Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
File: Z2JE3gGQpt1aiZorN7ACua5jLIY.mft (raw, json)
Hash identifier: tSc33jDI6V6rYK0ayl56tzHbIJTeW2NJmsJv92kfXm4=
Subject key identifier: 67:44:D6:87:2F:99:77:4F:8E:00:FF:BF:69:1C:5F:3F:0F:0B:1F:23
Authority key identifier: 67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
Certificate issuer: /CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Certificate serial: 0199FBEB88E2BEB32CFAB0831E646DBA1FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: 21cAYiN5jMpqkJRdEkHSMeQVgkY.roa (hash: KwzUXQv1pIgCUyqyYd3vxndo9n20A9iWRxEC49c1pqI=)
2: Z2JE3gGQpt1aiZorN7ACua5jLIY.crl (hash: Pv485OQSy6g6yd2Egh4Z2Y2yhqd+aWOQQGAggRu80PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:88:e2:be:b3:2c:fa:b0:83:1e:64:6d:ba:1f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=676244de0190a6dd5a899a2b37b002b9ae632c86
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=6744d6872f99774f8e00ffbf691c5f3f0f0b1f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:ae:c6:b0:e6:48:3a:89:c8:8c:58:d0:88:
62:d9:61:8c:1b:cd:bb:c5:98:31:ec:15:4e:91:e1:
f9:4b:3f:d0:87:d2:47:6d:7d:8d:58:b2:49:23:eb:
c0:91:fd:e8:07:21:c4:4f:18:4c:53:a5:67:53:10:
44:5e:62:c2:89:5b:50:2f:62:bf:21:a4:88:f0:1c:
d7:50:d0:4d:be:e6:5b:d6:c7:4f:05:32:ae:3e:c7:
c3:11:41:8a:b8:c3:ff:3c:69:bf:ed:a3:84:fc:a2:
f7:63:70:2c:73:1c:cb:a4:35:8a:2e:4b:6d:6b:7a:
78:a0:b9:4b:56:47:77:09:c2:1c:8f:de:0f:6a:05:
79:84:a7:94:d5:20:cd:70:85:08:f5:ee:30:0d:0f:
68:e7:64:62:8d:22:5c:0f:3c:60:49:a1:af:a4:2e:
f8:58:f6:b1:b0:d2:1f:73:52:b6:5d:ac:4c:31:b8:
a7:79:b2:5c:01:82:25:0c:a3:46:fa:f2:4a:2e:8c:
19:ed:2f:0f:d6:4c:31:45:b2:f1:04:89:7b:d8:6f:
1c:55:ff:e7:1f:83:8e:6b:fb:d5:c2:92:b7:28:e8:
ce:fb:2f:fb:c1:17:0b:bc:3d:9f:08:6d:9c:82:5a:
4e:fc:1e:b7:bc:3b:0d:de:5c:19:81:4d:a8:34:8c:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:44:D6:87:2F:99:77:4F:8E:00:FF:BF:69:1C:5F:3F:0F:0B:1F:23
X509v3 Authority Key Identifier:
keyid:67:62:44:DE:01:90:A6:DD:5A:89:9A:2B:37:B0:02:B9:AE:63:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2JE3gGQpt1aiZorN7ACua5jLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/dcd87f-4aa7-44ff-97bf-ce32d66f30a8/1/Z2JE3gGQpt1aiZorN7ACua5jLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9a:46:09:e9:05:cf:ed:e2:e6:47:02:a8:b7:df:7f:f5:9f:
c9:3a:5f:62:77:09:63:2d:fe:79:26:a3:84:c5:3b:83:de:bd:
21:66:8b:a1:d2:ce:29:f1:95:97:8b:9b:52:30:31:c9:26:f2:
e5:ef:de:6b:93:64:3a:9d:38:88:72:95:66:68:81:0b:43:83:
3d:b9:1e:95:d7:1e:b1:06:aa:33:c6:fc:ca:8b:64:23:bf:47:
a4:01:6b:00:2d:e8:51:fa:c8:b8:c3:c0:92:07:ed:27:b7:15:
69:08:b2:9a:46:df:8f:52:2d:e2:3c:28:d5:71:56:a7:56:40:
8e:ff:82:71:da:81:6c:79:e6:8d:76:89:a0:ae:cd:e2:f1:c9:
dc:aa:76:b4:35:10:64:46:33:d9:df:87:30:ff:42:43:b8:16:
99:cd:2f:c9:ad:4f:d5:f9:0b:60:e1:0a:18:5c:59:72:2b:ec:
2d:21:85:c7:04:ef:29:a2:82:6f:d8:8b:4c:23:9e:c8:56:1f:
63:8a:5b:95:30:05:a6:3c:5c:39:e0:8d:4d:57:68:90:8a:0e:
99:ec:68:a3:c4:10:84:e1:8b:f9:d4:b8:92:5f:03:b5:60:6f:
b3:e5:50:c9:7a:6a:40:45:08:ca:37:9a:36:58:7b:1c:bf:34:
28:49:00:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764jivrMs+rCDHmRtuh/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjI0NGRlMDE5MGE2ZGQ1YTg5OWEyYjM3YjAwMmI5YWU2
MzJjODYwHhcNMjUxMDE5MTAwMjIxWhcNMjUxMDIwMTAwMjIxWjAzMTEwLwYDVQQD
Eyg2NzQ0ZDY4NzJmOTk3NzRmOGUwMGZmYmY2OTFjNWYzZjBmMGIxZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuiuxrDmSDqJyIxY0Ihi2WGMG827
xZgx7BVOkeH5Sz/Qh9JHbX2NWLJJI+vAkf3oByHETxhMU6VnUxBEXmLCiVtQL2K/
IaSI8BzXUNBNvuZb1sdPBTKuPsfDEUGKuMP/PGm/7aOE/KL3Y3AscxzLpDWKLktt
a3p4oLlLVkd3CcIcj94PagV5hKeU1SDNcIUI9e4wDQ9o52RijSJcDzxgSaGvpC74
WPaxsNIfc1K2XaxMMbinebJcAYIlDKNG+vJKLowZ7S8P1kwxRbLxBIl72G8cVf/n
H4OOa/vVwpK3KOjO+y/7wRcLvD2fCG2cglpO/B63vDsN3lwZgU2oNIzY0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdE1ocvmXdPjgD/v2kcXz8PCx8jMB8GA1UdIwQY
MBaAFGdiRN4BkKbdWomaKzewArmuYyyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYt
Y2UzMmQ2NmYzMGE4LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kY2Q4N2YtNGFhNy00NGZmLTk3YmYtY2UzMmQ2NmYzMGE4
LzEvWjJKRTNnR1FwdDFhaVpvck43QUN1YTVqTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZpGCekF
z+3i5kcCqLfff/WfyTpfYncJYy3+eSajhMU7g969IWaLodLOKfGVl4ubUjAxySby
5e/ea5NkOp04iHKVZmiBC0ODPbkeldcesQaqM8b8yotkI79HpAFrAC3oUfrIuMPA
kgftJ7cVaQiymkbfj1It4jwo1XFWp1ZAjv+CcdqBbHnmjXaJoK7N4vHJ3Kp2tDUQ
ZEYz2d+HMP9CQ7gWmc0vya1P1fkLYOEKGFxZcivsLSGFxwTvKaKCb9iLTCOeyFYf
Y4pblTAFpjxcOeCNTVdokIoOmexoo8QQhOGL+dS4kl8DtWBvs+VQyXpqQEUIyjea
Nlh7HL80KEkAFw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:07 2025 by rpki-client