Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: t/EVEjjR3GAIprJ9LJ2yQo5YGi/O8MsvKU0AePjIxfg=
Subject key identifier: 46:14:F9:99:D4:27:F3:2E:4F:4C:4B:11:35:73:A7:71:52:CF:50:F2
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 019A7293AF62C6A76B4DDA5A2ECC970781D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0E62
Signing time: Tue 11 Nov 2025 11:01:12 +0000
Manifest this update: Tue 11 Nov 2025 11:01:12 +0000
Manifest next update: Wed 12 Nov 2025 11:01:12 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: 1BBoxCi2b/KXK3JvxCCACLtUlwOxWpjpGc/KXYj36cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:af:62:c6:a7:6b:4d:da:5a:2e:cc:97:07:81:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Nov 11 11:01:12 2025 GMT
Not After : Nov 12 11:01:12 2025 GMT
Subject: CN=4614f999d427f32e4f4c4b113573a77152cf50f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:3e:28:d9:02:51:38:01:17:c7:3c:c8:7a:
08:c8:f3:94:32:cb:b3:9e:b4:1c:c7:21:71:6f:79:
0c:f4:74:34:5a:8b:a4:0a:21:57:9e:15:c9:bb:d6:
fb:59:84:95:3c:a7:ac:06:9d:26:26:8a:0d:8a:f9:
68:08:06:61:42:03:23:81:84:1d:b2:43:20:9e:7b:
4a:b3:35:17:df:52:26:f8:5a:b8:97:2b:ae:47:dc:
bb:a1:27:2f:1c:56:5a:d0:d7:6f:43:a5:95:40:d9:
f1:19:c5:13:7f:35:fb:88:70:a9:cf:ff:6b:7e:02:
26:e8:94:3f:07:ce:d3:d0:d4:4b:d7:ad:c9:b1:f4:
e5:dd:99:61:1c:ef:6b:89:2d:d2:be:b8:d7:82:02:
00:08:b6:fc:6d:ce:bb:4b:cf:2d:50:ff:50:7c:3f:
b7:cb:f3:de:94:b4:e1:01:ae:34:72:7d:d9:f5:ea:
73:95:22:52:a6:5f:2d:67:d1:4e:9f:e6:16:f7:ca:
de:ec:44:cb:94:4f:9b:66:7d:9b:7d:39:51:8b:8b:
28:67:12:ee:7a:d9:1b:52:e7:57:10:59:46:47:46:
bf:34:e3:05:f3:98:c8:44:32:5b:bf:79:dd:eb:62:
1e:30:41:d6:6e:dd:11:17:31:3a:2f:10:b0:31:1f:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:F9:99:D4:27:F3:2E:4F:4C:4B:11:35:73:A7:71:52:CF:50:F2
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5f:bf:b9:1c:d4:40:c6:0e:15:bf:f9:5f:96:b1:59:9b:62:
0d:1f:67:04:41:5a:50:55:95:18:06:4b:19:96:81:f6:f8:ff:
d0:b5:4a:45:8b:60:21:74:89:dd:6d:8e:4c:f2:c7:4f:b7:d9:
8c:6f:00:07:0a:07:9f:6a:aa:47:db:b8:00:36:d8:22:6d:84:
0b:c0:83:fb:36:9b:6e:93:17:da:cc:e6:2f:ec:c0:88:94:72:
2f:b2:b4:b1:81:87:8d:5d:03:ba:4c:27:73:d1:64:19:53:e8:
f3:6e:c0:ad:2b:bf:96:96:74:5a:49:b3:d2:3b:68:12:71:4d:
5c:6b:2c:71:5b:4d:7b:74:fa:54:a0:d8:b8:7b:61:35:80:27:
b3:b6:47:01:4b:7e:60:fb:72:26:14:77:76:d4:4f:ea:f8:c5:
43:b0:ad:5a:bd:c2:98:0d:85:d5:2f:4d:ef:a9:d9:23:b4:d9:
1c:6a:12:99:1c:74:e4:70:3e:dd:fc:23:a8:3a:d3:43:b2:90:
5e:65:6e:a6:80:93:64:e6:b8:0e:26:70:75:db:4b:92:17:39:
99:a6:78:6b:60:d2:4c:3f:8a:d8:b0:52:dc:25:2a:06:b0:b9:
b1:e1:3d:6d:13:90:08:14:1d:d0:7b:f3:68:8f:17:5b:eb:78:
90:af:4b:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk69ixqdrTdpaLsyXB4HTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1
YWNkNGEwHhcNMjUxMTExMTEwMTEyWhcNMjUxMTEyMTEwMTEyWjAzMTEwLwYDVQQD
Eyg0NjE0Zjk5OWQ0MjdmMzJlNGY0YzRiMTEzNTczYTc3MTUyY2Y1MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunU+KNkCUTgBF8c8yHoIyPOUMsuz
nrQcxyFxb3kM9HQ0WoukCiFXnhXJu9b7WYSVPKesBp0mJooNivloCAZhQgMjgYQd
skMgnntKszUX31Im+Fq4lyuuR9y7oScvHFZa0NdvQ6WVQNnxGcUTfzX7iHCpz/9r
fgIm6JQ/B87T0NRL163JsfTl3ZlhHO9riS3SvrjXggIACLb8bc67S88tUP9QfD+3
y/PelLThAa40cn3Z9epzlSJSpl8tZ9FOn+YW98re7ETLlE+bZn2bfTlRi4soZxLu
etkbUudXEFlGR0a/NOMF85jIRDJbv3nd62IeMEHWbt0RFzE6LxCwMR/JcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYU+ZnUJ/MuT0xLETVzp3FSz1DyMB8GA1UdIwQY
MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt
MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0
LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV+/uRzU
QMYOFb/5X5axWZtiDR9nBEFaUFWVGAZLGZaB9vj/0LVKRYtgIXSJ3W2OTPLHT7fZ
jG8ABwoHn2qqR9u4ADbYIm2EC8CD+zabbpMX2szmL+zAiJRyL7K0sYGHjV0Dukwn
c9FkGVPo827ArSu/lpZ0Wkmz0jtoEnFNXGsscVtNe3T6VKDYuHthNYAns7ZHAUt+
YPtyJhR3dtRP6vjFQ7CtWr3CmA2F1S9N76nZI7TZHGoSmRx05HA+3fwjqDrTQ7KQ
XmVupoCTZOa4DiZwddtLkhc5maZ4a2DSTD+K2LBS3CUqBrC5seE9bROQCBQd0Hvz
aI8XW+t4kK9LKQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:50 2025 by rpki-client