:76:4f:
34:a1:60:e6:82:95:ba:cf:bd:79:ab:10:33:0c:82:88:99:ff:
44:fa:8e:b6:4c:3f:5f:eb:0a:4f:98:93:4f:28:9c:39:d9:b4:
6e:70:ac:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTPszAI72KWmBBXtOXmuLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYWU0NjExODhmZmMxZWYyZjNhMTQ3NDU3MWE5NDM5YTU1
Mzc0YWMwHhcNMjUxMTA1MDkwMDE1WhcNMjUxMTA2MDkwMDE1WjAzMTEwLwYDVQQD
Eyg2ZDE4YzhlNTQyNGQxM2RkZWM1ZTJjZDE0ZTczZmFhN2RkNTc4YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH1ZTxikxDaqawA9IvjFx7j5xz8u
Iaa0MJOmwcFXA0b0XLoyEOFCgu/R702XeKWjCeX5b0AVvoTwxI4oCTc6fC0sG3Qt
DF2+lWlePXwFHAEBGsFcZ6UXQi+9tbEWKp6Bd/VZadobjLALeXBk0+DflAPMBqPr
R865GJnB2KmW8Hfy4lnEJkS+a4fKIrvOUfGysSmxMESqbJF+4Tvf3JrVYm6q2wUf
OOQOjnNc7x/GN0A9Y7iE/OLzaUOmmanII5xXHeiaKZwnm/AbKi83/CQqisVf5c/e
QMbj6Vz8OWUIr3Kj43CgRjFNwOG/SkPoGiy8gM7VOPSj5TDTpkFKRdeiPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0YyOVCTRPd7F4s0U5z+qfdV4s1MB8GA1UdIwQY
MBaAFM+uRhGI/8HvLzoUdFcalDmlU3SsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMt
NTVmMDZmMDYyY2UwLzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMtNTVmMDZmMDYyY2Uw
LzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABy+EmsqV
0U6oRartQmMEnIFRBVrMHmkGHP2RmTns/+oYl964VqsrHQhYn5Fe07WyGubvfzKi
+Gqr4QlvIVWjup/1J6wftihEYIgQjTqVyx3cRXVSeIb+c9aWQCmrcuYp3qRQu646
GzDb49AfyqPJPbQ3IskeVdpJtOsnFpqfh5ajjxnAoHD/bclZ10KBNj1zZmUI9Y2I
JJqRASA1WxrwHPdC7VFWTFOFfObwBgrJDU5Oulh2iALZtGZ7w9EnAXpYUUpRsSFe
7HrrOVrYTwzkrBM2vBTon3ZPNKFg5oKVus+9easQMwyCiJn/RPqOtkw/X+sKT5iT
TyicOdm0bnCsIQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:32 2025 by rpki-client