Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: R1RtuTxSUOY91RYRxrL0aBTG8m02lieWo4kGmf6k2T4=
Subject key identifier: 1C:AD:0F:25:DB:07:10:44:6B:AF:DF:D8:7F:53:63:FC:BB:C4:1D:68
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 0199FC21487D919FDB589CFE0DB59DA64D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 104A
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: hxIHbQ634yWRIdCJgyMhe/7RIpL87bQ0hvyeX6qp0jo=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:48:7d:91:9f:db:58:9c:fe:0d:b5:9d:a6:4d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=1cad0f25db0710446bafdfd87f5363fcbbc41d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:fb:37:47:a0:de:1c:93:f0:58:5a:4f:19:
24:86:1a:b3:2c:35:90:30:48:b4:cd:e4:34:4d:c0:
48:c7:60:e6:22:9c:46:bd:d1:13:51:9b:19:98:53:
0e:70:7b:c4:ec:60:19:12:0d:7b:89:ad:a4:a0:fe:
fb:b9:5c:3a:76:80:63:f6:4f:f1:b9:f1:f5:0e:89:
7f:86:59:3e:86:ef:91:8d:2c:14:af:0e:4b:ac:e9:
19:6c:7d:86:21:c3:e7:51:74:b9:eb:e1:31:5c:48:
88:c9:7d:20:e9:6b:fe:12:d6:88:86:27:7d:e8:02:
d1:f3:ee:11:09:96:e8:38:1a:6f:09:73:19:b4:7d:
4f:db:02:83:64:99:41:b2:bc:d5:f8:07:f2:7e:77:
88:77:cb:d4:dd:16:3c:f0:6b:f2:70:9d:ec:26:fd:
02:57:14:f2:09:d3:4e:92:be:65:f7:38:cf:6f:7f:
4e:94:ca:7c:ee:ff:27:b5:31:95:e4:07:ce:41:a5:
bb:a5:fd:3f:5e:11:1e:db:81:21:b5:22:d7:94:4e:
c6:6c:43:35:e2:75:b9:c8:85:31:b7:3c:c9:d9:03:
a7:00:d2:24:61:aa:a1:7e:17:4d:d2:f8:1a:5b:06:
d1:43:f7:a2:7d:99:73:ec:73:9f:0c:40:c0:81:3b:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AD:0F:25:DB:07:10:44:6B:AF:DF:D8:7F:53:63:FC:BB:C4:1D:68
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c5:8f:e7:0d:6c:46:6e:90:f8:4f:6b:cb:a3:62:62:ce:db:
eb:46:03:30:ea:69:b8:0b:d0:d9:01:0f:d8:3d:fa:6b:97:87:
cf:1a:67:f5:d8:87:0a:47:64:04:f4:43:c2:63:3b:a3:57:b5:
02:41:29:8b:97:01:bc:65:f0:35:c8:61:9b:d8:bc:af:14:d3:
96:17:53:44:98:9a:e6:dc:42:ee:e9:c6:2d:8d:0f:df:3f:3e:
82:6c:9d:7d:61:84:ec:a4:77:22:f0:ac:94:7d:10:d1:23:91:
33:13:71:21:03:c6:db:37:da:41:78:82:c2:ea:34:a6:ba:d1:
25:59:bd:ef:13:e2:57:38:1b:4a:7f:97:01:7c:3a:8e:d9:a0:
f8:0c:2e:91:4d:16:9d:59:ad:ba:bd:ce:e2:2d:a5:20:fc:2a:
af:b1:19:53:a3:63:fe:30:49:08:eb:c7:80:4a:87:8c:5e:d1:
42:67:46:bf:00:37:cd:18:63:a3:c3:5c:1a:c3:b8:a9:1d:62:
cd:15:3c:03:9f:33:19:bf:f3:95:ab:2e:e4:9c:13:e2:57:29:
7c:a9:6f:5a:16:9e:a4:6f:12:d8:5b:6c:b9:62:0b:46:11:b2:
50:4c:01:c1:24:e9:8f:c7:87:81:04:8a:bd:7d:57:dc:23:b8:
69:82:67:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUh9kZ/bWJz+DbWdpk2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODNkMzIyZWYyNGM4NzE5OGI3NjVlYTFkMWM0MmMyODNh
N2Y4ZjYwHhcNMjUxMDE5MTEwMTAzWhcNMjUxMDIwMTEwMTAzWjAzMTEwLwYDVQQD
EygxY2FkMGYyNWRiMDcxMDQ0NmJhZmRmZDg3ZjUzNjNmY2JiYzQxZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqH7N0eg3hyT8FhaTxkkhhqzLDWQ
MEi0zeQ0TcBIx2DmIpxGvdETUZsZmFMOcHvE7GAZEg17ia2koP77uVw6doBj9k/x
ufH1Dol/hlk+hu+RjSwUrw5LrOkZbH2GIcPnUXS56+ExXEiIyX0g6Wv+EtaIhid9
6ALR8+4RCZboOBpvCXMZtH1P2wKDZJlBsrzV+AfyfneId8vU3RY88GvycJ3sJv0C
VxTyCdNOkr5l9zjPb39OlMp87v8ntTGV5AfOQaW7pf0/XhEe24EhtSLXlE7GbEM1
4nW5yIUxtzzJ2QOnANIkYaqhfhdN0vgaWwbRQ/eifZlz7HOfDEDAgTujywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBytDyXbBxBEa6/f2H9TY/y7xB1oMB8GA1UdIwQY
MBaAFGWD0yLvJMhxmLdl6h0cQsKDp/j2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMt
NWJlOWUxMTdkYmRhLzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDk3MWEtODg5MS00YjUzLTk0NGMtNWJlOWUxMTdkYmRh
LzEvWllQVEl1OGt5SEdZdDJYcUhSeEN3b09uLVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMWP5w1s
Rm6Q+E9ry6NiYs7b60YDMOppuAvQ2QEP2D36a5eHzxpn9diHCkdkBPRDwmM7o1e1
AkEpi5cBvGXwNchhm9i8rxTTlhdTRJia5txC7unGLY0P3z8+gmydfWGE7KR3IvCs
lH0Q0SORMxNxIQPG2zfaQXiCwuo0prrRJVm97xPiVzgbSn+XAXw6jtmg+AwukU0W
nVmtur3O4i2lIPwqr7EZU6Nj/jBJCOvHgEqHjF7RQmdGvwA3zRhjo8NcGsO4qR1i
zRU8A58zGb/zlasu5JwT4lcpfKlvWhaepG8S2FtsuWILRhGyUEwBwSTpj8eHgQSK
vX1X3CO4aYJnVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:27 2025 by rpki-client