Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: BE/RWJJid2wwwpPSz2uU4qspepYed5fdoRTd4bcChZE=
Subject key identifier: D5:78:96:39:23:1D:B3:CF:8E:EF:F3:AE:A7:FD:57:42:55:14:79:02
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 0199304831ECDBAD69FE704617E17F35FAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0F51
Signing time: Tue 09 Sep 2025 21:01:01 +0000
Manifest this update: Tue 09 Sep 2025 21:01:01 +0000
Manifest next update: Wed 10 Sep 2025 21:01:01 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: e8mRFE63A+ktvdW7KanJIQDRJND4Zate5K3K66jIx1s=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:48:31:ec:db:ad:69:fe:70:46:17:e1:7f:35:fa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: Sep 9 21:01:01 2025 GMT
Not After : Sep 10 21:01:01 2025 GMT
Subject: CN=d5789639231db3cf8eeff3aea7fd574255147902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:f3:d9:cc:04:2b:c9:23:05:2c:11:58:ed:
69:b7:e4:8d:23:04:12:40:ac:b6:6b:26:35:37:35:
76:38:a6:91:cb:07:d0:d8:1d:ff:11:50:c3:24:a7:
25:80:25:a4:52:29:38:25:1d:72:7a:39:73:ab:8a:
b7:13:d0:22:23:01:66:ba:29:da:f3:5f:78:42:61:
f0:c4:24:5e:51:5b:3a:8f:4c:0f:4b:a9:b3:4c:d1:
b8:4d:79:08:d3:9d:d7:7d:90:d8:33:6f:6f:a5:d7:
5b:04:f3:35:f2:4a:75:7f:da:d4:91:ad:09:9c:9a:
52:de:6c:7b:8c:53:72:96:50:54:dc:d9:4a:48:4f:
70:ea:24:11:97:87:40:b5:1f:73:d4:52:f8:e8:64:
82:a6:9c:43:70:b8:b0:b1:4f:e1:ee:41:1f:25:55:
2e:bc:66:d4:2d:cd:ca:0c:e4:8f:98:40:8d:99:ac:
df:f8:a8:86:49:b9:85:51:bb:9c:fb:da:a1:5a:c1:
32:ea:da:da:c0:05:57:d3:b0:37:2c:83:d1:fe:88:
c5:0a:95:52:74:5a:15:68:93:0b:13:1a:c7:0d:9b:
cf:29:62:c8:aa:3f:52:ab:34:4a:67:75:3c:d9:c2:
24:0c:23:17:f4:1e:56:b5:62:a4:79:af:33:9c:48:
39:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:78:96:39:23:1D:B3:CF:8E:EF:F3:AE:A7:FD:57:42:55:14:79:02
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:44:81:3a:14:d2:bc:92:79:b6:3f:bb:33:f4:73:3a:83:d5:
57:1c:b8:aa:78:07:a1:46:eb:ae:86:c5:a7:e9:6d:67:6f:c2:
d6:9f:ea:2c:b4:84:30:02:46:22:ac:97:87:81:9f:40:3f:05:
ca:8f:d0:ec:37:8f:33:20:c3:cf:e6:14:7c:87:d3:85:57:8c:
18:b8:e5:d2:4c:be:e2:c3:8a:24:c3:0d:7a:e9:cc:19:16:6d:
0b:01:0a:a5:cc:c8:e1:ff:b1:36:e4:34:3a:c5:ff:78:f7:57:
d8:03:4e:a7:6c:16:e1:3c:05:c0:0f:1c:ec:5e:d0:73:a4:a0:
fc:29:a2:c3:e8:c1:78:24:6c:a7:c8:b5:6a:b0:19:5e:b8:91:
e4:dd:22:87:ca:50:0c:4d:4e:4c:4c:02:dc:35:f3:b9:dd:98:
de:e0:ee:c6:fd:1e:9b:27:92:04:6d:d8:3b:d7:a5:65:03:6c:
ff:54:3b:dd:72:16:a0:d8:cb:83:a0:ca:18:52:49:c1:01:57:
d3:5e:26:b0:96:4d:66:5a:ff:23:a1:c7:5c:e5:fd:82:1b:12:
fe:6b:24:d7:95:a7:6a:86:81:d5:28:28:de:fe:25:e3:2a:6e:
2b:e7:5f:3c:66:5c:79:20:d6:78:b3:f2:c4:c9:46:d1:ad:cd:
d1:45:b5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkwSDHs261p/nBGF+F/Nfr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZmI3NzI3ZDY0YTUxOGM3Y2Q0ODVlNDgyM2VlNzhhOWUy
OTEwMDgwHhcNMjUwOTA5MjEwMTAxWhcNMjUwOTEwMjEwMTAxWjAzMTEwLwYDVQQD
EyhkNTc4OTYzOTIzMWRiM2NmOGVlZmYzYWVhN2ZkNTc0MjU1MTQ3OTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQLz2cwEK8kjBSwRWO1pt+SNIwQS
QKy2ayY1NzV2OKaRywfQ2B3/EVDDJKclgCWkUik4JR1yejlzq4q3E9AiIwFmuina
8194QmHwxCReUVs6j0wPS6mzTNG4TXkI053XfZDYM29vpddbBPM18kp1f9rUka0J
nJpS3mx7jFNyllBU3NlKSE9w6iQRl4dAtR9z1FL46GSCppxDcLiwsU/h7kEfJVUu
vGbULc3KDOSPmECNmazf+KiGSbmFUbuc+9qhWsEy6trawAVX07A3LIPR/ojFCpVS
dFoVaJMLExrHDZvPKWLIqj9SqzRKZ3U82cIkDCMX9B5WtWKkea8znEg5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV4ljkjHbPPju/zrqf9V0JVFHkCMB8GA1UdIwQY
MBaAFGb7dyfWSlGMfNSF5II+54qeKRAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4Mzkt
N2MzYmRkYzI5NzhhLzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85OTU0NDktYTkwNS00ZTA2LWI4MzktN2MzYmRkYzI5Nzhh
LzEvWnZ0M0o5WktVWXg4MUlYa2dqN25pcDRwRUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0SBOhTS
vJJ5tj+7M/RzOoPVVxy4qngHoUbrrobFp+ltZ2/C1p/qLLSEMAJGIqyXh4GfQD8F
yo/Q7DePMyDDz+YUfIfThVeMGLjl0ky+4sOKJMMNeunMGRZtCwEKpczI4f+xNuQ0
OsX/ePdX2ANOp2wW4TwFwA8c7F7Qc6Sg/Cmiw+jBeCRsp8i1arAZXriR5N0ih8pQ
DE1OTEwC3DXzud2Y3uDuxv0emyeSBG3YO9elZQNs/1Q73XIWoNjLg6DKGFJJwQFX
014msJZNZlr/I6HHXOX9ghsS/msk15WnaoaB1Sgo3v4l4ypuK+dfPGZceSDWeLPy
xMlG0a3N0UW1/Q==
-----END CERTIFICATE-----
Generated at Tue Sep 9 22:26:47 2025 by rpki-client