Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: 4LQk2KNYz6UpfTHHPdTuIjG2NmTAsJ2jll+5oVYpJ2g=
Subject key identifier: 32:26:4F:A6:49:94:2A:13:30:24:D0:6B:0E:F8:3F:B0:1E:B2:EC:7A
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 0199FD343D94F7A6DEF5C4A1D15507F6FB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: HFN5MH980DuANiJdbkL6ohnJj_k.roa (hash: Em5iJ0QcHb70vMs6Q6eEnq42l8uUpkT28Ocl0kx6uPc=)
2: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: eXcSlY0lMsStD3id8ggEJATg3MBVPzyxuaFEhV9THuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3d:94:f7:a6:de:f5:c4:a1:d1:55:07:f6:fb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=32264fa649942a133024d06b0ef83fb01eb2ec7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:6c:35:83:36:9d:09:d5:c5:84:35:1e:e8:
0b:cf:eb:e6:e5:38:b5:5c:32:e9:01:85:86:ed:f5:
af:ff:2a:18:5d:91:b4:c3:07:cb:29:82:46:f1:22:
64:69:1b:c1:a1:3a:14:54:84:11:fc:05:30:34:0a:
15:4a:94:b7:78:da:c5:80:b7:96:84:02:8e:1e:1f:
13:a3:b7:6d:06:7e:f8:d6:fc:eb:3c:64:95:43:99:
28:ac:a5:d5:13:7b:ed:6c:fe:1c:0a:36:de:36:78:
3d:9a:96:1d:a6:51:76:93:5c:21:98:b4:f0:c5:e6:
fc:29:d4:30:3f:90:a9:21:bd:a7:b8:bf:80:75:44:
14:8a:2c:5c:c6:a6:b0:81:d1:07:b4:fb:dd:65:98:
f6:56:7e:bc:4f:77:00:fb:a0:7b:2c:fe:ca:c4:e6:
67:1a:7c:c2:ee:05:aa:76:d6:a0:19:d7:28:f1:a6:
7d:d3:8d:38:1a:e0:4d:26:89:21:49:b4:e2:6b:5f:
23:e3:cd:1b:1a:69:e5:f6:27:2c:24:84:bf:f1:e3:
18:c9:2e:ad:2a:26:fc:b5:c8:e4:04:36:38:d0:f8:
d8:3d:fc:10:15:46:d5:20:ce:e7:f1:33:90:d7:34:
71:6f:b0:97:36:31:fa:0e:b5:0e:03:f6:26:56:9e:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:26:4F:A6:49:94:2A:13:30:24:D0:6B:0E:F8:3F:B0:1E:B2:EC:7A
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:e7:c5:10:84:7d:5f:56:1c:27:29:19:7f:49:e8:2f:5d:96:
bb:d3:56:ae:01:99:68:0d:b1:48:2c:65:cb:38:2c:07:72:d0:
89:98:3c:f2:6e:8e:c4:51:fa:2a:01:1a:7a:0c:52:c4:f3:37:
b9:6e:59:c1:a1:4c:d8:a9:1c:c0:e2:e8:88:6b:d2:73:be:80:
e4:e3:62:e4:f3:d6:bb:9f:b2:f8:d0:77:bb:f5:c9:c9:58:b3:
49:1c:5a:40:02:8a:74:df:2b:a0:c5:c0:b6:dd:47:0f:94:79:
dd:3b:ae:92:08:36:b1:59:c4:79:51:a5:fd:e4:f9:0c:33:74:
db:db:4d:51:21:d5:09:06:90:5b:7a:a3:a7:f5:26:a6:cf:d6:
50:42:ca:f5:56:ec:2f:c4:dc:96:15:be:73:f3:19:7e:0e:52:
b9:2b:4e:88:d4:51:ab:38:52:14:86:ba:55:88:2a:63:a9:ca:
34:dd:8e:1a:ab:06:47:8a:2f:a7:a3:e8:c2:b7:cb:c5:4f:d6:
e0:5c:e7:d9:c9:3d:11:71:b8:03:25:90:1d:ce:a3:ed:d4:e0:
46:9a:a8:55:cc:f5:97:2a:3c:1e:a5:8e:68:ae:11:48:8b:32:
97:26:d1:ee:fc:f2:46:0e:ab:89:92:e9:07:0a:7f:b9:55:00:
fb:0b:f8:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ND2U96be9cSh0VUH9vtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDA1ODBlMTcyNWY0NWRlMTA2Yjk3Zjc3ZDljZDc2YmM0
ZGY4MDYwHhcNMjUxMDE5MTYwMTIzWhcNMjUxMDIwMTYwMTIzWjAzMTEwLwYDVQQD
EygzMjI2NGZhNjQ5OTQyYTEzMzAyNGQwNmIwZWY4M2ZiMDFlYjJlYzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6psNYM2nQnVxYQ1HugLz+vm5Ti1
XDLpAYWG7fWv/yoYXZG0wwfLKYJG8SJkaRvBoToUVIQR/AUwNAoVSpS3eNrFgLeW
hAKOHh8To7dtBn741vzrPGSVQ5korKXVE3vtbP4cCjbeNng9mpYdplF2k1whmLTw
xeb8KdQwP5CpIb2nuL+AdUQUiixcxqawgdEHtPvdZZj2Vn68T3cA+6B7LP7KxOZn
GnzC7gWqdtagGdco8aZ90404GuBNJokhSbTia18j480bGmnl9icsJIS/8eMYyS6t
Kib8tcjkBDY40PjYPfwQFUbVIM7n8TOQ1zRxb7CXNjH6DrUOA/YmVp7sKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDImT6ZJlCoTMCTQaw74P7Aesux6MB8GA1UdIwQY
MBaAFGbQWA4XJfRd4Qa5f3fZzXa8TfgGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMt
OTVkOTVhY2U4MjgxLzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82ZTljMDctMzNlZC00ZWU0LTgzZWMtOTVkOTVhY2U4Mjgx
LzEvWnRCWURoY2w5RjNoQnJsX2Q5bk5kcnhOLUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+fFEIR9
X1YcJykZf0noL12Wu9NWrgGZaA2xSCxlyzgsB3LQiZg88m6OxFH6KgEaegxSxPM3
uW5ZwaFM2KkcwOLoiGvSc76A5ONi5PPWu5+y+NB3u/XJyVizSRxaQAKKdN8roMXA
tt1HD5R53Tuukgg2sVnEeVGl/eT5DDN029tNUSHVCQaQW3qjp/Umps/WUELK9Vbs
L8TclhW+c/MZfg5SuStOiNRRqzhSFIa6VYgqY6nKNN2OGqsGR4ovp6PowrfLxU/W
4Fzn2ck9EXG4AyWQHc6j7dTgRpqoVcz1lyo8HqWOaK4RSIsylybR7vzyRg6riZLp
Bwp/uVUA+wv4jA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:39 2025 by rpki-client