Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: 80ugJDUoCLoBNbRyPE8tTFGn9j4X4WjyEhvEv7Co9aY=
Subject key identifier: 07:C4:67:B6:B5:BE:B4:50:D3:0C:56:ED:0D:81:0F:64:37:83:6C:53
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 019A71B7EED484C74DE9B53F761BF6684B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 15DF
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: JXgNV8Fp4v+MMa5mg+8SDpEDK+GLeSH6p19cEOebNf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ee:d4:84:c7:4d:e9:b5:3f:76:1b:f6:68:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=07c467b6b5beb450d30c56ed0d810f6437836c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:c0:67:c5:aa:9e:bc:07:f8:93:f9:e9:f3:
19:35:f9:b9:72:5a:e5:bc:33:08:11:f4:53:5a:58:
38:b5:3c:ac:57:ee:f0:ea:a3:9f:92:1d:9c:8b:e0:
8f:2d:f7:63:cb:42:2e:a8:4f:77:ec:04:72:83:d3:
66:b8:94:3b:41:98:be:2e:7d:09:ab:32:3f:65:bd:
5d:84:b0:d7:f8:7d:53:5b:e1:e1:27:2c:f7:be:0e:
66:66:a0:e3:db:51:d6:38:cf:3b:f6:15:84:e3:ca:
41:a6:ed:4e:22:59:01:c7:e1:54:f1:9e:b6:e8:e8:
59:d8:e2:eb:ea:eb:91:c0:bb:f6:ff:48:72:d0:0d:
fc:b9:bd:eb:db:9e:c5:f5:1b:ca:f7:c2:36:b4:24:
b6:de:83:a1:a0:ca:48:26:0d:20:18:af:59:11:75:
52:8a:1a:7e:f3:63:32:fc:4b:7e:d5:59:a8:fb:f6:
c6:6f:90:77:a6:7d:8b:31:06:04:f5:c6:43:86:cd:
c3:fc:29:bb:2b:63:ac:f4:3b:f8:ed:56:a8:ea:12:
f3:49:2e:40:53:16:1e:e7:fd:89:4a:d9:7b:9d:59:
9a:34:ea:c0:83:8b:f7:52:c4:3a:99:43:4f:46:9a:
92:54:4c:b9:cb:b9:67:57:31:e8:54:f2:30:f5:ba:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C4:67:B6:B5:BE:B4:50:D3:0C:56:ED:0D:81:0F:64:37:83:6C:53
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:41:91:f5:5d:db:62:01:70:84:2b:79:d6:20:02:96:ac:fc:
92:46:01:37:e9:36:76:68:6a:84:b1:9a:cc:0b:87:a7:96:c3:
a9:76:0e:f0:70:d4:03:af:d5:26:67:31:8a:6c:13:6e:53:91:
9a:c3:d3:4b:6f:cb:e9:84:6a:60:f0:6f:de:0d:fa:2c:bc:4b:
a7:7c:95:20:7e:be:8b:e8:9c:91:71:7c:36:4d:81:87:8a:d8:
04:83:15:4e:f5:5a:69:54:2b:1e:bd:b6:1e:1d:2e:1d:a4:fa:
48:eb:f8:9f:13:ce:56:4f:5d:ae:44:52:89:b9:4c:4c:af:27:
8e:f6:f1:33:40:00:2b:38:58:95:be:9a:5d:6e:d6:c1:fb:f6:
7b:9b:35:09:5e:f6:16:32:92:4d:b7:bf:f9:90:d5:00:06:d0:
74:ad:65:93:28:2a:6b:9b:13:d0:9e:a1:89:ca:f6:46:5f:d8:
fb:30:b0:09:6f:58:62:de:0b:a0:27:1d:db:eb:e9:1c:aa:39:
ee:f6:c5:14:29:a8:c9:f0:f6:6a:b9:48:91:62:20:60:21:65:
57:fd:62:43:b6:a0:07:da:6b:f6:60:7c:0d:93:20:64:51:5a:
33:84:6c:fe:f4:8c:11:76:9c:a0:fb:32:fc:87:48:d6:11:9c:
11:d2:25:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+7UhMdN6bU/dhv2aEseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWI1MWU4ZTU4Y2MxNGVkOWNiMzU3MzFhZjFkMDExZGJl
MmUxMmUwHhcNMjUxMTExMDcwMTEwWhcNMjUxMTEyMDcwMTEwWjAzMTEwLwYDVQQD
EygwN2M0NjdiNmI1YmViNDUwZDMwYzU2ZWQwZDgxMGY2NDM3ODM2YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyHAZ8WqnrwH+JP56fMZNfm5clrl
vDMIEfRTWlg4tTysV+7w6qOfkh2ci+CPLfdjy0IuqE937ARyg9NmuJQ7QZi+Ln0J
qzI/Zb1dhLDX+H1TW+HhJyz3vg5mZqDj21HWOM879hWE48pBpu1OIlkBx+FU8Z62
6OhZ2OLr6uuRwLv2/0hy0A38ub3r257F9RvK98I2tCS23oOhoMpIJg0gGK9ZEXVS
ihp+82My/Et+1Vmo+/bGb5B3pn2LMQYE9cZDhs3D/Cm7K2Os9Dv47Vao6hLzSS5A
UxYe5/2JStl7nVmaNOrAg4v3UsQ6mUNPRpqSVEy5y7lnVzHoVPIw9bo0fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfEZ7a1vrRQ0wxW7Q2BD2Q3g2xTMB8GA1UdIwQY
MBaAFGWrUejljMFO2cs1cxrx0BHb4uEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYt
NDg4YTIyMjk5Y2ExLzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYtNDg4YTIyMjk5Y2Ex
LzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkGR9V3b
YgFwhCt51iAClqz8kkYBN+k2dmhqhLGazAuHp5bDqXYO8HDUA6/VJmcximwTblOR
msPTS2/L6YRqYPBv3g36LLxLp3yVIH6+i+ickXF8Nk2Bh4rYBIMVTvVaaVQrHr22
Hh0uHaT6SOv4nxPOVk9drkRSiblMTK8njvbxM0AAKzhYlb6aXW7Wwfv2e5s1CV72
FjKSTbe/+ZDVAAbQdK1lkygqa5sT0J6hicr2Rl/Y+zCwCW9YYt4LoCcd2+vpHKo5
7vbFFCmoyfD2arlIkWIgYCFlV/1iQ7agB9pr9mB8DZMgZFFaM4Rs/vSMEXacoPsy
/IdI1hGcEdIlYA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:31 2025 by rpki-client