Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: 1k52g+nm5gMSdeVwoMo8SjtmvN/ijHDYKQgEOtYn/Ls=
Subject key identifier: 7D:A3:F3:1C:7D:95:D1:DC:87:E1:CD:07:E9:BE:94:6C:33:D6:C9:92
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 019A72260EA9A06ED056CBCDCCB71E812B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: AICOL2XSVA9X6+yiwcZSp181KNkY4NvO5thFt58QHjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0e:a9:a0:6e:d0:56:cb:cd:cc:b7:1e:81:2b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=7da3f31c7d95d1dc87e1cd07e9be946c33d6c992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:6e:8b:fb:5d:9a:89:e1:e5:b4:e4:9f:4a:
20:c0:9d:e6:40:90:e0:2a:12:29:42:b0:23:59:5d:
f9:c0:62:f4:dc:10:8c:6f:3d:b1:2e:e9:4a:2d:72:
a2:40:85:c3:31:c7:0c:5d:6f:6a:95:af:9a:23:9b:
3a:b1:46:72:20:05:ab:a9:11:30:7a:5a:75:73:ce:
2a:4d:ee:92:f5:41:34:e4:18:06:08:da:73:dc:c0:
eb:e7:67:2a:0c:8c:f6:0f:9b:01:98:8e:f2:bd:ec:
9a:db:d1:10:d5:24:99:67:47:fc:96:d8:47:39:c8:
4f:81:0d:ec:99:5c:21:bb:bd:8c:0b:b6:84:1f:32:
e3:b1:a0:9f:8b:da:d3:22:dd:b7:37:20:45:41:db:
e1:b5:8f:5c:3f:6a:cd:73:cc:02:a1:80:39:23:c6:
ab:08:b1:2a:f9:a0:a0:33:c0:18:d5:e2:bb:a2:c5:
f9:ef:69:8e:8b:fe:7c:51:68:64:e9:5c:ca:2c:db:
35:55:46:cd:05:22:fe:05:67:7a:a4:e4:bc:15:90:
31:f7:92:0b:22:c6:59:a0:db:2f:f5:7e:45:bd:99:
44:ab:9a:8e:a5:84:64:17:ca:30:7c:1a:2b:59:31:
db:f4:6d:21:3a:10:0f:dc:6c:61:6f:ed:1f:11:48:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:F3:1C:7D:95:D1:DC:87:E1:CD:07:E9:BE:94:6C:33:D6:C9:92
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:bf:bb:82:85:04:2e:d1:d7:c8:2a:b0:8c:ad:25:80:57:
6a:43:4f:5d:c8:a4:13:38:ff:7e:f1:ad:90:47:f5:e3:64:73:
8b:a2:5a:4d:97:39:3c:cf:89:74:f4:bf:1d:37:83:bf:68:aa:
3c:27:0b:ae:89:c9:78:86:9b:33:c5:30:a6:9a:2d:15:00:7f:
55:8d:57:a9:0a:bb:54:11:59:31:1b:1a:45:09:b1:b0:34:f7:
48:3e:69:c7:f7:b7:8e:18:b3:ed:00:41:4d:e0:63:61:b7:8f:
ca:df:9f:e6:71:af:f2:38:cb:53:f6:47:af:58:4f:cf:99:01:
b0:96:65:57:33:24:c1:35:a4:28:cb:32:32:f4:66:ca:ce:14:
66:5a:b6:48:d6:ab:29:d2:8c:55:7f:eb:e3:e5:0b:35:fc:ed:
37:52:95:36:05:f3:ad:8f:ba:55:dd:05:35:e0:d6:e2:89:19:
66:04:73:a0:9d:ce:c4:c1:60:3d:13:72:e2:22:b5:56:15:a3:
68:12:1a:5c:ce:b6:dd:36:d8:fc:b3:11:9a:25:4d:89:79:18:
f3:06:1f:26:51:a6:c5:5e:3f:43:fe:92:09:cd:01:1c:02:3e:
17:2b:74:fa:ae:5f:f4:bb:89:47:0c:fd:e6:81:07:0c:9f:b5:
a9:38:b5:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJg6poG7QVsvNzLcegSscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYjBjYTIyOTEyNzZkN2QyYTJmOGE3MDUwZjRiYTgyN2Zl
OTEwYTEwHhcNMjUxMTExMDkwMTI3WhcNMjUxMTEyMDkwMTI3WjAzMTEwLwYDVQQD
Eyg3ZGEzZjMxYzdkOTVkMWRjODdlMWNkMDdlOWJlOTQ2YzMzZDZjOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdNui/tdmonh5bTkn0ogwJ3mQJDg
KhIpQrAjWV35wGL03BCMbz2xLulKLXKiQIXDMccMXW9qla+aI5s6sUZyIAWrqREw
elp1c84qTe6S9UE05BgGCNpz3MDr52cqDIz2D5sBmI7yveya29EQ1SSZZ0f8lthH
OchPgQ3smVwhu72MC7aEHzLjsaCfi9rTIt23NyBFQdvhtY9cP2rNc8wCoYA5I8ar
CLEq+aCgM8AY1eK7osX572mOi/58UWhk6VzKLNs1VUbNBSL+BWd6pOS8FZAx95IL
IsZZoNsv9X5FvZlEq5qOpYRkF8owfBorWTHb9G0hOhAP3Gxhb+0fEUhxcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2j8xx9ldHch+HNB+m+lGwz1smSMB8GA1UdIwQY
MBaAFMywyiKRJ219Ki+KcFD0uoJ/6RChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUt
MDhiOWUxMTAxYWE3LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9kMzgzNjAtNGQxZi00MjJlLTkwYWUtMDhiOWUxMTAxYWE3
LzEvekxES0lwRW5iWDBxTDRwd1VQUzZnbl9wRUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIS/u4KF
BC7R18gqsIytJYBXakNPXcikEzj/fvGtkEf142Rzi6JaTZc5PM+JdPS/HTeDv2iq
PCcLronJeIabM8UwppotFQB/VY1XqQq7VBFZMRsaRQmxsDT3SD5px/e3jhiz7QBB
TeBjYbePyt+f5nGv8jjLU/ZHr1hPz5kBsJZlVzMkwTWkKMsyMvRmys4UZlq2SNar
KdKMVX/r4+ULNfztN1KVNgXzrY+6Vd0FNeDW4okZZgRzoJ3OxMFgPRNy4iK1VhWj
aBIaXM623TbY/LMRmiVNiXkY8wYfJlGmxV4/Q/6SCc0BHAI+Fyt0+q5f9LuJRwz9
5oEHDJ+1qTi1EQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:46 2025 by rpki-client