Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: m4r0FDIGDDgOayc1Rrlg+uGtjP2p4CiYEQMfqtLgNgs=
Subject key identifier: 63:34:30:24:16:96:34:40:D2:6A:6A:57:EF:91:1D:B3:75:57:B6:51
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 019A4EF4ACE42B3E58EA8C7EEE761875E3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 0B19
Signing time: Tue 04 Nov 2025 13:00:49 +0000
Manifest this update: Tue 04 Nov 2025 13:00:49 +0000
Manifest next update: Wed 05 Nov 2025 13:00:49 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: aJuFhNboK9UTW6pn8tvAsaX2VY1TzEK8m8Odn7aMjuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ac:e4:2b:3e:58:ea:8c:7e:ee:76:18:75:e3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Nov 4 13:00:49 2025 GMT
Not After : Nov 5 13:00:49 2025 GMT
Subject: CN=6334302416963440d26a6a57ef911db37557b651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:5e:7c:e2:b3:e6:32:a8:06:fc:f2:e0:24:
a4:5e:d8:2b:95:64:34:7c:f6:73:e1:c2:9f:2d:de:
2a:b8:da:89:97:0d:10:07:dc:de:c3:39:1f:5a:b5:
a3:16:7a:98:09:bc:6a:3d:ad:8d:c5:ee:6d:2f:16:
d6:af:25:09:96:ac:48:48:c6:74:4c:55:2d:86:40:
d6:68:d3:4b:1d:38:03:e9:7f:25:14:bc:d4:19:66:
cd:cd:5c:74:d2:81:72:9b:67:73:97:c5:1c:af:d2:
10:52:6c:a1:fb:17:d5:39:72:40:d2:ce:fa:e6:97:
89:b6:65:28:e5:5b:cb:c2:49:48:d8:92:42:ea:40:
27:21:49:9f:14:5f:04:64:70:be:c7:c1:66:19:c4:
81:03:8a:b5:7d:33:36:d1:ad:b1:35:f1:e6:80:50:
80:c3:06:be:be:69:00:13:9b:41:f9:aa:62:89:b3:
17:bd:f6:c1:4e:fa:0d:96:24:10:6e:17:46:7b:a9:
1e:cd:5a:a2:e9:09:51:bb:b2:e0:45:46:29:06:d9:
13:0c:3e:da:6a:f1:3e:58:cc:8d:07:bb:6a:c5:2c:
50:62:33:71:d4:68:2a:89:cf:d1:23:79:96:f0:96:
05:e9:02:f6:59:90:87:97:81:ac:d4:22:fb:67:8c:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:30:24:16:96:34:40:D2:6A:6A:57:EF:91:1D:B3:75:57:B6:51
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:dd:bf:b0:e9:75:79:80:d0:12:a0:f9:8b:e6:b6:cd:5a:95:
b0:38:04:54:93:68:43:1e:2d:60:73:dd:4f:57:c3:dd:0c:19:
56:67:73:91:56:b7:5f:67:d8:14:b0:cd:e3:bb:a3:0f:eb:ec:
56:33:e4:1a:29:59:bc:e6:13:93:dd:68:bd:85:e0:94:0f:7f:
ca:d4:cb:58:aa:f9:5e:24:a3:6d:f8:1e:8e:b3:7e:9b:64:fe:
a4:dc:3f:d4:42:de:6e:c6:de:1f:0c:19:9b:d0:a1:f8:1b:0b:
c8:d5:0c:63:42:12:b4:a0:ce:43:a2:ac:d5:33:0e:1c:1d:62:
3c:47:9d:03:71:56:2e:71:50:e0:eb:ba:0f:2f:ac:4e:2e:15:
51:82:d5:a0:bd:94:c2:97:50:1b:dc:b9:5b:c1:b2:10:09:2d:
3e:cf:a6:fd:14:df:fb:74:84:7f:0f:94:1d:1a:30:4a:2d:73:
21:df:7c:74:5e:c8:43:7e:4a:d0:c5:31:1f:3d:e4:c3:89:b0:
37:ea:23:a8:2c:e2:ab:cc:37:da:38:f9:c7:2d:57:fe:06:86:
66:3b:ce:70:cc:ea:fe:53:58:24:57:1e:bb:38:1f:fa:bc:db:
8e:b7:03:fd:8a:95:b6:cd:7b:7b:92:ab:e5:fb:7d:9a:90:d2:
bc:e0:6d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9KzkKz5Y6ox+7nYYdeOjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MWYyZGE2YzJkZjk0YTdkMDVhN2VlNDAxZmNmZTMxNjg2
NDBhYzMwHhcNMjUxMTA0MTMwMDQ5WhcNMjUxMTA1MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg2MzM0MzAyNDE2OTYzNDQwZDI2YTZhNTdlZjkxMWRiMzc1NTdiNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12hefOKz5jKoBvzy4CSkXtgrlWQ0
fPZz4cKfLd4quNqJlw0QB9zewzkfWrWjFnqYCbxqPa2Nxe5tLxbWryUJlqxISMZ0
TFUthkDWaNNLHTgD6X8lFLzUGWbNzVx00oFym2dzl8Ucr9IQUmyh+xfVOXJA0s76
5peJtmUo5VvLwklI2JJC6kAnIUmfFF8EZHC+x8FmGcSBA4q1fTM20a2xNfHmgFCA
wwa+vmkAE5tB+apiibMXvfbBTvoNliQQbhdGe6kezVqi6QlRu7LgRUYpBtkTDD7a
avE+WMyNB7tqxSxQYjNx1Ggqic/RI3mW8JYF6QL2WZCHl4Gs1CL7Z4y/OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM0MCQWljRA0mpqV++RHbN1V7ZRMB8GA1UdIwQY
MBaAFGYfLabC35Sn0Fp+5AH8/jFoZArDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWIt
MGE3MWZiOTJkNDJhLzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWItMGE3MWZiOTJkNDJh
LzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArd2/sOl1
eYDQEqD5i+a2zVqVsDgEVJNoQx4tYHPdT1fD3QwZVmdzkVa3X2fYFLDN47ujD+vs
VjPkGilZvOYTk91ovYXglA9/ytTLWKr5XiSjbfgejrN+m2T+pNw/1ELebsbeHwwZ
m9Ch+BsLyNUMY0IStKDOQ6Ks1TMOHB1iPEedA3FWLnFQ4Ou6Dy+sTi4VUYLVoL2U
wpdQG9y5W8GyEAktPs+m/RTf+3SEfw+UHRowSi1zId98dF7IQ35K0MUxHz3kw4mw
N+ojqCziq8w32jj5xy1X/gaGZjvOcMzq/lNYJFceuzgf+rzbjrcD/YqVts17e5Kr
5ft9mpDSvOBtnA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:35 2025 by rpki-client