Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
File: z173qHDUsUjrHU9P5mbtUFSt6uw.mft (raw, json)
Hash identifier: Xx3qpcN5QLpy/qKQPbZs7fQkZyuv7Uo8VX0BigUKmwo=
Subject key identifier: F4:13:F2:17:15:7E:08:01:B2:B0:AA:E7:03:FC:0A:96:6E:8F:50:7B
Authority key identifier: CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
Certificate issuer: /CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Certificate serial: 019A4D741420A382FCBDC9573026E998E413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
Manifest number: 0E82
Signing time: Tue 04 Nov 2025 06:00:44 +0000
Manifest this update: Tue 04 Nov 2025 06:00:44 +0000
Manifest next update: Wed 05 Nov 2025 06:00:44 +0000
Files and hashes: 1: IG4gE3aIFq9mnBnmOmJWzHSGMI8.roa (hash: NFuQufrafEIV/iOKny+LtVRYLA0EJDhZvV8121UO+Jg=)
2: eR5EevbZ-cAP0rVdhXMRAu6R2DU.roa (hash: MFuL2PsX4eqPDfqD1XxiSAvnb9qnnDDl40Z3XSXhTPs=)
3: z173qHDUsUjrHU9P5mbtUFSt6uw.crl (hash: EnI/I5EHR9HqCVm1mldILRwoFU+9owk4GSql+TH8g+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:14:20:a3:82:fc:bd:c9:57:30:26:e9:98:e4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5ef7a870d4b148eb1d4f4fe666ed5054adeaec
Validity
Not Before: Nov 4 06:00:44 2025 GMT
Not After : Nov 5 06:00:44 2025 GMT
Subject: CN=f413f217157e0801b2b0aae703fc0a966e8f507b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:a1:0c:d6:66:0e:84:0b:fc:87:b9:05:13:
d8:8c:5a:a1:27:89:f7:15:70:cf:30:cd:1d:db:f2:
dc:3a:a6:a9:83:96:5a:a5:0c:92:32:cb:72:6c:11:
17:1a:dc:54:07:63:58:b2:28:ba:ab:aa:ee:93:53:
93:06:c7:3a:a5:96:07:fe:47:f6:b3:fa:03:9e:8b:
e8:36:31:9b:74:d9:bc:8e:50:fc:9f:a0:49:9a:ff:
a7:20:22:cb:b3:85:d6:a3:de:df:76:4c:38:eb:61:
77:55:4d:b2:22:29:33:2c:30:34:7e:81:42:82:20:
f9:d8:5a:f0:51:b9:3c:fb:aa:49:b4:f0:30:75:ce:
af:bb:ee:e4:8b:32:74:31:5c:02:c3:88:c5:d0:eb:
64:3c:59:ca:c9:15:b8:20:c4:2f:80:e8:1c:c3:76:
f7:d6:34:2d:75:70:82:70:f4:f1:d9:ff:d7:a2:64:
8c:2d:5a:f7:eb:d5:19:25:73:2a:82:e9:de:f4:18:
56:44:2b:c5:1a:c7:88:54:1f:49:64:22:4b:d6:d2:
d9:bc:c9:d7:c3:4d:90:07:3e:bf:8b:f6:d7:32:89:
02:da:62:58:c0:07:e2:20:c9:f6:47:84:4b:a2:08:
fb:9d:5f:12:f3:e1:d3:48:40:4f:09:0e:ed:9c:86:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:13:F2:17:15:7E:08:01:B2:B0:AA:E7:03:FC:0A:96:6E:8F:50:7B
X509v3 Authority Key Identifier:
keyid:CF:5E:F7:A8:70:D4:B1:48:EB:1D:4F:4F:E6:66:ED:50:54:AD:EA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z173qHDUsUjrHU9P5mbtUFSt6uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/631521-d4b7-4f10-8c06-87aa285f807c/1/z173qHDUsUjrHU9P5mbtUFSt6uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:30:c5:c2:64:03:86:26:67:af:66:f8:ca:13:05:ec:d4:94:
ed:9f:72:04:69:47:59:10:52:49:b2:13:b3:7d:84:aa:c2:e0:
12:1e:a8:88:5c:4a:ca:b3:93:46:3b:03:03:60:8a:1b:39:2f:
65:7c:88:8e:91:8d:c5:f9:5b:88:7c:a0:5a:ff:09:d9:f3:43:
16:37:42:28:16:01:ee:b8:6a:c2:c1:2b:16:d2:49:e8:66:8c:
39:b1:0d:b4:16:fe:9d:2a:0e:41:f9:94:7e:28:6e:46:d7:0b:
b9:c5:a1:1c:c2:59:80:a6:d4:f0:eb:1b:a7:a3:83:67:b4:a4:
0f:77:44:5b:54:fd:8a:7d:a4:d3:ee:29:56:2c:93:a7:ae:37:
98:3f:9b:d2:60:e9:0d:ae:48:66:f3:0d:7e:b6:c0:3a:ed:70:
0f:e9:4b:22:d5:00:9e:de:36:13:e6:2d:07:d9:46:f9:a7:cf:
f4:c7:5f:4e:eb:bb:10:e2:1a:c4:63:bf:b2:4f:b5:85:96:40:
33:1e:65:34:cc:c8:74:64:5c:6b:f5:c8:48:aa:74:55:f7:36:
47:28:62:93:3d:ae:36:db:c0:b2:80:0f:7c:03:ae:78:b1:eb:
78:84:9b:bd:89:54:77:12:93:e4:7c:31:2a:b2:b9:c6:f2:e0:
db:73:8a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdBQgo4L8vclXMCbpmOQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNWVmN2E4NzBkNGIxNDhlYjFkNGY0ZmU2NjZlZDUwNTRh
ZGVhZWMwHhcNMjUxMTA0MDYwMDQ0WhcNMjUxMTA1MDYwMDQ0WjAzMTEwLwYDVQQD
EyhmNDEzZjIxNzE1N2UwODAxYjJiMGFhZTcwM2ZjMGE5NjZlOGY1MDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXihDNZmDoQL/Ie5BRPYjFqhJ4n3
FXDPMM0d2/LcOqapg5ZapQySMstybBEXGtxUB2NYsii6q6ruk1OTBsc6pZYH/kf2
s/oDnovoNjGbdNm8jlD8n6BJmv+nICLLs4XWo97fdkw462F3VU2yIikzLDA0foFC
giD52FrwUbk8+6pJtPAwdc6vu+7kizJ0MVwCw4jF0OtkPFnKyRW4IMQvgOgcw3b3
1jQtdXCCcPTx2f/XomSMLVr369UZJXMqgune9BhWRCvFGseIVB9JZCJL1tLZvMnX
w02QBz6/i/bXMokC2mJYwAfiIMn2R4RLogj7nV8S8+HTSEBPCQ7tnIbLNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQT8hcVfggBsrCq5wP8CpZuj1B7MB8GA1UdIwQY
MBaAFM9e96hw1LFI6x1PT+Zm7VBUrersMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYt
ODdhYTI4NWY4MDdjLzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzE1MjEtZDRiNy00ZjEwLThjMDYtODdhYTI4NWY4MDdj
LzEvejE3M3FIRFVzVWpySFU5UDVtYnRVRlN0NnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzDFwmQD
hiZnr2b4yhMF7NSU7Z9yBGlHWRBSSbITs32EqsLgEh6oiFxKyrOTRjsDA2CKGzkv
ZXyIjpGNxflbiHygWv8J2fNDFjdCKBYB7rhqwsErFtJJ6GaMObENtBb+nSoOQfmU
fihuRtcLucWhHMJZgKbU8Osbp6ODZ7SkD3dEW1T9in2k0+4pViyTp643mD+b0mDp
Da5IZvMNfrbAOu1wD+lLItUAnt42E+YtB9lG+afP9MdfTuu7EOIaxGO/sk+1hZZA
Mx5lNMzIdGRca/XISKp0Vfc2Ryhikz2uNtvAsoAPfAOueLHreISbvYlUdxKT5Hwx
KrK5xvLg23OKJw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:58 2025 by rpki-client