Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json)
Hash identifier: jRiBc9rDKsVfGqMgwSBpgBtLH4OOanMaK+2WEQUOfbs=
Subject key identifier: A2:4E:3C:84:8B:8C:41:FF:B1:F1:70:47:E3:F7:6A:1F:BC:1F:9C:75
Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Certificate serial: 0199FB7CF69FBE7449E7F20DFC20E3030BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: 9HdHpErjzm6R2MG9_t1v0LR-DNs.roa (hash: 44w8h4Syl3hPm5qmixckaJ+qDBSvg2af/1osG9t19Ig=)
2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: Uo5scRAqy0KM60F3yZprTO+LFFRB+ilebX2FpaTNU0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f6:9f:be:74:49:e7:f2:0d:fc:20:e3:03:0b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=a24e3c848b8c41ffb1f17047e3f76a1fbc1f9c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:30:1f:5a:bc:80:f8:7d:f1:61:9a:d4:08:
ab:23:81:e4:85:21:46:97:11:f3:28:98:02:00:9f:
fd:60:a4:72:ef:83:1e:6c:8e:9c:4f:42:c4:27:de:
61:08:01:b4:d8:30:0e:e1:90:bd:ba:2c:23:f2:8c:
cc:4c:77:23:9b:b4:97:1f:b6:a0:51:33:b8:d2:ef:
2f:da:69:95:b5:16:4e:28:84:a2:df:b6:17:18:dd:
c8:2f:35:0b:26:af:ef:bc:37:60:9b:42:4e:9d:09:
ce:e5:bb:1e:7a:63:49:10:e6:51:2b:74:01:49:36:
a1:95:88:03:a8:e3:6d:0f:b2:38:f2:aa:15:80:ad:
64:5c:0f:93:10:7d:d6:75:0c:33:7d:89:4d:e9:9c:
80:b4:46:41:b9:09:40:8c:b0:63:20:2d:18:95:35:
69:4d:bb:17:88:a2:87:ac:cf:74:59:51:f1:fc:29:
e0:25:53:6a:d5:2e:21:d1:09:38:28:73:34:ce:05:
cd:79:30:b1:46:e2:2e:d2:c8:c5:22:e8:03:d5:dc:
b9:b6:ad:6a:55:14:37:58:55:61:50:12:03:8c:e2:
45:68:f9:2d:6e:9a:84:c8:bc:c4:68:ec:aa:d8:28:
73:0f:13:0e:37:74:ea:f1:96:ef:d5:2f:45:9a:4d:
03:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:3C:84:8B:8C:41:FF:B1:F1:70:47:E3:F7:6A:1F:BC:1F:9C:75
X509v3 Authority Key Identifier:
keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3b:55:46:e3:17:9a:d6:c3:e3:e7:96:78:70:a8:fa:ce:7b:
8b:58:fb:12:cd:24:33:5f:72:db:d5:03:a5:84:c8:c3:22:65:
fe:f2:31:e3:b6:b7:5e:89:4c:14:1b:e4:bc:f3:f8:1b:3f:97:
81:cb:36:11:df:84:55:9d:fa:74:02:aa:1d:79:f4:98:b4:a6:
ab:bf:92:65:ef:57:9b:45:5b:0a:6c:6c:0e:3c:68:6e:ec:a6:
88:cf:2f:83:f0:ab:49:ae:c6:9d:29:8b:f5:0d:2e:e6:31:b1:
f2:30:cf:1e:13:c9:f4:26:72:07:fe:9e:2c:2e:33:73:c8:81:
89:1e:72:29:08:a9:35:40:2b:3e:2b:fa:fe:67:c7:a2:3e:04:
9e:e4:65:e9:bc:d4:0f:aa:91:28:82:73:b1:92:bc:e9:71:cf:
a4:8e:4e:1e:66:0f:8b:e9:47:59:62:80:03:2a:bb:e7:9c:5d:
e7:64:81:12:c0:a8:6d:63:f6:f6:b2:f7:b4:a8:91:4f:ab:97:
e5:c9:31:e2:3d:21:d9:8a:31:f5:45:ba:18:7e:6a:bb:65:01:
fe:61:75:08:18:0d:6b:ea:11:27:63:57:6c:33:fb:de:25:15:
64:47:84:2e:cb:eb:b9:7a:de:ab:31:72:b2:f1:6e:3c:04:39:
dc:5f:17:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPafvnRJ5/IN/CDjAwuuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx
NjQ5OTMwHhcNMjUxMDE5MDgwMTM0WhcNMjUxMDIwMDgwMTM0WjAzMTEwLwYDVQQD
EyhhMjRlM2M4NDhiOGM0MWZmYjFmMTcwNDdlM2Y3NmExZmJjMWY5Yzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA8wH1q8gPh98WGa1AirI4HkhSFG
lxHzKJgCAJ/9YKRy74MebI6cT0LEJ95hCAG02DAO4ZC9uiwj8ozMTHcjm7SXH7ag
UTO40u8v2mmVtRZOKISi37YXGN3ILzULJq/vvDdgm0JOnQnO5bseemNJEOZRK3QB
STahlYgDqONtD7I48qoVgK1kXA+TEH3WdQwzfYlN6ZyAtEZBuQlAjLBjIC0YlTVp
TbsXiKKHrM90WVHx/CngJVNq1S4h0Qk4KHM0zgXNeTCxRuIu0sjFIugD1dy5tq1q
VRQ3WFVhUBIDjOJFaPktbpqEyLzEaOyq2ChzDxMON3Tq8Zbv1S9Fmk0DjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJOPISLjEH/sfFwR+P3ah+8H5x1MB8GA1UdIwQY
MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct
ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm
LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhztVRuMX
mtbD4+eWeHCo+s57i1j7Es0kM19y29UDpYTIwyJl/vIx47a3XolMFBvkvPP4Gz+X
gcs2Ed+EVZ36dAKqHXn0mLSmq7+SZe9Xm0VbCmxsDjxobuymiM8vg/CrSa7GnSmL
9Q0u5jGx8jDPHhPJ9CZyB/6eLC4zc8iBiR5yKQipNUArPiv6/mfHoj4EnuRl6bzU
D6qRKIJzsZK86XHPpI5OHmYPi+lHWWKAAyq755xd52SBEsCobWP29rL3tKiRT6uX
5ckx4j0h2Yox9UW6GH5qu2UB/mF1CBgNa+oRJ2NXbDP73iUVZEeELsvruXreqzFy
svFuPAQ53F8XBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:05 2025 by rpki-client