Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
File: zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json)
Hash identifier: 6IYBdSiPVQW5+4pzqtwKuKSRd4JGHCrkb8bRgTiIOVs=
Subject key identifier: 66:14:B9:88:99:7E:05:E7:98:00:E2:A1:98:CC:32:C8:39:F1:A3:69
Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
Certificate issuer: /CN=cc4500091efcd905e72ea45f278248661f225b2f
Certificate serial: 019A7338631B6A4A1524DC778D8318EE42BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 14:01:06 +0000
Manifest this update: Tue 11 Nov 2025 14:01:06 +0000
Manifest next update: Wed 12 Nov 2025 14:01:06 +0000
Files and hashes: 1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: ks632QqR34wAjZW+3T1nUQA3BCDgru12Az6zeTBRGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:63:1b:6a:4a:15:24:dc:77:8d:83:18:ee:42:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f
Validity
Not Before: Nov 11 14:01:06 2025 GMT
Not After : Nov 12 14:01:06 2025 GMT
Subject: CN=6614b988997e05e79800e2a198cc32c839f1a369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:cf:6d:79:1e:03:cf:e1:50:52:77:95:48:
0d:36:53:b1:f2:79:f2:b7:c5:f0:42:97:58:f1:6f:
21:fb:80:d8:25:6b:51:a5:a8:c9:a2:32:ca:c8:50:
3c:fd:38:98:5d:e0:8f:f3:71:9a:b1:ab:ff:3a:0c:
23:ae:82:ed:3f:66:fc:15:9e:9d:da:57:ce:7d:e3:
08:9e:6a:12:60:5e:ad:59:26:3f:e2:bf:f6:57:34:
e2:f2:f8:2a:88:76:cd:70:1b:e2:a0:92:5a:1b:e2:
73:5a:bf:b7:f6:e2:71:a8:b7:ba:95:25:e1:60:c9:
44:42:01:07:1e:33:ea:54:fe:e4:06:5c:80:ec:ce:
fe:0a:56:55:d1:3c:a5:f0:69:92:e4:41:f1:7a:5b:
4d:ee:27:c0:8e:bd:31:62:53:5b:6f:0f:6b:d5:38:
b9:03:3d:32:4c:c6:ab:a4:66:f5:83:ca:51:6d:3c:
13:cf:2b:2a:56:0a:33:ce:a0:b3:19:19:56:0d:0b:
b9:ad:80:2e:b8:74:c7:d2:00:53:98:26:c9:0e:dd:
ef:5e:32:d7:79:b0:b3:f8:69:37:2d:e1:27:97:67:
2f:47:42:f4:af:02:cc:66:88:2b:f0:11:20:fa:a5:
2b:5c:96:5a:bf:25:7c:55:7c:ac:d0:38:fa:70:23:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:14:B9:88:99:7E:05:E7:98:00:E2:A1:98:CC:32:C8:39:F1:A3:69
X509v3 Authority Key Identifier:
keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:3b:51:18:f6:84:03:bb:1a:5b:cd:0a:12:cf:ad:5d:bf:e4:
61:c9:88:ae:58:62:9e:51:28:24:92:e7:5b:8f:6f:a8:ed:a5:
eb:1e:1f:38:eb:2a:01:ae:19:21:06:00:c5:3a:00:77:1e:11:
e0:51:f6:f1:8e:06:82:df:c2:0e:9e:88:81:7c:2c:01:2d:70:
ba:29:a2:f5:b5:50:3c:de:a2:8c:54:7c:d4:d6:97:bb:08:cf:
0d:3c:14:68:0f:31:b9:99:47:01:c2:b6:bc:49:23:0a:f6:20:
48:33:cb:94:f4:ba:70:da:10:8d:8a:21:a3:7c:c4:6b:d4:62:
8e:7d:69:82:0f:e5:08:6c:13:d3:24:6d:f8:04:dd:36:3d:fc:
8d:29:8c:2d:57:aa:07:20:32:ee:74:1f:1a:87:85:99:a0:e2:
a0:54:22:fc:48:45:e1:6b:20:61:a8:25:17:ed:59:46:06:c1:
21:c7:4b:e0:63:86:83:d0:93:c1:80:8b:cd:3a:55:da:60:61:
c9:04:02:85:46:78:05:7b:de:56:c6:c4:df:48:4d:65:c4:6e:
e3:2d:9a:b3:43:0e:7a:ac:cc:b9:16:d3:8a:9e:ac:14:77:e5:
dd:35:b2:e5:eb:6b:15:d0:f1:37:bd:93:64:aa:ca:91:ae:e4:
d6:94:70:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzOGMbakoVJNx3jYMY7kK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDUwMDA5MWVmY2Q5MDVlNzJlYTQ1ZjI3ODI0ODY2MWYy
MjViMmYwHhcNMjUxMTExMTQwMTA2WhcNMjUxMTEyMTQwMTA2WjAzMTEwLwYDVQQD
Eyg2NjE0Yjk4ODk5N2UwNWU3OTgwMGUyYTE5OGNjMzJjODM5ZjFhMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRHPbXkeA8/hUFJ3lUgNNlOx8nny
t8XwQpdY8W8h+4DYJWtRpajJojLKyFA8/TiYXeCP83Gasav/OgwjroLtP2b8FZ6d
2lfOfeMInmoSYF6tWSY/4r/2VzTi8vgqiHbNcBvioJJaG+JzWr+39uJxqLe6lSXh
YMlEQgEHHjPqVP7kBlyA7M7+ClZV0Tyl8GmS5EHxeltN7ifAjr0xYlNbbw9r1Ti5
Az0yTMarpGb1g8pRbTwTzysqVgozzqCzGRlWDQu5rYAuuHTH0gBTmCbJDt3vXjLX
ebCz+Gk3LeEnl2cvR0L0rwLMZogr8BEg+qUrXJZavyV8VXys0Dj6cCP9EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYUuYiZfgXnmADioZjMMsg58aNpMB8GA1UdIwQY
MBaAFMxFAAke/NkF5y6kXyeCSGYfIlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzct
NDQ5MTQwMWVkYzIyLzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzctNDQ5MTQwMWVkYzIy
LzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxDtRGPaE
A7saW80KEs+tXb/kYcmIrlhinlEoJJLnW49vqO2l6x4fOOsqAa4ZIQYAxToAdx4R
4FH28Y4Ggt/CDp6IgXwsAS1wuimi9bVQPN6ijFR81NaXuwjPDTwUaA8xuZlHAcK2
vEkjCvYgSDPLlPS6cNoQjYoho3zEa9Rijn1pgg/lCGwT0yRt+ATdNj38jSmMLVeq
ByAy7nQfGoeFmaDioFQi/EhF4WsgYaglF+1ZRgbBIcdL4GOGg9CTwYCLzTpV2mBh
yQQChUZ4BXveVsbE30hNZcRu4y2as0MOeqzMuRbTip6sFHfl3TWy5etrFdDxN72T
ZKrKka7k1pRwHA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:56 2025 by rpki-client