Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: W1yGXHCMt5DNug11nU7qiSJErWGpcAvapy7c5SBnEOU=
Subject key identifier: B8:F9:65:8D:33:96:6B:0F:3D:65:BE:C7:FB:72:29:FE:C4:E5:29:1A
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 0199FC2188C456D29BB15207957EC584B185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 082B
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: GGLneg62Gx+r/CDaUZV8TL3Aja6c+1nhbidiq2JVS7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:88:c4:56:d2:9b:b1:52:07:95:7e:c5:84:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=b8f9658d33966b0f3d65bec7fb7229fec4e5291a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:c7:39:ad:d1:a2:cd:5f:a0:58:70:e7:bc:
ed:37:b6:d9:02:cb:9d:73:8d:83:34:ad:d2:a5:f9:
ae:cc:9c:b1:69:f5:0c:63:eb:16:78:24:05:9a:ab:
d0:01:12:30:c9:45:61:3f:73:d7:b4:ec:54:d0:b4:
42:f3:f0:31:ba:93:fe:b1:41:b4:aa:e7:ff:79:2a:
41:82:a1:41:e0:b8:2e:35:f7:8e:60:46:a8:b3:c1:
10:1e:db:19:66:35:47:2e:2d:04:cf:67:33:7d:9b:
49:28:95:6d:b7:11:f0:37:fc:ef:19:c0:03:fc:b6:
08:10:01:08:80:2d:d8:9f:77:70:ed:ba:63:43:dc:
90:31:e0:7b:7c:65:d9:34:be:26:71:01:b1:77:d9:
3e:26:11:a3:b1:aa:7a:fa:d8:fb:a2:b7:a1:e1:e6:
ce:76:ca:74:e7:68:d6:23:97:9c:10:6f:d9:06:37:
9f:4a:2a:19:65:be:4e:18:d0:f9:1e:ae:e6:b3:eb:
0e:37:a4:b5:94:05:03:b2:53:6d:73:ad:4e:8d:61:
8b:0b:09:96:a2:95:13:a1:c2:32:b2:e0:7b:19:ea:
38:6f:90:5a:4b:df:3b:6d:cb:83:f6:8f:49:b7:fb:
ae:01:20:55:2d:67:e7:d5:44:84:fb:ed:f4:7b:22:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:65:8D:33:96:6B:0F:3D:65:BE:C7:FB:72:29:FE:C4:E5:29:1A
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:6a:f2:c9:cc:2e:a5:4a:ce:69:62:43:35:02:62:ce:9f:
f6:94:ce:c2:0e:02:f2:cd:19:08:5d:8d:4e:da:5b:58:ef:c8:
61:17:77:5b:a1:70:7d:9b:34:a0:ca:a7:8a:b0:f0:5b:51:60:
57:70:6c:89:6b:92:e9:07:3c:41:66:5d:94:4c:c6:91:6c:f5:
58:b8:f7:bc:5c:0a:08:10:9d:38:cc:ef:15:77:24:21:aa:a2:
1b:44:b4:94:7c:fc:0e:ce:c9:17:f2:17:40:df:5c:af:38:aa:
2b:64:47:1a:00:40:60:ef:96:f0:e9:9a:7a:c3:0a:ac:86:a5:
86:65:8b:23:c0:6b:5d:dd:48:52:24:e6:c6:e6:70:5f:34:de:
39:25:94:4e:e6:c9:87:46:a0:e9:98:73:85:f8:4b:72:46:93:
1a:a1:7c:03:2c:90:f4:33:e7:c9:fb:98:7b:40:c4:d8:26:f7:
0b:c8:07:7a:0c:37:c9:8b:7d:5d:af:61:3f:e1:4c:bd:94:ef:
11:68:b0:38:13:91:9a:a4:33:c4:12:7a:c0:48:83:3c:3f:11:
84:5c:ce:0d:fd:e9:10:b6:2f:07:2d:28:af:a7:de:a0:3a:2d:
bd:c3:70:c7:f5:bc:c8:3b:bf:d6:49:8a:df:0f:31:90:d6:4c:
6d:20:73:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IYjEVtKbsVIHlX7FhLGFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjVhMjFiNTYxYmE4NjY1Y2Y3OWZiZjQ0YzMxOTU5ZGUy
OGYyMTYwHhcNMjUxMDE5MTEwMTIwWhcNMjUxMDIwMTEwMTIwWjAzMTEwLwYDVQQD
EyhiOGY5NjU4ZDMzOTY2YjBmM2Q2NWJlYzdmYjcyMjlmZWM0ZTUyOTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIDHOa3Ros1foFhw57ztN7bZAsud
c42DNK3SpfmuzJyxafUMY+sWeCQFmqvQARIwyUVhP3PXtOxU0LRC8/AxupP+sUG0
quf/eSpBgqFB4LguNfeOYEaos8EQHtsZZjVHLi0Ez2czfZtJKJVttxHwN/zvGcAD
/LYIEAEIgC3Yn3dw7bpjQ9yQMeB7fGXZNL4mcQGxd9k+JhGjsap6+tj7oreh4ebO
dsp052jWI5ecEG/ZBjefSioZZb5OGND5Hq7ms+sON6S1lAUDslNtc61OjWGLCwmW
opUTocIysuB7Geo4b5BaS987bcuD9o9Jt/uuASBVLWfn1USE++30eyJbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLj5ZY0zlmsPPWW+x/tyKf7E5SkaMB8GA1UdIwQY
MBaAFGdlohtWG6hmXPefv0TDGVneKPIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYt
ZWFkMDQxNzc0ZTA3LzEvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYtZWFkMDQxNzc0ZTA3
LzEvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsJq8snM
LqVKzmliQzUCYs6f9pTOwg4C8s0ZCF2NTtpbWO/IYRd3W6FwfZs0oMqnirDwW1Fg
V3BsiWuS6Qc8QWZdlEzGkWz1WLj3vFwKCBCdOMzvFXckIaqiG0S0lHz8Ds7JF/IX
QN9crziqK2RHGgBAYO+W8OmaesMKrIalhmWLI8BrXd1IUiTmxuZwXzTeOSWUTubJ
h0ag6ZhzhfhLckaTGqF8AyyQ9DPnyfuYe0DE2Cb3C8gHegw3yYt9Xa9hP+FMvZTv
EWiwOBORmqQzxBJ6wEiDPD8RhFzODf3pELYvBy0or6feoDotvcNwx/W8yDu/1kmK
3w8xkNZMbSBzVA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:52 2025 by rpki-client