Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier: eSHq6ZsiFubBmAF+L//HGcEX4nUm/KF3HZLSVzAf0yA=
Subject key identifier: 64:91:B3:56:A3:9D:DD:8A:84:D3:C1:A1:B3:DB:0A:CC:D5:B4:99:7A
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer: /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial: 019A71B8CCFB21A0645AC3EC0736E21EDB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 07:02:07 +0000
Manifest this update: Tue 11 Nov 2025 07:02:07 +0000
Manifest next update: Wed 12 Nov 2025 07:02:07 +0000
Files and hashes: 1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: ubC4lAtbMGT9YtdUTcf7c2EnRUirJlyTxyO41StWLuw=)
2: zR4iLeAlwp_N8F3SE1jgzNAAf5g.roa (hash: xWq9xR6Qocj5qbdstuQx7KrJz2/dodBVSQAGA+Ot/AI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cc:fb:21:a0:64:5a:c3:ec:07:36:e2:1e:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
Validity
Not Before: Nov 11 07:02:07 2025 GMT
Not After : Nov 12 07:02:07 2025 GMT
Subject: CN=6491b356a39ddd8a84d3c1a1b3db0accd5b4997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:c2:01:99:5d:41:90:67:fd:f0:cd:a5:67:
3b:8e:04:4c:f9:da:86:a7:9d:5c:b3:55:04:c8:e5:
c7:b9:44:e0:38:34:b5:43:25:48:8e:4e:2e:20:68:
3a:02:40:cb:b1:52:8d:31:46:f1:c7:7d:be:4f:25:
3e:5f:72:fa:d5:25:69:5d:cb:b7:0c:d2:05:c2:19:
f0:d0:86:1c:9e:19:a5:ad:7c:c4:58:b1:cb:19:ff:
a5:2b:6d:17:81:91:e9:e4:87:c4:d4:06:9d:7d:72:
05:0e:10:c1:2e:7a:20:d7:96:99:07:cc:0b:a2:d5:
81:09:59:a8:23:61:c0:ab:cc:cc:cb:87:e5:7f:47:
ca:f0:c1:9e:48:93:1f:55:29:6e:e9:44:e9:f0:e2:
cd:1c:ed:07:77:05:e7:5c:0a:86:01:22:dd:74:68:
ce:82:21:ba:d8:b8:8d:09:f0:e1:3a:33:d8:a0:f5:
cf:c8:c4:7c:4d:da:31:dd:55:19:f2:66:2d:c2:17:
b7:e0:d9:b6:2a:19:37:54:1b:10:66:d8:dc:bd:23:
cd:e8:12:dd:9a:8b:e5:c1:38:c7:ab:e4:78:89:d4:
66:c3:75:7c:81:7a:ba:2c:18:a3:87:73:e7:65:77:
8a:57:c6:05:a6:77:95:6f:ab:f6:b9:a3:9a:d4:8d:
e6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:91:B3:56:A3:9D:DD:8A:84:D3:C1:A1:B3:DB:0A:CC:D5:B4:99:7A
X509v3 Authority Key Identifier:
keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:bf:30:1a:d9:b2:8e:f3:76:52:ff:90:79:f1:d3:69:bb:76:
17:93:24:39:75:50:12:bc:30:e5:fb:bf:9a:4c:90:c3:b6:1d:
0d:6f:4c:b3:58:fd:3a:dd:f8:c5:f1:c2:18:ec:ba:37:1b:69:
d9:de:74:a2:b8:ee:f8:96:1c:f4:92:ee:e5:63:57:4a:eb:49:
a4:d5:7e:63:69:0c:3b:bc:ef:0d:0d:58:c7:f8:e7:d3:0e:bd:
29:1b:42:7c:2e:7c:2b:c9:28:b9:0c:54:a1:da:99:f0:4b:22:
78:66:21:76:5f:08:52:c5:4a:d2:42:17:4e:ae:3a:2d:b5:41:
1a:e3:42:74:62:ca:fe:53:c4:79:29:bf:7d:15:24:39:3a:cd:
01:e1:e0:a7:0a:86:dc:b9:11:1d:de:33:cd:d2:2c:16:00:08:
7a:e1:f7:e3:3f:f1:7a:ae:cf:f2:7c:18:8a:f0:85:7d:d1:84:
c1:bf:89:77:68:f9:c3:7f:fe:53:36:f3:8c:14:b3:61:85:47:
81:42:3e:bc:a2:39:ac:82:e9:68:be:02:b5:2d:73:ca:4b:07:
30:4e:37:9b:8b:a0:df:68:f3:74:cd:c5:e4:0d:ec:11:69:d6:
c4:4d:fa:1b:e9:ff:ec:aa:1e:2d:ac:24:a6:82:27:99:9e:2b:
91:b0:36:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMz7IaBkWsPsBzbiHtsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzY0YzY2OGVmZjM0NzQwODE2ZWRhODVhNDU5ZDBjNDIy
ZTA2M2MwHhcNMjUxMTExMDcwMjA3WhcNMjUxMTEyMDcwMjA3WjAzMTEwLwYDVQQD
Eyg2NDkxYjM1NmEzOWRkZDhhODRkM2MxYTFiM2RiMGFjY2Q1YjQ5OTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+DCAZldQZBn/fDNpWc7jgRM+dqG
p51cs1UEyOXHuUTgODS1QyVIjk4uIGg6AkDLsVKNMUbxx32+TyU+X3L61SVpXcu3
DNIFwhnw0IYcnhmlrXzEWLHLGf+lK20XgZHp5IfE1AadfXIFDhDBLnog15aZB8wL
otWBCVmoI2HAq8zMy4flf0fK8MGeSJMfVSlu6UTp8OLNHO0HdwXnXAqGASLddGjO
giG62LiNCfDhOjPYoPXPyMR8Tdox3VUZ8mYtwhe34Nm2Khk3VBsQZtjcvSPN6BLd
movlwTjHq+R4idRmw3V8gXq6LBijh3PnZXeKV8YFpneVb6v2uaOa1I3mawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSRs1ajnd2KhNPBobPbCszVtJl6MB8GA1UdIwQY
MBaAFJPGTGaO/zR0CBbtqFpFnQxCLgY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzIt
MTQ3ZWM5NmVhNzMwLzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC82MmQxNWItN2JkNS00YjNiLWJlNzItMTQ3ZWM5NmVhNzMw
LzEvazhaTVpvN19OSFFJRnUyb1drV2RERUl1Qmp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARL8wGtmy
jvN2Uv+QefHTabt2F5MkOXVQErww5fu/mkyQw7YdDW9Ms1j9Ot34xfHCGOy6Nxtp
2d50orju+JYc9JLu5WNXSutJpNV+Y2kMO7zvDQ1Yx/jn0w69KRtCfC58K8kouQxU
odqZ8EsieGYhdl8IUsVK0kIXTq46LbVBGuNCdGLK/lPEeSm/fRUkOTrNAeHgpwqG
3LkRHd4zzdIsFgAIeuH34z/xeq7P8nwYivCFfdGEwb+Jd2j5w3/+UzbzjBSzYYVH
gUI+vKI5rILpaL4CtS1zyksHME43m4ug32jzdM3F5A3sEWnWxE36G+n/7KoeLawk
poInmZ4rkbA2Pg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:36 2025 by rpki-client