Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: uhXWalth30ONIFHyiI/C/MkMLW0VQEAt0VxhQo6uQj0=
Subject key identifier: 03:F6:CF:64:16:C3:39:7C:A9:B2:E9:07:AD:45:53:AD:2A:14:79:DE
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 019A7293998CECFB994A3A8B3C2416E94318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0E1D
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: qB7MAtZafosUhJ+wq0ROVZPBCmD2Mt+fW8afo+2V1iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:99:8c:ec:fb:99:4a:3a:8b:3c:24:16:e9:43:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=03f6cf6416c3397ca9b2e907ad4553ad2a1479de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:3c:f4:5e:23:6e:92:47:85:2e:c7:ef:dd:
22:29:82:d3:00:1e:bf:eb:68:8e:3f:b6:58:40:53:
81:11:73:74:7d:e7:ff:21:7f:0c:61:0d:08:7d:6f:
55:2b:89:4f:7b:58:d6:f3:5b:63:94:8b:5e:0b:2c:
00:62:e6:11:65:06:d1:29:2e:0f:ad:5e:a5:d1:04:
8b:20:f1:49:9c:8a:90:50:66:41:2e:86:de:9c:09:
0f:82:f2:4f:5b:b9:b2:1c:c6:ed:d2:6d:38:1f:63:
8f:b8:2f:13:c0:5f:74:ff:82:1d:a2:98:d7:f5:60:
c9:1a:3c:e5:e1:8b:ba:97:4b:06:90:02:ae:34:2a:
d3:00:b8:c9:64:78:ec:1b:f8:3b:cc:4f:10:49:4c:
fe:ef:6e:07:9f:4b:1e:d6:89:86:ee:b0:b1:90:90:
f0:3a:17:d8:ea:0f:c4:a5:92:71:f2:a5:b0:04:f3:
f7:f7:3a:41:94:80:24:9c:b1:df:ee:27:d5:ce:d2:
99:91:74:69:c8:6e:89:28:56:e1:81:74:4b:5a:d4:
ad:b6:1d:54:d7:6f:84:3c:0b:b9:0f:86:c8:f3:e0:
2c:b8:e0:66:13:c6:65:42:b1:98:c6:67:cf:ef:09:
22:91:7d:25:c7:67:29:b7:42:7e:ca:30:d5:1f:98:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F6:CF:64:16:C3:39:7C:A9:B2:E9:07:AD:45:53:AD:2A:14:79:DE
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:be:dc:a6:f8:66:31:b7:f3:21:28:97:52:33:dd:28:41:8e:
25:3c:e6:62:1b:e3:40:f8:26:1d:f2:28:45:39:60:68:5a:a0:
c0:31:ee:f8:27:c0:02:1b:f8:26:55:d4:b8:6a:a6:49:10:d2:
f1:71:0c:88:0f:40:a0:f0:c9:b4:92:e2:0a:fa:6f:f0:ed:68:
f0:2c:4f:e7:66:ed:c1:af:ef:5a:e6:a9:51:83:33:64:0f:53:
98:d9:2e:a9:07:e1:9a:91:b9:8d:d0:61:b7:cf:ce:c7:c5:66:
94:b6:ee:5d:82:84:df:fc:f1:4c:0d:c4:08:49:71:cd:d7:28:
46:13:9f:70:80:4a:eb:c0:b2:c4:58:61:18:06:10:c9:29:9d:
b4:20:4d:86:94:c2:50:d3:7e:e9:98:09:20:39:53:5c:b0:90:
d1:16:72:7b:aa:82:41:cf:53:f9:b9:d5:83:ad:c8:ee:6f:d1:
42:1d:a9:56:78:fc:e7:00:dc:ac:1e:b6:0f:ce:e1:fb:fc:ca:
ff:79:b5:e2:52:6e:26:52:55:85:91:e9:a1:f4:39:b7:0b:3f:
cf:9f:38:14:03:ca:9a:be:a0:e8:97:42:91:78:c0:ee:13:0e:
34:61:6f:fb:85:b9:54:7c:65:a0:1e:ba:18:fc:c7:b1:8a:27:
ef:c0:0e:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk5mM7PuZSjqLPCQW6UMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0
Y2IxNzEwHhcNMjUxMTExMTEwMTA2WhcNMjUxMTEyMTEwMTA2WjAzMTEwLwYDVQQD
EygwM2Y2Y2Y2NDE2YzMzOTdjYTliMmU5MDdhZDQ1NTNhZDJhMTQ3OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqk89F4jbpJHhS7H790iKYLTAB6/
62iOP7ZYQFOBEXN0fef/IX8MYQ0IfW9VK4lPe1jW81tjlIteCywAYuYRZQbRKS4P
rV6l0QSLIPFJnIqQUGZBLobenAkPgvJPW7myHMbt0m04H2OPuC8TwF90/4IdopjX
9WDJGjzl4Yu6l0sGkAKuNCrTALjJZHjsG/g7zE8QSUz+724Hn0se1omG7rCxkJDw
OhfY6g/EpZJx8qWwBPP39zpBlIAknLHf7ifVztKZkXRpyG6JKFbhgXRLWtStth1U
12+EPAu5D4bI8+AsuOBmE8ZlQrGYxmfP7wkikX0lx2cpt0J+yjDVH5hXFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP2z2QWwzl8qbLpB61FU60qFHneMB8GA1UdIwQY
MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt
MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh
LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADr7cpvhm
MbfzISiXUjPdKEGOJTzmYhvjQPgmHfIoRTlgaFqgwDHu+CfAAhv4JlXUuGqmSRDS
8XEMiA9AoPDJtJLiCvpv8O1o8CxP52btwa/vWuapUYMzZA9TmNkuqQfhmpG5jdBh
t8/Ox8VmlLbuXYKE3/zxTA3ECElxzdcoRhOfcIBK68CyxFhhGAYQySmdtCBNhpTC
UNN+6ZgJIDlTXLCQ0RZye6qCQc9T+bnVg63I7m/RQh2pVnj85wDcrB62D87h+/zK
/3m14lJuJlJVhZHpofQ5tws/z584FAPKmr6g6JdCkXjA7hMONGFv+4W5VHxloB66
GPzHsYon78AOjw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:34 2025 by rpki-client