Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: UsvBSvG3gjmgIiUEQIK24VCDNsv9fa0JLy3M1YDA+kw=
Subject key identifier: D7:92:21:3B:E3:C9:4B:CD:26:BC:A7:D5:9D:D8:3B:0C:C7:D5:AD:C6
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019A4DE213A118934E32D1DB501AD821B173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0DA8
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: iXMbBXhlHTXpnKGTkw66OtHRoNKd5cV1RQuln+BxHNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:13:a1:18:93:4e:32:d1:db:50:1a:d8:21:b1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=d792213be3c94bcd26bca7d59dd83b0cc7d5adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:d4:3c:07:b9:f7:69:1f:2d:c8:1b:f6:b6:
93:76:11:01:19:44:1a:fa:b2:89:a9:63:95:68:6a:
d8:5f:69:ab:17:fc:a7:41:35:4e:73:ba:74:6c:2c:
04:8a:46:68:db:be:a2:ad:6e:af:3d:22:d6:2d:23:
ec:83:37:f0:e9:3c:ab:5e:44:0c:88:4c:50:df:28:
12:4f:46:f2:4b:da:aa:8f:47:6f:9e:b2:46:1d:30:
2b:24:f9:f5:7a:e0:88:44:73:e5:9b:f1:7e:8c:f7:
91:55:02:93:a9:42:c0:de:04:22:95:c9:1e:43:c9:
81:6e:e1:85:ea:c7:d2:ee:f0:fd:17:f3:99:d9:0e:
7a:fd:06:ab:ef:bf:a3:02:3e:45:b9:ca:8c:bf:01:
e1:01:7f:eb:c0:dd:f2:a5:23:93:a2:64:e2:13:5c:
b9:a1:52:f5:65:7b:4a:7d:e5:84:34:d8:a9:89:b4:
85:cf:9e:34:7f:8b:f6:69:23:97:e3:a9:23:da:e6:
a2:17:48:f2:8d:8f:7e:b4:ce:f6:75:9e:2d:df:5a:
60:02:90:67:d3:bd:a8:52:a4:72:27:cd:75:4f:b2:
a0:50:5f:31:fd:25:4d:ce:97:39:17:7f:3d:b9:44:
22:c1:c0:d4:54:21:26:64:28:8d:1d:f6:59:d3:b9:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:21:3B:E3:C9:4B:CD:26:BC:A7:D5:9D:D8:3B:0C:C7:D5:AD:C6
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:73:33:7e:bb:97:7b:6b:6e:7f:ff:6a:03:1d:4f:af:af:45:
2a:a4:3f:14:6e:59:d9:66:41:13:99:ba:0d:c9:59:4e:5e:9b:
05:07:f1:f4:dc:1d:2f:fb:83:54:aa:75:50:65:b3:27:76:4d:
c4:b9:3e:48:3d:ba:00:46:65:22:7b:37:6f:5f:54:da:e3:0b:
4b:6f:7e:08:5b:0c:75:25:9f:47:47:58:cd:7b:f2:52:16:a6:
70:5e:4f:3d:41:d6:22:b8:2c:69:4f:fc:db:b6:30:da:ed:79:
fd:86:94:2c:73:8a:89:86:80:be:d6:00:cb:e9:10:c5:76:00:
97:75:bd:4f:0e:49:ff:00:9d:58:a9:86:89:be:af:de:50:b3:
0c:1f:d9:71:03:ed:49:00:5c:a6:e1:34:5f:e6:4a:5a:c1:e7:
3c:42:8a:05:30:19:58:bb:be:51:14:24:76:23:bb:05:dc:36:
4d:18:78:7e:b2:7f:fb:7c:7d:f0:ae:11:95:0e:9f:d9:a4:5c:
27:a6:d1:07:9d:b3:7e:40:ff:fd:33:78:ee:64:b6:6f:03:6d:
73:b4:03:30:5d:2c:fb:fa:1d:db:21:51:ca:fa:32:22:a0:31:
06:e3:1c:0f:07:ba:3b:45:20:bf:d1:4d:ba:ea:c9:b3:43:a6:
62:5d:59:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4hOhGJNOMtHbUBrYIbFzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGIzZDkwNGIzNDQ0MDU0NmI2MjQxZDc4OTRkOTMzMDBi
Y2JkMjgwHhcNMjUxMTA0MDgwMDUzWhcNMjUxMTA1MDgwMDUzWjAzMTEwLwYDVQQD
EyhkNzkyMjEzYmUzYzk0YmNkMjZiY2E3ZDU5ZGQ4M2IwY2M3ZDVhZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5nUPAe592kfLcgb9raTdhEBGUQa
+rKJqWOVaGrYX2mrF/ynQTVOc7p0bCwEikZo276irW6vPSLWLSPsgzfw6TyrXkQM
iExQ3ygST0byS9qqj0dvnrJGHTArJPn1euCIRHPlm/F+jPeRVQKTqULA3gQilcke
Q8mBbuGF6sfS7vD9F/OZ2Q56/Qar77+jAj5FucqMvwHhAX/rwN3ypSOTomTiE1y5
oVL1ZXtKfeWENNipibSFz540f4v2aSOX46kj2uaiF0jyjY9+tM72dZ4t31pgApBn
072oUqRyJ811T7KgUF8x/SVNzpc5F389uUQiwcDUVCEmZCiNHfZZ07lXDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeSITvjyUvNJryn1Z3YOwzH1a3GMB8GA1UdIwQY
MBaAFM/bPZBLNEQFRrYkHXiU2TMAvL0oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUt
NmU3NTYxNTM1YmJkLzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85MjVhYjktMjFmZS00YmJmLWFjMGUtNmU3NTYxNTM1YmJk
LzEvejlzOWtFczBSQVZHdGlRZGVKVFpNd0M4dlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyXMzfruX
e2tuf/9qAx1Pr69FKqQ/FG5Z2WZBE5m6DclZTl6bBQfx9NwdL/uDVKp1UGWzJ3ZN
xLk+SD26AEZlIns3b19U2uMLS29+CFsMdSWfR0dYzXvyUhamcF5PPUHWIrgsaU/8
27Yw2u15/YaULHOKiYaAvtYAy+kQxXYAl3W9Tw5J/wCdWKmGib6v3lCzDB/ZcQPt
SQBcpuE0X+ZKWsHnPEKKBTAZWLu+URQkdiO7Bdw2TRh4frJ/+3x98K4RlQ6f2aRc
J6bRB52zfkD//TN47mS2bwNtc7QDMF0s+/od2yFRyvoyIqAxBuMcDwe6O0Ugv9FN
uurJs0OmYl1Zsg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:49 2025 by rpki-client