Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: IXladENPO8VyubZkDac3lTEIYkFDFHiOWPRvAaOBhKo=
Subject key identifier: 67:3B:C4:A5:72:A3:0B:58:22:D5:40:0C:AB:C2:35:D8:07:1E:0F:B9
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 019A4F994D0605A79F0172FE7B810D718AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 11E2
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: kksW96a4vcOEPKV6YJA1N5jfqk4R2jZNC/13lIfgheI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4d:06:05:a7:9f:01:72:fe:7b:81:0d:71:8a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=673bc4a572a30b5822d5400cabc235d8071e0fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:09:a5:d0:a8:cd:b3:3f:21:4f:4b:4c:09:
1e:61:cf:39:1e:61:37:a6:d2:3f:27:a9:de:b1:bc:
2f:9c:77:7f:56:68:30:95:17:ab:1b:8d:6e:c4:fd:
f6:53:59:02:25:80:99:c8:f7:98:34:60:d2:f4:6f:
83:a1:b6:0e:72:32:bc:20:99:6f:89:fd:fe:3c:6d:
93:a0:e7:d1:7b:d3:72:ba:f2:4e:d9:92:0b:e0:b8:
8e:b4:58:d9:e0:d8:54:4b:67:38:18:13:49:40:1e:
33:95:f7:8a:73:86:f2:4b:84:61:83:77:d8:e9:94:
1c:5f:14:0b:cf:ba:55:0f:05:06:26:4f:99:16:6d:
d5:f9:a9:3b:50:76:3e:d0:12:45:a2:81:4d:1c:b8:
1b:fc:35:b6:aa:d0:6b:3c:cb:1b:54:0e:d7:4e:9b:
48:a5:f2:1f:9e:a8:e1:73:96:65:ed:24:59:2f:94:
b2:9e:09:8b:e8:a6:77:fb:37:8f:79:64:ae:68:5a:
f8:96:a0:9c:1f:8b:54:d7:40:97:30:ad:37:64:11:
16:cb:ec:fe:55:3d:0b:5a:fa:07:e6:7d:3e:be:97:
34:5c:c9:e9:a6:4d:79:f9:ff:84:1b:f8:d8:bb:ea:
53:27:a6:f4:dc:18:0f:eb:89:55:40:c0:22:1a:03:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3B:C4:A5:72:A3:0B:58:22:D5:40:0C:AB:C2:35:D8:07:1E:0F:B9
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:50:09:b8:bf:49:5f:c1:43:73:84:96:de:5b:d1:fb:97:db:
5e:07:9c:4f:d9:e2:34:a7:f9:b0:56:c7:dd:a9:c3:e9:dc:00:
f1:41:c8:15:36:89:0c:6a:27:36:d4:1d:d5:ea:ee:a9:1a:31:
bd:f4:50:12:92:29:fa:e8:dc:43:ea:08:65:dc:8c:81:47:93:
fd:db:b2:45:40:41:de:fd:8f:a6:b5:86:b6:5b:22:c4:d4:f7:
c8:f8:5f:0a:51:b0:e7:a0:13:9a:e7:6e:e0:9a:c9:f4:93:0f:
b8:0e:08:3f:62:4e:45:96:fa:83:28:75:f3:60:90:b6:5d:73:
48:0e:92:cb:56:7d:23:33:79:5c:a1:f6:0c:db:a8:f1:b1:40:
97:04:97:15:d9:70:f8:d9:d9:29:a6:54:92:36:f8:80:b3:0e:
99:4a:6a:12:bc:ff:4c:11:66:04:c8:ab:41:6f:5b:81:79:97:
02:ad:58:b1:27:5b:29:dc:b4:5d:97:ff:44:45:76:e6:32:9f:
7a:1d:43:97:2c:b4:ee:f9:b2:cd:da:4f:79:0d:23:0e:13:ad:
2f:7c:e5:0f:dc:01:01:80:14:d8:82:56:40:81:db:2f:6e:7a:
fd:d3:72:af:03:78:1c:75:5c:92:70:f4:1d:90:65:4e:54:a3:
39:08:f9:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmU0GBaefAXL+e4ENcYrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmU5MmEzZWI4MGFjNjNlZTU3MDJjMGQ5N2I0ZTlmMGI4
MjMzZjAwHhcNMjUxMTA0MTYwMDM4WhcNMjUxMTA1MTYwMDM4WjAzMTEwLwYDVQQD
Eyg2NzNiYzRhNTcyYTMwYjU4MjJkNTQwMGNhYmMyMzVkODA3MWUwZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwUJpdCozbM/IU9LTAkeYc85HmE3
ptI/J6nesbwvnHd/VmgwlRerG41uxP32U1kCJYCZyPeYNGDS9G+DobYOcjK8IJlv
if3+PG2ToOfRe9NyuvJO2ZIL4LiOtFjZ4NhUS2c4GBNJQB4zlfeKc4byS4Rhg3fY
6ZQcXxQLz7pVDwUGJk+ZFm3V+ak7UHY+0BJFooFNHLgb/DW2qtBrPMsbVA7XTptI
pfIfnqjhc5Zl7SRZL5SyngmL6KZ3+zePeWSuaFr4lqCcH4tU10CXMK03ZBEWy+z+
VT0LWvoH5n0+vpc0XMnppk15+f+EG/jYu+pTJ6b03BgP64lVQMAiGgP3sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGc7xKVyowtYItVADKvCNdgHHg+5MB8GA1UdIwQY
MBaAFM1ukqPrgKxj7lcCwNl7Tp8LgjPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUt
NzViYzQ0NzkwMjlmLzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUtNzViYzQ0NzkwMjlm
LzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVAJuL9J
X8FDc4SW3lvR+5fbXgecT9niNKf5sFbH3anD6dwA8UHIFTaJDGonNtQd1eruqRox
vfRQEpIp+ujcQ+oIZdyMgUeT/duyRUBB3v2PprWGtlsixNT3yPhfClGw56ATmudu
4JrJ9JMPuA4IP2JORZb6gyh182CQtl1zSA6Sy1Z9IzN5XKH2DNuo8bFAlwSXFdlw
+NnZKaZUkjb4gLMOmUpqErz/TBFmBMirQW9bgXmXAq1YsSdbKdy0XZf/REV25jKf
eh1Dlyy07vmyzdpPeQ0jDhOtL3zlD9wBAYAU2IJWQIHbL256/dNyrwN4HHVcknD0
HZBlTlSjOQj5fg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:21:24 2025 by rpki-client