
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
File: zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft (raw, json)
Hash identifier: 6NDcJBabzQEwSoW5zn9mKYcp+HiP+D5MLjSGN15KVi0=
Subject key identifier: 13:97:24:8F:A9:35:50:21:5D:95:1A:A6:94:74:99:7A:9D:E2:D1:3E
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 019A53AD5D2BF94414CE3B9BBE2B25174794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
Manifest number: 0F05
Signing time: Wed 05 Nov 2025 11:01:01 +0000
Manifest this update: Wed 05 Nov 2025 11:01:01 +0000
Manifest next update: Thu 06 Nov 2025 11:01:01 +0000
Files and hashes: 1: 5ea7Hkm0SW34L_8iukOhDVRtzJ4.roa (hash: Bh3wXEj5kxu51D9giUL6vfcOwVLV+BQ8j2j4rv4c3bE=)
2: 61CGxBWFgu_6xuYgR1277EhVuzs.roa (hash: t6Nd1VjYIV20csBMiqnpmXOcSB9kKbylaX7adVu2vls=)
3: 7c8KIjSnGxKP_FSTpFh9a0C5fVE.roa (hash: R8gbeupipBj48kbjD7lgb4EsVwsAH7m0IhgzRcQdmw8=)
4: 9BUOtYErHOT5nI5nnBmuo2Xdhug.roa (hash: Rs1YqGK7wrwo+RArMme5ww//40nOwuUee+FJ/tQiW00=)
5: CKeZaw-Qsg1dwRuBfHs9k7cSkp0.roa (hash: X7vY45oxc1G+Q/eP9qyuj1KWi47wOFpcyf1QqrA/I6Y=)
6: D5NQpu5-XP7jwNLgcsTcP0-T1A4.roa (hash: F7K7cw4FjgwEqGR+eV393zGp3EyvWxLXuzKz/aV3UiU=)
7: DIU4HLo0odnNllaYW94Ugml67ao.roa (hash: elEgGwxKy2v1vcrJC1eNzcVW73q4S32+WPctUa6Z0K8=)
8: HaalQUyXvekLLFnkPZZhVXqikr4.roa (hash: XVCqv4pgA5TkYnMXtfYT+wYqQ9BP8Hx4XqIqmyrpnqM=)
9: I3Uc8V053uFj5fj5J5RtiNnfgAo.roa (hash: b0A6+wRSSjRxTpI7kD0JYl/s4YiHTAyHBtwpK4TyBS4=)
10: IDcUsurlIwrk2WfAK13tr-PGuOQ.roa (hash: AS568Huqr9TIELMxZnCn0Pucs1mbdYattJ1q0ZLCI8Q=)
11: MeLRa18cJ_Fr_vy3ERuKQLVa_0Q.roa (hash: Scu6X5cdyahgZ+2xGCs9z4LVBnY/p6cK2ML/Vi6GaqU=)
12: MiTA2g-pLC5ZITOxl98HfdnHekI.roa (hash: ajv9+oi0sq8cFKqa2qx0dulW0VzD6Ty3LJc1Y6gB5hY=)
13: MxNe7yMIRX8ebs7AVsbBiRpllSA.roa (hash: pDnjp0EQggea9pBhHKuRbHKwdSKEn82KNKgB36PKwns=)
14: NE0WcAfrm3AM0n_95V8TnkNIjoo.roa (hash: oyngUFK0MUVw4Hw/iJMJwYVrpWdijuhgrFx7ZId5pc8=)
15: Vba_vy_gwygAN2fTwJxaF4ivvBw.roa (hash: Z+9Xq0ov0lS/kdfLrxE4yAQ08sBSc/4CSrd0q0gSQrw=)
16: WxskEzg_eTHvSuEBzAA22sakZZs.roa (hash: K1rJfDbGKj9KRp/YpH3B7J7gJ4JwFgTcq0fjTVjZ8TI=)
17: Xg9_0g6AruUdP8btK8A9lf_QDLw.roa (hash: cxSEZ+jVJKv+PAN+nsq2/IV6m//3vIXQqyGSkhq450c=)
18: _H31n0VX0qjA9cl9U_c9mZ2xI1E.roa (hash: 9x5PNhcIWt5ORofTPwWxEuoMULwiuxPd2nsCtzIW4tE=)
19: _Zs7m0Z1Y90BrPP3tkPHvTJwqVk.roa (hash: mEAwbBpKFR8+vrzzxNINj1VfPPY5QI9i1nTpJQXBCrA=)
20: bEmneW6IzbBtlPPMQx-0yJ93b-w.roa (hash: 3HfO6P2h6i8rds9y/v29pBIa5L9isoyl8PZHwa6DXZk=)
21: iwfWWtgox8qcV4q-oY9df9ePkJk.roa (hash: wvZUb4xHBU3yTd72sjISxWXalHKpPByN4rolNUsyfnU=)
22: mEEWlcL66O1D2m6UzXsYcjPwHpM.roa (hash: OlSkOPCbGhpW88wg888nDOtrJj0r6KHmiNy+klmxw10=)
23: mkE0rfBz9XK1VAIoApt7LXJKNDE.roa (hash: Xre+OBBlG8debUYJtnMWBCRl/O0gB4VgCPVdhkg/XqA=)
24: mm2sLdm3Ci3nySsnIMNPJSmUyA0.roa (hash: 43TegAHBHBerogm1ABmnvKv6AvzkKlq7nZVNU15KNys=)
25: nFq8HhaaOHIxGwNGZWneSgnTDeQ.roa (hash: XcrtvYg+nckzsoLJ7c2APLoMZ/zvgXA8RQMD/XcqPuE=)
26: o_gD51WjTdSOmKxnpsPgpEBLg78.roa (hash: H7WMFNZl3PvojqlRR1S79qBLlRCJXsbv7bPNvj5FCYc=)
27: pLK7-mZXJstNxcxjt9sS_pyvO7E.roa (hash: l2czXwxJ/GmxKDcG6MEQVwlIdyFg6kzSfJH9MRzPVAY=)
28: qA60hfzIHo5QRJ_hLhIVl9p2lrY.roa (hash: nlkxnu+zDhTWvt5yhhFwQ8By8uFeDVCXgbF+abS8Yvg=)
29: wgAwgA9CWZfJlg6IK-_1FTAJDm0.roa (hash: JlkKB8e21bvqYK7kidn0kF/N+/RVOlD5ZFe2Okfz8J8=)
30: zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl (hash: ZndKPtQGQxKCpsXBuapb5ZFUH5UIPHxSmzG701JwRUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:5d:2b:f9:44:14:ce:3b:9b:be:2b:25:17:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Nov 5 11:01:01 2025 GMT
Not After : Nov 6 11:01:01 2025 GMT
Subject: CN=1397248fa93550215d951aa69474997a9de2d13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:de:7c:04:63:4b:87:67:bb:c6:e2:d0:81:
b0:c2:1c:b0:d7:e8:03:4f:25:c4:f8:6d:64:ea:87:
cc:4f:b6:8d:9d:13:86:fc:3b:e3:40:74:1d:e3:17:
82:04:0f:eb:7e:0e:91:59:2f:dc:8b:fe:eb:73:1f:
4e:55:db:3c:7b:ca:ad:45:c6:26:27:a9:fb:67:62:
ca:a2:fc:00:58:a5:9e:64:65:d8:6f:f8:12:b3:b9:
34:1f:15:35:27:f2:a8:a9:51:f9:10:d5:8a:67:c3:
26:1b:59:e4:6f:f4:20:a1:15:c6:3e:83:cb:00:b4:
3e:fc:c2:f8:2f:b0:8f:10:d8:62:eb:b7:13:59:1e:
bd:7c:0a:fc:08:73:9e:95:8e:8f:cb:e5:03:d5:e9:
1d:3f:a1:11:6f:f7:cc:27:96:df:a4:57:b2:07:65:
ab:9d:cd:fa:c1:ed:a9:81:98:4f:18:da:a0:45:bd:
fd:f0:a7:c8:e6:81:50:a2:fc:65:54:23:cf:b9:36:
f6:78:f1:b8:29:d1:26:74:11:c4:65:ca:36:c4:fe:
ed:e3:e8:24:57:00:7b:ba:85:43:79:7b:b3:05:78:
07:50:c2:ae:93:ed:f6:d0:79:78:44:5b:28:53:ab:
9c:fe:2e:31:62:1a:02:e1:17:af:8f:b3:10:40:60:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:97:24:8F:A9:35:50:21:5D:95:1A:A6:94:74:99:7A:9D:E2:D1:3E
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:86:c4:c9:71:62:43:a1:9c:3d:5f:be:d8:e6:50:5b:2c:08:
6e:6b:61:fc:22:43:ae:c3:45:ba:68:36:dc:9c:45:87:68:d0:
bb:47:bc:69:cf:96:f0:55:56:11:d3:fd:48:a9:20:32:d4:48:
a5:c5:21:12:8e:a0:58:7c:19:97:1b:03:55:ec:06:31:5e:83:
c3:37:cc:25:e5:66:74:f4:ff:21:7c:1e:2e:ed:45:03:8f:72:
b2:f4:28:82:7f:16:6e:78:26:c4:87:2d:fc:2b:f2:28:90:7f:
d0:72:dd:01:42:8a:c2:50:4e:41:f2:1b:37:a9:cd:0c:b7:fb:
4e:3e:1a:f9:10:7c:85:f3:91:e1:9f:c8:42:1b:78:9a:51:fe:
95:17:36:8d:2f:51:29:c6:70:57:c7:9e:2e:15:a0:10:74:e1:
4d:f4:21:71:f9:d1:2a:3a:8e:2c:dd:6c:db:ff:b2:e4:4e:62:
de:9d:0b:ff:52:98:09:af:0e:0e:c3:42:7e:d8:7e:df:7e:1f:
60:ff:a9:b7:f2:78:a3:c5:2c:8d:54:0b:74:6c:b4:81:5d:b0:
45:5a:50:83:a6:03:65:f6:10:ad:ed:87:05:7e:2f:0d:bd:ce:
9f:ba:56:37:cc:1a:38:f2:3d:fa:12:98:4d:c2:a5:48:93:b9:
21:6f:3a:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrV0r+UQUzjubvislF0eUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjUxMTA1MTEwMTAxWhcNMjUxMTA2MTEwMTAxWjAzMTEwLwYDVQQD
EygxMzk3MjQ4ZmE5MzU1MDIxNWQ5NTFhYTY5NDc0OTk3YTlkZTJkMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8DefARjS4dnu8bi0IGwwhyw1+gD
TyXE+G1k6ofMT7aNnROG/DvjQHQd4xeCBA/rfg6RWS/ci/7rcx9OVds8e8qtRcYm
J6n7Z2LKovwAWKWeZGXYb/gSs7k0HxU1J/KoqVH5ENWKZ8MmG1nkb/QgoRXGPoPL
ALQ+/ML4L7CPENhi67cTWR69fAr8CHOelY6Py+UD1ekdP6ERb/fMJ5bfpFeyB2Wr
nc36we2pgZhPGNqgRb398KfI5oFQovxlVCPPuTb2ePG4KdEmdBHEZco2xP7t4+gk
VwB7uoVDeXuzBXgHUMKuk+320Hl4RFsoU6uc/i4xYhoC4Revj7MQQGBHlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOXJI+pNVAhXZUappR0mXqd4tE+MB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIbEyXFi
Q6GcPV++2OZQWywIbmth/CJDrsNFumg23JxFh2jQu0e8ac+W8FVWEdP9SKkgMtRI
pcUhEo6gWHwZlxsDVewGMV6DwzfMJeVmdPT/IXweLu1FA49ysvQogn8WbngmxIct
/CvyKJB/0HLdAUKKwlBOQfIbN6nNDLf7Tj4a+RB8hfOR4Z/IQht4mlH+lRc2jS9R
KcZwV8eeLhWgEHThTfQhcfnRKjqOLN1s2/+y5E5i3p0L/1KYCa8ODsNCfth+334f
YP+pt/J4o8UsjVQLdGy0gV2wRVpQg6YDZfYQre2HBX4vDb3On7pWN8waOPI9+hKY
TcKlSJO5IW86lg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:11:44 2025 by rpki-client