Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File: Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier: v+kIpooeheWOZ4IHQruiZQZI4xeYXLN4ow8VD4KHf1Y=
Subject key identifier: BA:93:BB:9D:FA:83:84:1B:F4:BF:DC:2B:96:C7:96:38:B6:67:1F:DB
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 019A4E4F75DBD1E12944AE41E9A418AC5D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 10:00:21 +0000
Manifest this update: Tue 04 Nov 2025 10:00:21 +0000
Manifest next update: Wed 05 Nov 2025 10:00:21 +0000
Files and hashes: 1: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (hash: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=)
2: CEH26SsbgBXa-XRDjPR4dutITU8.roa (hash: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=)
3: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (hash: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=)
4: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: JMx1GFROL2yZpRnChy7jGR3bEgW8xgmwrkVhw/9fVvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:75:db:d1:e1:29:44:ae:41:e9:a4:18:ac:5d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Nov 4 10:00:21 2025 GMT
Not After : Nov 5 10:00:21 2025 GMT
Subject: CN=ba93bb9dfa83841bf4bfdc2b96c79638b6671fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:28:ff:03:66:ef:81:62:26:a1:76:46:13:
3d:17:31:aa:d4:7b:46:9e:c1:b2:88:e2:9a:ff:e0:
fe:44:53:7f:1f:68:1e:da:02:f4:c0:f5:8e:b6:7c:
33:1b:82:75:c7:7a:af:97:2f:5c:cb:54:96:7e:95:
15:33:1d:40:56:36:37:f1:a2:0b:f5:0a:04:79:d2:
5e:63:6a:83:7b:e8:91:3f:4f:66:89:6e:fc:37:b2:
8e:ef:2a:4f:d3:0f:58:12:9f:1f:ee:9f:43:00:27:
2f:3f:16:02:59:f9:46:a7:1f:f8:c2:24:04:00:11:
fa:4b:27:e7:61:c9:c4:9b:59:44:c6:b1:2e:cb:71:
7d:49:01:3d:46:48:b9:83:ef:c2:d2:8f:db:f4:e8:
aa:52:a6:17:95:ec:03:ea:33:67:59:75:20:7a:cf:
cb:3f:84:7f:c9:c2:c5:11:f0:0b:98:fd:63:d4:69:
c8:ea:35:41:83:fb:75:c2:da:f5:bd:8a:77:75:c8:
2b:3e:e3:55:be:6b:3c:b8:0f:76:b1:20:5d:ce:28:
0f:e0:56:8d:df:41:8d:0e:48:ca:6d:24:8e:2b:6e:
c1:21:bc:68:39:fc:f2:35:17:80:25:2d:ce:34:66:
2a:ec:49:94:38:a1:86:eb:3d:73:dd:df:30:c4:2a:
e8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:BB:9D:FA:83:84:1B:F4:BF:DC:2B:96:C7:96:38:B6:67:1F:DB
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fa:8d:2c:42:a5:fa:40:24:fd:18:f5:df:86:0e:e9:73:21:
5f:98:c7:06:d5:70:42:8a:39:cc:6f:51:e9:28:e9:c6:73:be:
6a:e6:bf:67:a9:89:cc:2f:99:a0:8d:7f:80:40:58:91:a4:30:
21:59:6b:9a:97:70:59:c8:7b:9d:ee:c8:d9:fa:7e:80:74:8f:
1b:87:e5:41:42:8c:12:46:55:8d:03:a4:21:86:01:c4:e7:14:
6a:ff:a5:cc:c4:7a:ea:38:cc:d5:42:4b:f6:06:ed:16:2b:8e:
83:c7:7e:e9:2a:bb:4a:24:11:75:7a:d6:11:4a:c6:06:28:0c:
48:b5:ce:8c:d4:72:e5:f8:13:c0:bc:b5:92:0c:65:65:31:4f:
5a:d4:90:7a:b2:41:9f:56:fc:5f:68:c5:b9:5d:29:dc:70:78:
85:70:98:1b:a7:0a:0b:33:8c:ce:56:8b:7a:60:43:9c:a3:20:
18:70:d7:c8:2a:44:d9:88:44:44:17:88:92:67:7a:1d:56:66:
97:87:5a:f6:27:b1:44:59:79:eb:93:67:ba:7c:b2:7d:41:e8:
8d:dc:67:38:32:a9:0e:e6:0a:72:3d:8b:99:cc:34:ed:de:1f:
1d:e1:27:14:15:11:dd:3e:c0:54:7c:3f:07:c9:2d:67:4e:43:
76:28:59:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT3Xb0eEpRK5B6aQYrF2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2
NzkwZjUwHhcNMjUxMTA0MTAwMDIxWhcNMjUxMTA1MTAwMDIxWjAzMTEwLwYDVQQD
EyhiYTkzYmI5ZGZhODM4NDFiZjRiZmRjMmI5NmM3OTYzOGI2NjcxZmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Mco/wNm74FiJqF2RhM9FzGq1HtG
nsGyiOKa/+D+RFN/H2ge2gL0wPWOtnwzG4J1x3qvly9cy1SWfpUVMx1AVjY38aIL
9QoEedJeY2qDe+iRP09miW78N7KO7ypP0w9YEp8f7p9DACcvPxYCWflGpx/4wiQE
ABH6SyfnYcnEm1lExrEuy3F9SQE9Rki5g+/C0o/b9OiqUqYXlewD6jNnWXUges/L
P4R/ycLFEfALmP1j1GnI6jVBg/t1wtr1vYp3dcgrPuNVvms8uA92sSBdzigP4FaN
30GNDkjKbSSOK27BIbxoOfzyNReAJS3ONGYq7EmUOKGG6z1z3d8wxCro7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqTu536g4Qb9L/cK5bHlji2Zx/bMB8GA1UdIwQY
MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt
NWU3NThlODFlZmY2LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2
LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfqNLEKl
+kAk/Rj134YO6XMhX5jHBtVwQoo5zG9R6SjpxnO+aua/Z6mJzC+ZoI1/gEBYkaQw
IVlrmpdwWch7ne7I2fp+gHSPG4flQUKMEkZVjQOkIYYBxOcUav+lzMR66jjM1UJL
9gbtFiuOg8d+6Sq7SiQRdXrWEUrGBigMSLXOjNRy5fgTwLy1kgxlZTFPWtSQerJB
n1b8X2jFuV0p3HB4hXCYG6cKCzOMzlaLemBDnKMgGHDXyCpE2YhERBeIkmd6HVZm
l4da9iexRFl565NnunyyfUHojdxnODKpDuYKcj2Lmcw07d4fHeEnFBUR3T7AVHw/
B8ktZ05DdihZwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:29 2025 by rpki-client