Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
File: Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft (raw, json)
Hash identifier: HRwmvev4su0tSFh1i0u54KtUg7S8j4mQiFDIbF80MmE=
Subject key identifier: C2:8F:69:78:19:1D:70:D6:52:E3:BC:20:71:63:92:D7:72:6C:C0:BE
Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
Certificate issuer: /CN=67cc77931dbb0e9e229c7217652b76aef4002721
Certificate serial: 019A71808B8348F4652861839453EAAABE62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl (hash: L0K1N7hj0l9v0rXiNQpfqQW4S7K//HwxSqZJ+PpBtzc=)
2: uTpH5OwzcZTfOpu8X57ZjeWWBJs.roa (hash: 6nsDviQDF/u+HfsVoAuFYxI3/pTqIdYdXhGDj3wFL8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8b:83:48:f4:65:28:61:83:94:53:ea:aa:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=c28f6978191d70d652e3bc20716392d7726cc0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:c4:7c:93:cd:ad:76:49:51:4c:ae:13:bc:
1e:66:2e:c4:84:e6:82:56:c5:98:25:13:01:bf:3f:
13:98:e8:9f:ea:56:21:72:13:3c:f8:be:d1:9c:e2:
9c:1b:e1:73:56:45:f3:e4:78:52:5c:83:01:67:9d:
0f:10:dd:42:52:c6:e7:40:eb:f7:ef:ab:21:e8:c4:
a2:ba:bf:dd:70:9e:9f:4c:a2:9c:89:2d:f2:fc:70:
4d:ef:01:ca:1b:b6:aa:56:f7:ee:1f:61:be:6c:cf:
7a:88:79:6e:c3:0f:fb:a6:40:6f:f3:64:ab:da:90:
0d:b7:cf:1e:f8:97:a9:5f:4a:42:be:56:be:10:ab:
f6:a5:36:bc:7b:fb:5c:e2:67:66:1f:57:2c:e1:98:
88:d8:d7:ff:90:d9:f1:70:67:99:52:2f:4f:07:21:
82:f4:ab:8a:d4:a7:3a:a8:15:39:11:67:41:67:8d:
2e:d8:a6:4d:ab:cf:1a:10:8f:d5:a7:1f:f6:d8:04:
1b:35:74:49:d7:30:55:08:ff:70:2d:0a:ce:d5:a6:
f4:80:f4:70:c5:a9:4b:36:65:8b:88:c1:f2:c7:9f:
49:bc:c1:13:ec:97:5c:98:54:5c:17:ac:ec:95:0d:
e9:51:aa:ba:b7:c4:2b:1d:2e:fc:83:6f:94:6f:a1:
fe:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:69:78:19:1D:70:D6:52:E3:BC:20:71:63:92:D7:72:6C:C0:BE
X509v3 Authority Key Identifier:
keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4a:63:9e:99:e7:28:9b:2b:aa:f0:67:6b:04:9b:0b:5e:c4:
0a:60:20:fc:1d:eb:c0:13:a0:fa:bb:0b:32:30:3d:4a:27:5b:
26:9a:c5:c1:35:fc:de:27:30:63:56:4f:b1:80:c7:ec:3d:90:
79:5b:01:b4:f8:e3:09:c6:b6:e5:3e:9d:c6:c9:99:32:db:c6:
41:ce:e2:f5:65:9e:97:32:78:8a:ea:25:2d:d9:a8:51:fa:e9:
2b:65:be:e1:df:f8:15:bc:63:c3:f2:c4:17:3f:f6:69:58:4e:
de:5c:87:64:fb:b0:24:44:c9:de:0d:53:7c:06:fd:78:c4:aa:
be:9f:dd:44:a1:f5:4e:1c:73:1d:aa:f6:4d:fb:2f:f2:35:f4:
23:31:36:2c:c2:82:9b:38:24:ce:05:b7:1b:12:f1:c6:ed:b4:
fa:21:62:c4:c1:a5:42:18:7c:25:10:bb:ae:c9:0b:69:f4:f5:
03:d9:d8:a2:98:7b:45:3b:97:6c:e7:97:85:14:ec:f2:d4:7f:
ba:e0:e6:8d:dd:cf:1f:1f:49:05:37:af:a7:13:66:09:56:ce:
a9:7c:07:d2:81:5a:33:7e:0c:5c:6a:b1:10:f1:6c:56:c3:4e:
13:e7:5a:bf:45:a1:bc:be:07:e4:d0:ac:61:5c:2b:ae:ee:f1:
31:47:1a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgIuDSPRlKGGDlFPqqr5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2M3NzkzMWRiYjBlOWUyMjljNzIxNzY1MmI3NmFlZjQw
MDI3MjEwHhcNMjUxMTExMDYwMDQwWhcNMjUxMTEyMDYwMDQwWjAzMTEwLwYDVQQD
EyhjMjhmNjk3ODE5MWQ3MGQ2NTJlM2JjMjA3MTYzOTJkNzcyNmNjMGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPHEfJPNrXZJUUyuE7weZi7EhOaC
VsWYJRMBvz8TmOif6lYhchM8+L7RnOKcG+FzVkXz5HhSXIMBZ50PEN1CUsbnQOv3
76sh6MSiur/dcJ6fTKKciS3y/HBN7wHKG7aqVvfuH2G+bM96iHluww/7pkBv82Sr
2pANt88e+JepX0pCvla+EKv2pTa8e/tc4mdmH1cs4ZiI2Nf/kNnxcGeZUi9PByGC
9KuK1Kc6qBU5EWdBZ40u2KZNq88aEI/Vpx/22AQbNXRJ1zBVCP9wLQrO1ab0gPRw
xalLNmWLiMHyx59JvMET7JdcmFRcF6zslQ3pUaq6t8QrHS78g2+Ub6H+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKPaXgZHXDWUuO8IHFjktdybMC+MB8GA1UdIwQY
MBaAFGfMd5Mduw6eIpxyF2Urdq70ACchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQt
NGI0NmYzZDMzNzNmLzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQtNGI0NmYzZDMzNzNm
LzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0pjnpnn
KJsrqvBnawSbC17ECmAg/B3rwBOg+rsLMjA9SidbJprFwTX83icwY1ZPsYDH7D2Q
eVsBtPjjCca25T6dxsmZMtvGQc7i9WWelzJ4iuolLdmoUfrpK2W+4d/4Fbxjw/LE
Fz/2aVhO3lyHZPuwJETJ3g1TfAb9eMSqvp/dRKH1ThxzHar2Tfsv8jX0IzE2LMKC
mzgkzgW3GxLxxu20+iFixMGlQhh8JRC7rskLafT1A9nYoph7RTuXbOeXhRTs8tR/
uuDmjd3PHx9JBTevpxNmCVbOqXwH0oFaM34MXGqxEPFsVsNOE+dav0WhvL4H5NCs
YVwrru7xMUcaDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:30 2025 by rpki-client