Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: sV5PDvHd6Ob/KhRXsUMuvx8HayB2dXelQHIidKbOyt8=
Subject key identifier: C2:DD:17:EA:B2:56:73:19:AC:03:25:9A:89:AA:CD:A7:8A:B3:7B:9E
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 019A01B5AAA7BC54398D567599D5E9E5AED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 13:01:14 +0000
Manifest this update: Mon 20 Oct 2025 13:01:14 +0000
Manifest next update: Tue 21 Oct 2025 13:01:14 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: EnXDKvplVhiKZSZcnSx7CscY0nYLtt6Vy5yf+XX3CoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:aa:a7:bc:54:39:8d:56:75:99:d5:e9:e5:ae:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: Oct 20 13:01:14 2025 GMT
Not After : Oct 21 13:01:14 2025 GMT
Subject: CN=c2dd17eab2567319ac03259a89aacda78ab37b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:22:0d:4e:e5:0f:b1:54:54:98:0d:32:bf:
5e:26:11:c9:89:5c:46:bb:2b:1f:00:ca:f5:a2:a7:
5a:f5:20:eb:a8:b4:89:84:d3:2b:15:70:37:b8:48:
35:a3:23:be:c2:b4:01:61:9a:f9:26:64:07:90:e1:
22:cf:b4:7f:60:ab:20:a6:6c:76:61:45:a4:d8:75:
89:67:d5:db:80:ef:07:c9:4c:c4:78:bd:4a:ea:73:
79:2f:a2:52:c1:2d:5e:fa:79:e5:7f:46:82:da:34:
1b:5c:b4:06:41:7e:60:f4:60:28:58:13:18:1b:e7:
25:0f:95:10:2a:dc:e0:ad:f2:42:93:2d:82:76:66:
78:ce:bf:38:5a:07:55:4f:ec:a5:4d:4c:60:a9:ce:
70:64:84:ff:9d:41:4e:fa:f4:b6:fc:ca:32:0d:2e:
14:87:78:42:49:11:2c:48:48:b4:76:8e:27:38:f7:
12:19:3d:12:4f:5a:44:c8:77:b4:b6:67:e4:0e:fd:
61:5d:2a:66:53:c7:e0:a3:ed:84:ad:d6:48:64:ea:
22:b2:08:84:f9:0e:0b:fc:04:2d:67:ae:8a:64:d6:
70:b9:36:f5:59:2f:76:f5:e6:d7:b2:2c:aa:f1:c4:
ff:76:7f:c1:df:4e:d0:99:23:5d:f1:3a:23:44:5f:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:17:EA:B2:56:73:19:AC:03:25:9A:89:AA:CD:A7:8A:B3:7B:9E
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e1:dc:c1:90:05:e8:78:56:de:fe:a6:71:6f:7d:6d:fd:99:
ed:69:19:3d:26:a3:d0:61:0c:b0:4e:53:53:42:75:67:8c:e6:
ef:13:ab:c7:45:1d:9a:90:59:8c:c1:11:2c:56:c9:64:1f:b0:
e2:a6:10:01:fe:95:35:f2:8d:44:71:5c:ce:c6:9c:12:f1:5f:
e9:15:e6:13:22:bf:20:6a:06:52:3f:cf:b1:ab:f0:6e:c7:0b:
56:4d:a6:c5:e2:0e:b6:b4:cd:f4:bc:9a:31:9a:04:8c:d7:b2:
55:be:73:60:e0:d5:1e:18:e4:f8:8f:b7:fd:97:cc:f3:9c:7c:
c3:da:f1:7b:86:c8:1d:d6:8a:3d:b1:cf:dd:8d:9c:0d:b2:f7:
93:2f:d4:96:10:3e:a7:5c:2c:9a:3f:71:a1:37:6d:0a:78:13:
1a:91:d5:2e:89:e8:2e:bd:55:2b:32:dd:88:f8:89:ea:8b:d5:
48:94:2b:9c:d7:70:19:2a:4a:98:e5:07:1b:9a:ca:97:39:72:
31:51:a8:1c:e2:11:98:4a:c5:a3:28:ac:b3:fd:bc:7a:1c:16:
a2:d9:91:e9:16:67:7e:08:c4:03:70:c8:bb:d7:11:bc:21:0d:
fd:7a:b4:61:4a:98:76:24:ba:ef:05:44:22:0a:a0:32:07:8b:
63:de:1d:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtaqnvFQ5jVZ1mdXp5a7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzQxZTA3OWViOWRjZjVmYWQ5ZTVkNDhkZGNlMzk2OTc3
Yjc5NzcwHhcNMjUxMDIwMTMwMTE0WhcNMjUxMDIxMTMwMTE0WjAzMTEwLwYDVQQD
EyhjMmRkMTdlYWIyNTY3MzE5YWMwMzI1OWE4OWFhY2RhNzhhYjM3YjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxgiDU7lD7FUVJgNMr9eJhHJiVxG
uysfAMr1oqda9SDrqLSJhNMrFXA3uEg1oyO+wrQBYZr5JmQHkOEiz7R/YKsgpmx2
YUWk2HWJZ9XbgO8HyUzEeL1K6nN5L6JSwS1e+nnlf0aC2jQbXLQGQX5g9GAoWBMY
G+clD5UQKtzgrfJCky2CdmZ4zr84WgdVT+ylTUxgqc5wZIT/nUFO+vS2/MoyDS4U
h3hCSREsSEi0do4nOPcSGT0ST1pEyHe0tmfkDv1hXSpmU8fgo+2ErdZIZOoisgiE
+Q4L/AQtZ66KZNZwuTb1WS929ebXsiyq8cT/dn/B307QmSNd8TojRF+RPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLdF+qyVnMZrAMlmomqzaeKs3ueMB8GA1UdIwQY
MBaAFGfEHgeeudz1+tnl1I3c45aXe3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgt
ZDY0MzE0ZGEwYmI5LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgtZDY0MzE0ZGEwYmI5
LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeHcwZAF
6HhW3v6mcW99bf2Z7WkZPSaj0GEMsE5TU0J1Z4zm7xOrx0UdmpBZjMERLFbJZB+w
4qYQAf6VNfKNRHFczsacEvFf6RXmEyK/IGoGUj/PsavwbscLVk2mxeIOtrTN9Lya
MZoEjNeyVb5zYODVHhjk+I+3/ZfM85x8w9rxe4bIHdaKPbHP3Y2cDbL3ky/UlhA+
p1wsmj9xoTdtCngTGpHVLonoLr1VKzLdiPiJ6ovVSJQrnNdwGSpKmOUHG5rKlzly
MVGoHOIRmErFoyiss/28ehwWotmR6RZnfgjEA3DIu9cRvCEN/Xq0YUqYdiS67wVE
IgqgMgeLY94dfg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:23 2025 by rpki-client