Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier: oBXvCQyaf8a1I6AvmKWx7OPyrBNirXGTcwuHRgmtfm4=
Subject key identifier: 85:DA:D3:AC:9B:87:E1:EA:61:2D:87:0F:07:12:2C:47:AC:5F:DD:26
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 019A50070436317DB2E3181291A5C194E1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 18:00:28 +0000
Manifest this update: Tue 04 Nov 2025 18:00:28 +0000
Manifest next update: Wed 05 Nov 2025 18:00:28 +0000
Files and hashes: 1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: LlLt1S8aK1VlSXTsTQbmm330rfkvjrsmed5zRV50prU=)
2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:04:36:31:7d:b2:e3:18:12:91:a5:c1:94:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: Nov 4 18:00:28 2025 GMT
Not After : Nov 5 18:00:28 2025 GMT
Subject: CN=85dad3ac9b87e1ea612d870f07122c47ac5fdd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:d3:04:a0:2f:ab:21:57:96:ef:30:61:67:
7e:29:6e:de:b5:6d:39:3f:c6:57:a6:4a:b5:a6:4d:
f8:e4:dd:57:c2:1d:75:a7:8d:e7:ce:dd:6d:41:ea:
a7:41:2b:d9:47:80:a6:37:41:7e:73:04:23:c9:34:
fd:bd:67:6c:ec:ce:e3:81:33:6a:ff:40:24:6a:2a:
be:40:75:4c:c0:f5:f9:12:78:f0:0b:69:27:eb:4e:
a6:2f:d5:3e:4e:6d:17:37:62:7b:b2:a3:cf:26:4d:
76:d2:15:5c:35:0f:70:af:c9:1f:0e:dd:66:8e:94:
04:a5:fd:7c:af:57:8c:b1:2b:e3:9f:1a:97:c8:ce:
c5:47:6f:3d:09:30:16:14:09:9c:55:a2:0f:9e:d3:
12:21:15:72:f9:74:7b:1c:f7:7e:9e:1e:de:8a:40:
b7:25:e5:1a:d6:8c:d1:d2:5e:20:78:17:cd:8f:a3:
c1:19:44:bf:a9:ad:48:79:0b:85:af:bb:61:90:19:
7f:2b:b6:95:33:c2:23:dc:b7:26:60:98:fb:80:b0:
04:df:12:b0:a7:0d:0f:ae:18:83:d2:03:1e:0b:b4:
a1:98:8e:30:a0:9c:c6:69:9e:5a:ba:b0:69:fe:f8:
56:9d:29:18:84:58:c8:71:11:45:64:53:27:69:cd:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DA:D3:AC:9B:87:E1:EA:61:2D:87:0F:07:12:2C:47:AC:5F:DD:26
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1c:2f:d3:24:2c:51:03:b7:25:8a:d8:70:55:d1:f8:10:1b:
43:08:4b:6b:8c:b4:dc:53:8a:56:96:b7:6c:f7:87:e6:6f:4a:
9b:a0:b8:8e:16:d9:7e:59:1e:c3:c7:14:5b:b9:e6:ac:b3:3a:
f1:59:dd:39:6a:0c:e2:2e:5b:5a:50:5c:f0:73:d0:04:a6:ac:
69:e4:cc:f8:e5:23:db:60:36:b6:08:d4:d1:26:c3:ad:dd:55:
aa:e0:34:e7:64:70:94:6f:88:8d:b8:ac:5d:3d:b1:f5:3d:01:
3b:a3:3d:da:73:e7:a4:ff:16:92:b9:e7:76:f5:61:11:79:5e:
35:f0:a7:a8:b8:3a:7d:13:e1:dc:43:e1:a8:b0:d9:ba:ed:97:
ad:77:ef:56:0a:63:ff:e5:a4:2f:b6:da:ee:3b:d0:02:08:c3:
ae:e9:b1:2a:49:86:45:de:58:ea:76:61:cf:29:48:8c:0f:e4:
cb:58:6d:4b:fb:13:29:21:85:37:d2:e5:ad:a0:bb:08:9c:eb:
45:0e:4a:16:65:79:b3:e8:66:72:85:26:07:9f:28:0a:7b:ac:
da:d1:ad:2e:03:76:41:d4:c0:5d:17:e0:0d:cc:77:1f:8e:21:
11:5b:6c:b8:db:61:9e:b3:4e:b4:40:4d:14:51:09:5c:0e:94:
57:c6:02:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBwQ2MX2y4xgSkaXBlOHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OGRhOTJmOTliNTQwN2YyOGEyZjM2NjEzZTg0OTQ0N2E5
M2Y2YjkwHhcNMjUxMTA0MTgwMDI4WhcNMjUxMTA1MTgwMDI4WjAzMTEwLwYDVQQD
Eyg4NWRhZDNhYzliODdlMWVhNjEyZDg3MGYwNzEyMmM0N2FjNWZkZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn3TBKAvqyFXlu8wYWd+KW7etW05
P8ZXpkq1pk345N1Xwh11p43nzt1tQeqnQSvZR4CmN0F+cwQjyTT9vWds7M7jgTNq
/0Akaiq+QHVMwPX5EnjwC2kn606mL9U+Tm0XN2J7sqPPJk120hVcNQ9wr8kfDt1m
jpQEpf18r1eMsSvjnxqXyM7FR289CTAWFAmcVaIPntMSIRVy+XR7HPd+nh7eikC3
JeUa1ozR0l4geBfNj6PBGUS/qa1IeQuFr7thkBl/K7aVM8Ij3LcmYJj7gLAE3xKw
pw0PrhiD0gMeC7ShmI4woJzGaZ5aurBp/vhWnSkYhFjIcRFFZFMnac2FEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXa06ybh+HqYS2HDwcSLEesX90mMB8GA1UdIwQY
MBaAFGaNqS+ZtUB/KKLzZhPoSUR6k/a5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEt
ZGM4ZTgzZTYyOWYyLzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jNmUwMGUtODFjZC00YzAwLWFmZjEtZGM4ZTgzZTYyOWYy
LzEvWm8ycEw1bTFRSDhvb3ZObUUtaEpSSHFUOXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBwv0yQs
UQO3JYrYcFXR+BAbQwhLa4y03FOKVpa3bPeH5m9Km6C4jhbZflkew8cUW7nmrLM6
8VndOWoM4i5bWlBc8HPQBKasaeTM+OUj22A2tgjU0SbDrd1VquA052RwlG+Ijbis
XT2x9T0BO6M92nPnpP8WkrnndvVhEXleNfCnqLg6fRPh3EPhqLDZuu2XrXfvVgpj
/+WkL7ba7jvQAgjDrumxKkmGRd5Y6nZhzylIjA/ky1htS/sTKSGFN9LlraC7CJzr
RQ5KFmV5s+hmcoUmB58oCnus2tGtLgN2QdTAXRfgDcx3H44hEVtsuNthnrNOtEBN
FFEJXA6UV8YCKg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:42 2025 by rpki-client