Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json)
Hash identifier: mzLnKhg2hc/uMGvbL1Naj5zSywG3Dq+z/XeUaBDhExw=
Subject key identifier: 1A:C4:6C:A3:8B:4F:7F:5C:80:B9:A6:B1:2E:B6:4A:1B:D8:92:1D:9A
Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Certificate serial: 019A725C8973E3FC0779BDD55EED965708C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
Manifest number: 0D6C
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: lF1M6+jQ+5n820Vr9QAYhgohBrPoBZJS9cay1Orqq9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:89:73:e3:fc:07:79:bd:d5:5e:ed:96:57:08:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=1ac46ca38b4f7f5c80b9a6b12eb64a1bd8921d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:52:44:57:03:e9:83:7b:aa:76:2d:c1:1a:
b2:d8:57:33:8e:0e:13:86:6d:d8:48:d5:37:93:92:
81:59:1e:8a:c9:5d:4a:2c:56:21:d1:88:80:dc:2b:
00:0b:49:17:e6:3a:44:f3:a3:e7:5b:a1:12:b5:98:
af:62:4a:ec:50:29:ff:33:3a:0f:14:ea:b1:71:90:
fd:50:6d:fa:f3:ee:44:13:09:3b:fa:7e:2b:38:3d:
49:6e:28:db:8f:85:f7:2e:82:c2:8e:2c:6d:cf:0b:
0e:46:23:e3:93:93:02:2c:0d:9c:23:83:23:b8:16:
a4:03:e4:93:15:17:cc:2a:ca:2b:bf:a9:70:b3:d8:
43:d1:f4:05:ee:df:fe:bf:96:c7:d8:d1:ad:37:e6:
39:d6:80:d4:d1:5c:3b:12:e0:74:0a:4f:9e:bb:74:
a9:e4:a7:df:f3:a6:3e:72:20:f3:18:44:61:8b:af:
76:cf:a9:89:80:88:c2:28:76:c5:24:2c:3f:10:35:
a3:40:93:87:f5:90:41:f0:29:19:26:6c:6c:e7:dd:
70:cd:ef:a9:a2:bd:e5:37:c0:af:e9:dd:97:05:e4:
e0:6f:fb:a3:3b:04:aa:12:6d:cb:43:a6:66:3d:ae:
c6:9a:52:a7:ab:1a:27:db:da:0c:06:d1:36:0f:96:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:6C:A3:8B:4F:7F:5C:80:B9:A6:B1:2E:B6:4A:1B:D8:92:1D:9A
X509v3 Authority Key Identifier:
keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5e:d0:e9:73:77:43:9f:de:b5:c5:53:46:5a:0c:45:26:bc:
ef:b6:74:77:82:12:c1:93:0a:00:c0:db:e1:c0:ea:04:e6:ce:
d8:da:24:23:3d:98:b9:f9:b6:29:48:b4:26:b3:ed:4b:06:e0:
c7:4a:47:14:57:35:5d:d5:41:f6:db:e3:b7:36:3d:b3:49:fd:
26:ca:81:87:9b:b0:8d:33:83:34:d4:61:5f:97:cb:7c:24:70:
fa:f5:62:70:c2:e0:d0:4d:90:e8:ad:f7:6b:42:6c:de:de:b9:
f7:f3:5a:73:8c:f7:dc:39:b8:fc:b2:fc:c1:68:54:fd:39:c0:
33:46:e5:96:31:32:fb:70:f9:a2:c9:44:08:c8:1c:0e:9f:5b:
f7:4f:3e:79:f2:46:22:9e:72:be:a7:78:b1:65:a7:73:e5:6f:
43:6a:a1:d4:f9:87:00:f2:76:07:a1:32:b0:44:e8:ba:db:d8:
13:02:fb:64:77:17:b0:4e:c4:8c:14:c7:2d:1a:8a:bb:49:d4:
fb:a0:0c:45:e9:9d:49:86:62:c4:60:4e:78:b7:ec:d5:b6:8e:
ac:9b:16:e4:4e:0d:2e:56:2d:b2:36:95:d8:b7:bf:7d:94:0e:
c8:5e:b0:2b:b1:52:ea:7f:ba:ce:e2:d3:79:68:36:ba:4f:d4:
7e:19:e8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXIlz4/wHeb3VXu2WVwjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MGJiNmQxYjJkMjdjYWUyNzU4NjVjNmQ1Y2NjN2Y4YTc1
N2I3ZjUwHhcNMjUxMTExMTAwMDU4WhcNMjUxMTEyMTAwMDU4WjAzMTEwLwYDVQQD
EygxYWM0NmNhMzhiNGY3ZjVjODBiOWE2YjEyZWI2NGExYmQ4OTIxZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE9SRFcD6YN7qnYtwRqy2Fczjg4T
hm3YSNU3k5KBWR6KyV1KLFYh0YiA3CsAC0kX5jpE86PnW6EStZivYkrsUCn/MzoP
FOqxcZD9UG368+5EEwk7+n4rOD1Jbijbj4X3LoLCjixtzwsORiPjk5MCLA2cI4Mj
uBakA+STFRfMKsorv6lws9hD0fQF7t/+v5bH2NGtN+Y51oDU0Vw7EuB0Ck+eu3Sp
5Kff86Y+ciDzGERhi692z6mJgIjCKHbFJCw/EDWjQJOH9ZBB8CkZJmxs591wze+p
or3lN8Cv6d2XBeTgb/ujOwSqEm3LQ6ZmPa7GmlKnqxon29oMBtE2D5ax8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBrEbKOLT39cgLmmsS62ShvYkh2aMB8GA1UdIwQY
MBaAFGQLttGy0nyuJ1hlxtXMx/inV7f1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEt
OWY2ZWFiYzBlODQzLzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEtOWY2ZWFiYzBlODQz
LzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHF7Q6XN3
Q5/etcVTRloMRSa877Z0d4ISwZMKAMDb4cDqBObO2NokIz2Yufm2KUi0JrPtSwbg
x0pHFFc1XdVB9tvjtzY9s0n9JsqBh5uwjTODNNRhX5fLfCRw+vVicMLg0E2Q6K33
a0Js3t659/Nac4z33Dm4/LL8wWhU/TnAM0blljEy+3D5oslECMgcDp9b908+efJG
Ip5yvqd4sWWnc+VvQ2qh1PmHAPJ2B6EysEToutvYEwL7ZHcXsE7EjBTHLRqKu0nU
+6AMRemdSYZixGBOeLfs1baOrJsW5E4NLlYtsjaV2Le/fZQOyF6wK7FS6n+6zuLT
eWg2uk/UfhnoMw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:21 2025 by rpki-client