Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier: QaySYGcNavoDAJ/3gwQ6Cy/iltO/Lrh0SKulpoIsaqM=
Subject key identifier: AF:FF:FC:82:72:68:DA:A9:49:C8:E0:3D:EE:54:D0:47:7B:5F:6D:D2
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial: 019A51BE3BF220853279CBC4F11D7F429D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number: 0ED8
Signing time: Wed 05 Nov 2025 02:00:12 +0000
Manifest this update: Wed 05 Nov 2025 02:00:12 +0000
Manifest next update: Thu 06 Nov 2025 02:00:12 +0000
Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: 3FspJRSphYoZU280o5wWmiml1MTz4awY31ymoXN1LIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:3b:f2:20:85:32:79:cb:c4:f1:1d:7f:42:9d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Validity
Not Before: Nov 5 02:00:12 2025 GMT
Not After : Nov 6 02:00:12 2025 GMT
Subject: CN=affffc827268daa949c8e03dee54d0477b5f6dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:3e:84:4e:37:06:f3:17:cc:77:c5:08:fc:
dc:51:bf:f8:0e:87:8d:d5:b6:c3:2b:69:5c:44:6e:
19:f8:ba:a6:0f:40:51:fa:c0:56:64:76:b3:a4:c7:
bf:02:8c:0b:c6:a5:04:ce:6c:56:78:da:2e:8c:d3:
be:5e:bd:93:a0:ae:8d:17:46:53:62:c5:f6:ad:34:
6d:c5:bc:4d:59:f7:8d:7f:7e:bb:87:4f:ec:20:1d:
5d:25:de:58:ed:f1:43:4b:74:62:17:46:6a:b7:7f:
e2:6e:c3:ba:f9:81:e5:f6:f2:e8:45:1b:d6:ce:85:
97:ed:e3:86:bd:e4:50:8d:01:62:65:f5:07:4f:47:
84:90:73:5e:e4:57:27:c1:a7:64:78:81:85:62:5b:
09:e7:98:b0:4e:bd:7e:10:c9:98:5d:52:8d:fa:77:
54:e0:ac:85:65:67:09:b1:c9:5d:a3:e6:ef:96:12:
8e:2a:f5:eb:8e:37:8c:ff:c9:03:37:42:67:6a:5d:
3d:71:4c:89:78:35:80:e6:69:45:5b:26:d8:62:32:
c3:12:4f:1c:2e:b1:7a:ce:e0:3e:83:d9:9c:32:bc:
2e:bc:51:64:43:50:98:00:73:82:90:73:55:06:a3:
65:53:a4:c1:4b:d7:43:4f:82:dd:b8:58:71:14:f6:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FF:FC:82:72:68:DA:A9:49:C8:E0:3D:EE:54:D0:47:7B:5F:6D:D2
X509v3 Authority Key Identifier:
keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3a:2a:44:93:cd:cd:42:b9:8e:c9:9f:b5:12:ae:07:4c:b8:
ff:4e:fd:cb:45:14:80:e4:53:1e:76:1a:d8:eb:65:85:bb:fa:
b9:e6:af:79:f5:85:93:48:c8:6b:8c:47:0e:3f:ca:c4:7b:34:
95:03:36:90:43:15:48:46:03:84:6e:a2:bc:69:30:52:28:75:
f5:04:24:e5:cd:2a:f3:d6:63:41:39:c0:91:f2:4c:57:52:8c:
eb:31:19:4e:8f:db:f1:78:b4:8d:70:01:a9:f9:96:52:cb:cc:
50:87:4a:cd:05:90:d6:1a:1d:b7:23:d3:71:e3:83:1a:26:45:
c7:cf:02:f6:22:92:18:be:54:03:6b:d3:6c:45:44:ec:99:2b:
d7:a4:03:e4:91:dd:39:14:6e:f1:dd:2e:d8:db:63:36:70:c2:
63:f4:4a:9c:f5:9e:e0:e5:a7:41:3d:14:84:ee:58:7b:d0:dc:
5c:2c:37:40:6d:2b:6e:c4:a0:55:7f:12:15:16:d6:27:a5:29:
74:dc:71:b4:48:85:ec:01:b6:67:2e:fc:e4:91:d2:de:86:7e:
f7:c2:7d:54:0d:4a:e6:31:1d:4b:4e:7e:b7:4c:ea:4e:cb:60:
e9:3b:2c:bb:b6:25:a4:a5:b2:b1:01:7e:04:e5:64:54:32:eb:
74:9b:c7:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvjvyIIUyecvE8R1/Qp1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZjJmMDlmYTM4YTM4YmM4MGNmZjgyZTBjN2I0N2IzNzkx
NjM5OGEwHhcNMjUxMTA1MDIwMDEyWhcNMjUxMTA2MDIwMDEyWjAzMTEwLwYDVQQD
EyhhZmZmZmM4MjcyNjhkYWE5NDljOGUwM2RlZTU0ZDA0NzdiNWY2ZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVc+hE43BvMXzHfFCPzcUb/4DoeN
1bbDK2lcRG4Z+LqmD0BR+sBWZHazpMe/AowLxqUEzmxWeNoujNO+Xr2ToK6NF0ZT
YsX2rTRtxbxNWfeNf367h0/sIB1dJd5Y7fFDS3RiF0Zqt3/ibsO6+YHl9vLoRRvW
zoWX7eOGveRQjQFiZfUHT0eEkHNe5FcnwadkeIGFYlsJ55iwTr1+EMmYXVKN+ndU
4KyFZWcJscldo+bvlhKOKvXrjjeM/8kDN0Jnal09cUyJeDWA5mlFWybYYjLDEk8c
LrF6zuA+g9mcMrwuvFFkQ1CYAHOCkHNVBqNlU6TBS9dDT4LduFhxFPadCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK///IJyaNqpScjgPe5U0Ed7X23SMB8GA1UdIwQY
MBaAFGfy8J+jiji8gM/4Lgx7R7N5FjmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQt
Zjk5OTdlMTkxMjZjLzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQtZjk5OTdlMTkxMjZj
LzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMToqRJPN
zUK5jsmftRKuB0y4/079y0UUgORTHnYa2Otlhbv6ueavefWFk0jIa4xHDj/KxHs0
lQM2kEMVSEYDhG6ivGkwUih19QQk5c0q89ZjQTnAkfJMV1KM6zEZTo/b8Xi0jXAB
qfmWUsvMUIdKzQWQ1hodtyPTceODGiZFx88C9iKSGL5UA2vTbEVE7Jkr16QD5JHd
ORRu8d0u2NtjNnDCY/RKnPWe4OWnQT0UhO5Ye9DcXCw3QG0rbsSgVX8SFRbWJ6Up
dNxxtEiF7AG2Zy785JHS3oZ+98J9VA1K5jEdS05+t0zqTstg6Tssu7YlpKWysQF+
BOVkVDLrdJvH1Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:54 2025 by rpki-client