Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
File: 0ZF4u0phFOq5i-AEeMx_E7CtICo.mft (raw, json)
Hash identifier: H+iaA9rTC/JaDEI6EuDRn1Nva3RbOMRVhG1eH7jFkXE=
Subject key identifier: 12:78:BB:B1:EC:8B:FB:09:C4:08:08:38:4F:13:FA:F5:6A:DE:98:65
Authority key identifier: D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
Certificate issuer: /CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Certificate serial: 019A5299DEC77A5E91DBC785F125743EC2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
Manifest number: 1660
Signing time: Wed 05 Nov 2025 06:00:06 +0000
Manifest this update: Wed 05 Nov 2025 06:00:06 +0000
Manifest next update: Thu 06 Nov 2025 06:00:06 +0000
Files and hashes: 1: 0ZF4u0phFOq5i-AEeMx_E7CtICo.crl (hash: DO2M9JLIau6ot0r9EZrb69zIzS5PUek+OukU74oa2EY=)
2: TEBgTQfk8TTugPkvZbXZbIl-DzU.roa (hash: X8lYrbJg3w88o9ijNvVCeQ1nN96EvrcQjM0+hkV2C/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:de:c7:7a:5e:91:db:c7:85:f1:25:74:3e:c2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d19178bb4a6114eab98be00478cc7f13b0ad202a
Validity
Not Before: Nov 5 06:00:06 2025 GMT
Not After : Nov 6 06:00:06 2025 GMT
Subject: CN=1278bbb1ec8bfb09c40808384f13faf56ade9865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:45:03:31:b7:9b:c0:71:c3:c1:db:a4:33:
07:11:fe:8b:4b:03:6b:63:5a:00:9e:35:7a:37:c0:
18:ca:2d:f4:61:9e:bd:48:2a:e7:90:11:33:7f:96:
b6:91:77:25:9b:f2:77:c4:26:5f:34:a4:66:dc:5f:
c2:f2:28:ab:ab:d3:d5:4b:c8:b6:a2:54:4b:83:7f:
38:b5:de:a4:10:83:c9:c3:fd:44:cd:f9:b7:34:0e:
9b:ad:2e:a9:2e:d7:a6:01:5c:84:a6:b7:e2:9c:27:
3f:bc:95:d5:e4:e0:1f:9a:14:2a:02:b6:50:6a:87:
e5:3e:0a:aa:0d:7c:40:4f:6d:5c:46:36:7c:8f:25:
ea:ed:2e:cf:d3:5d:13:3b:c3:b1:e7:9c:bd:da:63:
d1:93:d5:6e:ba:b8:4e:e8:bc:b3:89:7b:1a:39:47:
93:5d:0d:5e:4d:35:13:09:63:9c:96:d3:99:75:ed:
89:1a:88:a5:7d:b1:4b:eb:de:d7:44:03:0b:34:61:
3e:0d:b1:4f:17:f4:4e:9b:62:dd:2d:4a:b8:8e:43:
fd:ef:4b:ce:27:e8:c3:2e:f0:a8:e4:67:a4:a0:5b:
b8:30:d0:4e:35:41:f7:8e:59:a3:1f:a8:13:94:ca:
67:4b:c6:7a:60:75:c3:b2:02:3e:41:4f:2e:c5:80:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:BB:B1:EC:8B:FB:09:C4:08:08:38:4F:13:FA:F5:6A:DE:98:65
X509v3 Authority Key Identifier:
keyid:D1:91:78:BB:4A:61:14:EA:B9:8B:E0:04:78:CC:7F:13:B0:AD:20:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZF4u0phFOq5i-AEeMx_E7CtICo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/936915-213a-40d9-978b-7f7bab83bda0/1/0ZF4u0phFOq5i-AEeMx_E7CtICo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:96:c1:69:4b:10:32:bd:83:00:8c:78:30:13:a3:ea:59:21:
f4:c7:5a:cc:6c:cf:ed:50:e7:0f:1c:cd:0a:25:51:38:06:8c:
91:ef:bb:f8:08:43:a1:e6:28:06:af:45:bc:86:0e:c1:0f:70:
78:bd:aa:44:dc:66:e8:91:dc:75:30:c9:a3:60:ae:d2:6b:59:
ec:17:19:fd:27:60:f7:c8:88:f3:26:2c:33:62:40:65:5b:7f:
78:05:00:78:40:c6:ec:8d:28:49:48:d1:cb:4f:2c:33:38:db:
40:96:61:55:14:ff:f5:e6:18:df:60:66:f7:82:7a:c3:ad:c9:
b2:df:34:10:aa:de:2c:d1:c8:fb:67:c2:cd:eb:1c:2f:74:da:
68:b4:1b:83:07:6f:18:07:33:27:56:20:6c:ec:54:78:2b:dd:
b0:13:5b:b5:17:bd:3f:26:b1:19:b5:14:25:14:2c:87:22:60:
3a:4f:51:af:51:11:98:9c:0d:60:f8:e7:36:c5:2e:48:ca:d1:
b9:99:56:dc:c6:2f:b9:f7:7b:9c:cd:8d:e2:10:e2:24:da:ec:
35:6a:cf:94:d0:58:5e:b0:28:66:15:31:03:72:00:e3:a0:eb:
91:ce:cc:a4:c2:a3:08:9c:2c:46:8d:c1:50:2d:52:63:b5:50:
2e:1c:d9:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSmd7Hel6R28eF8SV0PsKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTE3OGJiNGE2MTE0ZWFiOThiZTAwNDc4Y2M3ZjEzYjBh
ZDIwMmEwHhcNMjUxMTA1MDYwMDA2WhcNMjUxMTA2MDYwMDA2WjAzMTEwLwYDVQQD
EygxMjc4YmJiMWVjOGJmYjA5YzQwODA4Mzg0ZjEzZmFmNTZhZGU5ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsslFAzG3m8Bxw8HbpDMHEf6LSwNr
Y1oAnjV6N8AYyi30YZ69SCrnkBEzf5a2kXclm/J3xCZfNKRm3F/C8iirq9PVS8i2
olRLg384td6kEIPJw/1Ezfm3NA6brS6pLtemAVyEprfinCc/vJXV5OAfmhQqArZQ
aoflPgqqDXxAT21cRjZ8jyXq7S7P010TO8Ox55y92mPRk9VuurhO6LyziXsaOUeT
XQ1eTTUTCWOcltOZde2JGoilfbFL697XRAMLNGE+DbFPF/ROm2LdLUq4jkP970vO
J+jDLvCo5GekoFu4MNBONUH3jlmjH6gTlMpnS8Z6YHXDsgI+QU8uxYAMVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ4u7Hsi/sJxAgIOE8T+vVq3phlMB8GA1UdIwQY
MBaAFNGReLtKYRTquYvgBHjMfxOwrSAqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGIt
N2Y3YmFiODNiZGEwLzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi85MzY5MTUtMjEzYS00MGQ5LTk3OGItN2Y3YmFiODNiZGEw
LzEvMFpGNHUwcGhGT3E1aS1BRWVNeF9FN0N0SUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJbBaUsQ
Mr2DAIx4MBOj6lkh9MdazGzP7VDnDxzNCiVROAaMke+7+AhDoeYoBq9FvIYOwQ9w
eL2qRNxm6JHcdTDJo2Cu0mtZ7BcZ/Sdg98iI8yYsM2JAZVt/eAUAeEDG7I0oSUjR
y08sMzjbQJZhVRT/9eYY32Bm94J6w63Jst80EKreLNHI+2fCzescL3TaaLQbgwdv
GAczJ1YgbOxUeCvdsBNbtRe9PyaxGbUUJRQshyJgOk9Rr1ERmJwNYPjnNsUuSMrR
uZlW3MYvufd7nM2N4hDiJNrsNWrPlNBYXrAoZhUxA3IA46Drkc7MpMKjCJwsRo3B
UC1SY7VQLhzZYA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:47 2025 by rpki-client