Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json)
Hash identifier: vQsNC0JVKRjF7Iah/OjOxuppE8jVKE8OG+oOjkPqAhY=
Subject key identifier: 15:18:C0:5F:A9:04:F9:E7:08:F7:04:F4:52:5C:59:82:11:3B:AB:44
Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979
Certificate serial: 019A4F62FC79AE95139E053171E62A3AAE55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
Manifest number: 0A15
Signing time: Tue 04 Nov 2025 15:01:18 +0000
Manifest this update: Tue 04 Nov 2025 15:01:18 +0000
Manifest next update: Wed 05 Nov 2025 15:01:18 +0000
Files and hashes: 1: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: wap+ogkY9V+VKX1XAnu1kTYbB1xBGBvUENuf5lOax1Q=)
2: sPYhG40WeNs4D0fdLBoDQKTV_Eo.roa (hash: bDpPm+4aHa819Yue2u9g5oa22BJIhkWyJ4aj3sH99kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:fc:79:ae:95:13:9e:05:31:71:e6:2a:3a:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979
Validity
Not Before: Nov 4 15:01:18 2025 GMT
Not After : Nov 5 15:01:18 2025 GMT
Subject: CN=1518c05fa904f9e708f704f4525c5982113bab44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:7e:5f:e4:85:03:de:28:46:20:f1:ca:c4:
4a:59:f6:3e:e8:89:5a:b8:a7:7f:fd:9b:d1:71:b4:
d7:a5:3a:90:ac:ed:86:c5:67:a2:96:6f:ca:b8:be:
eb:25:72:20:d2:5f:bf:bf:9d:47:fe:e6:a8:0f:a4:
31:ec:22:44:3e:75:90:9a:33:fe:e9:bd:3e:c3:8f:
96:78:cc:51:9e:ad:4c:1e:85:e2:90:42:b2:76:33:
45:8e:2a:c3:f2:6a:63:af:a1:59:0c:c2:3c:ab:8d:
86:a8:43:b0:73:e0:05:3c:32:e9:61:0e:7b:00:d7:
72:70:94:f6:af:cc:4b:fc:c5:83:94:ba:fd:c6:fc:
d1:73:88:2a:3b:e3:be:9c:93:ae:04:9e:de:12:47:
35:83:8c:44:36:17:41:c9:d7:f7:a9:38:2e:f2:b0:
d4:31:36:8b:4a:5e:52:09:82:f8:ce:a7:bc:88:ed:
3b:9d:40:ab:3f:e1:22:e7:94:26:08:7b:c2:fa:27:
cd:c8:df:cb:2b:a6:97:72:d9:46:51:8f:ec:19:99:
bb:89:3e:30:62:bf:13:28:b5:28:00:37:21:fb:cd:
5f:ba:be:0b:e2:41:8c:f7:d3:01:2e:f6:bb:bd:92:
fb:63:c1:a3:3c:65:99:e8:a5:8e:d8:01:84:c6:8f:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:18:C0:5F:A9:04:F9:E7:08:F7:04:F4:52:5C:59:82:11:3B:AB:44
X509v3 Authority Key Identifier:
keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c4:9a:04:9b:a3:56:9c:f9:2d:44:ab:15:55:92:97:20:42:
05:c2:0d:61:d1:41:fe:14:35:14:6c:d5:17:7c:1f:26:cd:86:
b7:04:22:90:91:d0:f5:90:01:0e:81:6e:67:72:d6:2c:6f:72:
61:bb:66:46:64:00:f8:a8:74:80:cf:c1:0f:ba:ea:c8:88:85:
7e:0a:a5:36:66:cc:4b:e4:e3:0e:5d:24:d1:85:d9:2f:a2:64:
ba:e2:39:e1:66:3b:7b:c0:ca:d1:e6:1b:b7:8c:05:a4:b4:9d:
7f:c3:f5:95:f0:08:cc:10:ad:f5:50:25:01:cc:b1:32:f6:9a:
f0:09:37:f2:e3:2a:cd:d1:9b:b8:88:8a:7a:6f:85:b7:0d:09:
66:ef:09:c5:86:81:ba:ff:fb:d7:02:25:22:a8:66:20:f2:4d:
83:66:5d:c7:0f:1f:93:5f:31:23:9c:fe:b8:ba:1c:4a:80:27:
e1:9f:9c:37:04:e0:5c:43:6f:13:03:99:51:c7:5a:5e:1e:0f:
d7:d3:81:f9:70:81:73:31:de:4a:df:2f:a9:3c:35:33:19:93:
15:0a:1c:76:69:d4:c6:d1:1a:09:b7:a4:33:76:7e:55:df:4b:
01:3f:c1:20:34:80:74:9b:bc:a9:1e:a0:e9:c7:b0:1d:2b:20:
95:f5:e7:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYvx5rpUTngUxceYqOq5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3
MmY5NzkwHhcNMjUxMTA0MTUwMTE4WhcNMjUxMTA1MTUwMTE4WjAzMTEwLwYDVQQD
EygxNTE4YzA1ZmE5MDRmOWU3MDhmNzA0ZjQ1MjVjNTk4MjExM2JhYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DV+X+SFA94oRiDxysRKWfY+6Ila
uKd//ZvRcbTXpTqQrO2GxWeilm/KuL7rJXIg0l+/v51H/uaoD6Qx7CJEPnWQmjP+
6b0+w4+WeMxRnq1MHoXikEKydjNFjirD8mpjr6FZDMI8q42GqEOwc+AFPDLpYQ57
ANdycJT2r8xL/MWDlLr9xvzRc4gqO+O+nJOuBJ7eEkc1g4xENhdBydf3qTgu8rDU
MTaLSl5SCYL4zqe8iO07nUCrP+Ei55QmCHvC+ifNyN/LK6aXctlGUY/sGZm7iT4w
Yr8TKLUoADch+81fur4L4kGM99MBLva7vZL7Y8GjPGWZ6KWO2AGExo/yeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUYwF+pBPnnCPcE9FJcWYIRO6tEMB8GA1UdIwQY
MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt
NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi
LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsSaBJuj
Vpz5LUSrFVWSlyBCBcINYdFB/hQ1FGzVF3wfJs2GtwQikJHQ9ZABDoFuZ3LWLG9y
YbtmRmQA+Kh0gM/BD7rqyIiFfgqlNmbMS+TjDl0k0YXZL6JkuuI54WY7e8DK0eYb
t4wFpLSdf8P1lfAIzBCt9VAlAcyxMvaa8Ak38uMqzdGbuIiKem+Ftw0JZu8JxYaB
uv/71wIlIqhmIPJNg2Zdxw8fk18xI5z+uLocSoAn4Z+cNwTgXENvEwOZUcdaXh4P
19OB+XCBczHeSt8vqTw1MxmTFQocdmnUxtEaCbekM3Z+Vd9LAT/BIDSAdJu8qR6g
6cewHSsglfXnvA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:31 2025 by rpki-client