Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: ueWRl1xr6fbW+kvILXFhlVG9PV5Ji1gABb5ys9PXLnY=
Subject key identifier: 1D:AC:F6:9C:2C:2D:43:61:10:55:01:4B:8A:A9:05:FD:E0:0B:CF:4E
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 019A52632BBBF5704A464A74C2DBA9832FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 064A
Signing time: Wed 05 Nov 2025 05:00:22 +0000
Manifest this update: Wed 05 Nov 2025 05:00:22 +0000
Manifest next update: Thu 06 Nov 2025 05:00:22 +0000
Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: CF/0LY3EXgsxXCgCMT+qkJERwLu26e1cf7+TyDNzPCc=)
2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:2b:bb:f5:70:4a:46:4a:74:c2:db:a9:83:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Nov 5 05:00:22 2025 GMT
Not After : Nov 6 05:00:22 2025 GMT
Subject: CN=1dacf69c2c2d43611055014b8aa905fde00bcf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:ad:ce:f6:2b:1e:06:8c:23:fd:6c:52:71:
e8:95:77:40:8a:41:a9:a0:23:fc:67:bd:25:d0:b7:
b0:3f:3f:31:41:b4:58:3c:e7:09:af:52:fc:54:e7:
23:a4:f9:af:23:a1:c4:a4:76:5a:f0:64:8f:53:95:
2b:59:33:35:b1:5d:2d:b6:e4:6c:ff:cc:9e:8c:42:
e2:16:a5:c2:3d:b0:28:32:5b:9f:8c:a2:54:31:ee:
13:0a:b2:53:e0:f6:37:40:5a:ef:d9:0d:0c:6c:c8:
b1:28:e1:e6:b9:05:cd:51:44:76:f7:6d:d3:66:c5:
95:95:b6:51:df:6e:a3:a2:f2:3e:13:a5:d9:e2:8c:
0b:1f:b4:63:4c:16:f5:da:67:16:38:ab:9c:e0:73:
8e:4e:65:50:74:a3:0d:90:84:86:70:e3:62:8f:63:
c5:7e:d4:8c:bd:af:0a:5d:da:ea:09:c2:87:45:32:
b5:3f:e4:a8:3a:83:df:2f:7f:79:cc:b5:67:03:02:
df:35:19:39:4e:f0:0a:e3:82:e7:93:41:76:8d:4f:
3f:2b:67:b0:b8:62:48:9a:de:cb:95:fc:e6:ee:b7:
26:87:af:4e:e1:d8:29:34:d0:76:00:66:1a:46:96:
71:c1:02:05:d7:d8:51:73:bf:ad:95:6e:52:85:66:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AC:F6:9C:2C:2D:43:61:10:55:01:4B:8A:A9:05:FD:E0:0B:CF:4E
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:bd:ee:13:f8:04:d0:fd:0b:53:51:0d:96:05:10:02:cb:63:
cd:45:e5:ee:09:3a:3f:7b:bc:1a:18:42:56:66:b2:1f:36:15:
dc:8e:43:f0:44:91:10:7a:2f:62:4b:d3:4e:a0:2a:3b:82:99:
d3:20:a8:eb:5c:d5:32:4c:50:a8:41:c3:53:28:52:67:67:67:
39:14:2f:ec:c3:cd:12:5e:0e:ce:50:74:30:f5:a7:01:50:7e:
5e:3e:63:f7:c9:aa:78:43:b2:81:a6:b7:44:1b:d6:6f:db:3f:
df:da:af:de:d3:50:da:6d:08:5a:6b:fd:41:4b:bf:d6:5f:27:
a1:06:b0:df:46:25:78:d1:21:29:33:29:8b:81:18:c3:6b:bf:
2a:17:9b:a7:28:0a:70:58:48:04:ff:0f:ea:d9:d6:e6:ab:7b:
0f:d7:b4:c1:5f:49:77:cb:a7:d3:69:e2:55:38:21:69:28:3a:
76:53:88:bf:a5:18:03:e4:82:3e:36:9d:50:19:81:fe:d9:8d:
a9:8d:d4:86:60:4d:ae:4b:16:3d:f2:00:0d:36:9d:65:6f:1c:
f4:d9:88:ba:55:0a:1d:4c:4c:d5:e3:2c:c8:f7:99:4e:1f:74:
ba:1f:e5:30:b1:da:95:22:61:f4:71:15:aa:41:2e:3f:63:49:
a6:4a:bd:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSYyu79XBKRkp0wtupgy/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2Njg5MDg3ZTc4Nzk5MDkxNjg3OGRiMjBkNTU1Njg0YzIy
Y2Q5ZDUwHhcNMjUxMTA1MDUwMDIyWhcNMjUxMTA2MDUwMDIyWjAzMTEwLwYDVQQD
EygxZGFjZjY5YzJjMmQ0MzYxMTA1NTAxNGI4YWE5MDVmZGUwMGJjZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvytzvYrHgaMI/1sUnHolXdAikGp
oCP8Z70l0LewPz8xQbRYPOcJr1L8VOcjpPmvI6HEpHZa8GSPU5UrWTM1sV0ttuRs
/8yejELiFqXCPbAoMlufjKJUMe4TCrJT4PY3QFrv2Q0MbMixKOHmuQXNUUR2923T
ZsWVlbZR326jovI+E6XZ4owLH7RjTBb12mcWOKuc4HOOTmVQdKMNkISGcONij2PF
ftSMva8KXdrqCcKHRTK1P+SoOoPfL395zLVnAwLfNRk5TvAK44Lnk0F2jU8/K2ew
uGJImt7Llfzm7rcmh69O4dgpNNB2AGYaRpZxwQIF19hRc7+tlW5ShWZTQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2s9pwsLUNhEFUBS4qpBf3gC89OMB8GA1UdIwQY
MBaAFGZokIfnh5kJFoeNsg1VVoTCLNnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMt
MWU3YzE3NzI4YjUwLzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84MGI0NDItNTAzOS00MDhlLTk4MTMtMWU3YzE3NzI4YjUw
LzEvWm1pUWgtZUhtUWtXaDQyeURWVldoTUlzMmRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh73uE/gE
0P0LU1ENlgUQAstjzUXl7gk6P3u8GhhCVmayHzYV3I5D8ESREHovYkvTTqAqO4KZ
0yCo61zVMkxQqEHDUyhSZ2dnORQv7MPNEl4OzlB0MPWnAVB+Xj5j98mqeEOygaa3
RBvWb9s/39qv3tNQ2m0IWmv9QUu/1l8noQaw30YleNEhKTMpi4EYw2u/KhebpygK
cFhIBP8P6tnW5qt7D9e0wV9Jd8un02niVTghaSg6dlOIv6UYA+SCPjadUBmB/tmN
qY3UhmBNrksWPfIADTadZW8c9NmIulUKHUxM1eMsyPeZTh90uh/lMLHalSJh9HEV
qkEuP2NJpkq9ng==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:40 2025 by rpki-client