Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: Dwy6K9Tvg1QQb9dcle5jjrRG84DemztkzONZN3trPYM=
Subject key identifier: 70:4A:B6:A2:6A:3E:B2:EC:9C:9A:D5:2E:6B:47:D6:45:9A:BA:DB:7D
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 0199FAD7D36ABE1BD040858B0342C838BCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 0506
Signing time: Sun 19 Oct 2025 05:01:12 +0000
Manifest this update: Sun 19 Oct 2025 05:01:12 +0000
Manifest next update: Mon 20 Oct 2025 05:01:12 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: 7vrrZIN8AP7cU5605UVwJzvqDvjaNW0Xryb9dpO80u4=)
2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d3:6a:be:1b:d0:40:85:8b:03:42:c8:38:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Oct 19 05:01:12 2025 GMT
Not After : Oct 20 05:01:12 2025 GMT
Subject: CN=704ab6a26a3eb2ec9c9ad52e6b47d6459abadb7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:91:ad:62:70:c5:16:42:0a:8c:ec:68:ca:
4c:92:2f:b4:66:bd:93:41:8e:b5:bc:34:09:23:fe:
6b:a8:70:50:a3:06:b7:fe:d7:68:f6:93:81:87:0e:
a6:1a:da:47:85:99:24:d9:a7:4b:19:8d:06:f2:53:
74:ce:6d:18:11:3c:9c:05:22:48:43:fc:22:36:43:
a0:0c:d2:4a:7c:28:56:c1:38:77:6f:50:54:cf:ca:
da:e5:7e:26:36:6a:bd:ba:5c:81:dc:76:3d:ab:bc:
d0:19:8f:c4:6a:7b:94:69:bf:7c:a7:a1:dd:0f:83:
58:15:dd:3d:6f:b2:81:3f:be:c3:3a:a4:c5:7a:e7:
c7:74:9a:64:15:f2:6e:b5:c5:7b:b5:04:fc:c9:6f:
08:27:29:4f:0a:d9:4d:c8:dc:ae:11:1b:06:8b:d7:
f8:9a:6a:11:29:81:46:74:39:63:49:14:df:2e:82:
0a:d4:c3:44:2a:17:c8:3a:6e:cc:81:4a:4d:c5:16:
db:16:6a:c2:04:9f:b5:08:be:c0:e3:27:81:50:e1:
e6:30:f3:d5:27:f9:52:17:cc:4e:70:d0:69:66:fc:
2a:3c:f1:7b:8e:73:ff:4d:7d:2f:d1:d2:ba:9f:5c:
12:b0:af:73:eb:92:2f:27:ec:b6:28:50:73:79:34:
84:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4A:B6:A2:6A:3E:B2:EC:9C:9A:D5:2E:6B:47:D6:45:9A:BA:DB:7D
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b0:11:38:bf:82:46:00:68:b5:b1:3f:ac:c4:b8:bf:5a:ec:
38:b9:cc:26:f0:c1:ed:88:33:4c:74:5a:38:49:4e:77:62:50:
c9:fd:4b:e3:d2:31:ff:e5:3a:2e:3c:31:81:8d:e1:5b:8d:d9:
1e:f9:6d:98:a1:eb:c1:7c:98:ee:7e:d6:f7:bf:b3:c3:05:9e:
46:62:24:d4:13:8b:11:83:79:9c:73:03:90:ec:fa:1c:e2:48:
dd:86:b0:e5:6d:75:6d:1a:d6:fb:3d:a0:b9:57:25:3c:2e:24:
2d:f1:06:d3:c1:e7:18:a4:3d:bf:49:99:32:a4:c8:c3:68:5b:
63:4f:33:89:cf:61:55:b6:25:c2:46:77:6d:07:9a:e0:5a:eb:
0c:12:e8:30:06:88:86:3e:a9:0c:0e:0b:14:2a:79:dc:3d:6c:
66:28:8e:c5:54:81:d0:04:87:88:5c:64:9f:28:d7:ed:01:d6:
f6:e6:61:d3:34:5b:5c:41:3a:e4:4a:d8:95:27:9f:5a:d6:7e:
c8:06:c5:8a:cb:eb:d6:1f:af:e4:f6:c2:e8:62:08:15:80:d5:
a8:d7:72:d6:9e:d5:97:cf:20:af:53:94:f5:16:1f:a1:46:ba:
df:7f:f0:1c:77:95:1f:99:4d:0b:b5:af:30:f0:13:7f:be:bf:
8b:5e:36:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn619NqvhvQQIWLA0LIOLzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTZmYTNmZTQwY2Y3NzA4NTFjODNhZGNhZmFmYjdhNDEw
NzY3OGYwHhcNMjUxMDE5MDUwMTEyWhcNMjUxMDIwMDUwMTEyWjAzMTEwLwYDVQQD
Eyg3MDRhYjZhMjZhM2ViMmVjOWM5YWQ1MmU2YjQ3ZDY0NTlhYmFkYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyeRrWJwxRZCCozsaMpMki+0Zr2T
QY61vDQJI/5rqHBQowa3/tdo9pOBhw6mGtpHhZkk2adLGY0G8lN0zm0YETycBSJI
Q/wiNkOgDNJKfChWwTh3b1BUz8ra5X4mNmq9ulyB3HY9q7zQGY/EanuUab98p6Hd
D4NYFd09b7KBP77DOqTFeufHdJpkFfJutcV7tQT8yW8IJylPCtlNyNyuERsGi9f4
mmoRKYFGdDljSRTfLoIK1MNEKhfIOm7MgUpNxRbbFmrCBJ+1CL7A4yeBUOHmMPPV
J/lSF8xOcNBpZvwqPPF7jnP/TX0v0dK6n1wSsK9z65IvJ+y2KFBzeTSEfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBKtqJqPrLsnJrVLmtH1kWautt9MB8GA1UdIwQY
MBaAFGaW+j/kDPdwhRyDrcr6+3pBB2ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQt
Y2U2OTE1YjQ3MzZmLzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQtY2U2OTE1YjQ3MzZm
LzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7AROL+C
RgBotbE/rMS4v1rsOLnMJvDB7YgzTHRaOElOd2JQyf1L49Ix/+U6LjwxgY3hW43Z
HvltmKHrwXyY7n7W97+zwwWeRmIk1BOLEYN5nHMDkOz6HOJI3Yaw5W11bRrW+z2g
uVclPC4kLfEG08HnGKQ9v0mZMqTIw2hbY08zic9hVbYlwkZ3bQea4FrrDBLoMAaI
hj6pDA4LFCp53D1sZiiOxVSB0ASHiFxknyjX7QHW9uZh0zRbXEE65ErYlSefWtZ+
yAbFisvr1h+v5PbC6GIIFYDVqNdy1p7Vl88gr1OU9RYfoUa633/wHHeVH5lNC7Wv
MPATf76/i142Kw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:13 2025 by rpki-client