Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: BIfI8VHk0XzfvZyoYorK0OZFxb5jHrGg0foeOWLaAb0=
Subject key identifier: E6:C7:CA:0E:A0:17:C3:D7:CA:B3:7C:FA:3B:B6:F6:1F:86:12:4C:19
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 019A7149E4CF9D38E6E3DD161F5C2719D8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0A62
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: GNCc0Q5VsP37dLNpAvYA8OrmQ0pOAze+GxSf4mKJhDs=)
2: up0oav0rMtPMOzsYSRDujbJ3KTk.roa (hash: Rkvar+Ei1oJWKXR7rGewiiIwzRWDihGhTVyjbmAYcXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e4:cf:9d:38:e6:e3:dd:16:1f:5c:27:19:d8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=e6c7ca0ea017c3d7cab37cfa3bb6f61f86124c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3f:13:73:8b:fe:02:fb:a8:1a:d1:ad:55:fd:
1a:69:0d:da:88:53:c3:c2:2d:96:be:a1:31:82:8e:
3b:69:38:5b:1d:07:df:2d:b1:d2:99:57:19:6a:a3:
2c:c8:41:18:78:4d:d6:ac:3e:d7:ad:dd:51:eb:71:
56:c1:66:01:28:c4:52:df:18:71:a9:66:55:ab:b3:
3d:ce:ed:43:4d:80:09:c9:93:76:87:f5:71:5a:85:
ac:77:ba:4c:18:74:13:95:d2:f4:c5:57:1c:12:c1:
bc:3c:f9:22:7b:a7:f8:4d:ea:f2:8c:07:c8:38:5e:
ca:af:ea:25:be:da:32:4c:06:81:69:be:a0:6c:22:
7a:ce:22:53:29:f9:3d:e8:95:6c:0f:6b:33:1a:5d:
5f:63:0a:b2:a4:46:02:93:c2:99:90:77:fe:b9:31:
f2:21:d2:88:2c:f9:11:09:af:14:e1:2a:b7:d0:d9:
26:dd:39:f8:54:29:fe:81:80:4f:1b:b3:3b:8b:82:
79:ba:4f:9d:9b:10:85:41:f7:40:8d:2c:84:00:c7:
d0:5d:8f:29:17:62:c7:ee:ef:b6:b1:d4:63:2c:37:
57:1f:9d:d9:5e:b2:9b:b0:7d:fd:25:ea:aa:b0:26:
5d:99:d2:79:4e:4e:fe:4f:b0:b1:33:fd:91:72:e2:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:CA:0E:A0:17:C3:D7:CA:B3:7C:FA:3B:B6:F6:1F:86:12:4C:19
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:08:74:64:da:53:dc:65:33:ce:6f:16:3d:60:c3:83:17:13:
b9:bf:b7:a0:b5:a2:de:5f:5a:84:b2:96:2b:e0:42:7d:46:77:
22:cf:04:7a:50:36:8a:48:b3:00:58:f9:f5:1c:54:ed:20:5a:
79:a9:1a:f7:ba:c1:fa:85:a4:5b:8e:4a:25:08:d5:cc:ed:26:
df:b9:3f:82:e2:68:4e:c3:af:7d:c5:d3:f8:e2:2e:a5:b7:56:
43:29:43:3b:e6:e0:30:3b:c6:9c:05:32:e8:88:d2:29:bf:ea:
ba:52:eb:ef:72:67:35:e9:1a:06:67:8d:4c:7f:1a:a6:c9:ce:
d3:c4:3b:8f:48:be:4f:fc:f9:01:b9:d3:40:8e:6f:f2:83:2e:
16:68:a7:88:8c:18:26:20:61:27:2b:b7:bb:a1:17:7d:d9:1e:
e4:a0:95:fb:91:63:fb:a7:60:d5:a8:c5:7d:ae:7c:25:43:bd:
f0:60:9d:6b:c5:f8:b9:30:93:70:1e:a0:83:c1:b5:c8:df:03:
f0:18:63:9e:f9:d6:75:fb:df:04:53:35:94:64:6b:93:96:d1:
a3:9c:42:d7:0a:d1:ba:69:48:a8:d8:19:74:96:df:fe:69:ac:
e7:39:1c:48:44:16:d3:d8:f4:df:8d:05:af:7c:08:7c:6d:1c:
b9:eb:f6:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSeTPnTjm490WH1wnGdjFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MmM3YTRlOWYwMmIyZjRlNjY0ZDdkMGQ3MmE1MmU1MTI2
MWRlNTQwHhcNMjUxMTExMDUwMDU5WhcNMjUxMTEyMDUwMDU5WjAzMTEwLwYDVQQD
EyhlNmM3Y2EwZWEwMTdjM2Q3Y2FiMzdjZmEzYmI2ZjYxZjg2MTI0YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+z8Tc4v+AvuoGtGtVf0aaQ3aiFPD
wi2WvqExgo47aThbHQffLbHSmVcZaqMsyEEYeE3WrD7Xrd1R63FWwWYBKMRS3xhx
qWZVq7M9zu1DTYAJyZN2h/VxWoWsd7pMGHQTldL0xVccEsG8PPkie6f4TeryjAfI
OF7Kr+olvtoyTAaBab6gbCJ6ziJTKfk96JVsD2szGl1fYwqypEYCk8KZkHf+uTHy
IdKILPkRCa8U4Sq30Nkm3Tn4VCn+gYBPG7M7i4J5uk+dmxCFQfdAjSyEAMfQXY8p
F2LH7u+2sdRjLDdXH53ZXrKbsH39JeqqsCZdmdJ5Tk7+T7CxM/2RcuKPqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObHyg6gF8PXyrN8+ju29h+GEkwZMB8GA1UdIwQY
MBaAFGQsek6fArL05mTX0NcqUuUSYd5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYt
NWUwMmM0NjUzZTUwLzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85OTFmZDgtMmQ4NS00Y2Y5LTkwMzYtNWUwMmM0NjUzZTUw
LzEvWkN4NlRwOENzdlRtWk5mUTF5cFM1UkpoM2xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgh0ZNpT
3GUzzm8WPWDDgxcTub+3oLWi3l9ahLKWK+BCfUZ3Is8EelA2ikizAFj59RxU7SBa
eaka97rB+oWkW45KJQjVzO0m37k/guJoTsOvfcXT+OIupbdWQylDO+bgMDvGnAUy
6IjSKb/qulLr73JnNekaBmeNTH8apsnO08Q7j0i+T/z5AbnTQI5v8oMuFminiIwY
JiBhJyu3u6EXfdke5KCV+5Fj+6dg1ajFfa58JUO98GCda8X4uTCTcB6gg8G1yN8D
8BhjnvnWdfvfBFM1lGRrk5bRo5xC1wrRumlIqNgZdJbf/mms5zkcSEQW09j0340F
r3wIfG0cuev2jg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:17 2025 by rpki-client