Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: Fntyz/CUpZ+d3+opS3uljX2Q3mSiDdy6jNT4LIe2gsA=
Subject key identifier: C9:53:09:68:71:F8:7A:EF:8D:A4:DD:BB:3C:BE:E4:45:16:C2:CB:F8
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 019A72CA23B2EE29861C03F3697CBE318214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 0507
Signing time: Tue 11 Nov 2025 12:00:41 +0000
Manifest this update: Tue 11 Nov 2025 12:00:41 +0000
Manifest next update: Wed 12 Nov 2025 12:00:41 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: zeHFdU8XWQq0nJY9foIarBt8L4/ABxKnRwNJvzISGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:23:b2:ee:29:86:1c:03:f3:69:7c:be:31:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Nov 11 12:00:41 2025 GMT
Not After : Nov 12 12:00:41 2025 GMT
Subject: CN=c953096871f87aef8da4ddbb3cbee44516c2cbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:6b:f9:30:f0:9c:e3:82:28:c0:06:c0:be:
36:ad:7d:7f:87:88:a2:d0:44:1f:c2:e1:22:dc:9a:
fc:21:05:b7:67:c5:43:1f:54:af:75:38:69:2b:6b:
3f:1e:0a:e1:50:bc:30:a8:a2:64:87:c3:77:ec:3d:
15:66:dc:43:e1:45:13:77:11:10:51:83:d3:b8:09:
b9:c1:79:52:8c:fd:95:0d:95:8d:d2:94:4a:4d:32:
b7:5d:50:5e:40:ff:b8:37:7e:d7:6f:ea:61:f8:e4:
46:41:c4:31:12:51:02:64:e4:39:3a:c6:1a:ee:1b:
5d:8b:9e:ed:44:b7:97:b2:19:75:80:e3:9b:2c:62:
b6:f6:50:a4:ac:da:ba:22:45:42:77:08:c6:0d:d5:
a2:78:ba:69:47:8f:84:ed:a8:8a:02:fa:37:b7:e2:
a6:53:07:81:d3:3c:fb:aa:a5:db:25:e8:39:43:da:
fc:ea:43:df:ae:31:8d:d1:25:e0:86:6e:14:d5:91:
fd:7c:e5:fd:0e:67:ac:62:99:ea:81:d8:f6:ee:e0:
12:2f:e0:f5:f9:ba:92:4c:8a:bd:c5:37:8c:6f:ec:
e1:9c:be:a6:fd:d4:af:dd:65:c7:a2:ea:cf:cd:56:
6a:33:48:76:0b:88:20:98:ae:d0:b5:cb:a5:ff:93:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:09:68:71:F8:7A:EF:8D:A4:DD:BB:3C:BE:E4:45:16:C2:CB:F8
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ff:58:7d:d8:a8:99:d9:3a:f6:94:b0:a7:1a:69:0a:fc:93:
58:9d:aa:dc:5e:9f:05:f7:ff:55:79:11:a2:da:9e:ae:2a:13:
f5:d4:10:74:f0:47:62:5e:17:ae:88:ae:11:a4:bf:14:21:6e:
9f:34:2c:89:da:75:81:14:6a:b3:9e:8f:23:77:8d:f6:cd:63:
f8:37:cd:61:62:cf:6b:3d:6c:d5:a0:da:89:0a:ea:3e:5e:a4:
b3:f1:79:df:6e:80:e0:2a:55:de:0d:08:9a:2d:25:53:40:31:
8e:94:0d:9d:6b:a0:b3:eb:fa:06:20:61:05:9b:66:a8:de:05:
e4:98:e6:d2:1e:69:5a:d4:e4:26:65:12:71:d2:a8:e5:c9:14:
db:9e:ee:f8:12:e0:71:7b:1b:7c:75:b7:95:51:9a:97:72:2b:
52:6e:a7:98:3a:15:f8:64:bc:06:0d:e0:5e:e5:ed:a8:ab:c9:
5c:4d:5f:f7:cc:25:f6:6c:90:27:f4:41:73:ee:5b:42:de:c8:
88:6e:ed:0a:76:94:3e:fe:4c:8a:ca:d7:a4:b0:8c:2c:39:48:
17:55:69:c1:d4:88:bb:75:b5:ff:24:89:46:cd:a7:63:13:7a:
ec:63:33:0e:08:9c:7b:30:21:0d:1a:c6:81:9b:c5:c0:f4:af:
f1:4c:2f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyiOy7imGHAPzaXy+MYIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjEyOGE1YWRjYmNjZGYxNWNiOTc5YWQ2YWJmMmI5NjQw
ZmRiZGIwHhcNMjUxMTExMTIwMDQxWhcNMjUxMTEyMTIwMDQxWjAzMTEwLwYDVQQD
EyhjOTUzMDk2ODcxZjg3YWVmOGRhNGRkYmIzY2JlZTQ0NTE2YzJjYmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwhr+TDwnOOCKMAGwL42rX1/h4ii
0EQfwuEi3Jr8IQW3Z8VDH1SvdThpK2s/HgrhULwwqKJkh8N37D0VZtxD4UUTdxEQ
UYPTuAm5wXlSjP2VDZWN0pRKTTK3XVBeQP+4N37Xb+ph+ORGQcQxElECZOQ5OsYa
7htdi57tRLeXshl1gOObLGK29lCkrNq6IkVCdwjGDdWieLppR4+E7aiKAvo3t+Km
UweB0zz7qqXbJeg5Q9r86kPfrjGN0SXghm4U1ZH9fOX9DmesYpnqgdj27uASL+D1
+bqSTIq9xTeMb+zhnL6m/dSv3WXHourPzVZqM0h2C4ggmK7Qtcul/5OFawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlTCWhx+HrvjaTduzy+5EUWwsv4MB8GA1UdIwQY
MBaAFGWxKKWty8zfFcuXmtar8rlkD9vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUt
YmQ4NmQ0YjMyYzU4LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUtYmQ4NmQ0YjMyYzU4
LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/9Yfdio
mdk69pSwpxppCvyTWJ2q3F6fBff/VXkRotqerioT9dQQdPBHYl4XroiuEaS/FCFu
nzQsidp1gRRqs56PI3eN9s1j+DfNYWLPaz1s1aDaiQrqPl6ks/F5326A4CpV3g0I
mi0lU0AxjpQNnWugs+v6BiBhBZtmqN4F5Jjm0h5pWtTkJmUScdKo5ckU257u+BLg
cXsbfHW3lVGal3IrUm6nmDoV+GS8Bg3gXuXtqKvJXE1f98wl9myQJ/RBc+5bQt7I
iG7tCnaUPv5MisrXpLCMLDlIF1VpwdSIu3W1/ySJRs2nYxN67GMzDgicezAhDRrG
gZvFwPSv8UwvUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:42 2025 by rpki-client