Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
File: ZAGt7bycjxxs8jifx_dB7fTxnyw.mft (raw, json)
Hash identifier: IobK+F1bZN1fhwXjU/u+QLAq/KBLyVRbA+1vmqy+O1o=
Subject key identifier: DD:E6:E7:A0:E7:98:ED:F1:80:65:C9:5E:FA:ED:EF:F4:2B:AF:66:77
Authority key identifier: 64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
Certificate issuer: /CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Certificate serial: 019A4E18CE26B10BC5D7B4BF01542071C44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
Manifest number: 0D68
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: HlHW7XBX8ZvIde3YcV5P6ReshMk.roa (hash: 6qh5uJT+VrASAo+GezCNr4MsU+LUfxw3LvGNNOPJtbA=)
2: ZAGt7bycjxxs8jifx_dB7fTxnyw.crl (hash: 5LR8HoKYBpIaZnJw9EFuVFXs6sKRy+ZH5hV7X5exStU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ce:26:b1:0b:c5:d7:b4:bf:01:54:20:71:c4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6401adedbc9c8f1c6cf2389fc7f741edf4f19f2c
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=dde6e7a0e798edf18065c95efaedeff42baf6677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:21:ec:fd:53:9b:ab:ce:e9:d2:d9:b9:6d:
41:c8:bc:16:46:0d:57:f8:82:a9:0c:50:9e:55:46:
cc:b6:75:0f:c6:0c:47:28:87:6b:10:34:cf:e4:84:
a1:f5:fe:36:4a:bc:95:83:b0:c0:09:58:1e:74:e8:
d2:f0:1d:a4:bf:c4:e7:21:98:bb:d2:7d:83:9c:6c:
f3:54:dc:6f:31:8c:fc:20:ac:99:01:03:b6:71:93:
7c:b3:22:01:81:bf:c7:3e:11:8e:92:0a:f5:3b:58:
0a:67:1d:ba:21:e3:d5:e2:97:61:88:af:95:9b:23:
4f:b2:23:f9:8b:60:dd:f2:0b:f4:9d:c8:e3:ea:3f:
3b:cf:7b:1c:a2:2c:33:c2:7b:fe:ac:13:91:0c:be:
3f:75:1d:e0:ec:9c:f0:e1:30:ee:17:6f:4b:b7:30:
f2:92:a9:d3:dd:7b:3b:c3:e2:54:f3:a3:66:d2:56:
80:23:67:9a:3b:f1:48:32:0c:1f:14:e5:fd:21:6f:
51:b7:e5:60:e0:d0:80:28:72:47:74:a4:54:e9:ab:
f8:51:af:a7:eb:52:94:96:99:57:03:98:67:cf:12:
68:4a:f1:14:a5:0d:5b:f7:0c:26:41:f3:3f:55:1c:
58:f1:8d:40:de:bd:78:cf:dc:b4:ca:c4:e1:95:08:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:E7:A0:E7:98:ED:F1:80:65:C9:5E:FA:ED:EF:F4:2B:AF:66:77
X509v3 Authority Key Identifier:
keyid:64:01:AD:ED:BC:9C:8F:1C:6C:F2:38:9F:C7:F7:41:ED:F4:F1:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAGt7bycjxxs8jifx_dB7fTxnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/98c860-5298-4846-beaa-356c096bc6f9/1/ZAGt7bycjxxs8jifx_dB7fTxnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dc:6a:4a:e3:e8:44:22:d7:57:33:51:05:b8:6e:8b:75:65:
db:63:8f:85:b9:7f:df:cd:61:b5:63:4e:91:0c:b4:5a:16:df:
67:e7:fa:06:b7:36:47:0e:b2:54:4e:84:f3:04:63:0c:40:9a:
34:13:a8:f1:7f:27:fb:eb:b8:f0:74:82:e3:a2:d0:23:c4:ee:
92:97:49:ab:0e:aa:05:2b:fb:d4:42:79:20:4f:c7:ea:de:ce:
3f:f3:11:e1:ff:82:c7:c3:ce:6b:4d:a4:4c:fb:18:67:cf:9a:
70:e3:c9:5c:85:f0:58:32:f9:56:2e:79:c5:73:1c:07:03:63:
88:b5:9b:79:78:6a:98:43:ae:4c:d1:8d:cd:67:2d:4a:33:f4:
e6:09:ea:7c:b2:21:74:da:bc:df:48:9b:63:81:d8:c7:b5:2b:
11:6c:65:dc:9b:ea:dc:a1:7c:2a:31:78:9f:2f:36:f9:00:68:
28:b1:e4:c4:70:ca:d6:b4:aa:a7:66:28:25:75:ea:de:0a:60:
94:f3:70:05:37:e5:70:a4:99:38:c8:c0:0f:a8:2a:96:c9:79:
fa:29:fa:ff:a2:b9:67:83:f5:4c:3c:6e:b3:1a:5d:30:3b:ab:
c3:e2:c0:cd:12:ae:fc:53:50:e5:c2:32:b2:82:0d:b3:41:a5:
74:be:ea:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGM4msQvF17S/AVQgccRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MDFhZGVkYmM5YzhmMWM2Y2YyMzg5ZmM3Zjc0MWVkZjRm
MTlmMmMwHhcNMjUxMTA0MDkwMDM5WhcNMjUxMTA1MDkwMDM5WjAzMTEwLwYDVQQD
EyhkZGU2ZTdhMGU3OThlZGYxODA2NWM5NWVmYWVkZWZmNDJiYWY2Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugsh7P1Tm6vO6dLZuW1ByLwWRg1X
+IKpDFCeVUbMtnUPxgxHKIdrEDTP5ISh9f42SryVg7DACVgedOjS8B2kv8TnIZi7
0n2DnGzzVNxvMYz8IKyZAQO2cZN8syIBgb/HPhGOkgr1O1gKZx26IePV4pdhiK+V
myNPsiP5i2Dd8gv0ncjj6j87z3scoiwzwnv+rBORDL4/dR3g7Jzw4TDuF29LtzDy
kqnT3Xs7w+JU86Nm0laAI2eaO/FIMgwfFOX9IW9Rt+Vg4NCAKHJHdKRU6av4Ua+n
61KUlplXA5hnzxJoSvEUpQ1b9wwmQfM/VRxY8Y1A3r14z9y0ysThlQil2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3m56DnmO3xgGXJXvrt7/Qrr2Z3MB8GA1UdIwQY
MBaAFGQBre28nI8cbPI4n8f3Qe308Z8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEt
MzU2YzA5NmJjNmY5LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85OGM4NjAtNTI5OC00ODQ2LWJlYWEtMzU2YzA5NmJjNmY5
LzEvWkFHdDdieWNqeHhzOGppZnhfZEI3ZlR4bnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNxqSuPo
RCLXVzNRBbhui3Vl22OPhbl/381htWNOkQy0WhbfZ+f6Brc2Rw6yVE6E8wRjDECa
NBOo8X8n++u48HSC46LQI8TukpdJqw6qBSv71EJ5IE/H6t7OP/MR4f+Cx8POa02k
TPsYZ8+acOPJXIXwWDL5Vi55xXMcBwNjiLWbeXhqmEOuTNGNzWctSjP05gnqfLIh
dNq830ibY4HYx7UrEWxl3Jvq3KF8KjF4ny82+QBoKLHkxHDK1rSqp2YoJXXq3gpg
lPNwBTflcKSZOMjAD6gqlsl5+in6/6K5Z4P1TDxusxpdMDurw+LAzRKu/FNQ5cIy
soINs0GldL7qtA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:34 2025 by rpki-client