Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: ebAkxNocO/1nVF+C5eVW/eHrrj/WQ8ah4++MCotQuMg=
Subject key identifier: B5:4D:C7:B0:F4:56:76:08:C1:B5:C5:5B:2F:33:7B:45:39:7F:08:58
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 0199FA69EF0F1B8412CB037D774F90B44F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 03:01:10 +0000
Manifest this update: Sun 19 Oct 2025 03:01:10 +0000
Manifest next update: Mon 20 Oct 2025 03:01:10 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: yyZGyw4YjObLOP8s+QFuT1MgWcACzE8Jb1wi56BGLng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:ef:0f:1b:84:12:cb:03:7d:77:4f:90:b4:4f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Oct 19 03:01:10 2025 GMT
Not After : Oct 20 03:01:10 2025 GMT
Subject: CN=b54dc7b0f4567608c1b5c55b2f337b45397f0858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:0f:e1:6e:8a:6b:6b:d4:75:ad:3a:de:94:
b3:c4:35:c9:bc:4f:e3:5a:0e:f0:98:59:2f:3b:8a:
79:eb:3e:8a:9e:fd:5f:0a:63:f3:5c:99:60:22:0d:
de:e7:4c:22:a5:5a:68:60:f0:c6:64:af:f9:be:25:
14:62:f6:4c:3e:40:61:b8:24:b7:43:c0:90:21:b1:
d3:97:47:55:a5:48:ac:ef:37:0a:58:2f:48:99:79:
fc:53:7d:f5:2b:1b:f2:8e:b0:93:3e:15:83:b5:15:
f3:e1:65:af:40:b1:f8:99:26:bc:0d:5a:32:9c:86:
c0:dc:f3:db:5b:de:e8:d6:f2:37:a8:81:f2:de:d8:
a3:7e:42:d0:26:d3:8e:b9:3c:7a:f5:59:55:55:a8:
13:d0:a2:b2:3c:e0:31:45:b1:48:54:37:02:41:27:
78:85:6e:81:55:75:7d:4c:4a:1f:9a:8f:56:75:d0:
50:ea:4d:bd:ca:1d:d8:39:5e:74:b9:4f:44:29:79:
2b:3f:03:be:b4:45:d1:b0:1b:0b:dc:90:2c:d5:e7:
d8:e2:0a:33:98:45:b8:19:80:75:dd:67:d4:53:57:
a7:6a:e8:b3:ad:c5:11:51:3b:69:21:ad:79:e1:6b:
0f:77:fb:80:c9:28:4b:62:6c:d3:9b:0a:4f:6b:f8:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4D:C7:B0:F4:56:76:08:C1:B5:C5:5B:2F:33:7B:45:39:7F:08:58
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b9:e0:49:6b:69:4b:c0:65:37:c8:6b:a0:e4:b5:00:3a:4d:
e3:cd:21:99:85:29:f1:c3:c3:0b:22:d7:ec:8d:e2:e8:2e:19:
fb:00:f2:27:6c:44:a2:41:65:ce:73:e7:e9:b8:36:7e:0b:4e:
ea:c5:b1:ad:75:34:95:1c:3a:e1:70:3a:7a:ed:85:84:84:73:
a4:d7:20:e6:30:90:fc:5c:5c:97:ed:2c:53:90:d2:6a:25:29:
4c:07:2a:d6:87:03:dc:14:a9:b7:7d:83:64:bd:87:28:c1:2c:
b1:e0:a2:ff:f2:22:35:4a:fd:76:ce:c9:8c:47:31:eb:54:cc:
92:11:e5:38:87:30:b2:cb:2f:e5:75:b6:8a:28:16:a5:b5:37:
8a:02:fa:02:fd:5a:26:4e:46:5a:f8:96:78:81:11:87:44:3f:
d0:5e:72:1c:ae:88:43:c9:67:cf:f5:ff:73:ae:42:e5:d5:16:
b2:f9:fe:eb:29:55:c3:17:3e:84:9d:80:81:45:6e:c4:e2:02:
d5:ed:04:8d:66:fe:a5:35:da:d6:e2:a1:7d:98:2b:aa:8c:41:
6a:ca:c4:3a:48:a1:ab:ed:62:29:cd:27:94:d1:42:fc:25:4c:
1f:a5:34:9d:b4:15:99:6a:65:1c:8a:b8:e5:33:e4:05:06:8f:
02:f5:68:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6ae8PG4QSywN9d0+QtE8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0
YThiMTIwHhcNMjUxMDE5MDMwMTEwWhcNMjUxMDIwMDMwMTEwWjAzMTEwLwYDVQQD
EyhiNTRkYzdiMGY0NTY3NjA4YzFiNWM1NWIyZjMzN2I0NTM5N2YwODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dAP4W6Ka2vUda063pSzxDXJvE/j
Wg7wmFkvO4p56z6Knv1fCmPzXJlgIg3e50wipVpoYPDGZK/5viUUYvZMPkBhuCS3
Q8CQIbHTl0dVpUis7zcKWC9ImXn8U331KxvyjrCTPhWDtRXz4WWvQLH4mSa8DVoy
nIbA3PPbW97o1vI3qIHy3tijfkLQJtOOuTx69VlVVagT0KKyPOAxRbFIVDcCQSd4
hW6BVXV9TEofmo9WddBQ6k29yh3YOV50uU9EKXkrPwO+tEXRsBsL3JAs1efY4goz
mEW4GYB13WfUU1enauizrcURUTtpIa154WsPd/uAyShLYmzTmwpPa/gdgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVNx7D0VnYIwbXFWy8ze0U5fwhYMB8GA1UdIwQY
MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt
NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl
LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbngSWtp
S8BlN8hroOS1ADpN480hmYUp8cPDCyLX7I3i6C4Z+wDyJ2xEokFlznPn6bg2fgtO
6sWxrXU0lRw64XA6eu2FhIRzpNcg5jCQ/Fxcl+0sU5DSaiUpTAcq1ocD3BSpt32D
ZL2HKMEsseCi//IiNUr9ds7JjEcx61TMkhHlOIcwsssv5XW2iigWpbU3igL6Av1a
Jk5GWviWeIERh0Q/0F5yHK6IQ8lnz/X/c65C5dUWsvn+6ylVwxc+hJ2AgUVuxOIC
1e0EjWb+pTXa1uKhfZgrqoxBasrEOkihq+1iKc0nlNFC/CVMH6U0nbQVmWplHIq4
5TPkBQaPAvVoFw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:40 2025 by rpki-client