Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: h/Rndoh1iigVybkEnxp54UoG8vuf5KEQw2wPavYRAHQ=
Subject key identifier: 4B:81:61:46:44:8D:55:3E:AC:07:BE:6E:56:BD:40:BE:7E:BD:8E:42
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 0199FD6ADDB6E365553F029B109E87BAA853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0C95
Signing time: Sun 19 Oct 2025 17:01:03 +0000
Manifest this update: Sun 19 Oct 2025 17:01:03 +0000
Manifest next update: Mon 20 Oct 2025 17:01:03 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: FcisWVP/WUxRp83+pEhj0HY7+oc4meRS9WnkICHLqqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:dd:b6:e3:65:55:3f:02:9b:10:9e:87:ba:a8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: Oct 19 17:01:03 2025 GMT
Not After : Oct 20 17:01:03 2025 GMT
Subject: CN=4b816146448d553eac07be6e56bd40be7ebd8e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:df:54:3d:98:f8:ae:6a:0b:de:93:5d:64:
12:cc:c1:8b:0e:b8:54:df:11:8c:0f:26:76:44:16:
78:f1:89:de:7c:c8:d9:82:b2:31:7b:4d:e7:05:4a:
75:8e:f3:b0:e5:b8:7b:27:bd:dd:c6:8e:a9:00:61:
87:6b:fe:cd:46:65:47:02:08:28:74:d5:01:f6:dc:
15:35:60:db:9f:7d:45:ac:6e:9b:b5:82:38:d4:d0:
20:35:cb:10:66:ed:22:99:6d:e8:b8:87:8e:49:b5:
d4:94:81:48:a7:86:01:82:38:23:f1:00:91:60:f5:
2b:34:b5:18:7c:ab:b8:30:db:08:21:82:bb:47:5f:
8c:88:52:cb:da:76:88:be:29:fa:18:15:df:38:dc:
86:5f:92:52:e1:65:f4:9e:6a:1b:0b:ba:bd:d0:75:
5f:52:59:97:71:ae:92:61:b7:2d:38:d1:ff:d0:e7:
00:73:0e:fb:73:f7:ca:3d:53:aa:a8:d4:74:00:02:
6e:a2:0b:95:52:89:67:0a:54:e5:ec:95:c3:97:42:
b0:c8:7d:30:72:d6:75:58:ea:10:da:20:f4:73:9c:
d8:19:8d:43:cd:26:b0:ee:12:3e:37:b9:0a:ae:48:
7a:7b:b6:da:eb:7c:e6:44:f3:bc:91:19:4b:bc:30:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:81:61:46:44:8D:55:3E:AC:07:BE:6E:56:BD:40:BE:7E:BD:8E:42
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a9:19:1d:08:ea:a9:51:d4:9c:3a:ea:59:1f:41:d3:d8:a8:
10:96:8e:e1:14:eb:82:47:93:2e:9a:f3:05:d3:f7:1c:28:f1:
61:e5:61:3a:92:17:fc:38:cd:31:ae:b0:69:4d:e5:86:f1:33:
af:28:80:3d:bc:d2:92:62:f7:dd:24:68:d2:f0:bd:ad:d9:78:
be:5c:73:3d:8b:f4:96:8b:2f:f0:e5:fb:74:8e:21:b6:35:dd:
16:ba:76:6c:3e:06:fe:3d:cf:e5:42:bf:2b:3c:9d:c6:9c:1e:
bf:13:d8:78:9f:4c:aa:ed:ba:e7:5a:86:b7:54:e2:b0:b7:a8:
37:c5:f1:f8:b0:fb:07:a8:c7:aa:67:4b:89:8e:b0:84:4e:9c:
f6:5a:39:9b:cf:dc:c2:20:34:09:81:65:47:59:8c:6b:98:2c:
a4:a7:95:08:37:55:0a:37:50:25:7c:8d:07:30:ed:b5:f2:ff:
56:25:aa:d1:c3:fc:e5:15:c1:a6:c8:67:cd:3b:81:fe:a7:ca:
6c:6d:ef:de:f6:36:6a:62:b7:59:45:48:bb:bd:c7:f0:01:41:
b8:cc:75:ff:5c:2e:2c:4b:13:86:5f:80:11:ce:03:70:55:dc:
9f:43:d7:b2:99:b4:eb:48:51:d5:e0:73:60:08:cc:77:9d:7d:
9d:fa:49:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9at2242VVPwKbEJ6HuqhTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOGU4ZWJkODBmY2Y4ODQ5NzVlNDJiNDZiZjRlNTQ4Nzkz
ZjI5Y2IwHhcNMjUxMDE5MTcwMTAzWhcNMjUxMDIwMTcwMTAzWjAzMTEwLwYDVQQD
Eyg0YjgxNjE0NjQ0OGQ1NTNlYWMwN2JlNmU1NmJkNDBiZTdlYmQ4ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KXfVD2Y+K5qC96TXWQSzMGLDrhU
3xGMDyZ2RBZ48YnefMjZgrIxe03nBUp1jvOw5bh7J73dxo6pAGGHa/7NRmVHAggo
dNUB9twVNWDbn31FrG6btYI41NAgNcsQZu0imW3ouIeOSbXUlIFIp4YBgjgj8QCR
YPUrNLUYfKu4MNsIIYK7R1+MiFLL2naIvin6GBXfONyGX5JS4WX0nmobC7q90HVf
UlmXca6SYbctONH/0OcAcw77c/fKPVOqqNR0AAJuoguVUolnClTl7JXDl0KwyH0w
ctZ1WOoQ2iD0c5zYGY1DzSaw7hI+N7kKrkh6e7ba63zmRPO8kRlLvDCwLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuBYUZEjVU+rAe+bla9QL5+vY5CMB8GA1UdIwQY
MBaAFM2Ojr2A/PiEl15CtGv05Uh5PynLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgt
Mjg2YTVlZTZlMDQzLzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgtMjg2YTVlZTZlMDQz
LzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABakZHQjq
qVHUnDrqWR9B09ioEJaO4RTrgkeTLprzBdP3HCjxYeVhOpIX/DjNMa6waU3lhvEz
ryiAPbzSkmL33SRo0vC9rdl4vlxzPYv0losv8OX7dI4htjXdFrp2bD4G/j3P5UK/
KzydxpwevxPYeJ9Mqu2651qGt1TisLeoN8Xx+LD7B6jHqmdLiY6whE6c9lo5m8/c
wiA0CYFlR1mMa5gspKeVCDdVCjdQJXyNBzDttfL/ViWq0cP85RXBpshnzTuB/qfK
bG3v3vY2amK3WUVIu73H8AFBuMx1/1wuLEsThl+AEc4DcFXcn0PXspm060hR1eBz
YAjMd519nfpJnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:35 2025 by rpki-client