Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: 8heIU3wS01essXnS/7DPoHHGC0RStoYxiQ/2+OKhoqE=
Subject key identifier: 98:95:47:D3:AB:FC:7D:C9:2B:A0:D3:32:DD:6A:EE:15:00:9E:97:C2
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 0199240CC4D73565B448616BC189E06BA557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 12:00:40 +0000
Manifest this update: Sun 07 Sep 2025 12:00:40 +0000
Manifest next update: Mon 08 Sep 2025 12:00:40 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: Q+keLhELNrI6P8Qf304ZYrexPQSG6kJqjS3iZJcxoyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:c4:d7:35:65:b4:48:61:6b:c1:89:e0:6b:a5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Sep 7 12:00:40 2025 GMT
Not After : Sep 8 12:00:40 2025 GMT
Subject: CN=989547d3abfc7dc92ba0d332dd6aee15009e97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:bd:fc:78:e2:61:77:93:23:1f:54:00:38:
b6:5a:aa:f2:f4:70:77:53:5f:e9:b9:8b:dd:5d:4b:
43:a0:08:2e:3e:2e:64:da:4a:62:fd:6a:d0:aa:41:
62:82:e9:ac:b9:69:49:db:31:33:5a:d0:5d:23:58:
e5:8c:b3:85:c1:46:39:33:84:3c:f7:6f:82:b4:f6:
71:c2:1c:af:96:43:04:34:71:0a:0b:7f:88:f0:eb:
8d:68:a1:a6:7d:23:23:6d:40:75:81:80:1b:56:53:
5a:2e:67:a4:3e:2d:b6:f7:3f:87:b3:72:a3:6f:9a:
91:9d:bc:26:b9:42:2b:8c:5f:bf:43:4b:8c:e2:51:
f5:42:e1:e5:17:31:0f:d0:62:16:f9:82:f2:5f:4c:
c1:b3:c1:ac:e7:2b:93:ed:ff:f5:ab:d0:ab:d6:86:
64:a1:5d:e4:7c:4d:43:74:43:cc:c1:ab:34:19:55:
1e:af:9b:17:67:e1:56:a2:54:27:4c:94:e8:25:72:
53:8a:96:b0:50:3a:43:a1:2c:fc:74:c1:24:c4:89:
bf:f5:57:98:04:02:ea:a3:93:96:ff:a2:2e:9d:6c:
a8:02:5b:8a:f8:ed:67:ae:8e:77:50:02:0a:fd:24:
c8:9c:67:19:db:ab:fc:7a:82:1c:61:60:ff:38:4e:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:47:D3:AB:FC:7D:C9:2B:A0:D3:32:DD:6A:EE:15:00:9E:97:C2
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:93:16:dd:f9:e2:30:c9:ab:26:8f:5e:72:b6:c4:9a:ed:2a:
9d:ab:59:2f:05:c6:98:c1:24:93:17:be:84:a9:37:5d:41:a3:
7a:8b:c0:3a:cc:fe:20:2f:3f:33:1e:07:4a:04:e1:f4:c6:87:
7d:7c:c1:fc:82:ec:14:c8:1b:74:05:2f:e2:a6:55:c3:2c:b5:
12:e4:ca:1c:45:aa:27:9d:6b:9f:c2:58:2d:95:10:09:29:1d:
51:f5:36:dc:aa:29:e6:d2:78:04:b4:2b:ed:d1:66:d8:33:8a:
e9:6b:c3:a7:f0:2c:9f:22:d8:3f:5f:ed:25:67:54:43:d4:d7:
e0:57:38:11:9a:08:91:3f:34:df:8e:d7:13:1a:36:1e:d4:5c:
8b:c8:9f:6b:27:4a:aa:74:9a:b6:4f:6e:91:77:19:9c:5a:c6:
5a:14:10:ad:15:10:08:77:22:e2:cc:fd:63:d9:00:ba:8b:bd:
53:eb:70:ac:92:c0:37:12:cb:7a:90:6f:64:64:5e:c8:84:4d:
3b:dd:61:87:12:79:36:8d:b7:94:5f:65:0f:74:67:cf:b1:91:
39:c9:b6:73:f0:07:33:78:c4:b5:db:01:c0:5c:1d:8c:5c:36:
02:45:55:3b:67:57:e0:aa:7f:7f:33:6b:8e:2f:ae:a8:6d:d8:
1a:e2:f5:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDMTXNWW0SGFrwYnga6VXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy
ZmUzYTYwHhcNMjUwOTA3MTIwMDQwWhcNMjUwOTA4MTIwMDQwWjAzMTEwLwYDVQQD
Eyg5ODk1NDdkM2FiZmM3ZGM5MmJhMGQzMzJkZDZhZWUxNTAwOWU5N2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fq9/HjiYXeTIx9UADi2Wqry9HB3
U1/puYvdXUtDoAguPi5k2kpi/WrQqkFigumsuWlJ2zEzWtBdI1jljLOFwUY5M4Q8
92+CtPZxwhyvlkMENHEKC3+I8OuNaKGmfSMjbUB1gYAbVlNaLmekPi229z+Hs3Kj
b5qRnbwmuUIrjF+/Q0uM4lH1QuHlFzEP0GIW+YLyX0zBs8Gs5yuT7f/1q9Cr1oZk
oV3kfE1DdEPMwas0GVUer5sXZ+FWolQnTJToJXJTipawUDpDoSz8dMEkxIm/9VeY
BALqo5OW/6IunWyoAluK+O1nro53UAIK/STInGcZ26v8eoIcYWD/OE7d9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiVR9Or/H3JK6DTMt1q7hUAnpfCMB8GA1UdIwQY
MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt
M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy
LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJMW3fni
MMmrJo9ecrbEmu0qnatZLwXGmMEkkxe+hKk3XUGjeovAOsz+IC8/Mx4HSgTh9MaH
fXzB/ILsFMgbdAUv4qZVwyy1EuTKHEWqJ51rn8JYLZUQCSkdUfU23Kop5tJ4BLQr
7dFm2DOK6WvDp/AsnyLYP1/tJWdUQ9TX4Fc4EZoIkT80347XExo2HtRci8ifaydK
qnSatk9ukXcZnFrGWhQQrRUQCHci4sz9Y9kAuou9U+twrJLANxLLepBvZGReyIRN
O91hhxJ5No23lF9lD3Rnz7GROcm2c/AHM3jEtdsBwFwdjFw2AkVVO2dX4Kp/fzNr
ji+uqG3YGuL1Lw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:49 2025 by rpki-client