Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
File: Ze3JFheq3wwsx_H115bb237YWQ0.mft (raw, json)
Hash identifier: CzyTCH0WYCA4HNqnZ5D2FK54HalRTjnaYtet3M/4r10=
Subject key identifier: 88:B9:1D:78:80:8E:BB:FC:E2:03:CF:D1:FB:FE:C4:1D:30:62:46:2F
Authority key identifier: 65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
Certificate issuer: /CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Certificate serial: 019A7301C10051CF4B81357E87069CAFBBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
Manifest number: 06EA
Signing time: Tue 11 Nov 2025 13:01:26 +0000
Manifest this update: Tue 11 Nov 2025 13:01:26 +0000
Manifest next update: Wed 12 Nov 2025 13:01:26 +0000
Files and hashes: 1: C0Em9awMYVhNg2sMId10Ef0_Qvw.roa (hash: nirBzQQ6k8BEyGM3hSdFnZ+pftgQMVbe2wljIKMV4wk=)
2: Ze3JFheq3wwsx_H115bb237YWQ0.crl (hash: GmuydFRrku+jBh/G2hg9pnFmRNcUTfRRBeNRKwDTaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c1:00:51:cf:4b:81:35:7e:87:06:9c:af:bb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65edc91617aadf0c2cc7f1f5d796dbdb7ed8590d
Validity
Not Before: Nov 11 13:01:26 2025 GMT
Not After : Nov 12 13:01:26 2025 GMT
Subject: CN=88b91d78808ebbfce203cfd1fbfec41d3062462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:87:10:34:e9:e5:09:c7:83:a2:6d:f9:38:
63:9c:24:e2:63:93:9e:32:be:f2:c1:23:29:6a:c7:
fb:a3:4b:e6:21:73:e5:14:4a:91:ad:3a:96:8f:3b:
17:a2:22:7e:03:b7:56:43:8d:ae:0a:89:5b:76:95:
7c:cd:4a:12:85:8c:53:17:63:45:61:9f:93:42:33:
62:4e:da:72:a8:8b:a5:cf:23:b1:60:6f:a8:30:a5:
df:cf:71:c7:2a:e2:25:a7:88:9e:cc:44:f0:d9:d5:
f7:55:23:d1:d0:20:0c:7e:ad:bc:97:1b:3e:42:86:
d4:72:e9:cd:19:5e:f7:30:3a:7a:05:56:b6:e6:3d:
62:7a:6c:41:24:00:a4:8d:2a:7e:56:1e:d0:5f:ce:
cb:5d:18:ef:94:c4:58:fc:55:9d:25:1f:61:69:df:
62:7f:89:a8:75:da:a5:11:17:c8:42:2d:91:cf:f9:
7b:d5:e3:26:ad:e4:a3:49:8a:6f:d0:4d:81:a3:88:
88:6b:11:d3:a0:c3:71:56:bf:d4:ed:e4:12:cb:83:
69:38:9b:e2:56:6a:1e:92:af:f2:19:4c:16:8b:19:
25:90:db:17:5f:7c:24:43:74:d9:fa:a3:5f:66:fb:
28:7f:82:de:96:48:2a:b2:9a:64:d7:96:61:b3:43:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:1D:78:80:8E:BB:FC:E2:03:CF:D1:FB:FE:C4:1D:30:62:46:2F
X509v3 Authority Key Identifier:
keyid:65:ED:C9:16:17:AA:DF:0C:2C:C7:F1:F5:D7:96:DB:DB:7E:D8:59:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ze3JFheq3wwsx_H115bb237YWQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7be02f-28f5-4209-935a-82d8ebe99424/1/Ze3JFheq3wwsx_H115bb237YWQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7c:4c:3b:82:bc:72:95:bb:b0:ef:26:52:fe:e5:2e:20:03:
ba:eb:7b:a4:5b:0e:8a:a5:9a:fe:69:d6:b5:0b:0a:e1:93:cd:
f6:ad:71:48:12:fe:d4:76:69:95:9f:22:e5:8d:61:4e:1a:bf:
a3:07:1f:81:13:92:13:2d:14:55:e8:df:46:a3:54:78:c6:25:
e8:dd:f4:a5:d4:d8:aa:34:19:81:dd:e2:5c:fd:2a:f5:22:1f:
79:6f:e7:aa:fa:b3:9a:84:f7:db:04:12:bb:53:de:9f:13:9b:
99:48:8c:19:56:3e:69:51:45:20:79:b0:63:4c:15:61:ab:8c:
5d:b0:89:74:1f:9d:4e:df:72:e1:04:86:29:b3:5c:73:54:4f:
a3:8c:0d:45:1f:b7:bb:1d:71:6f:a3:6e:b3:d0:48:8e:63:13:
28:f1:d5:4c:2a:49:d3:fc:df:a4:fc:03:47:d9:ca:47:b2:4f:
da:47:c9:a7:ea:08:a2:8f:38:a7:50:33:8c:87:66:d7:41:2c:
e1:04:a5:4c:38:4e:2d:53:a0:74:2b:10:7d:54:bf:17:fb:b6:
1d:23:5d:52:66:ee:28:63:05:59:3e:c6:20:85:13:d2:56:29:
50:7e:29:60:13:32:81:46:c7:2c:66:e1:58:55:d4:a6:2f:5e:
d9:22:91:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAcEAUc9LgTV+hwacr7vCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWRjOTE2MTdhYWRmMGMyY2M3ZjFmNWQ3OTZkYmRiN2Vk
ODU5MGQwHhcNMjUxMTExMTMwMTI2WhcNMjUxMTEyMTMwMTI2WjAzMTEwLwYDVQQD
Eyg4OGI5MWQ3ODgwOGViYmZjZTIwM2NmZDFmYmZlYzQxZDMwNjI0NjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL+HEDTp5QnHg6Jt+ThjnCTiY5Oe
Mr7ywSMpasf7o0vmIXPlFEqRrTqWjzsXoiJ+A7dWQ42uColbdpV8zUoShYxTF2NF
YZ+TQjNiTtpyqIulzyOxYG+oMKXfz3HHKuIlp4iezETw2dX3VSPR0CAMfq28lxs+
QobUcunNGV73MDp6BVa25j1iemxBJACkjSp+Vh7QX87LXRjvlMRY/FWdJR9had9i
f4moddqlERfIQi2Rz/l71eMmreSjSYpv0E2Bo4iIaxHToMNxVr/U7eQSy4NpOJvi
Vmoekq/yGUwWixklkNsXX3wkQ3TZ+qNfZvsof4Lelkgqsppk15Zhs0PvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIi5HXiAjrv84gPP0fv+xB0wYkYvMB8GA1UdIwQY
MBaAFGXtyRYXqt8MLMfx9deW29t+2FkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmUzSkZoZXEzd3dzeF9IMTE1YmIyMzdZV1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83YmUwMmYtMjhmNS00MjA5LTkzNWEt
ODJkOGViZTk5NDI0LzEvWmUzSkZoZXEzd3dzeF9IMTE1YmIyMzdZV1EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83YmUwMmYtMjhmNS00MjA5LTkzNWEtODJkOGViZTk5NDI0
LzEvWmUzSkZoZXEzd3dzeF9IMTE1YmIyMzdZV1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnxMO4K8
cpW7sO8mUv7lLiADuut7pFsOiqWa/mnWtQsK4ZPN9q1xSBL+1HZplZ8i5Y1hThq/
owcfgROSEy0UVejfRqNUeMYl6N30pdTYqjQZgd3iXP0q9SIfeW/nqvqzmoT32wQS
u1PenxObmUiMGVY+aVFFIHmwY0wVYauMXbCJdB+dTt9y4QSGKbNcc1RPo4wNRR+3
ux1xb6Nus9BIjmMTKPHVTCpJ0/zfpPwDR9nKR7JP2kfJp+oIoo84p1AzjIdm10Es
4QSlTDhOLVOgdCsQfVS/F/u2HSNdUmbuKGMFWT7GIIUT0lYpUH4pYBMygUbHLGbh
WFXUpi9e2SKRmw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:04 2025 by rpki-client