Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: X2ThojJHbBDUThXAKiT0xEjqrDMU9hU6IujM1VSDA+s=
Subject key identifier: E0:D7:0C:44:97:AC:A3:F8:44:F5:89:97:B5:12:62:1B:8D:47:C6:45
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 0199FCC68A5AF248FA38FC3D9F45CFD65FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:33 +0000
Manifest this update: Sun 19 Oct 2025 14:01:33 +0000
Manifest next update: Mon 20 Oct 2025 14:01:33 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: Af4bBBFkmla7BKNjMPBoGO2hFrYsuORdIm8CfWGibP0=)
2: g9lQSPb8dmpdbKLqGBFuPdvTgEE.roa (hash: x/G0NQa0CDdmSHzLvXB4C3EWMaM6BgsLVqkoNjoJevw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8a:5a:f2:48:fa:38:fc:3d:9f:45:cf:d6:5f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Oct 19 14:01:33 2025 GMT
Not After : Oct 20 14:01:33 2025 GMT
Subject: CN=e0d70c4497aca3f844f58997b512621b8d47c645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:c8:30:51:10:2c:4c:44:10:6d:ea:f4:c1:
ea:19:7b:0b:72:d7:0f:0c:fb:a4:a9:c6:6f:21:9d:
7a:fe:e3:a2:62:93:ce:04:b5:7b:64:6e:57:db:5c:
9d:0f:f1:90:63:7e:54:56:d5:58:01:57:ee:81:a4:
12:80:45:f6:f0:d9:20:0d:e5:df:0e:09:d5:f7:aa:
45:3a:a5:79:5c:21:ab:bd:d4:2f:52:ae:02:23:26:
e3:32:18:93:f3:61:32:79:86:df:fe:ae:d7:9a:8c:
85:95:08:ff:59:b3:57:03:df:f3:b1:a5:d4:37:e4:
7b:b9:2f:54:38:0f:02:ff:90:d8:ca:45:bb:6a:61:
1a:45:71:a0:a6:b4:6c:25:2d:91:eb:73:1b:b8:f2:
ba:0a:3d:97:88:3e:f7:1f:74:39:35:62:e9:8c:42:
78:11:5a:a2:a9:ec:31:a3:5f:29:89:bf:61:a8:53:
44:34:64:65:ef:cd:14:61:2a:8f:97:bc:23:4f:26:
ac:0f:75:57:51:55:54:ae:dc:ae:56:f5:b5:1f:1e:
f6:4f:cc:a1:85:9b:20:d6:0e:3e:fa:71:30:b0:7a:
e0:e8:60:5d:c5:5d:0c:06:24:53:61:d3:be:5a:30:
8d:76:e2:02:7d:9c:fc:45:e4:d3:a9:5e:be:1d:24:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:0C:44:97:AC:A3:F8:44:F5:89:97:B5:12:62:1B:8D:47:C6:45
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1d:de:74:22:1b:f4:97:c9:33:2c:c2:f8:5f:5d:21:36:ee:
d7:fe:f8:7d:37:c8:57:fc:23:56:95:aa:d5:97:57:c4:84:9a:
45:a1:4c:b8:69:cd:e4:69:85:63:55:20:c3:0e:cf:ce:4e:2f:
46:1c:40:68:7f:ab:43:cf:96:95:bc:c1:78:7b:ce:ed:ba:4e:
94:e5:27:ad:b0:d9:dc:64:7c:9a:d7:95:44:47:fb:49:70:01:
5e:65:0e:5a:f6:21:5d:11:e9:78:3f:52:7d:c3:7b:f1:79:1b:
66:07:3a:d3:ca:e8:04:8a:ba:48:0a:5f:e3:0c:17:98:36:63:
a9:ad:9c:63:9c:ca:9c:91:e5:54:09:b5:ca:7b:77:8c:d9:21:
64:e0:a8:32:a3:4b:16:ac:c6:9d:58:b8:10:0a:6c:63:dd:b5:
b1:3c:49:a4:ab:dd:d5:98:a0:67:9f:83:17:74:9d:40:94:cf:
f9:81:28:b7:f4:dc:da:14:aa:5f:2a:0f:06:54:8c:62:6c:61:
6e:b3:4a:99:c3:7a:8a:43:44:66:68:82:44:7b:e7:76:ed:ae:
b8:05:02:3a:45:4b:bb:b6:ce:30:00:7a:8d:d4:53:38:f5:fb:
1d:99:02:c1:10:2e:d1:84:92:6f:45:54:d9:f5:00:2e:c8:94:
ff:7f:b7:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xopa8kj6OPw9n0XP1l/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl
OTdlNmIwHhcNMjUxMDE5MTQwMTMzWhcNMjUxMDIwMTQwMTMzWjAzMTEwLwYDVQQD
EyhlMGQ3MGM0NDk3YWNhM2Y4NDRmNTg5OTdiNTEyNjIxYjhkNDdjNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv3IMFEQLExEEG3q9MHqGXsLctcP
DPukqcZvIZ16/uOiYpPOBLV7ZG5X21ydD/GQY35UVtVYAVfugaQSgEX28NkgDeXf
DgnV96pFOqV5XCGrvdQvUq4CIybjMhiT82EyeYbf/q7XmoyFlQj/WbNXA9/zsaXU
N+R7uS9UOA8C/5DYykW7amEaRXGgprRsJS2R63MbuPK6Cj2XiD73H3Q5NWLpjEJ4
EVqiqewxo18pib9hqFNENGRl780UYSqPl7wjTyasD3VXUVVUrtyuVvW1Hx72T8yh
hZsg1g4++nEwsHrg6GBdxV0MBiRTYdO+WjCNduICfZz8ReTTqV6+HSSVZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODXDESXrKP4RPWJl7USYhuNR8ZFMB8GA1UdIwQY
MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt
ZGMxZGI2N2RiM2NiLzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni
LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHR3edCIb
9JfJMyzC+F9dITbu1/74fTfIV/wjVpWq1ZdXxISaRaFMuGnN5GmFY1Ugww7Pzk4v
RhxAaH+rQ8+WlbzBeHvO7bpOlOUnrbDZ3GR8mteVREf7SXABXmUOWvYhXRHpeD9S
fcN78XkbZgc608roBIq6SApf4wwXmDZjqa2cY5zKnJHlVAm1ynt3jNkhZOCoMqNL
FqzGnVi4EApsY921sTxJpKvd1ZigZ5+DF3SdQJTP+YEot/Tc2hSqXyoPBlSMYmxh
brNKmcN6ikNEZmiCRHvndu2uuAUCOkVLu7bOMAB6jdRTOPX7HZkCwRAu0YSSb0VU
2fUALsiU/3+3CA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:51 2025 by rpki-client