Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json)
Hash identifier: SGS0RJOJYJyMLFeflY8CU1TgNFa36c5kT4WRu8t9NRY=
Subject key identifier: 60:2C:A7:60:3A:77:3C:CA:6E:46:7E:7E:E1:92:61:6E:E7:21:88:22
Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Certificate serial: 0199FBEAA5231E38FF7D5595E5EC89A72EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
Manifest number: 076C
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: 4amJduBRvMAA3hAZfj9Z2+fmofGyF9+zXHDZfpivgA8=)
2: b1zoobQuYRirw6zOe3ZiWtlB_Fs.roa (hash: yoTkr3Ydr4cxPjwyqyjdE6QfCIuZ05Im31loM47LoN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a5:23:1e:38:ff:7d:55:95:e5:ec:89:a7:2e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=602ca7603a773cca6e467e7ee192616ee7218822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:28:b5:cd:b8:77:80:46:5e:fe:7d:cd:fc:
92:6a:b9:fb:04:90:df:94:d3:4c:cb:bc:ab:3a:a8:
6a:6e:65:ac:66:ad:9c:e1:6d:df:20:96:cc:9f:d4:
82:80:56:89:2a:83:c7:e4:d8:8d:bc:a1:2d:39:31:
41:f3:e8:14:25:5b:a1:d2:fb:61:58:a8:6c:53:aa:
e7:29:6f:48:fa:59:e7:3b:80:14:e6:0a:35:dc:69:
a0:10:c8:ba:a5:74:5b:b7:a8:a1:e0:01:f2:3c:af:
89:7c:08:e7:29:03:8d:f2:01:81:95:6c:f3:79:48:
ff:e1:5a:eb:12:49:46:6a:93:cb:08:e6:ee:9b:5b:
39:c2:71:b1:71:b8:39:71:9f:c6:5c:6a:95:24:98:
94:6c:87:1f:c9:08:4f:9f:cb:3d:70:f3:31:0a:40:
dd:42:7f:67:f9:75:50:01:c8:84:7f:21:16:27:90:
41:d0:d3:bf:7a:af:69:1b:bd:b6:df:74:0b:e2:93:
e5:29:8c:e2:5f:65:aa:e2:aa:d1:ac:94:8f:94:f8:
b0:eb:50:fb:ae:47:1c:25:a7:da:ff:e3:31:49:51:
02:dd:4c:20:83:93:66:4a:c2:0f:9e:58:55:eb:33:
87:22:88:25:31:e4:08:b2:f6:90:63:f6:86:e4:3d:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:2C:A7:60:3A:77:3C:CA:6E:46:7E:7E:E1:92:61:6E:E7:21:88:22
X509v3 Authority Key Identifier:
keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:96:76:ed:f9:0f:62:a0:f5:39:e9:4d:5c:d6:12:42:47:20:
8a:e4:b2:97:be:72:13:43:08:01:39:ad:ef:b4:81:97:5f:10:
da:46:88:35:52:99:fb:df:af:f7:2e:8c:64:f2:72:0a:06:11:
2e:0c:a0:87:86:f2:b4:61:7b:2c:a8:22:6a:29:cd:dc:f9:ee:
bc:22:c0:e1:89:7a:b6:6c:b6:30:a4:ac:0c:59:81:26:27:d5:
6b:85:4d:5d:a6:7d:66:52:8b:c1:f3:a3:ac:47:45:fb:56:b1:
cd:89:36:52:f9:10:74:54:0d:ce:82:4a:2d:bd:98:67:be:cf:
3e:df:05:61:74:c7:23:e7:5c:4f:d7:a8:6b:c5:1e:e3:36:0a:
9f:1c:d4:2e:2d:6c:9e:a6:09:63:56:fd:8e:27:2c:e2:06:b0:
89:55:bb:7b:b8:b9:e3:18:60:89:56:78:44:76:68:e7:82:24:
3b:a1:30:27:e9:2f:01:7a:e3:40:97:9e:23:ea:00:4e:fa:03:
92:db:50:91:a9:6a:81:ae:5e:35:5a:3b:7b:25:02:8e:0e:fd:
2a:71:8e:d1:19:7e:89:59:78:43:7c:f7:78:32:bb:31:c5:a3:
6f:55:96:a1:2f:69:cd:4e:f1:e6:8e:1a:ef:83:ee:f7:9d:4e:
fa:2f:d4:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76qUjHjj/fVWV5eyJpy7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGFjOGE4ZjMxNGVlODc5YTZhYTg0M2I2N2VhNDdhYjFl
NzVkZWYwHhcNMjUxMDE5MTAwMTIyWhcNMjUxMDIwMTAwMTIyWjAzMTEwLwYDVQQD
Eyg2MDJjYTc2MDNhNzczY2NhNmU0NjdlN2VlMTkyNjE2ZWU3MjE4ODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfAotc24d4BGXv59zfySarn7BJDf
lNNMy7yrOqhqbmWsZq2c4W3fIJbMn9SCgFaJKoPH5NiNvKEtOTFB8+gUJVuh0vth
WKhsU6rnKW9I+lnnO4AU5go13GmgEMi6pXRbt6ih4AHyPK+JfAjnKQON8gGBlWzz
eUj/4VrrEklGapPLCObum1s5wnGxcbg5cZ/GXGqVJJiUbIcfyQhPn8s9cPMxCkDd
Qn9n+XVQAciEfyEWJ5BB0NO/eq9pG72233QL4pPlKYziX2Wq4qrRrJSPlPiw61D7
rkccJafa/+MxSVEC3Uwgg5NmSsIPnlhV6zOHIoglMeQIsvaQY/aG5D2DjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAsp2A6dzzKbkZ+fuGSYW7nIYgiMB8GA1UdIwQY
MBaAFGbayKjzFO6HmmqoQ7Z+pHqx513vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUt
YzliZGNlOWMxYTQ5LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUtYzliZGNlOWMxYTQ5
LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5Z27fkP
YqD1OelNXNYSQkcgiuSyl75yE0MIATmt77SBl18Q2kaINVKZ+9+v9y6MZPJyCgYR
Lgygh4bytGF7LKgiainN3PnuvCLA4Yl6tmy2MKSsDFmBJifVa4VNXaZ9ZlKLwfOj
rEdF+1axzYk2UvkQdFQNzoJKLb2YZ77PPt8FYXTHI+dcT9eoa8Ue4zYKnxzULi1s
nqYJY1b9jics4gawiVW7e7i54xhgiVZ4RHZo54IkO6EwJ+kvAXrjQJeeI+oATvoD
kttQkalqga5eNVo7eyUCjg79KnGO0Rl+iVl4Q3z3eDK7McWjb1WWoS9pzU7x5o4a
74Pu951O+i/UHg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:54 2025 by rpki-client