Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json)
Hash identifier: EXaYtL6kqlVLMeFh8V8NsTOyaF/LHovnEAOStXiWVn4=
Subject key identifier: 92:16:88:4E:39:DB:0D:CA:26:90:EC:E1:95:6D:97:9C:1E:69:13:83
Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Certificate serial: 019A71B8B0D82633FB344748F07C337ED951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
Manifest number: 0BF0
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: vw14M7CWdXbjBphmG9/SG2q9FbbCbabUOs7PoPwIVjA=)
2: fIxoY-fKz3QLFhIfT-AmwQWcEB0.roa (hash: 6Ji4KJM6oBtjO9Pzhwf19OTNTLmIDSqTSnb+aKfxDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b0:d8:26:33:fb:34:47:48:f0:7c:33:7e:d9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=9216884e39db0dca2690ece1956d979c1e691383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:c7:a7:22:23:d3:30:04:a2:73:b0:8d:bc:
42:27:70:89:97:90:18:c0:bc:35:63:f9:78:ee:21:
1b:c5:c6:ca:4f:75:31:76:92:16:44:8c:04:b4:ab:
09:b2:7f:48:b9:3c:b8:2f:e7:59:d4:07:bc:0c:2e:
23:88:13:04:93:70:44:bb:b1:1b:8e:8e:86:6d:18:
f7:70:5b:c7:b0:e9:ad:75:1f:cf:c7:0e:e7:6f:f0:
fa:d2:f5:32:06:f2:84:cb:61:5a:ff:62:6c:95:59:
57:6e:5e:06:24:8b:46:41:9e:1f:ea:9a:e4:25:f0:
af:b8:66:e1:69:c0:36:cd:a9:36:42:52:38:24:19:
14:ff:35:1c:d0:91:99:49:88:bd:28:e7:c6:01:ad:
88:13:f9:eb:11:3d:8a:dd:f4:b5:c1:8a:0a:56:83:
e0:59:81:90:4d:7e:42:30:51:2c:33:a3:ad:2a:ae:
00:56:ec:ad:33:25:de:a9:d4:5d:9e:74:67:5d:66:
02:4f:64:5e:c7:8e:cc:9e:f2:5d:43:5b:6e:8a:44:
8e:5d:69:14:d3:26:85:be:f4:ee:46:be:31:fd:e8:
c2:6b:de:3e:a0:54:bd:90:9d:10:8f:a9:44:c5:6c:
0b:49:38:59:47:70:53:d3:71:cc:26:a9:d8:4c:3d:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:16:88:4E:39:DB:0D:CA:26:90:EC:E1:95:6D:97:9C:1E:69:13:83
X509v3 Authority Key Identifier:
keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cc:ec:11:91:90:9d:a0:37:a0:1d:37:ca:33:68:5a:9f:72:
b1:a2:21:5b:a9:48:f4:72:ce:58:23:c3:62:0c:24:b0:9e:90:
6c:0b:73:aa:1f:83:70:d2:4d:70:69:cf:c9:16:1c:8b:70:55:
ce:c0:a7:a4:bc:27:0b:5a:73:1f:40:1b:6b:58:20:3b:f0:0d:
6a:85:e1:44:45:4c:11:22:93:ba:12:ae:0c:85:8e:28:1a:0d:
39:9b:53:fb:07:f6:f8:f3:71:9d:dc:2b:8a:f8:e9:0b:1e:3a:
4d:74:4f:bb:b2:d3:e0:08:5f:47:26:49:be:6f:d1:63:fc:79:
96:30:fb:92:ae:b0:9a:da:7d:d4:e2:de:3c:3b:fa:d5:71:0a:
1f:28:27:e6:27:20:0a:92:9e:85:07:17:37:a0:38:a7:58:85:
8f:80:3a:1b:c3:50:e0:ee:e3:84:8d:e8:11:db:93:91:fa:03:
06:a1:59:91:8d:4b:4d:5f:ea:25:bc:81:18:0f:7c:60:cc:ed:
22:38:41:d3:3c:d3:63:eb:43:4a:a9:6e:4f:a6:c2:20:e4:32:
c6:c3:44:ff:ae:d1:2b:76:c8:ce:a5:dc:78:25:d2:e7:28:b0:
7d:09:60:ef:fe:5b:1f:70:23:94:2c:f3:f6:97:b3:27:2c:9a:
b8:b8:b6:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLDYJjP7NEdI8HwzftlRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm
M2Y3ZGMwHhcNMjUxMTExMDcwMjAwWhcNMjUxMTEyMDcwMjAwWjAzMTEwLwYDVQQD
Eyg5MjE2ODg0ZTM5ZGIwZGNhMjY5MGVjZTE5NTZkOTc5YzFlNjkxMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu7HpyIj0zAEonOwjbxCJ3CJl5AY
wLw1Y/l47iEbxcbKT3UxdpIWRIwEtKsJsn9IuTy4L+dZ1Ae8DC4jiBMEk3BEu7Eb
jo6GbRj3cFvHsOmtdR/Pxw7nb/D60vUyBvKEy2Fa/2JslVlXbl4GJItGQZ4f6prk
JfCvuGbhacA2zak2QlI4JBkU/zUc0JGZSYi9KOfGAa2IE/nrET2K3fS1wYoKVoPg
WYGQTX5CMFEsM6OtKq4AVuytMyXeqdRdnnRnXWYCT2Rex47MnvJdQ1tuikSOXWkU
0yaFvvTuRr4x/ejCa94+oFS9kJ0Qj6lExWwLSThZR3BT03HMJqnYTD0IbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIWiE452w3KJpDs4ZVtl5weaRODMB8GA1UdIwQY
MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt
NzBlNjBlZGJjMWU3LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3
LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJszsEZGQ
naA3oB03yjNoWp9ysaIhW6lI9HLOWCPDYgwksJ6QbAtzqh+DcNJNcGnPyRYci3BV
zsCnpLwnC1pzH0Aba1ggO/ANaoXhREVMESKTuhKuDIWOKBoNOZtT+wf2+PNxndwr
ivjpCx46TXRPu7LT4AhfRyZJvm/RY/x5ljD7kq6wmtp91OLePDv61XEKHygn5icg
CpKehQcXN6A4p1iFj4A6G8NQ4O7jhI3oEduTkfoDBqFZkY1LTV/qJbyBGA98YMzt
IjhB0zzTY+tDSqluT6bCIOQyxsNE/67RK3bIzqXceCXS5yiwfQlg7/5bH3AjlCzz
9pezJyyauLi2VQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:10 2025 by rpki-client