Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: WNP/12fUyZLLDqZXbPofYmn7r8/BbIl8TXMHHw70n0k=
Subject key identifier: 6C:E3:66:E3:DD:1F:57:0C:13:48:53:FF:A0:4E:47:8B:F7:61:30:49
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 0199FCC6CD79EC91E0D67C2957C9ABA7B7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 141D
Signing time: Sun 19 Oct 2025 14:01:51 +0000
Manifest this update: Sun 19 Oct 2025 14:01:51 +0000
Manifest next update: Mon 20 Oct 2025 14:01:51 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: /yfxAFOLrhU0keDSgLeqiKI9YhlDawQy4laA/48zzE0=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:cd:79:ec:91:e0:d6:7c:29:57:c9:ab:a7:b7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Oct 19 14:01:51 2025 GMT
Not After : Oct 20 14:01:51 2025 GMT
Subject: CN=6ce366e3dd1f570c134853ffa04e478bf7613049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:43:d6:ce:0c:2b:37:b6:26:ec:1a:38:23:
9f:a4:e7:78:c9:22:f6:64:26:5a:04:88:e5:6f:d5:
2d:02:f0:ab:d9:14:71:55:8d:24:62:1b:68:d4:cb:
14:5c:32:e5:60:f1:5c:bb:50:98:4d:24:ef:be:ce:
07:ef:20:40:b6:e4:09:c2:68:55:ba:34:eb:14:da:
aa:b8:25:81:a5:08:cb:64:88:ea:9b:0c:5c:92:88:
58:09:36:78:28:85:41:26:28:28:e0:ea:bc:21:e1:
59:3b:4e:37:d1:5e:12:f2:52:1d:06:53:5c:fc:28:
06:39:90:23:cb:a7:d2:0c:45:df:7e:59:2a:79:de:
84:41:f9:64:41:69:b4:e8:dc:fb:dd:ef:1b:e9:4d:
39:5f:ba:b1:14:01:2e:41:40:13:f9:51:5f:a6:06:
94:2d:3e:90:60:49:80:31:4d:2d:46:c0:91:cd:39:
08:29:eb:75:c3:42:4f:09:77:e9:a6:f5:1b:fd:ca:
32:1d:45:95:65:80:ee:c9:70:6e:75:20:66:30:5c:
f6:90:bd:c9:1a:1d:b5:58:46:a8:38:0a:32:fb:cc:
4b:55:37:c8:38:22:ef:56:e0:97:b1:21:17:58:d0:
d2:24:09:b4:03:5a:c1:33:9d:b8:4b:4f:c8:b5:cd:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:66:E3:DD:1F:57:0C:13:48:53:FF:A0:4E:47:8B:F7:61:30:49
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:34:5e:04:32:6a:7a:a8:76:7d:92:88:d8:21:9d:2c:9c:6d:
e9:b3:7a:39:ae:7b:ae:d6:09:22:f3:8f:e8:ea:8a:1e:d7:99:
f3:75:3e:7b:b4:19:83:95:f1:65:28:df:86:a4:e6:0a:31:2f:
1a:1c:06:91:a4:62:80:17:d7:4b:9d:4d:2d:d2:b1:30:ec:9e:
fd:bd:e1:b0:0b:ba:65:72:ca:a3:43:55:c4:ad:ee:de:0d:c6:
24:3c:fa:02:23:20:c9:0d:33:7c:47:6c:ef:3f:ea:83:33:a6:
cf:38:fb:9e:7b:29:b2:f4:58:c4:43:1e:65:74:d7:a0:c7:a7:
dd:fc:b6:4a:04:c7:9e:ae:d9:88:3c:42:18:bb:1a:5f:ec:47:
34:96:c2:b3:37:ac:dc:1b:dc:12:62:87:ad:56:2d:86:b9:76:
a9:d4:1d:9f:1a:e5:58:56:43:2b:a9:fa:9e:09:3d:eb:3d:23:
3e:cf:80:ca:6b:13:70:fc:6c:27:72:0b:99:19:3b:3a:9d:5b:
a9:ea:66:80:78:70:04:1c:d4:23:60:4a:29:95:54:30:3d:81:
3b:88:02:da:57:f1:0f:46:b5:d1:60:a0:a1:91:2c:08:71:f5:
9f:d6:45:91:0b:d4:72:85:eb:fd:5b:26:eb:c8:29:ba:8d:cf:
28:8a:28:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xs157JHg1nwpV8mrp7etMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1
MDc0MmEwHhcNMjUxMDE5MTQwMTUxWhcNMjUxMDIwMTQwMTUxWjAzMTEwLwYDVQQD
Eyg2Y2UzNjZlM2RkMWY1NzBjMTM0ODUzZmZhMDRlNDc4YmY3NjEzMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt9D1s4MKze2JuwaOCOfpOd4ySL2
ZCZaBIjlb9UtAvCr2RRxVY0kYhto1MsUXDLlYPFcu1CYTSTvvs4H7yBAtuQJwmhV
ujTrFNqquCWBpQjLZIjqmwxckohYCTZ4KIVBJigo4Oq8IeFZO0430V4S8lIdBlNc
/CgGOZAjy6fSDEXfflkqed6EQflkQWm06Nz73e8b6U05X7qxFAEuQUAT+VFfpgaU
LT6QYEmAMU0tRsCRzTkIKet1w0JPCXfppvUb/coyHUWVZYDuyXBudSBmMFz2kL3J
Gh21WEaoOAoy+8xLVTfIOCLvVuCXsSEXWNDSJAm0A1rBM524S0/Itc30tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzjZuPdH1cME0hT/6BOR4v3YTBJMB8GA1UdIwQY
MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTReBDJq
eqh2fZKI2CGdLJxt6bN6Oa57rtYJIvOP6OqKHteZ83U+e7QZg5XxZSjfhqTmCjEv
GhwGkaRigBfXS51NLdKxMOye/b3hsAu6ZXLKo0NVxK3u3g3GJDz6AiMgyQ0zfEds
7z/qgzOmzzj7nnspsvRYxEMeZXTXoMen3fy2SgTHnq7ZiDxCGLsaX+xHNJbCszes
3BvcEmKHrVYthrl2qdQdnxrlWFZDK6n6ngk96z0jPs+AymsTcPxsJ3ILmRk7Op1b
qepmgHhwBBzUI2BKKZVUMD2BO4gC2lfxD0a10WCgoZEsCHH1n9ZFkQvUcoXr/Vsm
68gpuo3PKIoo+A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:13 2025 by rpki-client