Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
File: Z6TsOPL_adJQX39i6Uw715i1hVI.mft (raw, json)
Hash identifier: lZtrGAEgKyhK5JpS2Jl9WWtsxGsCLLwZ4Wder35Ww2c=
Subject key identifier: F8:07:6F:75:4F:06:3C:41:46:94:35:04:AC:8B:55:A1:05:9D:C9:73
Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Certificate serial: 019A500769D762D1A30175E808B2C802908A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
Manifest number: 1534
Signing time: Tue 04 Nov 2025 18:00:54 +0000
Manifest this update: Tue 04 Nov 2025 18:00:54 +0000
Manifest next update: Wed 05 Nov 2025 18:00:54 +0000
Files and hashes: 1: Z6TsOPL_adJQX39i6Uw715i1hVI.crl (hash: r0ovj+kQTwWCw7YqNTFYKFox4TivwldI7bCcKf0TSfE=)
2: yojAQ3oth9lVhqX5wg8l8cBEUmI.roa (hash: o7RnG1CkyxwhqBFMnhN8mnO/r8Gaf2uetg2QG+K1/Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:69:d7:62:d1:a3:01:75:e8:08:b2:c8:02:90:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552
Validity
Not Before: Nov 4 18:00:54 2025 GMT
Not After : Nov 5 18:00:54 2025 GMT
Subject: CN=f8076f754f063c4146943504ac8b55a1059dc973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:27:62:e7:70:32:2e:e2:11:25:28:d9:6a:
c7:d0:82:4f:c6:26:ce:ec:5f:da:44:d8:da:33:ee:
6f:40:b1:d1:cc:7b:b4:14:67:78:fa:25:47:1b:d9:
9c:9c:b3:16:4b:c1:ab:06:a5:17:98:b9:91:fd:5e:
4d:68:56:d5:52:07:71:51:35:03:80:7d:26:c4:54:
a0:3f:89:7a:ad:a7:63:31:d7:23:d1:f6:6a:41:2f:
7d:e7:fe:22:32:65:d9:7e:4b:62:0b:7e:f2:fc:7a:
77:dc:32:6c:bc:44:de:de:93:bd:3b:16:95:36:87:
73:30:3f:4e:2c:e3:a5:f3:a6:d1:3d:1d:51:86:7a:
96:47:8b:f8:49:93:a2:fd:2d:0c:66:3d:de:cf:c5:
39:93:ea:7d:fe:69:6d:85:b7:7e:3f:b3:58:34:cf:
13:0e:95:e8:50:dd:1d:a8:58:ab:40:fa:ae:3b:fb:
de:16:db:68:ac:35:ea:66:5e:33:3e:82:23:69:c3:
8f:c5:a0:8c:e8:68:d2:d2:10:74:bb:77:c6:f0:a3:
6a:8b:9e:4a:73:2d:56:fa:17:99:15:b4:58:ed:a4:
d5:4f:81:ce:43:dc:31:c5:cc:b0:d5:56:fb:7d:57:
ac:f4:90:2c:1e:92:de:4c:55:9c:57:3e:8e:87:2e:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:6F:75:4F:06:3C:41:46:94:35:04:AC:8B:55:A1:05:9D:C9:73
X509v3 Authority Key Identifier:
keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a1:3a:c8:67:16:05:61:90:43:e9:0d:79:8e:09:d8:bd:27:
4c:45:e9:58:e6:68:20:7e:2e:47:c5:b3:55:c7:c1:51:2e:47:
11:b8:c2:28:97:e1:71:b9:4b:8d:6d:12:0e:68:72:4a:89:17:
cd:92:10:05:40:6e:bd:e2:49:95:27:c1:5d:83:b5:fe:4a:df:
d8:33:bd:09:78:74:43:3c:b2:55:3f:46:79:b1:9e:54:66:59:
f6:57:0a:5a:ca:58:1f:b1:60:48:f8:6a:05:a1:95:e7:99:c1:
30:e2:cf:b7:99:16:0f:19:f5:37:c2:a2:10:78:da:fb:9f:c1:
69:d6:a1:9c:35:04:b2:49:fd:08:84:29:a8:46:c2:d7:12:11:
97:19:5e:38:6b:f8:96:25:15:95:1a:70:91:14:05:2d:7b:53:
59:95:50:1e:84:aa:d4:c5:3e:7e:24:c6:5d:ad:86:74:c8:37:
9d:bf:81:1a:9d:de:3f:3b:82:86:bd:4a:91:aa:6a:80:ca:62:
7b:d1:2c:04:50:76:9b:ae:70:ce:98:b6:88:96:27:5d:f3:a3:
d8:5b:e0:33:e3:79:28:74:e8:fb:55:49:45:21:c9:17:a4:2a:
64:94:8c:a4:e3:3b:0a:58:d1:9d:b0:3c:75:89:69:a2:85:a8:
4a:28:77:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2nXYtGjAXXoCLLIApCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YTRlYzM4ZjJmZjY5ZDI1MDVmN2Y2MmU5NGMzYmQ3OThi
NTg1NTIwHhcNMjUxMTA0MTgwMDU0WhcNMjUxMTA1MTgwMDU0WjAzMTEwLwYDVQQD
EyhmODA3NmY3NTRmMDYzYzQxNDY5NDM1MDRhYzhiNTVhMTA1OWRjOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqgnYudwMi7iESUo2WrH0IJPxibO
7F/aRNjaM+5vQLHRzHu0FGd4+iVHG9mcnLMWS8GrBqUXmLmR/V5NaFbVUgdxUTUD
gH0mxFSgP4l6radjMdcj0fZqQS995/4iMmXZfktiC37y/Hp33DJsvETe3pO9OxaV
NodzMD9OLOOl86bRPR1RhnqWR4v4SZOi/S0MZj3ez8U5k+p9/mlthbd+P7NYNM8T
DpXoUN0dqFirQPquO/veFttorDXqZl4zPoIjacOPxaCM6GjS0hB0u3fG8KNqi55K
cy1W+heZFbRY7aTVT4HOQ9wxxcyw1Vb7fVes9JAsHpLeTFWcVz6Ohy7XBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgHb3VPBjxBRpQ1BKyLVaEFnclzMB8GA1UdIwQY
MBaAFGek7Djy/2nSUF9/YulMO9eYtYVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAt
ZDQyZDRlOWM3NjdkLzEvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAtZDQyZDRlOWM3Njdk
LzEvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqE6yGcW
BWGQQ+kNeY4J2L0nTEXpWOZoIH4uR8WzVcfBUS5HEbjCKJfhcblLjW0SDmhySokX
zZIQBUBuveJJlSfBXYO1/krf2DO9CXh0QzyyVT9GebGeVGZZ9lcKWspYH7FgSPhq
BaGV55nBMOLPt5kWDxn1N8KiEHja+5/BadahnDUEskn9CIQpqEbC1xIRlxleOGv4
liUVlRpwkRQFLXtTWZVQHoSq1MU+fiTGXa2GdMg3nb+BGp3ePzuChr1KkapqgMpi
e9EsBFB2m65wzpi2iJYnXfOj2FvgM+N5KHTo+1VJRSHJF6QqZJSMpOM7CljRnbA8
dYlpooWoSih31A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:56 2025 by rpki-client