Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
File: ZC8kHMyieCtfxAfhu696l6mEdGA.mft (raw, json)
Hash identifier: P+gACQzo6EnLX/E8f0BJDvY4iFSldLq1fVa6OLtZVz4=
Subject key identifier: 38:42:11:B6:78:EE:20:44:C9:A2:82:1B:7F:C2:EA:EA:F7:30:60:D5
Authority key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Certificate issuer: /CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Certificate serial: 019A52D0F7B0DAA0154C5D26133CF9F92FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
Manifest number: 0843
Signing time: Wed 05 Nov 2025 07:00:17 +0000
Manifest this update: Wed 05 Nov 2025 07:00:17 +0000
Manifest next update: Thu 06 Nov 2025 07:00:17 +0000
Files and hashes: 1: O6G70f_k228z-ZHm2ohB4tt-ekc.roa (hash: /bGnkVKQw6cLnt6o6jgq/vbGsus5bIRs/NypwJUrJ1g=)
2: ZC8kHMyieCtfxAfhu696l6mEdGA.crl (hash: WXsQcz8559C2EJ0us1InOk7gqtEKPYDMrrnd0mT+LJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d0:f7:b0:da:a0:15:4c:5d:26:13:3c:f9:f9:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Validity
Not Before: Nov 5 07:00:17 2025 GMT
Not After : Nov 6 07:00:17 2025 GMT
Subject: CN=384211b678ee2044c9a2821b7fc2eaeaf73060d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:b3:15:53:0c:7e:cb:1e:7f:80:83:dc:14:
03:3b:6e:e7:9d:d0:23:3a:08:2d:87:d9:25:bf:46:
84:12:a3:31:56:ee:53:dc:90:00:ba:17:4e:9d:1f:
9b:3d:f7:5c:9a:97:b9:1e:92:ce:56:8e:21:c0:13:
2e:c2:de:aa:ae:b7:61:76:3b:91:37:75:ef:7a:a7:
dd:51:a8:a2:ad:93:d5:75:01:9d:2a:32:da:16:63:
26:0e:8b:48:22:01:26:3b:86:56:78:f9:ce:ae:cc:
a4:2c:c6:00:79:3c:c6:2e:40:6b:fc:23:85:40:cc:
11:69:50:01:51:17:b8:93:23:ad:d1:c1:e5:7a:8e:
fd:39:00:ff:0e:99:90:61:0f:e8:94:45:ce:d6:1b:
cf:e8:3e:41:3f:6b:0c:c9:41:19:5d:a1:bd:f8:46:
1d:8c:7b:e5:11:f9:37:35:cf:44:a2:89:2d:36:63:
7a:cf:d0:b3:57:9a:94:cc:69:66:36:62:5d:5a:9c:
d5:28:40:0d:75:98:91:23:68:a4:26:09:6d:e6:e9:
57:96:d5:06:be:70:6f:96:72:b1:cd:17:b9:74:41:
58:9e:55:11:53:86:d7:01:53:1f:d4:73:9e:83:fe:
57:1a:dd:f4:32:af:bc:db:48:9e:3e:19:1c:ae:23:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:11:B6:78:EE:20:44:C9:A2:82:1B:7F:C2:EA:EA:F7:30:60:D5
X509v3 Authority Key Identifier:
keyid:64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:57:16:6b:42:64:d1:91:83:2a:3d:ac:6a:19:0e:04:10:d8:
51:87:3b:93:8b:9c:d3:bd:40:83:83:fa:33:71:31:28:a1:3e:
9b:d3:0f:80:1e:4b:2b:f4:72:d9:ec:d7:62:9a:4f:39:17:01:
4c:92:b3:b5:38:b2:f2:61:71:28:30:f8:d2:02:ee:e8:e3:af:
f0:55:c6:73:28:f8:2b:e8:06:e0:0d:9a:5b:bb:57:85:cb:e1:
b8:8a:7f:29:65:36:17:39:21:ee:df:a0:15:e5:1e:18:98:d0:
b0:ac:8e:5f:bd:d8:4e:cf:4b:ed:d8:6b:b7:84:ac:ba:36:a1:
de:b9:67:86:6d:69:4b:46:5a:d5:8f:ba:b8:6a:c4:5f:6b:61:
7e:40:6b:21:0e:9c:69:fa:56:dc:32:17:86:ed:76:a4:93:0e:
06:09:a2:84:2e:56:0f:c9:99:7e:8a:3b:d7:59:70:af:b4:dd:
13:72:a0:86:3b:9c:71:15:f7:96:0c:33:b5:aa:4e:8c:7d:3b:
26:a5:b7:cd:5c:40:8d:4d:d8:c9:ad:2a:ff:f8:24:80:a3:2b:
f5:06:7e:97:e1:95:97:ff:18:74:48:cc:1a:11:20:c4:f7:09:
7c:2a:2b:6f:ab:28:df:70:78:19:3f:38:54:f2:5a:b8:df:b0:
54:30:4d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0Pew2qAVTF0mEzz5+S++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmYyNDFjY2NhMjc4MmI1ZmM0MDdlMWJiYWY3YTk3YTk4
NDc0NjAwHhcNMjUxMTA1MDcwMDE3WhcNMjUxMTA2MDcwMDE3WjAzMTEwLwYDVQQD
EygzODQyMTFiNjc4ZWUyMDQ0YzlhMjgyMWI3ZmMyZWFlYWY3MzA2MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aWzFVMMfssef4CD3BQDO27nndAj
Oggth9klv0aEEqMxVu5T3JAAuhdOnR+bPfdcmpe5HpLOVo4hwBMuwt6qrrdhdjuR
N3XveqfdUaiirZPVdQGdKjLaFmMmDotIIgEmO4ZWePnOrsykLMYAeTzGLkBr/COF
QMwRaVABURe4kyOt0cHleo79OQD/DpmQYQ/olEXO1hvP6D5BP2sMyUEZXaG9+EYd
jHvlEfk3Nc9EooktNmN6z9CzV5qUzGlmNmJdWpzVKEANdZiRI2ikJglt5ulXltUG
vnBvlnKxzRe5dEFYnlURU4bXAVMf1HOeg/5XGt30Mq+820iePhkcriM8zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhCEbZ47iBEyaKCG3/C6ur3MGDVMB8GA1UdIwQY
MBaAFGQvJBzMongrX8QH4buvepephHRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGIt
MTQ1ZTk1ZThhN2JlLzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jYWU1NDgtYzNlMS00NTcxLTlhMGItMTQ1ZTk1ZThhN2Jl
LzEvWkM4a0hNeWllQ3RmeEFmaHU2OTZsNm1FZEdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilcWa0Jk
0ZGDKj2sahkOBBDYUYc7k4uc071Ag4P6M3ExKKE+m9MPgB5LK/Ry2ezXYppPORcB
TJKztTiy8mFxKDD40gLu6OOv8FXGcyj4K+gG4A2aW7tXhcvhuIp/KWU2Fzkh7t+g
FeUeGJjQsKyOX73YTs9L7dhrt4Ssujah3rlnhm1pS0Za1Y+6uGrEX2thfkBrIQ6c
afpW3DIXhu12pJMOBgmihC5WD8mZfoo711lwr7TdE3KghjuccRX3lgwztapOjH07
JqW3zVxAjU3Yya0q//gkgKMr9QZ+l+GVl/8YdEjMGhEgxPcJfCorb6so33B4GT84
VPJauN+wVDBNKw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:55 2025 by rpki-client