Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft (raw, json)
Hash identifier: B2ShxE+PuaRokyZNqC/dGKHMYfPGHfHs3sgBLvtLrFE=
Subject key identifier: DD:74:50:EB:82:DE:1D:11:E0:30:A5:83:32:08:63:9F:89:69:C5:FB
Authority key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Certificate issuer: /CN=af3adce3664bf0e7f688ff4122551734c4d14756
Certificate serial: 019A0FA74E31490D553BEB53D4111C4AF8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
Manifest number: 0121
Signing time: Thu 23 Oct 2025 06:00:14 +0000
Manifest this update: Thu 23 Oct 2025 06:00:14 +0000
Manifest next update: Fri 24 Oct 2025 06:00:14 +0000
Files and hashes: 1: 27OstEMkFz6z8oCspY9UEpTgDCI.roa (hash: lDFDHelXei1RQWdM96bxB8eJAkvqOPb886jPNWfOo/U=)
2: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl (hash: 8sCbYuFVsEO2T+iF/C/hYoTweQT3hH5A05m6kW82Lms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:4e:31:49:0d:55:3b:eb:53:d4:11:1c:4a:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Validity
Not Before: Oct 23 06:00:14 2025 GMT
Not After : Oct 24 06:00:14 2025 GMT
Subject: CN=dd7450eb82de1d11e030a5833208639f8969c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:cf:0e:ac:0c:69:e0:e4:87:46:aa:34:d2:
91:2b:da:a1:64:b3:3f:ed:a8:a9:9d:c0:57:fd:0f:
ac:5a:8b:39:0c:33:8f:b7:19:e1:34:11:e2:db:cc:
0a:0e:71:a6:85:9a:e8:c0:62:b3:4a:e4:49:15:99:
01:45:86:9b:5b:84:58:5c:6e:0b:88:9b:a3:6f:0b:
e6:a5:e5:50:4d:21:92:8e:80:40:94:a6:32:62:c2:
96:15:9a:ec:bf:2f:83:e5:65:16:e6:ad:64:3c:06:
3b:be:fc:0e:bc:0a:c6:e9:ec:9e:fc:35:94:38:e9:
ef:eb:b7:28:1c:98:2e:81:57:7b:36:0a:eb:6f:a1:
84:1b:c7:9b:fe:57:16:f4:c1:b2:74:ae:c7:10:37:
dc:00:f0:e1:e8:8c:36:5a:e2:c8:ff:85:f9:b2:01:
7c:d9:1c:3a:b2:9d:8d:b1:98:c8:45:2f:d2:28:9b:
c5:78:95:53:4f:3f:db:ab:51:3f:c8:31:fb:ad:da:
49:1a:ad:81:e5:64:24:70:7c:17:a7:77:fa:60:3f:
36:dc:be:9f:65:32:a6:5a:28:e9:72:47:c5:f4:03:
60:30:8e:db:e6:81:ef:40:31:06:7e:07:09:0b:1a:
de:68:87:7a:b7:3b:3e:b8:4e:1f:b4:4a:6e:23:fe:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:74:50:EB:82:DE:1D:11:E0:30:A5:83:32:08:63:9F:89:69:C5:FB
X509v3 Authority Key Identifier:
keyid:AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d6:c1:21:19:aa:1a:02:37:b8:ff:01:f6:40:97:5e:79:57:
76:24:1e:ca:b7:df:32:04:e6:11:ba:99:4a:7a:74:34:63:58:
0e:cf:a5:11:d4:3f:4a:b5:43:80:81:81:00:e0:9d:6a:ba:f9:
9c:51:fe:84:73:4e:f4:27:1b:11:93:02:37:44:d8:bd:ea:cf:
67:80:c5:82:07:e7:c8:26:6a:24:a8:f2:a4:77:c0:bf:32:cf:
17:2f:f7:cc:a6:d3:9e:42:70:df:d2:0b:ef:e2:48:d9:e8:fd:
00:f0:eb:39:fb:67:9f:af:ca:96:1c:d6:af:17:34:1a:1b:3b:
97:94:d4:ef:be:af:1e:e7:a3:62:09:36:f4:e4:74:60:6f:8a:
ca:1b:de:58:b8:c3:d6:5a:1a:6e:77:f1:08:28:a6:e4:45:57:
e7:2d:b9:65:3b:24:09:76:7a:14:e7:46:ef:0d:3e:2b:19:b8:
fa:5a:c9:9a:fd:9d:6a:2f:16:f7:95:a5:ee:f8:c6:56:25:75:
92:66:9a:d9:cb:4b:12:a9:85:75:5b:af:c9:ad:98:e9:85:7d:
24:32:53:52:39:ae:4c:bd:1a:16:e5:8c:c9:69:17:0c:79:d8:
f1:3b:e2:e0:cf:6f:f6:e8:d6:c4:10:e3:e5:20:fa:ff:17:10:
aa:f7:af:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoPp04xSQ1VO+tT1BEcSvjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmM2FkY2UzNjY0YmYwZTdmNjg4ZmY0MTIyNTUxNzM0YzRk
MTQ3NTYwHhcNMjUxMDIzMDYwMDE0WhcNMjUxMDI0MDYwMDE0WjAzMTEwLwYDVQQD
EyhkZDc0NTBlYjgyZGUxZDExZTAzMGE1ODMzMjA4NjM5Zjg5NjljNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoLPDqwMaeDkh0aqNNKRK9qhZLM/
7aipncBX/Q+sWos5DDOPtxnhNBHi28wKDnGmhZrowGKzSuRJFZkBRYabW4RYXG4L
iJujbwvmpeVQTSGSjoBAlKYyYsKWFZrsvy+D5WUW5q1kPAY7vvwOvArG6eye/DWU
OOnv67coHJgugVd7Ngrrb6GEG8eb/lcW9MGydK7HEDfcAPDh6Iw2WuLI/4X5sgF8
2Rw6sp2NsZjIRS/SKJvFeJVTTz/bq1E/yDH7rdpJGq2B5WQkcHwXp3f6YD823L6f
ZTKmWijpckfF9ANgMI7b5oHvQDEGfgcJCxreaId6tzs+uE4ftEpuI/5m9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN10UOuC3h0R4DClgzIIY5+JacX7MB8GA1UdIwQY
MBaAFK863ONmS/Dn9oj/QSJVFzTE0UdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjkt
MzM1ODgyZGI5YTI1LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYjE5ZDEtMWRkNy00YzQ1LWJlZjktMzM1ODgyZGI5YTI1
LzEvcnpyYzQyWkw4T2YyaVA5QklsVVhOTVRSUjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9bBIRmq
GgI3uP8B9kCXXnlXdiQeyrffMgTmEbqZSnp0NGNYDs+lEdQ/SrVDgIGBAOCdarr5
nFH+hHNO9CcbEZMCN0TYverPZ4DFggfnyCZqJKjypHfAvzLPFy/3zKbTnkJw39IL
7+JI2ej9APDrOftnn6/KlhzWrxc0Ghs7l5TU776vHuejYgk29OR0YG+KyhveWLjD
1loabnfxCCim5EVX5y25ZTskCXZ6FOdG7w0+Kxm4+lrJmv2dai8W95Wl7vjGViV1
kmaa2ctLEqmFdVuvya2Y6YV9JDJTUjmuTL0aFuWMyWkXDHnY8Tvi4M9v9ujWxBDj
5SD6/xcQqvevMg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 11:52:09 2025 by rpki-client