Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
File: ZapFG3g_yRoEuC-C8VbwtIlxXck.mft (raw, json)
Hash identifier: izk4ayJDB+o3sequO2mT95O6KHHaJoKQy2n0wCsYFwc=
Subject key identifier: 1A:23:2A:26:1C:8A:79:BB:CA:9B:1A:3E:D6:82:12:75:1B:63:7B:5F
Authority key identifier: 65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
Certificate issuer: /CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Certificate serial: 019A4F2B7269B50020D896742D6DAC930D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
Manifest number: 0FDA
Signing time: Tue 04 Nov 2025 14:00:38 +0000
Manifest this update: Tue 04 Nov 2025 14:00:38 +0000
Manifest next update: Wed 05 Nov 2025 14:00:38 +0000
Files and hashes: 1: NyUxlhwtEkrfLySazfcIwYLq2uE.roa (hash: nbUnPx7laXVoJ1K+1QDprr0SXDSN8ACCPbp85TtzNB8=)
2: ZapFG3g_yRoEuC-C8VbwtIlxXck.crl (hash: 2QM+DmnH2DwleFC59znlw2pyruqyrnyXufgUhupZ8gc=)
3: v7McWGmC6x_jve8hO4dvjOUzDnU.roa (hash: pEIX+2zdNDbAjQYiraeVFcmiQz+0WDogJaC+EZR5c2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:72:69:b5:00:20:d8:96:74:2d:6d:ac:93:0d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65aa451b783fc91a04b82f82f156f0b489715dc9
Validity
Not Before: Nov 4 14:00:38 2025 GMT
Not After : Nov 5 14:00:38 2025 GMT
Subject: CN=1a232a261c8a79bbca9b1a3ed68212751b637b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:de:49:4b:f7:e7:62:23:9b:8e:1b:12:2d:
3d:4e:02:93:8f:78:a8:d2:2e:43:1c:37:ed:83:6a:
43:8c:f0:d6:e2:56:9b:28:3d:48:e0:b0:b5:3c:e6:
3e:2c:c1:63:81:fd:f7:0f:4a:25:91:c5:a7:7e:22:
dc:d0:42:52:5d:67:71:e4:b4:d3:c6:50:db:c7:d3:
f5:47:40:68:3e:13:bd:83:1c:bf:0b:36:b7:f7:6d:
1e:cf:17:69:36:c8:a3:0f:72:4b:a9:79:3f:bf:8a:
cd:5b:02:21:4d:dd:76:82:61:7e:d0:cd:a4:07:3c:
49:6f:1f:c5:da:6b:f1:ae:4a:79:38:32:12:65:95:
4e:f8:a8:6d:6f:6a:e5:cd:46:2e:90:82:dd:31:a9:
cd:89:50:8f:7c:03:e9:a1:04:ff:5f:7e:cf:c4:db:
63:66:da:1b:52:f8:b0:09:e9:47:f7:1c:0a:e1:14:
07:eb:3c:72:4f:74:60:a7:21:3c:1c:37:19:02:3e:
b5:5d:f4:eb:4c:d5:21:80:27:37:62:32:f6:cf:f3:
8a:83:b8:95:a0:28:ec:71:73:36:6a:fb:06:3c:aa:
07:84:a5:fd:6a:f6:35:8b:bf:51:fe:72:3e:19:d9:
98:6d:a1:d5:c1:ff:18:5a:de:fb:39:8f:a0:38:f8:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:23:2A:26:1C:8A:79:BB:CA:9B:1A:3E:D6:82:12:75:1B:63:7B:5F
X509v3 Authority Key Identifier:
keyid:65:AA:45:1B:78:3F:C9:1A:04:B8:2F:82:F1:56:F0:B4:89:71:5D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZapFG3g_yRoEuC-C8VbwtIlxXck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e1ef-75b4-4fe9-871b-3bc3df7a298a/1/ZapFG3g_yRoEuC-C8VbwtIlxXck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ca:98:c7:f9:03:bb:34:19:d1:ca:9b:27:53:ee:83:e2:c1:
32:b3:54:7f:ad:85:31:8a:40:96:c2:1d:3f:73:94:1b:65:b1:
5a:ef:a6:e3:00:7d:76:25:b3:fb:d9:37:1e:6c:30:ba:1b:d7:
0b:3a:1c:84:2e:06:aa:c6:f9:6f:49:1a:0e:0e:01:5b:e8:6c:
c3:3b:e3:7c:b0:0d:01:b3:3a:05:58:d7:53:d6:c0:5b:2c:b6:
6f:33:7e:d8:68:bf:f3:a4:31:4f:b7:39:98:6a:8e:ff:d2:d6:
ac:54:bf:d7:aa:45:79:ad:e1:f1:88:2a:75:55:85:ce:93:ce:
e1:b8:6b:60:62:5a:80:dc:cf:23:7c:39:7a:35:a1:4c:dc:c1:
40:eb:c0:31:ac:0e:43:0f:9d:03:08:6d:93:c3:de:ec:de:ce:
fa:72:91:e5:b8:56:2c:e4:6d:e0:da:e8:dd:fd:4a:32:ad:e5:
67:56:14:46:5b:dc:86:2f:9e:ef:82:4c:64:ca:aa:a9:f0:44:
e4:7d:01:be:10:70:db:e6:9c:78:57:74:ba:0f:b7:e5:3f:1d:
ba:bd:5c:29:0e:eb:e7:f5:ce:48:58:4f:75:35:22:da:1b:c4:
00:ae:2d:e0:cd:46:e5:f0:a6:3f:fc:22:77:85:9c:49:29:88:
0b:86:7c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:48 2025 by rpki-client