Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
File: _0zNsS_CLrhX-GxWWovFFR0FMrA.mft (raw, json)
Hash identifier: +5/CnO2NRYk910D5ah0qA/zTu84L5QLRSzUMTUX300Y=
Subject key identifier: 10:C3:A2:B0:92:AF:BC:05:7D:04:19:88:82:D2:FC:10:88:FF:98:D7
Authority key identifier: FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
Certificate issuer: /CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Certificate serial: 019A20D215F2ABC785DBBA785AC2560DFF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
Manifest number: 077C
Signing time: Sun 26 Oct 2025 14:00:30 +0000
Manifest this update: Sun 26 Oct 2025 14:00:30 +0000
Manifest next update: Mon 27 Oct 2025 14:00:30 +0000
Files and hashes: 1: T-Yw2cTI2wr-Y-TJOoMJXVh3bJU.roa (hash: 0NqJgy30YTXcCM9pl9HQ+jtoeVufCCiGR0QgwmWh8es=)
2: _0zNsS_CLrhX-GxWWovFFR0FMrA.crl (hash: h33oAzPiW8qLmSptiUwlOg4EcsCRBT5SEsHabsZNCwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:15:f2:ab:c7:85:db:ba:78:5a:c2:56:0d:ff:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4ccdb12fc22eb857f86c565a8bc5151d0532b0
Validity
Not Before: Oct 26 14:00:30 2025 GMT
Not After : Oct 27 14:00:30 2025 GMT
Subject: CN=10c3a2b092afbc057d04198882d2fc1088ff98d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:dc:12:29:dc:24:72:69:cd:89:eb:86:92:
e1:e6:9a:01:7d:9b:46:37:39:44:68:85:8f:b5:df:
70:ea:3e:04:2f:d3:4f:28:17:49:55:04:bb:2e:88:
70:69:26:7b:74:cc:9b:91:df:14:f3:fe:2b:9b:10:
9b:04:5c:ca:52:d3:69:1a:08:42:c1:3b:5d:1c:8f:
5e:0e:06:10:b7:11:9e:2d:1c:35:b7:d0:66:1a:a4:
4c:20:74:77:b6:04:19:1f:4d:c7:94:1e:85:4a:98:
f8:af:ba:a7:aa:e8:cd:db:7c:cf:6b:e7:a0:84:a9:
f5:da:72:be:7f:64:98:f7:71:60:4d:57:eb:91:fb:
05:93:0e:31:f1:d0:99:c1:8a:3c:00:f2:8a:5e:bb:
06:73:c6:b9:e5:81:07:50:c3:8c:5a:48:db:ab:c6:
db:fc:3a:ce:d1:89:2b:12:4f:cd:8d:d3:0e:cb:ff:
87:09:29:33:7d:66:d6:84:a5:5b:b4:b3:73:90:67:
eb:ab:72:f2:28:7c:dd:06:95:01:94:e9:da:39:26:
80:3a:db:6a:3a:6a:a8:14:ea:e5:6f:d0:14:d1:5d:
ad:d0:b8:6c:80:6e:40:8a:c3:e7:33:25:c6:56:3e:
86:33:2f:5b:43:85:e5:86:67:f7:b7:27:a8:31:b4:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C3:A2:B0:92:AF:BC:05:7D:04:19:88:82:D2:FC:10:88:FF:98:D7
X509v3 Authority Key Identifier:
keyid:FF:4C:CD:B1:2F:C2:2E:B8:57:F8:6C:56:5A:8B:C5:15:1D:05:32:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0zNsS_CLrhX-GxWWovFFR0FMrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/5e3070-422a-4b58-800a-dba7ccac94e2/1/_0zNsS_CLrhX-GxWWovFFR0FMrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1c:32:c8:68:c8:cc:7f:9f:3d:46:f7:82:14:a6:a5:5e:31:
31:db:2f:0a:9a:78:9d:a5:f0:f6:e4:1f:45:55:84:02:bf:dd:
fb:59:c6:eb:f1:3c:a1:b7:5e:b1:43:b2:32:ad:7b:7c:6a:be:
0c:f2:d5:78:f5:47:e5:5c:18:ed:7c:b8:0d:05:06:a0:f9:d8:
2e:25:88:8b:af:f1:c1:18:37:10:6f:34:fc:7a:6a:eb:b3:a9:
5f:19:35:c3:88:da:21:7c:8b:6a:04:49:39:76:3c:6e:d6:10:
93:d6:74:dd:d7:07:9b:28:ee:d7:37:3b:cc:24:dd:ad:2c:b8:
dc:32:83:5e:a3:0c:92:0c:f1:6d:e3:38:8e:75:b6:5a:64:a8:
02:13:b2:1e:e3:3e:96:f9:73:08:4a:41:f4:ae:af:45:c6:53:
b7:e2:bc:c4:9c:af:2d:16:a9:82:5b:ac:12:01:8d:b6:e7:03:
97:ac:78:ce:f3:34:ff:db:dc:50:b6:35:29:00:0b:2f:ca:ae:
73:a2:55:fb:7a:81:28:0d:66:93:a3:ca:44:8c:31:0a:b2:a6:
01:19:6e:da:29:c5:49:e5:78:7d:6b:51:bf:6f:b5:e6:54:35:
50:8e:99:df:21:3b:a4:f0:74:a6:aa:96:24:1f:01:34:10:46:
d1:83:c4:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZog0hXyq8eF27p4WsJWDf9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNGNjZGIxMmZjMjJlYjg1N2Y4NmM1NjVhOGJjNTE1MWQw
NTMyYjAwHhcNMjUxMDI2MTQwMDMwWhcNMjUxMDI3MTQwMDMwWjAzMTEwLwYDVQQD
EygxMGMzYTJiMDkyYWZiYzA1N2QwNDE5ODg4MmQyZmMxMDg4ZmY5OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxrcEincJHJpzYnrhpLh5poBfZtG
NzlEaIWPtd9w6j4EL9NPKBdJVQS7LohwaSZ7dMybkd8U8/4rmxCbBFzKUtNpGghC
wTtdHI9eDgYQtxGeLRw1t9BmGqRMIHR3tgQZH03HlB6FSpj4r7qnqujN23zPa+eg
hKn12nK+f2SY93FgTVfrkfsFkw4x8dCZwYo8APKKXrsGc8a55YEHUMOMWkjbq8bb
/DrO0YkrEk/NjdMOy/+HCSkzfWbWhKVbtLNzkGfrq3LyKHzdBpUBlOnaOSaAOttq
OmqoFOrlb9AU0V2t0LhsgG5AisPnMyXGVj6GMy9bQ4Xlhmf3tyeoMbQupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDDorCSr7wFfQQZiILS/BCI/5jXMB8GA1UdIwQY
MBaAFP9MzbEvwi64V/hsVlqLxRUdBTKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEt
ZGJhN2NjYWM5NGUyLzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy81ZTMwNzAtNDIyYS00YjU4LTgwMGEtZGJhN2NjYWM5NGUy
LzEvXzB6TnNTX0NMcmhYLUd4V1dvdkZGUjBGTXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBwyyGjI
zH+fPUb3ghSmpV4xMdsvCpp4naXw9uQfRVWEAr/d+1nG6/E8obdesUOyMq17fGq+
DPLVePVH5VwY7Xy4DQUGoPnYLiWIi6/xwRg3EG80/Hpq67OpXxk1w4jaIXyLagRJ
OXY8btYQk9Z03dcHmyju1zc7zCTdrSy43DKDXqMMkgzxbeM4jnW2WmSoAhOyHuM+
lvlzCEpB9K6vRcZTt+K8xJyvLRapglusEgGNtucDl6x4zvM0/9vcULY1KQALL8qu
c6JV+3qBKA1mk6PKRIwxCrKmARlu2inFSeV4fWtRv2+15lQ1UI6Z3yE7pPB0pqqW
JB8BNBBG0YPEEA==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:42:53 2025 by rpki-client