Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
File: zoqNQOQ3rfSs182zjgQCR3ouUaY.mft (raw, json)
Hash identifier: D7PlLJ8RS4Zb44v3OSfemXXraF/FKyH2Jdtq5NHLk2Y=
Subject key identifier: 27:74:41:78:33:53:46:CD:35:E5:A7:2B:E4:0A:ED:A0:73:FB:A7:B1
Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Certificate serial: 019A51F59AE023FC0B7B2E2B57D0A36368D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
Manifest number: 0A21
Signing time: Wed 05 Nov 2025 03:00:41 +0000
Manifest this update: Wed 05 Nov 2025 03:00:41 +0000
Manifest next update: Thu 06 Nov 2025 03:00:41 +0000
Files and hashes: 1: ZU0tNOC8sQ8jU4fobxNoGMM10f0.roa (hash: QwRQZ/MqRHfZYgeS/1/5p5EaEsQfSDsz5C+SoKx9QXA=)
2: tBAnS3ymUAQmGfi4CNowsEWHdl4.roa (hash: cxNoVhZk6fGnu1pynsqNRKY+P3+OdQAptw2DD5peCyU=)
3: zoqNQOQ3rfSs182zjgQCR3ouUaY.crl (hash: YcbgoMHEE24SYQ92nqW4rvsZNdVhM3f8V1ktwDu4YpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:9a:e0:23:fc:0b:7b:2e:2b:57:d0:a3:63:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6
Validity
Not Before: Nov 5 03:00:41 2025 GMT
Not After : Nov 6 03:00:41 2025 GMT
Subject: CN=27744178335346cd35e5a72be40aeda073fba7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:54:f5:fe:25:19:5b:8c:f6:81:5e:42:20:e0:
db:23:11:8c:6c:96:f8:de:cf:1c:34:d6:d4:ba:6b:
4d:af:ea:04:bc:99:80:b2:72:80:2b:ac:f4:f3:7f:
0d:82:23:78:c0:93:fd:bb:25:c2:ac:f1:63:c8:5d:
f8:f3:c8:cd:c0:ac:dc:56:99:83:bf:54:a0:75:1e:
b5:4c:c4:f5:cc:e3:b1:25:c2:d6:bd:fb:64:2b:95:
fc:41:84:e6:ea:b8:f6:33:54:c4:dc:90:4e:b3:85:
ee:0a:ca:78:4e:6d:34:e3:4d:1d:8c:2d:5c:6c:13:
ef:f0:67:67:a2:47:96:48:48:06:0a:e9:fe:87:ef:
4f:99:c4:55:39:86:36:9c:d5:8b:32:78:24:24:51:
72:73:68:f0:2a:e3:e4:35:d0:5c:05:f5:05:c1:71:
80:4a:f8:a7:d3:5e:6f:b2:13:da:78:e3:06:15:0b:
52:cb:d4:6b:84:84:bb:f3:fb:18:d0:7a:29:c2:80:
5e:da:36:b2:1c:03:c0:e2:ab:af:7f:d2:d5:75:a2:
5c:dd:ef:93:03:31:a1:ad:c2:89:70:29:ca:0f:a9:
e2:69:6a:34:43:62:8c:e7:50:45:b8:4f:18:4c:21:
79:42:db:32:1c:08:73:29:a5:d9:65:8a:ae:c6:5d:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:41:78:33:53:46:CD:35:E5:A7:2B:E4:0A:ED:A0:73:FB:A7:B1
X509v3 Authority Key Identifier:
keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:b0:66:21:f8:58:1e:fd:56:54:89:23:81:57:66:2e:bd:
ae:c2:d7:5e:44:5f:86:71:f2:91:af:27:9d:18:48:9c:04:b3:
28:35:d9:01:c0:de:34:4a:49:06:a7:e7:5b:09:81:da:cf:07:
46:2e:79:9a:da:b0:13:8a:c7:18:87:e3:31:83:e1:92:1f:5a:
ef:d1:a6:e7:72:12:f4:5f:64:c3:1e:b9:c9:0c:c6:c8:86:ae:
27:a7:82:04:2c:bc:5f:44:5c:db:3b:8e:19:b3:f6:2f:d9:cf:
3c:a5:f7:b7:42:10:47:87:46:0c:31:13:3b:0b:a5:56:23:60:
53:8e:06:49:22:d6:92:5f:9b:e9:04:d2:22:a2:7e:7f:7f:42:
76:dc:aa:93:bd:72:dc:dc:65:42:a5:f3:81:9a:c1:e4:80:31:
a2:28:e3:d8:3b:67:5c:1e:0b:ee:0b:89:32:00:eb:c8:5c:b1:
95:38:a6:57:a1:e3:f7:f6:bf:c5:e6:cb:8f:35:ae:ce:1f:69:
38:b6:04:2b:44:59:0c:0e:b8:95:a1:b5:2e:b8:e3:b0:23:d5:
0e:31:1f:28:39:6d:d1:79:f6:b5:01:11:55:04:9b:7f:08:93:
fc:16:3d:81:dd:df:d0:42:33:9e:1b:4c:29:0f:3f:bb:4c:40:
9f:a8:a0:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9ZrgI/wLey4rV9CjY2jQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey
ZTUxYTYwHhcNMjUxMTA1MDMwMDQxWhcNMjUxMTA2MDMwMDQxWjAzMTEwLwYDVQQD
EygyNzc0NDE3ODMzNTM0NmNkMzVlNWE3MmJlNDBhZWRhMDczZmJhN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lT1/iUZW4z2gV5CIODbIxGMbJb4
3s8cNNbUumtNr+oEvJmAsnKAK6z0838NgiN4wJP9uyXCrPFjyF3488jNwKzcVpmD
v1SgdR61TMT1zOOxJcLWvftkK5X8QYTm6rj2M1TE3JBOs4XuCsp4Tm00400djC1c
bBPv8GdnokeWSEgGCun+h+9PmcRVOYY2nNWLMngkJFFyc2jwKuPkNdBcBfUFwXGA
Svin015vshPaeOMGFQtSy9RrhIS78/sY0HopwoBe2jayHAPA4quvf9LVdaJc3e+T
AzGhrcKJcCnKD6niaWo0Q2KM51BFuE8YTCF5QtsyHAhzKaXZZYquxl395wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCd0QXgzU0bNNeWnK+QK7aBz+6exMB8GA1UdIwQY
MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt
MzQ1YjJhYjBkYjE4LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4
LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyqwZiH4
WB79VlSJI4FXZi69rsLXXkRfhnHyka8nnRhInASzKDXZAcDeNEpJBqfnWwmB2s8H
Ri55mtqwE4rHGIfjMYPhkh9a79Gm53IS9F9kwx65yQzGyIauJ6eCBCy8X0Rc2zuO
GbP2L9nPPKX3t0IQR4dGDDETOwulViNgU44GSSLWkl+b6QTSIqJ+f39Cdtyqk71y
3NxlQqXzgZrB5IAxoijj2DtnXB4L7guJMgDryFyxlTimV6Hj9/a/xebLjzWuzh9p
OLYEK0RZDA64laG1LrjjsCPVDjEfKDlt0Xn2tQERVQSbfwiT/BY9gd3f0EIznhtM
KQ8/u0xAn6igGQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:07:25 2025 by rpki-client