Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier: qspN0KM5rUWlZfaHPEXW+FjvzCF+Dr25a1rga3Cdeno=
Subject key identifier: FD:52:2C:AC:CE:C5:48:DF:70:FD:D2:F5:48:36:49:53:CE:AC:92:FF
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 019A53762914B9F9AADAE082EDCE2D131692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number: 011C
Signing time: Wed 05 Nov 2025 10:00:43 +0000
Manifest this update: Wed 05 Nov 2025 10:00:43 +0000
Manifest next update: Thu 06 Nov 2025 10:00:43 +0000
Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: QhVILei4aPbuOsF57ZGK8kNs4pFY18amo4aHAhV3i8w=)
2: eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa (hash: KSBVppHXh5GaOp6rIqFzma8M+CxkT9xkf7FurYUushA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:29:14:b9:f9:aa:da:e0:82:ed:ce:2d:13:16:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Nov 5 10:00:43 2025 GMT
Not After : Nov 6 10:00:43 2025 GMT
Subject: CN=fd522caccec548df70fdd2f548364953ceac92ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:7e:2e:59:f7:0e:4c:9f:4c:6e:9e:b0:13:
ee:da:be:d6:46:f8:c3:24:5d:ad:01:1c:46:fb:bc:
79:5b:f1:51:24:37:dc:8e:fe:1b:66:47:7f:5d:88:
f7:3f:be:d4:f1:cd:26:6d:ff:81:33:2f:77:9c:04:
8c:56:d2:fa:58:0e:f8:3d:be:6e:2d:c8:00:68:c8:
0d:a9:c5:20:ad:f5:d0:75:ed:76:3f:09:b5:54:3b:
63:3a:ac:2c:b7:c1:12:82:ac:ee:a5:ab:16:9d:32:
3d:55:a1:2a:66:2c:43:1c:cb:00:93:00:64:d4:54:
c1:d6:ac:2a:5b:57:5b:4f:e1:96:11:2a:42:c1:e4:
ef:22:22:c9:f7:a5:e8:4c:db:9c:71:31:27:2c:7d:
86:9d:5e:1b:4a:93:8b:dd:41:e4:79:61:a9:dd:ab:
22:4e:89:33:58:8b:31:f7:d4:5a:5c:47:b9:16:cd:
28:bf:0d:72:11:fe:be:88:b9:db:df:e3:aa:64:e3:
49:ea:05:94:73:66:87:ff:6a:83:9f:6f:5b:98:83:
0b:d8:14:22:b4:89:3d:49:13:15:f0:2d:23:25:bc:
80:71:34:18:d8:61:cb:60:35:b0:25:a7:03:0d:37:
b3:f7:a0:10:fc:07:70:ad:16:b9:89:8d:15:22:6b:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:52:2C:AC:CE:C5:48:DF:70:FD:D2:F5:48:36:49:53:CE:AC:92:FF
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:aa:3b:db:5d:17:1d:32:11:46:74:f5:a4:cf:46:02:33:b4:
3c:c3:e9:39:ec:ed:02:40:83:3c:4c:46:80:69:ce:a7:86:67:
c8:19:5f:4c:f2:50:c2:56:25:a1:bf:b4:db:1f:90:b3:18:aa:
fa:27:e4:6a:a7:a1:c9:a1:e1:fa:6c:bb:5b:9a:eb:fb:bf:44:
72:71:d5:6b:39:6a:e9:a3:d3:e7:b0:36:d0:f5:de:55:07:20:
20:29:17:e2:6d:c5:f7:71:97:57:31:7b:fc:d6:78:23:ff:91:
90:2f:7b:7a:44:c5:38:5f:2e:f7:e7:66:6a:69:1e:dd:07:ac:
aa:30:42:01:8f:32:b5:d1:a3:37:3d:bd:59:10:fd:fa:d5:0c:
c7:95:bd:2f:ab:57:37:0c:e5:7c:cb:21:48:bd:77:fd:b6:e2:
de:02:3b:d9:03:b5:45:5b:fc:97:ca:4c:6a:a3:86:6f:10:78:
42:46:4a:77:2a:d8:f1:83:ff:4c:9b:a6:5f:cc:4a:c6:70:32:
1e:25:56:22:5b:16:f8:f2:f8:f8:d3:68:85:19:39:c1:13:a9:
23:c3:33:b4:e5:06:3b:ae:cd:07:ba:dd:61:1d:63:d5:74:df:
f3:10:c0:c6:75:48:e4:bb:16:e5:54:ed:83:92:c9:9f:0d:65:
67:ec:be:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTdikUufmq2uCC7c4tExaSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYWNkOThkZTc5MTkyMzU3YWRjZjlkZjBhZGJlODMxOTIy
MjhiZDUwHhcNMjUxMTA1MTAwMDQzWhcNMjUxMTA2MTAwMDQzWjAzMTEwLwYDVQQD
EyhmZDUyMmNhY2NlYzU0OGRmNzBmZGQyZjU0ODM2NDk1M2NlYWM5MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rZ+Lln3DkyfTG6esBPu2r7WRvjD
JF2tARxG+7x5W/FRJDfcjv4bZkd/XYj3P77U8c0mbf+BMy93nASMVtL6WA74Pb5u
LcgAaMgNqcUgrfXQde12Pwm1VDtjOqwst8ESgqzupasWnTI9VaEqZixDHMsAkwBk
1FTB1qwqW1dbT+GWESpCweTvIiLJ96XoTNuccTEnLH2GnV4bSpOL3UHkeWGp3asi
TokzWIsx99RaXEe5Fs0ovw1yEf6+iLnb3+OqZONJ6gWUc2aH/2qDn29bmIML2BQi
tIk9SRMV8C0jJbyAcTQY2GHLYDWwJacDDTez96AQ/AdwrRa5iY0VImso0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1SLKzOxUjfcP3S9Ug2SVPOrJL/MB8GA1UdIwQY
MBaAFOus2Y3nkZI1etz53wrb6DGSIovVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgt
Njk5YzQ1YmE3ZTU4LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84YTY0ZWMtODVlMi00YTY5LTg1ZDgtNjk5YzQ1YmE3ZTU4
LzEvNjZ6WmplZVJralY2M1BuZkN0dm9NWklpaTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnao7210X
HTIRRnT1pM9GAjO0PMPpOeztAkCDPExGgGnOp4ZnyBlfTPJQwlYlob+02x+Qsxiq
+ifkaqehyaHh+my7W5rr+79EcnHVazlq6aPT57A20PXeVQcgICkX4m3F93GXVzF7
/NZ4I/+RkC97ekTFOF8u9+dmamke3QesqjBCAY8ytdGjNz29WRD9+tUMx5W9L6tX
NwzlfMshSL13/bbi3gI72QO1RVv8l8pMaqOGbxB4QkZKdyrY8YP/TJumX8xKxnAy
HiVWIlsW+PL4+NNohRk5wROpI8MztOUGO67NB7rdYR1j1XTf8xDAxnVI5LsW5VTt
g5LJnw1lZ+y+tQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:42 2025 by rpki-client