Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
File: l0Zhyxw45jvXi9aysdaGhqVBW_U.mft (raw, json)
Hash identifier: O8NhvmB53qe7zQZA09afh9Iq+/b6u67EYeRDs+IK7qY=
Subject key identifier: 7C:E2:85:E0:81:63:96:9C:32:E3:BF:D6:2F:4A:5B:C5:A2:6C:16:A3
Authority key identifier: 97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
Certificate issuer: /CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Certificate serial: 019A57C0747117AB18F50CE989056CDF0D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
Manifest number: 1718
Signing time: Thu 06 Nov 2025 06:00:21 +0000
Manifest this update: Thu 06 Nov 2025 06:00:21 +0000
Manifest next update: Fri 07 Nov 2025 06:00:21 +0000
Files and hashes: 1: 8JaSgFcH49HBn461hhPZA96Q-_Q.roa (hash: Sl2mmYD1LNi2hjNI4HitJOBuVcHLDBiqw8TvUNCwTsk=)
2: FCpUh7uMn_jm2jqwI2G_dP05phQ.roa (hash: FZn5zdTsckuUQUO6IXLrYuHkdb4oQF7csC6+blEeSeA=)
3: ObPAzx9vpUSewz6yMRbiwqDj92c.roa (hash: Suax9ATaK3pYDGwH5LS+lZKVuglD1H0ACxKzg26DT6o=)
4: l0Zhyxw45jvXi9aysdaGhqVBW_U.crl (hash: 6MN4WY3rXyzZkWvZIBtgD2VwWU9N4ge/PuKPU2/5+z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:c0:74:71:17:ab:18:f5:0c:e9:89:05:6c:df:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974661cb1c38e63bd78bd6b2b1d68686a5415bf5
Validity
Not Before: Nov 6 06:00:21 2025 GMT
Not After : Nov 7 06:00:21 2025 GMT
Subject: CN=7ce285e08163969c32e3bfd62f4a5bc5a26c16a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:64:9a:6a:8b:41:ac:1d:a7:08:a5:65:0f:53:
95:bc:f1:2a:ea:d5:f1:d5:d5:a2:44:df:b2:21:11:
30:85:9b:6b:0b:b5:5d:d1:39:b7:ed:93:18:37:51:
99:bc:48:d6:c1:e6:66:0f:3f:b2:e9:6f:bc:7a:bf:
05:b7:93:f1:aa:25:ab:f0:6d:03:be:5b:5c:18:33:
8e:84:b3:2b:30:55:0a:e5:a2:f4:23:83:86:81:a9:
9c:7f:44:b8:07:86:17:b3:13:c1:22:be:36:b0:b7:
96:af:98:64:a2:63:ef:1e:fe:9b:35:2e:eb:6c:00:
de:92:2f:f9:6a:ca:48:5e:87:72:86:cf:26:66:59:
08:6e:d2:a7:92:b4:2a:78:79:54:98:58:80:9b:4b:
ff:fe:89:9f:b1:47:6e:e9:53:a1:99:bd:11:39:71:
71:15:77:0f:96:96:55:5b:19:e3:ed:38:23:7e:7f:
e7:f3:ed:38:dd:bc:84:d8:63:e6:67:96:2d:cb:05:
df:de:18:8a:bd:ef:6d:f3:ab:cb:ac:22:79:d7:3c:
f7:bb:29:83:b4:39:88:a3:c7:c5:ff:fc:78:b4:30:
e0:0c:31:18:99:8d:92:84:68:30:ee:fd:af:a0:24:
7d:e5:b9:b3:26:49:ea:67:e1:da:ed:2b:05:40:10:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E2:85:E0:81:63:96:9C:32:E3:BF:D6:2F:4A:5B:C5:A2:6C:16:A3
X509v3 Authority Key Identifier:
keyid:97:46:61:CB:1C:38:E6:3B:D7:8B:D6:B2:B1:D6:86:86:A5:41:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Zhyxw45jvXi9aysdaGhqVBW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a0bf3e-3645-4e16-bca9-8adac17e90ae/1/l0Zhyxw45jvXi9aysdaGhqVBW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:72:30:cc:1d:12:2d:18:da:7a:96:7d:47:b5:0f:31:c1:
dd:1f:b2:fc:9b:42:a9:ff:ae:27:4a:10:5b:f5:0a:11:b6:d4:
79:ac:61:19:4c:ba:22:32:e1:ee:ce:ad:ba:11:42:76:4f:94:
7d:eb:8e:55:66:bd:2e:8d:57:79:aa:1a:5e:93:cf:52:4b:b7:
29:42:5a:41:d6:66:a3:29:e1:57:50:c4:22:e6:98:f4:19:37:
86:f7:aa:5e:e9:3c:8e:51:3a:67:b2:ad:c6:07:7e:81:4e:2e:
bc:54:12:58:a9:a0:19:88:19:ff:dd:a0:0d:e3:78:e5:cd:09:
9f:6a:86:c5:82:86:98:10:78:01:99:f7:e3:9a:8c:c8:de:b0:
b6:85:9c:55:59:8b:b7:15:fd:49:d7:65:03:44:30:e1:03:57:
51:6f:31:dd:c9:5b:45:5b:1b:07:51:bc:39:87:77:7d:dc:fb:
ee:39:26:90:06:5d:77:dc:d3:d6:94:fa:7b:60:1a:e4:99:4f:
77:02:be:8a:1c:15:64:f8:6c:86:dc:4a:dc:2a:1e:64:0d:6c:
43:f9:21:80:3f:ff:a5:2a:a8:4f:16:77:27:5b:1f:a8:a7:38:
16:a2:3d:13:ae:cb:16:b3:f0:a0:89:19:3c:5a:93:03:e1:4c:
2d:f6:45:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpXwHRxF6sY9QzpiQVs3w0vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDY2MWNiMWMzOGU2M2JkNzhiZDZiMmIxZDY4Njg2YTU0
MTViZjUwHhcNMjUxMTA2MDYwMDIxWhcNMjUxMTA3MDYwMDIxWjAzMTEwLwYDVQQD
Eyg3Y2UyODVlMDgxNjM5NjljMzJlM2JmZDYyZjRhNWJjNWEyNmMxNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmSaaotBrB2nCKVlD1OVvPEq6tXx
1dWiRN+yIREwhZtrC7Vd0Tm37ZMYN1GZvEjWweZmDz+y6W+8er8Ft5PxqiWr8G0D
vltcGDOOhLMrMFUK5aL0I4OGgamcf0S4B4YXsxPBIr42sLeWr5hkomPvHv6bNS7r
bADeki/5aspIXodyhs8mZlkIbtKnkrQqeHlUmFiAm0v//omfsUdu6VOhmb0ROXFx
FXcPlpZVWxnj7Tgjfn/n8+043byE2GPmZ5YtywXf3hiKve9t86vLrCJ51zz3uymD
tDmIo8fF//x4tDDgDDEYmY2ShGgw7v2voCR95bmzJknqZ+Ha7SsFQBCqywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHziheCBY5acMuO/1i9KW8WibBajMB8GA1UdIwQY
MBaAFJdGYcscOOY714vWsrHWhoalQVv1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTkt
OGFkYWMxN2U5MGFlLzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9hMGJmM2UtMzY0NS00ZTE2LWJjYTktOGFkYWMxN2U5MGFl
LzEvbDBaaHl4dzQ1anZYaTlheXNkYUdocVZCV19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKVyMMwd
Ei0Y2nqWfUe1DzHB3R+y/JtCqf+uJ0oQW/UKEbbUeaxhGUy6IjLh7s6tuhFCdk+U
feuOVWa9Lo1XeaoaXpPPUku3KUJaQdZmoynhV1DEIuaY9Bk3hveqXuk8jlE6Z7Kt
xgd+gU4uvFQSWKmgGYgZ/92gDeN45c0Jn2qGxYKGmBB4AZn345qMyN6wtoWcVVmL
txX9SddlA0Qw4QNXUW8x3clbRVsbB1G8OYd3fdz77jkmkAZdd9zT1pT6e2Aa5JlP
dwK+ihwVZPhshtxK3CoeZA1sQ/khgD//pSqoTxZ3J1sfqKc4FqI9E67LFrPwoIkZ
PFqTA+FMLfZF3g==
-----END CERTIFICATE-----
Generated at Thu Nov 6 09:07:46 2025 by rpki-client