
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: gXHvPJQHJ3tAPrCyzGdKql7izuX0nXALwLd5tk8dbH4=
Subject key identifier: 6E:78:53:23:1B:BA:DB:6D:45:D5:E9:59:7D:BC:20:00:BE:F0:F8:35
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 01987F7A311C5AD4840DAF55676BBB71EBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 15AF
Signing time: Wed 06 Aug 2025 13:02:50 +0000
Manifest this update: Wed 06 Aug 2025 13:02:50 +0000
Manifest next update: Thu 07 Aug 2025 13:02:50 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: v+ORGXRUsGWFABE5aNDeuCfhkqQnOw5dy0FqTWTc8ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:7a:31:1c:5a:d4:84:0d:af:55:67:6b:bb:71:eb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Aug 6 13:02:50 2025 GMT
Not After : Aug 7 13:02:50 2025 GMT
Subject: CN=6e7853231bbadb6d45d5e9597dbc2000bef0f835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:3e:3e:be:c4:82:d8:82:f3:ea:09:a2:7d:
5d:48:ba:97:93:16:72:17:5c:dc:29:f4:58:e3:4f:
2e:dc:18:0d:56:65:d8:e0:49:4c:f4:8a:90:dd:35:
6d:45:d0:ed:8c:48:ce:24:97:8f:41:88:8f:d3:79:
2c:77:13:fc:cd:c3:6f:1d:2f:25:dd:16:ad:f5:e6:
b3:75:d4:c0:e5:43:26:5d:d2:70:93:55:84:70:16:
b3:57:f3:80:7c:e5:17:fb:7d:4c:f1:64:5d:b8:db:
a9:4f:d4:b9:48:b8:47:32:3c:f6:09:b2:64:37:64:
e5:83:f5:3e:68:92:e9:c1:de:2f:2c:32:4d:49:e7:
03:b5:db:16:1f:b4:c8:f6:80:e4:d8:e6:46:a2:46:
1b:0f:6a:84:0c:0d:65:7b:47:ab:00:44:a3:30:04:
25:bc:67:67:53:f3:b7:45:53:a3:ba:9a:36:bf:2f:
6e:a1:aa:2d:e9:ac:37:e1:16:8d:8f:50:b7:c7:60:
af:18:77:3c:76:ed:8e:da:ae:38:7b:44:aa:c2:1b:
ac:f5:47:fd:fe:81:00:3b:1d:99:fa:97:e4:8c:23:
f4:6c:d4:23:ab:16:4c:6e:02:af:47:22:d6:8b:b3:
d5:0f:f0:fe:cc:ba:a1:b9:04:aa:23:5a:70:6b:29:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:78:53:23:1B:BA:DB:6D:45:D5:E9:59:7D:BC:20:00:BE:F0:F8:35
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5a:a4:42:d8:82:aa:73:a7:6e:0f:a9:f6:ab:5d:a8:0c:76:
4f:0d:66:22:ad:5b:12:4b:44:be:f8:29:bd:c5:45:e9:18:06:
2a:12:de:4a:53:57:b9:a5:fe:7f:b3:b7:1d:1e:10:cb:fe:28:
ce:0b:8b:2d:35:b0:18:4c:87:6e:a1:cf:b0:26:58:19:5a:91:
09:fd:37:b3:2f:df:06:ba:ab:9f:84:62:4f:65:63:3b:77:a2:
70:50:a4:5a:a2:08:37:3b:97:b5:b1:81:af:ff:b4:1a:7e:54:
74:80:40:eb:d7:d9:8c:73:99:c8:1c:1d:41:03:d6:87:99:ef:
52:6c:8c:50:d0:ef:9b:5f:10:b7:8a:74:1f:18:75:de:bb:d8:
eb:65:b2:38:a4:a1:f4:2f:d6:ab:e0:d2:d1:05:3a:bb:7c:4f:
35:ca:52:36:34:7b:b9:ba:83:0a:41:ce:ed:d2:27:9e:7b:67:
8f:d0:12:3a:94:bd:4a:ae:17:f4:f5:6c:0d:dd:a7:7d:c3:d7:
5d:44:89:ba:b9:55:40:5e:a8:d4:ec:98:b0:cc:15:7d:a4:02:
40:68:bd:a0:30:7e:5d:e7:23:4f:64:66:51:e2:7b:83:85:0f:
e2:6e:fe:81:82:10:7e:fd:6f:47:d3:99:e7:72:35:8c:90:5a:
16:6c:fd:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh/ejEcWtSEDa9VZ2u7ceu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYjU5MjkzNjFlMWQwZGUxNjBiODcxZjI5YmRkNWE0MDQw
Y2ExMTEwHhcNMjUwODA2MTMwMjUwWhcNMjUwODA3MTMwMjUwWjAzMTEwLwYDVQQD
Eyg2ZTc4NTMyMzFiYmFkYjZkNDVkNWU5NTk3ZGJjMjAwMGJlZjBmODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0k+Pr7EgtiC8+oJon1dSLqXkxZy
F1zcKfRY408u3BgNVmXY4ElM9IqQ3TVtRdDtjEjOJJePQYiP03ksdxP8zcNvHS8l
3Rat9eazddTA5UMmXdJwk1WEcBazV/OAfOUX+31M8WRduNupT9S5SLhHMjz2CbJk
N2Tlg/U+aJLpwd4vLDJNSecDtdsWH7TI9oDk2OZGokYbD2qEDA1le0erAESjMAQl
vGdnU/O3RVOjupo2vy9uoaot6aw34RaNj1C3x2CvGHc8du2O2q44e0Sqwhus9Uf9
/oEAOx2Z+pfkjCP0bNQjqxZMbgKvRyLWi7PVD/D+zLqhuQSqI1pwaynU+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG54UyMbutttRdXpWX28IAC+8Pg1MB8GA1UdIwQY
MBaAFM61kpNh4dDeFguHHym91aQEDKERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNGRkZWQtYzUxMC00NzdjLThmYWQt
ZjYxNmYwMDk0YjE0LzEvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kNGRkZWQtYzUxMC00NzdjLThmYWQtZjYxNmYwMDk0YjE0
LzEvenJXU2sySGgwTjRXQzRjZktiM1ZwQVFNb1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVqkQtiC
qnOnbg+p9qtdqAx2Tw1mIq1bEktEvvgpvcVF6RgGKhLeSlNXuaX+f7O3HR4Qy/4o
zguLLTWwGEyHbqHPsCZYGVqRCf03sy/fBrqrn4RiT2VjO3eicFCkWqIINzuXtbGB
r/+0Gn5UdIBA69fZjHOZyBwdQQPWh5nvUmyMUNDvm18Qt4p0Hxh13rvY62WyOKSh
9C/Wq+DS0QU6u3xPNcpSNjR7ubqDCkHO7dInnntnj9ASOpS9Sq4X9PVsDd2nfcPX
XUSJurlVQF6o1OyYsMwVfaQCQGi9oDB+XecjT2RmUeJ7g4UP4m7+gYIQfv1vR9OZ
53I1jJBaFmz9yw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:33:07 2025 by rpki-client