Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: 30eV1K6nAP6NDTpBDKUvE8HFkkQnkJ51JyzMwmhO2Ik=
Subject key identifier: FA:16:D1:10:EB:5B:31:B6:1B:32:F6:64:2D:46:FA:73:E3:DE:F9:36
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 019A4E18BCD1912A9188E1AA52A044C152A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 04D2
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: BBmeL_y8dFZnZVsyof-5HOdh9rM.roa (hash: l+ylGzhBzhl0JipTi0n6QhNTnBVAyKKM7zWtPfY+z3s=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: BKMTp/0l82CfA0kmAWFJz6mFqNa7XtuQwQUzxiGR37o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bc:d1:91:2a:91:88:e1:aa:52:a0:44:c1:52:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=fa16d110eb5b31b61b32f6642d46fa73e3def936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:3c:c1:27:63:32:d3:8e:a4:cb:8b:13:8e:
10:f3:2e:e5:b5:07:a1:b6:8e:ec:ec:ff:7d:a3:6f:
af:aa:2f:72:ed:8c:b9:da:1c:c5:93:16:5d:b7:ed:
28:96:12:72:45:fb:eb:a5:e9:97:66:14:8e:00:93:
41:7a:74:4a:84:17:66:6d:0e:8f:44:ac:97:18:e7:
18:2a:bb:10:bf:87:12:a0:b0:d1:26:5e:8d:77:b8:
63:33:ce:16:08:19:4e:f2:4c:e7:42:16:5d:1c:bf:
8b:47:b0:b1:2a:44:0c:8c:a2:13:0f:ee:8f:6b:ca:
97:c8:67:90:49:42:a0:95:8c:60:8b:13:fb:11:e5:
c4:4f:8e:1c:fe:74:3f:37:5d:87:3d:a5:e2:75:1b:
80:b5:e4:36:ab:1c:f6:b9:03:c1:62:95:5d:fc:3a:
0d:fb:a9:21:c1:5f:6c:7f:1a:a4:54:33:20:97:d5:
f2:a3:77:8a:7a:26:44:b6:40:c7:8c:3d:ce:86:0d:
2c:db:68:d4:b4:59:0d:ec:6e:cf:fb:40:74:d7:fc:
9a:5c:c2:0c:3c:27:69:0e:94:31:19:a4:b1:4f:5f:
55:5f:dd:cd:18:ac:e2:02:cb:8e:90:ef:a6:73:39:
98:d1:ca:07:9c:42:c2:a4:84:7e:65:3c:65:41:d6:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:16:D1:10:EB:5B:31:B6:1B:32:F6:64:2D:46:FA:73:E3:DE:F9:36
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:73:af:b0:26:6b:22:c8:5e:88:c7:32:9a:37:84:d5:3b:5f:
5d:dc:d2:43:ed:3c:35:3b:75:c7:f3:44:6b:80:34:fa:c6:d4:
1e:a7:63:a9:c8:00:dd:a0:2c:d1:88:dd:9c:d4:e0:95:74:ed:
33:1d:3a:fc:88:10:89:b4:9f:38:b9:39:19:c3:f3:f5:0e:b0:
8e:d3:3b:c9:99:0d:26:4e:4a:c3:68:69:2c:7f:91:ad:db:dd:
08:2d:9d:2b:86:e6:7c:1c:86:33:24:67:e0:73:d5:88:92:d7:
64:9a:7a:41:e2:b9:1e:e7:7c:26:5a:7c:10:9d:cb:48:28:5e:
63:53:ad:e2:ba:e2:36:77:50:f4:fd:91:d8:62:2a:08:fa:7f:
61:e3:9d:b2:a8:38:80:2f:4f:b7:55:67:ef:07:6b:16:3f:98:
49:ff:93:01:57:60:9c:4d:a4:bb:eb:ed:9a:45:06:82:50:0b:
d4:e2:86:4b:d4:7a:ed:d8:de:65:7d:18:db:f1:56:f6:4b:74:
db:cd:f7:8b:c0:de:24:a7:d9:a2:9d:75:ac:e7:09:e9:11:60:
68:cd:ad:1d:2e:a4:ad:39:34:98:c6:9a:d0:da:9c:2e:ae:66:
af:39:43:6a:31:0e:e5:9a:7c:69:f6:1a:96:b5:e9:5d:78:ac:
0c:ea:a7:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGLzRkSqRiOGqUqBEwVKlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjQyYjFmNWRkNzNhZjdkM2FkMDU0ODdlMDg2MDAxZGZm
OWIyZTcwHhcNMjUxMTA0MDkwMDM1WhcNMjUxMTA1MDkwMDM1WjAzMTEwLwYDVQQD
EyhmYTE2ZDExMGViNWIzMWI2MWIzMmY2NjQyZDQ2ZmE3M2UzZGVmOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsic8wSdjMtOOpMuLE44Q8y7ltQeh
to7s7P99o2+vqi9y7Yy52hzFkxZdt+0olhJyRfvrpemXZhSOAJNBenRKhBdmbQ6P
RKyXGOcYKrsQv4cSoLDRJl6Nd7hjM84WCBlO8kznQhZdHL+LR7CxKkQMjKITD+6P
a8qXyGeQSUKglYxgixP7EeXET44c/nQ/N12HPaXidRuAteQ2qxz2uQPBYpVd/DoN
+6khwV9sfxqkVDMgl9Xyo3eKeiZEtkDHjD3Ohg0s22jUtFkN7G7P+0B01/yaXMIM
PCdpDpQxGaSxT19VX93NGKziAsuOkO+mczmY0coHnELCpIR+ZTxlQdbzUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoW0RDrWzG2GzL2ZC1G+nPj3vk2MB8GA1UdIwQY
MBaAFMxkKx9d1zr3060FSH4IYAHf+bLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xZTRhMWMtYjE0Yy00NmI1LTg3Y2Mt
NWQxNGEwZmY2ZGVlLzEvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8xZTRhMWMtYjE0Yy00NmI1LTg3Y2MtNWQxNGEwZmY2ZGVl
LzEvekdRckgxM1hPdmZUclFWSWZnaGdBZF81c3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3OvsCZr
IsheiMcymjeE1TtfXdzSQ+08NTt1x/NEa4A0+sbUHqdjqcgA3aAs0YjdnNTglXTt
Mx06/IgQibSfOLk5GcPz9Q6wjtM7yZkNJk5Kw2hpLH+RrdvdCC2dK4bmfByGMyRn
4HPViJLXZJp6QeK5Hud8Jlp8EJ3LSCheY1Ot4rriNndQ9P2R2GIqCPp/YeOdsqg4
gC9Pt1Vn7wdrFj+YSf+TAVdgnE2ku+vtmkUGglAL1OKGS9R67djeZX0Y2/FW9kt0
2833i8DeJKfZop11rOcJ6RFgaM2tHS6krTk0mMaa0NqcLq5mrzlDajEO5Zp8afYa
lrXpXXisDOqneA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 11:17:57 2025 by rpki-client