Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: qdOFv0HDp/e9xT8UXgzN4zMmHP9YO30uvXPJek2zTDE=
Subject key identifier: 83:AB:3A:BF:0B:73:E7:D7:66:38:99:38:3B:2A:E1:D6:D7:5D:A3:F6
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 019A70A50C4C7E15E7651DB35DFF19344610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 06C4
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: 86yecK+YRPIbvia3wdi6SJLSfZeh4fku/IycL46BZgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0c:4c:7e:15:e7:65:1d:b3:5d:ff:19:34:46:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=83ab3abf0b73e7d7663899383b2ae1d6d75da3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:b1:2d:00:d3:55:f5:78:10:e4:35:31:b6:
8a:d6:98:ef:40:fe:d5:7b:00:f5:ff:32:84:b5:18:
df:ff:0a:70:13:ab:35:a5:59:bc:20:ba:2a:5f:5c:
d0:d7:e1:40:df:0f:16:d7:7e:6c:db:e9:32:ea:11:
67:08:05:ce:44:2c:37:e7:9f:9b:5b:bf:e6:a9:cb:
14:d5:cd:7b:93:73:d5:63:2d:1e:25:11:2d:57:73:
0a:94:ca:31:52:73:2f:2f:5a:b5:01:8a:bf:37:8c:
0f:f0:a7:35:43:b2:5a:e3:e1:34:8a:e4:42:04:fb:
37:d1:e9:d8:9e:0a:d1:6d:21:08:e3:14:39:d8:60:
a3:5b:8f:e4:9b:a0:30:27:67:4a:e1:09:e3:9c:cb:
c4:bf:5b:ee:fc:0b:1c:be:14:23:75:c0:c7:aa:d2:
24:2d:1e:66:69:08:f0:d4:f6:2e:32:74:7f:10:8c:
eb:06:41:5d:ca:00:18:43:ff:98:3e:a7:2c:71:e6:
57:60:fe:ba:03:79:9f:73:18:2f:11:d9:14:42:13:
4d:52:93:cb:8d:9b:9c:df:c3:6d:98:f0:16:bb:90:
63:7b:67:c4:bc:9d:11:94:89:fa:dc:67:52:76:35:
b5:eb:cf:66:23:17:42:de:3c:f2:07:41:3d:65:93:
e8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:3A:BF:0B:73:E7:D7:66:38:99:38:3B:2A:E1:D6:D7:5D:A3:F6
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:87:35:a5:27:01:55:c0:8c:c4:31:72:98:9c:13:fe:72:ba:
4e:ce:d1:02:fd:99:40:96:92:32:cc:05:cd:35:ae:3e:d5:b1:
7c:77:b9:9d:9f:e5:a8:25:cb:82:e8:bf:77:0d:c1:8f:4c:b1:
c9:27:2c:3d:82:35:91:60:23:54:64:12:14:7e:87:94:3a:82:
f4:4b:e2:1d:69:c6:f4:46:ad:7c:8f:96:b1:64:8c:2b:d6:07:
5b:a8:a6:bd:89:fe:15:e0:cc:34:f7:18:d4:81:82:a7:e5:13:
d8:2e:4d:cb:ba:f0:47:26:39:78:a6:9b:64:41:38:9b:63:cd:
54:c8:12:d6:4f:27:1d:82:84:79:96:e0:b2:e6:c7:74:77:9f:
9d:90:14:a7:12:b7:43:3e:6e:40:0c:25:3b:41:2e:1c:e7:07:
3c:1a:4b:bb:a4:cb:77:b5:4f:0a:23:6d:ba:a5:e9:4e:f7:b7:
c0:05:96:d1:53:a9:97:98:c6:b1:e2:08:4c:c4:52:a4:88:72:
cd:41:e6:36:59:fa:d0:c0:e8:e0:ce:aa:14:f8:3e:97:90:09:
78:24:f8:08:84:bf:88:86:40:60:51:3d:93:e2:fc:b9:44:6a:
7f:86:33:73:8f:29:b4:80:1c:85:9e:56:ad:4d:cf:fe:29:24:
79:d5:f6:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpQxMfhXnZR2zXf8ZNEYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTc5ZTg5YWFhMmQ1OWVlZTRiZDY4NThmYWU1YmIzZmRh
NzQ5NjEwHhcNMjUxMTExMDIwMDU2WhcNMjUxMTEyMDIwMDU2WjAzMTEwLwYDVQQD
Eyg4M2FiM2FiZjBiNzNlN2Q3NjYzODk5MzgzYjJhZTFkNmQ3NWRhM2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY6xLQDTVfV4EOQ1MbaK1pjvQP7V
ewD1/zKEtRjf/wpwE6s1pVm8ILoqX1zQ1+FA3w8W135s2+ky6hFnCAXORCw355+b
W7/mqcsU1c17k3PVYy0eJREtV3MKlMoxUnMvL1q1AYq/N4wP8Kc1Q7Ja4+E0iuRC
BPs30enYngrRbSEI4xQ52GCjW4/km6AwJ2dK4QnjnMvEv1vu/AscvhQjdcDHqtIk
LR5maQjw1PYuMnR/EIzrBkFdygAYQ/+YPqcsceZXYP66A3mfcxgvEdkUQhNNUpPL
jZuc38NtmPAWu5Bje2fEvJ0RlIn63GdSdjW1689mIxdC3jzyB0E9ZZPoSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOrOr8Lc+fXZjiZODsq4dbXXaP2MB8GA1UdIwQY
MBaAFM4XnomqotWe7kvWhY+uW7P9p0lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUt
M2Q3OTY1NTM5YmM3LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81OWU5ZGEtOWMyYy00MGNiLTlhNjUtM2Q3OTY1NTM5YmM3
LzEvemhlZWlhcWkxWjd1UzlhRmo2NWJzXzJuU1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4c1pScB
VcCMxDFymJwT/nK6Ts7RAv2ZQJaSMswFzTWuPtWxfHe5nZ/lqCXLgui/dw3Bj0yx
yScsPYI1kWAjVGQSFH6HlDqC9EviHWnG9EatfI+WsWSMK9YHW6imvYn+FeDMNPcY
1IGCp+UT2C5Ny7rwRyY5eKabZEE4m2PNVMgS1k8nHYKEeZbgsubHdHefnZAUpxK3
Qz5uQAwlO0EuHOcHPBpLu6TLd7VPCiNtuqXpTve3wAWW0VOpl5jGseIITMRSpIhy
zUHmNln60MDo4M6qFPg+l5AJeCT4CIS/iIZAYFE9k+L8uURqf4Yzc48ptIAchZ5W
rU3P/ikkedX2qA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:17 2025 by rpki-client