Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: I3VB+I57MwAFIaykiIHvZFH/6tSlIO+EQzVh8uc1F/A=
Subject key identifier: C7:1B:F9:29:3F:60:81:64:23:04:3E:61:0A:AC:40:FD:BF:60:56:B8
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 019A258A5EE5DFCC7B33BBF9674275BB86EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 16FF
Signing time: Mon 27 Oct 2025 12:00:16 +0000
Manifest this update: Mon 27 Oct 2025 12:00:16 +0000
Manifest next update: Tue 28 Oct 2025 12:00:16 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: 8NBXU8CQ42DWJgYzawLUawwq325NEPNZ/Ilbi3YyKuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:5e:e5:df:cc:7b:33:bb:f9:67:42:75:bb:86:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Oct 27 12:00:16 2025 GMT
Not After : Oct 28 12:00:16 2025 GMT
Subject: CN=c71bf9293f60816423043e610aac40fdbf6056b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:1d:b2:1f:0b:dd:7c:75:90:ff:a1:66:6f:
c7:43:3c:f9:c3:75:ea:fb:fd:20:61:5b:c2:96:a6:
d0:ae:6e:25:d4:47:c7:92:e9:1d:d9:26:c2:d8:f6:
ba:73:b9:42:ff:f1:3d:6e:78:c0:74:03:44:05:89:
13:b8:81:b4:0e:d9:de:08:8e:cd:58:9b:70:14:bf:
95:62:55:88:48:5c:9e:8c:6c:07:ee:a8:60:7f:38:
f3:43:23:9e:54:74:85:b2:9c:45:08:0d:9f:64:a8:
32:cb:78:34:7c:c1:10:e9:68:91:34:7a:4e:4f:c0:
c3:da:9a:97:23:41:47:66:fd:5f:e8:86:24:d5:8e:
2d:3e:f5:5a:51:f7:c5:c6:eb:b4:eb:a7:f7:ee:f4:
f8:89:74:8a:da:06:da:38:48:f7:96:17:16:46:08:
95:1f:ac:67:6e:1b:69:69:b1:6d:82:51:83:21:12:
f0:1d:0a:ad:c6:79:6c:6d:81:48:5e:87:d0:33:5c:
56:13:f3:49:7b:5c:ac:0c:07:da:58:05:e2:40:7a:
85:dc:09:6e:56:16:5e:aa:f6:14:32:00:3a:d6:89:
28:8b:23:42:d8:c7:ed:d5:72:ee:1c:f2:d5:cf:8b:
09:94:d6:18:63:66:6b:8e:b8:c2:a3:cb:70:6f:a3:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:F9:29:3F:60:81:64:23:04:3E:61:0A:AC:40:FD:BF:60:56:B8
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:35:0e:9c:d8:cc:47:f0:aa:f2:d0:4d:80:9d:ac:71:9d:80:
34:b9:3b:3e:c2:6e:45:c6:47:05:7b:18:62:03:24:72:af:88:
b2:3f:74:c3:fb:de:d4:f4:c4:18:8f:8d:9e:35:c5:45:ef:27:
9d:fd:17:0b:7d:a5:ef:ac:06:00:47:69:a3:b1:eb:4c:93:7b:
3d:ce:41:c1:f4:15:95:14:55:45:90:a7:7f:fa:83:86:a8:34:
26:ab:2a:38:d5:ac:a2:de:8f:e5:58:64:e9:d7:20:20:13:95:
79:39:02:23:99:96:da:5a:23:56:53:0c:eb:57:35:86:c7:ca:
c2:1a:64:84:06:14:2f:57:47:17:a4:1a:a8:c5:11:ea:61:69:
63:67:81:52:d7:01:76:5f:21:1d:2d:ac:66:8c:41:52:ee:3f:
83:d1:da:89:0f:9a:9c:91:9b:8e:38:1a:9e:89:4f:51:c6:4a:
a6:67:c3:34:29:60:86:0a:35:c9:29:57:23:6b:da:dc:0f:f4:
1e:93:b9:94:07:10:34:61:a4:e8:00:3c:f7:4b:66:ad:b1:01:
89:98:1a:db:c3:5c:f3:22:b1:6a:fc:46:46:55:9a:06:df:dd:
32:62:d9:95:8d:01:b8:bd:e4:6b:ed:7d:80:51:a3:d9:cb:24:
a7:03:d6:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolil7l38x7M7v5Z0J1u4bsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTE5ZWI1YzIxMDgzNjAxNTVkZTdmYjRmMjE2YTA1NWFl
MzFmMDkwHhcNMjUxMDI3MTIwMDE2WhcNMjUxMDI4MTIwMDE2WjAzMTEwLwYDVQQD
EyhjNzFiZjkyOTNmNjA4MTY0MjMwNDNlNjEwYWFjNDBmZGJmNjA1NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzUdsh8L3Xx1kP+hZm/HQzz5w3Xq
+/0gYVvClqbQrm4l1EfHkukd2SbC2Pa6c7lC//E9bnjAdANEBYkTuIG0DtneCI7N
WJtwFL+VYlWISFyejGwH7qhgfzjzQyOeVHSFspxFCA2fZKgyy3g0fMEQ6WiRNHpO
T8DD2pqXI0FHZv1f6IYk1Y4tPvVaUffFxuu066f37vT4iXSK2gbaOEj3lhcWRgiV
H6xnbhtpabFtglGDIRLwHQqtxnlsbYFIXofQM1xWE/NJe1ysDAfaWAXiQHqF3Alu
VhZeqvYUMgA61okoiyNC2Mft1XLuHPLVz4sJlNYYY2ZrjrjCo8twb6PadQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcb+Sk/YIFkIwQ+YQqsQP2/YFa4MB8GA1UdIwQY
MBaAFM2RnrXCEINgFV3n+08hagVa4x8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgt
OWY4ZTZhMTg0Mzc0LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny80ZmM3ODAtYjI5Ni00MGI3LTk1MDgtOWY4ZTZhMTg0Mzc0
LzEvelpHZXRjSVFnMkFWWGVmN1R5RnFCVnJqSHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezUOnNjM
R/Cq8tBNgJ2scZ2ANLk7PsJuRcZHBXsYYgMkcq+Isj90w/ve1PTEGI+NnjXFRe8n
nf0XC32l76wGAEdpo7HrTJN7Pc5BwfQVlRRVRZCnf/qDhqg0JqsqONWsot6P5Vhk
6dcgIBOVeTkCI5mW2lojVlMM61c1hsfKwhpkhAYUL1dHF6QaqMUR6mFpY2eBUtcB
dl8hHS2sZoxBUu4/g9HaiQ+anJGbjjganolPUcZKpmfDNClghgo1ySlXI2va3A/0
HpO5lAcQNGGk6AA890tmrbEBiZga28Nc8yKxavxGRlWaBt/dMmLZlY0BuL3ka+19
gFGj2cskpwPWRQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:56:21 2025 by rpki-client