Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json)
Hash identifier: fvj6ousR+Z3qr/TBh7OzMiqgWKIZagvwEfkg9T6RhcE=
Subject key identifier: D4:7E:6A:A5:66:75:76:DA:5C:91:DF:63:56:18:B2:61:99:AA:57:E9
Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274
Certificate serial: 019A70A4F2B4E33547C9BA9B9B602A53C844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
Manifest number: 1031
Signing time: Tue 11 Nov 2025 02:00:49 +0000
Manifest this update: Tue 11 Nov 2025 02:00:49 +0000
Manifest next update: Wed 12 Nov 2025 02:00:49 +0000
Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: MDu4yIl9rlZVQD+iw55LwIwTs/C0j5XIE0cZeevm/sU=)
2: mcf7JveA9sP5q1fzjwTXe1Y9B94.roa (hash: vxgrGFoktHB0oWvn12RjOAHTGS54BioUpfkDuJPEQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f2:b4:e3:35:47:c9:ba:9b:9b:60:2a:53:c8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274
Validity
Not Before: Nov 11 02:00:49 2025 GMT
Not After : Nov 12 02:00:49 2025 GMT
Subject: CN=d47e6aa5667576da5c91df635618b26199aa57e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:ae:fe:8f:3a:6e:70:22:ca:39:b2:db:28:
d1:c5:a7:bf:9b:67:0c:21:75:37:59:20:70:ec:f0:
05:f8:be:83:48:52:15:dd:d0:a2:1d:c2:26:26:01:
a9:80:dd:e3:c2:c4:df:c7:b1:70:95:95:2a:c9:11:
e0:03:99:d5:6b:a3:a6:57:97:ef:a4:b9:ca:a2:a2:
e6:d2:06:d9:9f:c9:f7:c7:57:a1:3d:7a:f0:1a:4f:
40:14:18:f7:b4:2f:aa:86:d0:f4:7a:b1:1b:45:82:
16:87:68:34:eb:85:4b:a1:b9:4a:a9:57:fa:09:01:
4f:01:9f:7c:1e:97:91:19:a8:fa:25:26:9f:b3:72:
12:73:0b:9e:0e:da:40:fa:15:72:18:7c:e8:5a:2b:
42:75:51:52:7e:ff:18:dd:7b:72:70:ab:14:db:88:
8c:05:de:d3:cf:2e:91:c2:44:21:a5:e8:9c:18:c6:
96:a9:5a:35:7c:18:bd:e4:c0:8c:1f:fd:97:c9:cf:
0e:85:bf:47:f5:5b:ef:f6:d8:b3:3e:e4:00:76:af:
48:69:59:99:20:4f:6f:0d:04:a9:0c:53:a6:33:06:
ba:80:fa:5d:74:5d:ba:90:78:1d:6c:2c:9b:f4:b3:
c8:1c:7f:7a:4b:3c:ee:d5:8a:02:5b:95:14:a7:5d:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:6A:A5:66:75:76:DA:5C:91:DF:63:56:18:B2:61:99:AA:57:E9
X509v3 Authority Key Identifier:
keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a6:87:3b:ca:6e:79:88:df:92:d0:32:6c:64:a0:a7:0b:52:
70:c4:f9:bd:5d:da:bd:54:73:1a:4b:fe:f1:ad:57:66:e4:ad:
96:51:55:25:77:34:58:c1:7a:7a:8e:e7:98:ed:89:d6:17:50:
1a:a6:95:ca:47:34:e5:c9:dd:0e:24:98:40:06:1c:3b:c7:ba:
79:8e:70:e9:3e:8c:c2:2b:7d:47:a0:03:36:b2:fa:c3:a2:68:
6a:49:c8:6a:0b:f7:59:71:da:18:f4:da:6c:c1:26:98:3b:5d:
1e:5b:2f:a7:24:8d:66:3d:74:2c:1c:25:d0:02:a1:13:e2:57:
e9:ff:26:2a:c6:09:ff:86:67:20:df:f1:26:34:63:12:c2:6e:
46:50:50:90:7f:03:de:a6:3b:ec:ef:d6:01:27:d3:c6:8c:8b:
ee:15:3f:64:ea:c0:21:ce:f7:5a:d7:3a:94:3c:1f:34:09:73:
ff:b9:7d:3e:e2:f7:6a:6c:7b:bb:f4:ef:fc:c9:0e:7d:3b:5e:
fc:d2:b5:67:2e:b7:f8:f0:d8:64:3a:29:1d:b2:b6:8e:fa:1b:
66:aa:79:fe:59:60:d6:3e:a9:0e:ba:ee:80:c2:d9:22:4d:af:
0b:67:1f:ca:f6:38:f2:96:ec:71:2b:40:35:be:32:31:b0:e5:
d1:6a:04:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpPK04zVHybqbm2AqU8hEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0
NjYyNzQwHhcNMjUxMTExMDIwMDQ5WhcNMjUxMTEyMDIwMDQ5WjAzMTEwLwYDVQQD
EyhkNDdlNmFhNTY2NzU3NmRhNWM5MWRmNjM1NjE4YjI2MTk5YWE1N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUCu/o86bnAiyjmy2yjRxae/m2cM
IXU3WSBw7PAF+L6DSFIV3dCiHcImJgGpgN3jwsTfx7FwlZUqyRHgA5nVa6OmV5fv
pLnKoqLm0gbZn8n3x1ehPXrwGk9AFBj3tC+qhtD0erEbRYIWh2g064VLoblKqVf6
CQFPAZ98HpeRGaj6JSafs3IScwueDtpA+hVyGHzoWitCdVFSfv8Y3XtycKsU24iM
Bd7Tzy6RwkQhpeicGMaWqVo1fBi95MCMH/2Xyc8Ohb9H9Vvv9tizPuQAdq9IaVmZ
IE9vDQSpDFOmMwa6gPpddF26kHgdbCyb9LPIHH96Szzu1YoCW5UUp12hlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR+aqVmdXbaXJHfY1YYsmGZqlfpMB8GA1UdIwQY
MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt
ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk
LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaaHO8pu
eYjfktAybGSgpwtScMT5vV3avVRzGkv+8a1XZuStllFVJXc0WMF6eo7nmO2J1hdQ
GqaVykc05cndDiSYQAYcO8e6eY5w6T6Mwit9R6ADNrL6w6JoaknIagv3WXHaGPTa
bMEmmDtdHlsvpySNZj10LBwl0AKhE+JX6f8mKsYJ/4ZnIN/xJjRjEsJuRlBQkH8D
3qY77O/WASfTxoyL7hU/ZOrAIc73Wtc6lDwfNAlz/7l9PuL3amx7u/Tv/MkOfTte
/NK1Zy63+PDYZDopHbK2jvobZqp5/llg1j6pDrrugMLZIk2vC2cfyvY48pbscStA
Nb4yMbDl0WoEfQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:35 2025 by rpki-client