Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: G56z8r3S0djRdNatghMmF68RLQJXBg8Jy6FDV2K11Dk=
Subject key identifier: 6F:6B:E0:9E:D1:49:9E:98:65:55:C8:09:90:0A:38:18:87:DA:EE:FA
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 0199FCFD84E387379B6D82F3B8FD05070A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa (hash: Nan6DQGHyzFA7VJDUyPb17ZowHybZxaUB4pA1mJmnaY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: rs1nRk3XQVe0XMFAvry/lmTJzzflxpoEQqVI028CIXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:84:e3:87:37:9b:6d:82:f3:b8:fd:05:07:0a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=6f6be09ed1499e986555c809900a381887daeefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:31:7f:5a:d6:d7:f0:54:e4:f6:1f:11:77:8f:
72:3b:ee:52:e0:c0:e9:15:54:71:32:9a:36:f6:4f:
5c:32:46:36:ec:74:a4:4b:4c:d3:8f:c8:58:b0:02:
19:94:db:e2:03:61:e7:1a:38:fa:73:e4:dd:84:d5:
71:60:44:a1:42:aa:a3:d1:c5:3c:14:2f:f1:1f:68:
18:a1:a5:82:17:5c:4f:d1:43:0e:09:c2:ee:8e:2f:
27:56:37:8c:77:a7:cb:ec:43:0d:f8:0c:15:47:98:
33:6e:76:79:69:f5:63:d2:3b:31:ec:20:b8:4f:3b:
61:d1:a8:c8:83:62:37:6b:0e:a2:c3:18:6c:12:b2:
24:ff:0d:9f:75:4f:3f:f5:9c:c0:bf:c8:10:e9:49:
d3:b4:9a:5b:a6:4c:40:81:0c:f0:44:70:40:02:8e:
7e:2a:1e:f4:97:6e:b5:f8:4c:10:f6:d8:4b:88:48:
c3:f4:d3:36:7e:61:94:53:3c:5c:99:de:18:2b:18:
24:62:1b:fa:98:44:1a:bb:5f:30:e4:6b:b5:7f:b8:
99:eb:05:a9:78:91:d6:62:b0:f7:9a:28:8e:26:7d:
aa:20:6e:06:1b:b1:ea:a9:01:57:68:36:8f:91:b7:
54:ef:36:5c:9c:0e:c7:0e:41:9b:7f:d1:2f:5a:82:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:E0:9E:D1:49:9E:98:65:55:C8:09:90:0A:38:18:87:DA:EE:FA
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c1:ff:82:73:8e:c2:b9:61:f6:e9:49:20:42:bc:7e:39:d3:
ef:77:b1:d7:5d:c9:4c:d9:e1:22:68:16:bb:84:cb:91:39:1c:
63:d0:46:f7:9f:cd:79:3f:d0:f2:35:e2:af:0b:0e:25:7f:fe:
9d:69:f5:0d:08:e0:2e:e2:54:5a:11:53:90:85:e7:d0:cf:46:
6e:35:0f:8c:34:15:a4:95:94:65:99:13:8a:c5:6f:f3:b9:cc:
ee:38:b6:0c:0a:d2:5a:0b:a8:29:cd:8f:6b:4e:34:63:11:9b:
47:93:d0:cc:c6:b7:88:61:71:8b:20:9d:0c:72:5f:1b:ca:bd:
14:5d:34:c3:d0:5a:a8:46:7e:cb:3a:fa:78:12:0e:0d:63:e4:
03:01:d4:2a:fc:07:10:2c:a6:bf:48:16:79:75:0a:e9:c6:ba:
fd:c4:c9:87:6c:19:fb:8e:19:d1:0f:3b:bf:42:08:f9:d2:b5:
63:46:b8:f3:28:fd:c0:a3:b2:81:c7:af:89:b0:31:66:a6:54:
07:2c:fd:20:79:4c:7e:04:49:82:99:3b:41:7b:4a:aa:47:bc:
3b:f5:52:9e:90:b1:e3:c5:38:26:57:c2:c7:16:a3:a6:54:70:
43:96:89:63:20:ad:21:7d:e5:35:fa:af:c6:81:7b:93:3a:79:
b8:50:77:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/YTjhzebbYLzuP0FBwqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTg0M2U4MTJiMTZkZWM2MGJiNzA5OGNhNDEzMzExN2Ri
ODQ3NGQwHhcNMjUxMDE5MTUwMTM3WhcNMjUxMDIwMTUwMTM3WjAzMTEwLwYDVQQD
Eyg2ZjZiZTA5ZWQxNDk5ZTk4NjU1NWM4MDk5MDBhMzgxODg3ZGFlZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTF/WtbX8FTk9h8Rd49yO+5S4MDp
FVRxMpo29k9cMkY27HSkS0zTj8hYsAIZlNviA2HnGjj6c+TdhNVxYEShQqqj0cU8
FC/xH2gYoaWCF1xP0UMOCcLuji8nVjeMd6fL7EMN+AwVR5gzbnZ5afVj0jsx7CC4
Tzth0ajIg2I3aw6iwxhsErIk/w2fdU8/9ZzAv8gQ6UnTtJpbpkxAgQzwRHBAAo5+
Kh70l261+EwQ9thLiEjD9NM2fmGUUzxcmd4YKxgkYhv6mEQau18w5Gu1f7iZ6wWp
eJHWYrD3miiOJn2qIG4GG7HqqQFXaDaPkbdU7zZcnA7HDkGbf9EvWoJF3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9r4J7RSZ6YZVXICZAKOBiH2u76MB8GA1UdIwQY
MBaAFM2oQ+gSsW3sYLtwmMpBMxF9uEdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQt
ODQyMWQ3ODFiMDNiLzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84ZWIzMmQtZjdlMy00YTljLWFhYTQtODQyMWQ3ODFiMDNi
LzEvemFoRDZCS3hiZXhndTNDWXlrRXpFWDI0UjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8H/gnOO
wrlh9ulJIEK8fjnT73ex113JTNnhImgWu4TLkTkcY9BG95/NeT/Q8jXirwsOJX/+
nWn1DQjgLuJUWhFTkIXn0M9GbjUPjDQVpJWUZZkTisVv87nM7ji2DArSWguoKc2P
a040YxGbR5PQzMa3iGFxiyCdDHJfG8q9FF00w9BaqEZ+yzr6eBIODWPkAwHUKvwH
ECymv0gWeXUK6ca6/cTJh2wZ+44Z0Q87v0II+dK1Y0a48yj9wKOygcevibAxZqZU
Byz9IHlMfgRJgpk7QXtKqke8O/VSnpCx48U4JlfCxxajplRwQ5aJYyCtIX3lNfqv
xoF7kzp5uFB3Jg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:05 2025 by rpki-client