Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
File: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft (raw, json)
Hash identifier: o1u4eZ4yVYWHVzo7uVlAuWt0yWYyN4AyOKoYy0xFSX0=
Subject key identifier: 16:E6:41:1D:72:D0:A0:17:05:B6:70:C4:3A:33:BA:A5:25:BF:1A:F5
Authority key identifier: D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
Certificate issuer: /CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Certificate serial: 019A4FCFD6779837A6EC4FC04506F9A68068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
Manifest number: 1448
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: 1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl (hash: cmRu/LUix8KSxf5oNMga9tb3yJN+JuERiNzySWxUUyM=)
2: oilk7jUBzGUsKxQiO3ENxMgz50c.roa (hash: uezrIJE13+ePzqQZQpEOEl7mUMI9j3C9B4RgtY410tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d6:77:98:37:a6:ec:4f:c0:45:06:f9:a6:80:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d59f0ceca20fafe733fbaf76250ffbc0a350742a
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=16e6411d72d0a01705b670c43a33baa525bf1af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:42:47:4b:bf:e6:e6:40:ef:73:65:cd:cf:
18:47:7c:98:90:1f:a6:7b:e2:af:05:98:f0:60:7a:
57:9e:66:0d:b8:47:f4:2e:d1:7c:73:32:4b:df:e0:
46:7c:95:c5:c8:22:86:f9:51:ce:43:4e:eb:c0:97:
d3:91:a3:75:ad:98:a1:ed:84:3c:c1:4a:c0:b4:63:
dc:58:b7:0c:aa:26:73:ed:60:37:e7:78:09:93:12:
6f:2b:40:90:81:81:04:49:ec:a4:eb:2d:52:59:d0:
7d:7c:b1:50:2d:37:43:ab:2d:0a:ed:51:1e:f9:27:
0d:f2:aa:9d:a3:e1:29:92:e8:f9:69:9d:10:a0:fb:
b3:64:ac:62:6c:f7:30:24:fa:5e:be:88:33:c8:96:
fc:24:e0:19:96:83:94:c9:75:7d:bf:9f:13:71:fc:
a4:aa:f4:07:49:4f:86:0e:15:70:b8:26:31:88:91:
83:4d:ee:a3:ba:3b:bd:d8:cf:d5:ed:3c:1f:84:60:
aa:ff:b5:83:20:af:4a:e4:0c:c3:89:18:60:43:5d:
41:b6:93:c2:21:62:2b:b4:3f:99:f6:0a:95:af:ac:
c6:f9:a2:fb:fb:43:5a:33:09:31:95:2e:7e:f2:50:
6c:39:07:ca:63:9c:fe:94:97:a0:99:79:7f:e7:18:
2e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:41:1D:72:D0:A0:17:05:B6:70:C4:3A:33:BA:A5:25:BF:1A:F5
X509v3 Authority Key Identifier:
keyid:D5:9F:0C:EC:A2:0F:AF:E7:33:FB:AF:76:25:0F:FB:C0:A3:50:74:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Z8M7KIPr-cz-692JQ_7wKNQdCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/1Z8M7KIPr-cz-692JQ_7wKNQdCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a0:bf:ab:a5:4c:ae:02:99:4a:1b:1d:13:f4:16:58:10:5c:
03:09:94:f7:f2:62:f3:7c:f4:5b:e8:99:49:ba:7d:e5:a8:94:
23:5b:eb:08:66:d5:b0:d9:6d:2e:76:db:6c:7a:fb:b4:c3:69:
f7:60:f3:4f:12:84:35:90:fc:12:51:a9:0e:d7:5e:a3:0d:6b:
62:98:d2:06:b7:db:75:4a:d7:e6:4c:e8:89:fc:ee:6c:2b:40:
ae:27:04:6f:13:73:11:d4:ea:1c:3d:82:42:26:c0:51:ec:32:
e2:49:b0:5c:35:79:39:78:20:97:72:0a:bd:4f:7c:9e:0a:f2:
b1:40:ba:8d:43:c3:ea:48:58:c2:31:04:8b:94:fa:b1:de:0f:
10:cf:23:81:68:c6:26:76:a9:30:9a:a4:28:a1:71:62:81:4d:
a4:cc:66:9a:6a:d8:c7:0b:8a:ec:6b:8d:16:47:7b:fd:96:1f:
e4:31:b0:26:95:10:dd:bf:16:36:08:94:06:18:34:2a:e8:b8:
0e:0d:3a:23:c5:b2:67:e3:60:d4:c7:13:d5:b2:29:77:0e:b0:
98:40:eb:ba:df:86:15:69:37:fc:e5:46:8f:50:6b:26:1b:c8:
4f:87:a8:e6:e8:da:8d:97:2f:ef:a3:27:a1:ca:2f:93:4f:33:
e3:87:8a:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz9Z3mDem7E/ARQb5poBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OWYwY2VjYTIwZmFmZTczM2ZiYWY3NjI1MGZmYmMwYTM1
MDc0MmEwHhcNMjUxMTA0MTcwMDEyWhcNMjUxMTA1MTcwMDEyWjAzMTEwLwYDVQQD
EygxNmU2NDExZDcyZDBhMDE3MDViNjcwYzQzYTMzYmFhNTI1YmYxYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtVCR0u/5uZA73Nlzc8YR3yYkB+m
e+KvBZjwYHpXnmYNuEf0LtF8czJL3+BGfJXFyCKG+VHOQ07rwJfTkaN1rZih7YQ8
wUrAtGPcWLcMqiZz7WA353gJkxJvK0CQgYEESeyk6y1SWdB9fLFQLTdDqy0K7VEe
+ScN8qqdo+Epkuj5aZ0QoPuzZKxibPcwJPpevogzyJb8JOAZloOUyXV9v58Tcfyk
qvQHSU+GDhVwuCYxiJGDTe6juju92M/V7TwfhGCq/7WDIK9K5AzDiRhgQ11BtpPC
IWIrtD+Z9gqVr6zG+aL7+0NaMwkxlS5+8lBsOQfKY5z+lJegmXl/5xguvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbmQR1y0KAXBbZwxDozuqUlvxr1MB8GA1UdIwQY
MBaAFNWfDOyiD6/nM/uvdiUP+8CjUHQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvMVo4TTdLSVByLWN6LTY5MkpRXzd3S05RZENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaC/q6VM
rgKZShsdE/QWWBBcAwmU9/Ji83z0W+iZSbp95aiUI1vrCGbVsNltLnbbbHr7tMNp
92DzTxKENZD8ElGpDtdeow1rYpjSBrfbdUrX5kzoifzubCtAricEbxNzEdTqHD2C
QibAUewy4kmwXDV5OXggl3IKvU98ngrysUC6jUPD6khYwjEEi5T6sd4PEM8jgWjG
JnapMJqkKKFxYoFNpMxmmmrYxwuK7GuNFkd7/ZYf5DGwJpUQ3b8WNgiUBhg0Kui4
Dg06I8WyZ+Ng1McT1bIpdw6wmEDrut+GFWk3/OVGj1BrJhvIT4eo5ujajZcv76Mn
ocovk08z44eKYw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:18 2025 by rpki-client