Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
File: 8z9sz1fxxI8RwU_QBUBazONtA7g.mft (raw, json)
Hash identifier: xJMf6aRMxMXrh05+jLpYD7MLwutQBc9ExytltSrUQ3w=
Subject key identifier: 00:DD:52:53:EE:B2:B7:3E:D9:0E:89:AF:C3:4A:4A:EB:7B:AC:AA:D2
Authority key identifier: F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
Certificate issuer: /CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Certificate serial: 0199FC5912CE8007FB1D18609480C98AF5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 8z9sz1fxxI8RwU_QBUBazONtA7g.crl (hash: ejOa1uKITVAPCY+2SbejxnIT+L/xzEbUrHjoR6WPQ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:12:ce:80:07:fb:1d:18:60:94:80:c9:8a:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33f6ccf57f1c48f11c14fd005405acce36d03b8
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=00dd5253eeb2b73ed90e89afc34a4aeb7bacaad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:b2:90:5f:6e:c2:7c:4c:41:96:a5:c8:9b:
d7:d7:40:5b:57:3c:14:02:0a:f2:ec:52:0a:34:e2:
40:4e:6d:f8:3b:c1:16:88:75:e2:64:3f:79:35:9f:
a3:d3:b3:83:f1:4f:b6:84:c3:96:cc:3f:6c:62:3a:
7a:72:74:db:68:17:61:66:f2:3b:54:cb:9a:17:3b:
d4:5e:a3:56:a8:b2:df:6f:d4:88:95:e1:62:72:b2:
85:80:32:7e:c4:a1:17:a8:31:c6:37:ca:3b:1e:cc:
24:59:52:70:bb:23:6f:66:36:ee:fc:05:1f:99:2e:
9b:a3:d9:7f:9a:ba:73:4b:c3:d4:f1:ec:8a:23:66:
3d:6e:54:a4:61:d5:3c:6a:a3:80:33:55:41:1b:5f:
5f:e5:20:c5:c3:41:0d:dd:a7:6c:77:9a:44:10:92:
14:fc:2e:b8:0f:eb:bd:0b:18:75:13:61:51:c9:32:
7b:dd:db:6e:99:d5:f8:b7:2c:08:43:a9:33:9f:00:
3c:cc:bf:e2:d6:05:20:b1:fc:34:16:3f:84:fe:c9:
73:a6:bb:57:76:1b:a2:35:08:8f:76:3a:d3:d8:39:
05:1a:05:39:92:c0:ac:56:9f:82:16:e4:5d:6f:d1:
39:59:d1:44:39:6b:b1:b8:49:f2:3a:aa:65:d0:eb:
18:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DD:52:53:EE:B2:B7:3E:D9:0E:89:AF:C3:4A:4A:EB:7B:AC:AA:D2
X509v3 Authority Key Identifier:
keyid:F3:3F:6C:CF:57:F1:C4:8F:11:C1:4F:D0:05:40:5A:CC:E3:6D:03:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z9sz1fxxI8RwU_QBUBazONtA7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cdc2ec-d0ee-436a-8d11-f5d6b492394b/1/8z9sz1fxxI8RwU_QBUBazONtA7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:d8:10:43:56:05:08:96:0b:de:1a:23:6a:94:2c:74:11:
08:ba:6f:7f:5c:09:03:86:00:fd:00:f6:38:bc:ed:92:61:4e:
06:ef:cb:26:20:fc:88:5d:a8:24:28:82:28:a0:30:bf:de:ee:
d8:1f:58:e0:f6:31:cc:3a:c1:eb:86:dc:e2:68:bc:26:df:81:
48:d1:4f:26:23:99:4c:60:c2:10:33:26:83:46:e9:db:21:18:
e8:ee:e3:90:a3:bc:8d:aa:04:20:2a:d6:a8:8b:59:92:b9:d4:
a4:b2:88:4c:08:b2:ff:60:db:ff:49:5f:35:3a:ef:20:fe:88:
f7:31:30:af:e6:1f:0e:d2:7d:b4:ff:e6:bf:26:e9:c6:be:56:
98:75:08:c6:70:93:46:92:09:6b:77:c4:03:fc:53:d2:e1:72:
be:f4:0c:96:68:2a:7a:fb:f4:0f:86:78:79:38:70:cf:06:63:
aa:ec:fe:fc:25:da:3b:18:b8:39:ad:9d:33:0b:93:a1:1b:d9:
9c:e5:ca:f1:59:6b:c9:c0:77:87:9b:45:2e:90:09:58:73:bc:
e3:1c:57:61:73:c2:57:20:7d:06:71:37:ac:aa:36:e0:8a:bb:
ff:79:79:b1:c0:90:63:94:be:8d:96:b9:f7:6d:80:91:25:b1:
c8:16:dd:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WRLOgAf7HRhglIDJivXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2Y2Y2NmNTdmMWM0OGYxMWMxNGZkMDA1NDA1YWNjZTM2
ZDAzYjgwHhcNMjUxMDE5MTIwMTU5WhcNMjUxMDIwMTIwMTU5WjAzMTEwLwYDVQQD
EygwMGRkNTI1M2VlYjJiNzNlZDkwZTg5YWZjMzRhNGFlYjdiYWNhYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH6ykF9uwnxMQZalyJvX10BbVzwU
Agry7FIKNOJATm34O8EWiHXiZD95NZ+j07OD8U+2hMOWzD9sYjp6cnTbaBdhZvI7
VMuaFzvUXqNWqLLfb9SIleFicrKFgDJ+xKEXqDHGN8o7HswkWVJwuyNvZjbu/AUf
mS6bo9l/mrpzS8PU8eyKI2Y9blSkYdU8aqOAM1VBG19f5SDFw0EN3adsd5pEEJIU
/C64D+u9Cxh1E2FRyTJ73dtumdX4tywIQ6kznwA8zL/i1gUgsfw0Fj+E/slzprtX
dhuiNQiPdjrT2DkFGgU5ksCsVp+CFuRdb9E5WdFEOWuxuEnyOqpl0OsYnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADdUlPusrc+2Q6Jr8NKSut7rKrSMB8GA1UdIwQY
MBaAFPM/bM9X8cSPEcFP0AVAWszjbQO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEt
ZjVkNmI0OTIzOTRiLzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jZGMyZWMtZDBlZS00MzZhLThkMTEtZjVkNmI0OTIzOTRi
LzEvOHo5c3oxZnh4SThSd1VfUUJVQmF6T050QTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqjYEENW
BQiWC94aI2qULHQRCLpvf1wJA4YA/QD2OLztkmFOBu/LJiD8iF2oJCiCKKAwv97u
2B9Y4PYxzDrB64bc4mi8Jt+BSNFPJiOZTGDCEDMmg0bp2yEY6O7jkKO8jaoEICrW
qItZkrnUpLKITAiy/2Db/0lfNTrvIP6I9zEwr+YfDtJ9tP/mvybpxr5WmHUIxnCT
RpIJa3fEA/xT0uFyvvQMlmgqevv0D4Z4eThwzwZjquz+/CXaOxi4Oa2dMwuToRvZ
nOXK8VlrycB3h5tFLpAJWHO84xxXYXPCVyB9BnE3rKo24Iq7/3l5scCQY5S+jZa5
922AkSWxyBbdeg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:29 2025 by rpki-client