Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json)
Hash identifier: hwXceUAcxzHH31/oTH7LtLGuD+GGJyn3U9uEwfoaJxU=
Subject key identifier: 56:40:C0:FA:7B:77:90:D0:A4:8B:02:2C:6D:9A:A8:CD:E5:40:68:BB
Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Certificate serial: 0199FCFD2BE83BE0B772F50283FBBB4DD1E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
Manifest number: 0669
Signing time: Sun 19 Oct 2025 15:01:14 +0000
Manifest this update: Sun 19 Oct 2025 15:01:14 +0000
Manifest next update: Mon 20 Oct 2025 15:01:14 +0000
Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: aAWIpBHNqP/PWnJv4n9TPZ4RyzM3NnCU1IXg1k6G5HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:2b:e8:3b:e0:b7:72:f5:02:83:fb:bb:4d:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Validity
Not Before: Oct 19 15:01:14 2025 GMT
Not After : Oct 20 15:01:14 2025 GMT
Subject: CN=5640c0fa7b7790d0a48b022c6d9aa8cde54068bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:89:cd:41:90:c3:11:42:fc:62:03:81:d0:
9c:d4:60:11:59:c2:76:39:6b:fa:ec:3a:e2:1f:9e:
b8:bb:26:8d:73:5f:85:ab:95:95:89:6b:7a:c9:fa:
5f:2f:23:8b:36:22:49:17:d0:23:59:d1:8e:5f:53:
46:93:eb:d5:8f:a8:27:55:0a:60:cb:40:0c:e3:f2:
64:74:e7:0d:c9:9a:4e:86:9d:07:25:24:f3:00:2c:
ec:0d:a7:a1:44:3f:2d:9e:9b:f4:93:30:ce:e6:f8:
97:97:a8:e4:85:7e:44:19:c4:ca:46:9f:19:07:a3:
ef:d0:2a:65:22:6f:e8:8f:bc:28:63:10:b1:09:b5:
df:dd:db:67:61:e3:d9:06:2b:2b:e0:78:6e:f9:fc:
a0:90:d4:5e:0b:4c:1b:c9:c5:9e:b9:31:74:b0:0f:
36:fe:af:ef:56:0a:18:b9:c0:66:96:1a:8d:b5:5b:
68:4d:52:1f:01:f0:ff:92:f8:f5:f3:1c:28:32:ea:
72:c2:fc:a3:d0:da:bf:4c:92:64:65:65:49:0f:08:
13:9e:c3:aa:b3:8e:89:cd:84:e9:6e:fb:cb:36:7f:
a4:84:83:bd:39:c8:51:87:f5:12:ea:8d:ff:8d:58:
cd:64:ff:32:d4:27:f3:91:45:d9:2d:ed:ea:be:f1:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:40:C0:FA:7B:77:90:D0:A4:8B:02:2C:6D:9A:A8:CD:E5:40:68:BB
X509v3 Authority Key Identifier:
keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6c:b5:23:f0:77:61:11:8c:bf:65:2b:96:e7:2f:bf:c8:c3:
02:c3:e7:8f:3a:f5:58:5a:a1:c5:16:04:0d:33:5e:b1:16:20:
ad:d5:b8:09:47:96:f3:ec:4b:ae:a0:9e:d8:eb:48:c0:44:8e:
b9:0b:93:91:0c:96:77:58:d2:f6:0a:27:55:fe:00:3b:72:95:
5e:47:ea:2b:64:c5:81:0f:19:42:cd:7d:c6:b0:89:47:1e:5d:
f2:73:50:7d:50:ba:a8:9c:6c:85:77:de:fb:fe:64:3b:22:03:
ab:3c:ef:4d:c6:8f:0b:45:a0:da:5d:4b:5e:a7:75:3a:cc:43:
c2:0f:0f:7c:52:53:01:18:3b:35:59:05:1f:b3:2c:f8:12:72:
6a:b0:e8:3d:bc:a0:e1:1a:bf:46:57:b6:a7:b0:d0:2b:f4:28:
9a:72:38:fb:ac:ba:2d:4c:8e:5b:2d:d6:17:29:3c:02:9a:d4:
2d:bd:97:7c:d3:90:a8:d2:42:80:68:7b:b1:48:ff:d1:f0:c9:
be:1f:be:b5:f7:b8:34:8b:48:97:ce:68:2b:bf:0b:af:89:fb:
05:2a:6e:93:a7:60:47:5e:17:fc:fd:fe:db:25:0c:38:26:0d:
63:c7:f6:42:30:39:d7:32:9e:d2:5f:96:af:3a:bf:dd:57:96:
6b:8c:2f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/SvoO+C3cvUCg/u7TdHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOWQ0NmE2YTMzNjM1M2E5MGYxNzRmYTk5MGZjMjI0MTIw
MWViMWMwHhcNMjUxMDE5MTUwMTE0WhcNMjUxMDIwMTUwMTE0WjAzMTEwLwYDVQQD
Eyg1NjQwYzBmYTdiNzc5MGQwYTQ4YjAyMmM2ZDlhYThjZGU1NDA2OGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobaJzUGQwxFC/GIDgdCc1GARWcJ2
OWv67DriH564uyaNc1+Fq5WViWt6yfpfLyOLNiJJF9AjWdGOX1NGk+vVj6gnVQpg
y0AM4/JkdOcNyZpOhp0HJSTzACzsDaehRD8tnpv0kzDO5viXl6jkhX5EGcTKRp8Z
B6Pv0CplIm/oj7woYxCxCbXf3dtnYePZBisr4Hhu+fygkNReC0wbycWeuTF0sA82
/q/vVgoYucBmlhqNtVtoTVIfAfD/kvj18xwoMupywvyj0Nq/TJJkZWVJDwgTnsOq
s46JzYTpbvvLNn+khIO9OchRh/US6o3/jVjNZP8y1CfzkUXZLe3qvvF8JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZAwPp7d5DQpIsCLG2aqM3lQGi7MB8GA1UdIwQY
MBaAFLGdRqajNjU6kPF0+pkPwiQSAescMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMt
NTk0YzY5ZmIwNzExLzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMtNTk0YzY5ZmIwNzEx
LzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2y1I/B3
YRGMv2Urlucvv8jDAsPnjzr1WFqhxRYEDTNesRYgrdW4CUeW8+xLrqCe2OtIwESO
uQuTkQyWd1jS9gonVf4AO3KVXkfqK2TFgQ8ZQs19xrCJRx5d8nNQfVC6qJxshXfe
+/5kOyIDqzzvTcaPC0Wg2l1LXqd1OsxDwg8PfFJTARg7NVkFH7Ms+BJyarDoPbyg
4Rq/Rle2p7DQK/QomnI4+6y6LUyOWy3WFyk8AprULb2XfNOQqNJCgGh7sUj/0fDJ
vh++tfe4NItIl85oK78Lr4n7BSpuk6dgR14X/P3+2yUMOCYNY8f2QjA51zKe0l+W
rzq/3VeWa4wveQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:44 2025 by rpki-client