Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: KFQBBntKd+tfvaYN0UFz3iF0n6GSdse5RNVYiKx321g=
Subject key identifier: AC:D8:F8:D0:BE:DA:14:74:31:56:48:68:68:B1:B1:33:CF:7B:F2:A0
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019A4EF4736261DC2798126150DFB374CF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 0303
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: dlG0zJYQHkD3cXpqE/x8a7TcAbdW1yfWvRhwos0uFYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:73:62:61:dc:27:98:12:61:50:df:b3:74:cf:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=acd8f8d0beda14743156486868b1b133cf7bf2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:1b:b9:92:ac:47:62:e4:52:0a:1b:83:a0:
f8:be:ad:2e:11:a9:57:62:22:90:57:f2:b5:dd:7f:
82:c1:5e:c0:4f:e0:14:67:11:76:ff:1b:bf:e7:60:
36:d1:a9:88:dd:c2:45:47:d5:df:4c:51:41:88:3c:
21:07:e2:d5:38:ae:1d:45:36:3a:1a:d6:71:42:fa:
a6:69:19:f4:b3:5e:5b:fa:ea:35:05:0b:4e:9f:8d:
22:0f:3e:d0:2e:ec:cd:22:6b:1f:f4:18:96:62:93:
88:3b:f7:a8:2d:20:80:fe:4d:5d:79:b7:09:41:eb:
2f:37:d5:b0:f2:29:c1:85:ab:80:63:af:fb:3a:ca:
da:82:22:31:05:59:b9:b9:15:4d:0d:f0:a2:f7:06:
d7:79:4e:a2:a1:cf:9c:3c:06:f9:be:56:1d:d3:58:
17:ff:99:97:97:3d:df:e4:2e:6b:b0:90:ef:98:6e:
46:10:60:13:1e:00:73:ea:f7:73:d4:14:42:5c:3f:
c5:d6:11:33:14:16:4d:cb:6d:d6:58:97:24:5a:c1:
2e:47:ad:bb:7c:61:bc:d6:f1:cb:e9:88:fd:32:17:
98:a5:e7:40:e1:07:06:8b:df:90:13:dc:8b:17:aa:
06:3f:dd:c8:a2:b8:ca:47:f0:e1:86:46:4b:d4:b8:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D8:F8:D0:BE:DA:14:74:31:56:48:68:68:B1:B1:33:CF:7B:F2:A0
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0d:8b:e4:28:97:3b:e2:1a:e8:5a:b5:8e:5f:7b:ef:79:45:
b9:f9:a5:a1:ae:91:45:21:3f:a0:66:7f:ce:92:74:f2:d2:be:
53:1b:cd:d8:a5:ae:fc:2c:45:1c:28:66:31:cd:f1:c8:a2:2c:
dc:90:31:6d:73:f0:73:da:7f:fc:54:22:8c:0b:41:3b:40:4a:
1f:ea:6f:e8:b0:47:67:cd:7f:73:34:e7:50:94:5c:4b:c5:fe:
16:f8:d0:2e:ce:43:de:60:b4:d5:98:85:08:72:3c:17:d1:fa:
48:c0:cc:d3:f5:14:df:a5:50:f6:ba:ad:34:7a:c9:9e:2d:d6:
08:f7:24:51:5f:60:60:da:ce:1b:96:e2:47:f3:46:3f:4d:33:
c5:b6:fb:f7:bd:a9:d4:b9:93:d4:b4:3c:76:08:7c:83:4c:cd:
a7:0b:f7:92:73:45:0b:df:71:f3:b4:9f:24:3a:4d:63:84:9a:
e9:d3:e8:a8:c1:ee:0b:07:34:25:ab:5e:40:18:18:f6:d9:24:
6a:e2:d9:7b:0d:46:d0:61:c0:4b:2c:93:56:ca:7f:9c:83:78:
82:cb:86:2f:af:1a:8a:7e:ed:e8:81:a9:e3:1b:ab:de:40:c7:
b5:54:7d:39:da:29:f5:49:08:85:64:4a:73:c1:5f:2e:9f:3c:
a4:2e:bb:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HNiYdwnmBJhUN+zdM8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0
NzE0ODkwHhcNMjUxMTA0MTMwMDM0WhcNMjUxMTA1MTMwMDM0WjAzMTEwLwYDVQQD
EyhhY2Q4ZjhkMGJlZGExNDc0MzE1NjQ4Njg2OGIxYjEzM2NmN2JmMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj0buZKsR2LkUgobg6D4vq0uEalX
YiKQV/K13X+CwV7AT+AUZxF2/xu/52A20amI3cJFR9XfTFFBiDwhB+LVOK4dRTY6
GtZxQvqmaRn0s15b+uo1BQtOn40iDz7QLuzNImsf9BiWYpOIO/eoLSCA/k1debcJ
QesvN9Ww8inBhauAY6/7OsragiIxBVm5uRVNDfCi9wbXeU6ioc+cPAb5vlYd01gX
/5mXlz3f5C5rsJDvmG5GEGATHgBz6vdz1BRCXD/F1hEzFBZNy23WWJckWsEuR627
fGG81vHL6Yj9MheYpedA4QcGi9+QE9yLF6oGP93IorjKR/DhhkZL1LiJowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzY+NC+2hR0MVZIaGixsTPPe/KgMB8GA1UdIwQY
MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt
NDQzMTNiNDNlNTk0LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0
LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhw2L5CiX
O+Ia6Fq1jl9773lFufmloa6RRSE/oGZ/zpJ08tK+UxvN2KWu/CxFHChmMc3xyKIs
3JAxbXPwc9p//FQijAtBO0BKH+pv6LBHZ81/czTnUJRcS8X+FvjQLs5D3mC01ZiF
CHI8F9H6SMDM0/UU36VQ9rqtNHrJni3WCPckUV9gYNrOG5biR/NGP00zxbb7972p
1LmT1LQ8dgh8g0zNpwv3knNFC99x87SfJDpNY4Sa6dPoqMHuCwc0JateQBgY9tkk
auLZew1G0GHASyyTVsp/nIN4gsuGL68ain7t6IGp4xur3kDHtVR9Odop9UkIhWRK
c8FfLp88pC67pw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:44 2025 by rpki-client