Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: //IkDfOqQ9UVpjybxsiuPt7LBKSn75ygcW7jkXJT7es=
Subject key identifier: 57:D0:37:14:B5:45:C4:B1:90:1D:C1:6D:BC:50:36:28:00:C5:19:C9
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 019A71B78B029A55A119B7FC30B462C5F7C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 122A
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: g1cV7hXaG+yy9YU2gbkhbDPx/dqtO6rONNegHTUbMGU=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8b:02:9a:55:a1:19:b7:fc:30:b4:62:c5:f7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=57d03714b545c4b1901dc16dbc50362800c519c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:39:38:ff:bd:de:07:de:17:1d:6e:8c:46:
59:25:5e:5a:36:40:e0:39:e3:e4:d4:a2:b6:67:b4:
d1:d1:7e:a6:2a:1e:38:36:ca:db:89:73:84:83:aa:
4e:e6:76:85:38:6f:66:09:80:32:1c:05:9e:70:20:
b1:ca:de:a7:56:38:cb:29:8f:99:c5:3a:b3:e6:55:
3a:41:59:8d:b6:68:4e:e6:ef:58:44:13:c0:88:75:
57:49:69:66:20:4c:85:f5:9e:d5:e7:38:55:d3:96:
c1:17:7a:81:c4:f2:79:16:dc:1e:0c:6f:ca:91:3a:
a9:75:b2:41:73:ec:b8:a1:ac:c8:52:9a:9d:0a:38:
6d:86:84:c7:96:9f:24:38:a3:f7:cf:80:5b:27:b5:
d4:91:f7:43:21:39:34:90:71:87:74:da:5f:43:27:
67:b1:bb:3f:1a:55:e5:c1:5d:ec:27:c9:0a:09:6e:
c2:03:34:b0:39:3c:d0:6f:56:f4:89:f6:13:87:7b:
57:e1:56:a3:83:ff:ab:aa:7e:e5:58:92:07:74:ec:
29:d8:de:17:31:2f:b9:82:20:4d:c3:1b:cb:e3:f9:
6b:77:bd:c4:65:f4:12:be:aa:ef:91:86:fd:a5:a9:
69:88:f9:a2:43:ee:47:25:54:81:cf:04:96:69:36:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:37:14:B5:45:C4:B1:90:1D:C1:6D:BC:50:36:28:00:C5:19:C9
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:77:74:eb:b4:0c:20:7a:7a:7e:9f:1c:43:f9:68:70:06:ec:
9b:17:44:ab:6d:3a:7d:e8:b7:d1:25:69:a5:0a:7c:87:65:8b:
d0:9f:1a:6b:c3:fd:03:7b:da:6e:52:47:75:0e:f8:4e:00:88:
8d:b0:bd:aa:f8:0d:e2:2d:3a:bd:d0:42:bd:2e:5c:f5:8a:6b:
a1:e6:d6:04:3e:3c:c8:31:46:59:3c:8f:5b:03:82:7e:d3:35:
cd:58:f0:7b:a7:88:74:36:39:a7:20:40:a2:4e:d9:48:e6:3a:
35:16:a9:98:29:63:98:99:b8:a5:91:c0:cf:60:e0:5f:0b:72:
8c:23:8a:29:9c:2e:71:09:03:e9:1b:13:ef:06:d3:93:a4:7b:
32:6d:1b:f3:1d:78:70:c8:62:89:82:76:1b:dd:78:36:02:fe:
fe:90:15:23:ae:df:6f:68:91:aa:66:25:83:96:1b:3b:e8:e5:
16:50:7c:1c:f6:5e:c5:6f:01:0f:f6:e3:0b:28:3e:b1:da:9e:
00:0e:3f:fc:0b:8a:d4:68:b1:f7:47:49:c0:94:c8:ef:62:f1:
63:90:ef:0d:ff:ba:a0:df:8f:1f:34:62:40:c0:cc:13:51:e1:
97:65:bb:85:9a:97:79:a3:ac:cb:2a:f1:47:58:4d:7c:49:e1:
77:33:29:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4sCmlWhGbf8MLRixffFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjcwNjgzMDYyY2Q4YjM1YzFiNzYwMjE4YTc4OWI5MDhj
YjRjOGQwHhcNMjUxMTExMDcwMDQ1WhcNMjUxMTEyMDcwMDQ1WjAzMTEwLwYDVQQD
Eyg1N2QwMzcxNGI1NDVjNGIxOTAxZGMxNmRiYzUwMzYyODAwYzUxOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws85OP+93gfeFx1ujEZZJV5aNkDg
OePk1KK2Z7TR0X6mKh44NsrbiXOEg6pO5naFOG9mCYAyHAWecCCxyt6nVjjLKY+Z
xTqz5lU6QVmNtmhO5u9YRBPAiHVXSWlmIEyF9Z7V5zhV05bBF3qBxPJ5FtweDG/K
kTqpdbJBc+y4oazIUpqdCjhthoTHlp8kOKP3z4BbJ7XUkfdDITk0kHGHdNpfQydn
sbs/GlXlwV3sJ8kKCW7CAzSwOTzQb1b0ifYTh3tX4Vajg/+rqn7lWJIHdOwp2N4X
MS+5giBNwxvL4/lrd73EZfQSvqrvkYb9palpiPmiQ+5HJVSBzwSWaTbl7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfQNxS1RcSxkB3BbbxQNigAxRnJMB8GA1UdIwQY
MBaAFGdnBoMGLNizXBt2AhinibkIy0yNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvWjJjR2d3WXMyTE5jRzNZQ0dLZUp1UWpMVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXd067QM
IHp6fp8cQ/locAbsmxdEq206fei30SVppQp8h2WL0J8aa8P9A3vablJHdQ74TgCI
jbC9qvgN4i06vdBCvS5c9YproebWBD48yDFGWTyPWwOCftM1zVjwe6eIdDY5pyBA
ok7ZSOY6NRapmCljmJm4pZHAz2DgXwtyjCOKKZwucQkD6RsT7wbTk6R7Mm0b8x14
cMhiiYJ2G914NgL+/pAVI67fb2iRqmYlg5YbO+jlFlB8HPZexW8BD/bjCyg+sdqe
AA4//AuK1Gix90dJwJTI72LxY5DvDf+6oN+PHzRiQMDME1Hhl2W7hZqXeaOsyyrx
R1hNfEnhdzMptw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:44 2025 by rpki-client