Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: siaxGoSEIAr4sMIFyeSLCrKBteN9RQ6qrTWOjZRbFW4=
Subject key identifier: 3E:55:13:CA:B3:76:D1:E5:43:6A:D5:0D:38:ED:6D:BD:F8:3C:1B:63
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 0199239EF40556ACC223CAB50E972663CC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0E6F
Signing time: Sun 07 Sep 2025 10:00:43 +0000
Manifest this update: Sun 07 Sep 2025 10:00:43 +0000
Manifest next update: Mon 08 Sep 2025 10:00:43 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: nyBTLROl/ic9tCcplOwZtfce0/1E6/+hGPb6Ghzozok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:f4:05:56:ac:c2:23:ca:b5:0e:97:26:63:cc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Sep 7 10:00:43 2025 GMT
Not After : Sep 8 10:00:43 2025 GMT
Subject: CN=3e5513cab376d1e5436ad50d38ed6dbdf83c1b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:2d:5b:fe:e2:a6:c6:59:e6:29:1f:24:6f:
59:51:b7:cd:a5:51:a0:31:fb:ec:04:10:58:f5:39:
ee:85:d9:ec:4c:76:15:29:4f:69:af:ee:7a:be:cd:
92:0b:70:c8:3e:1c:ae:ca:a0:ca:c2:4b:bb:25:77:
a1:e6:28:08:c3:c3:ac:a6:b4:82:34:ed:63:e3:ae:
14:93:1d:6a:c2:14:d8:63:95:4b:49:0a:8d:02:9e:
4a:5d:27:cf:6c:d0:53:21:76:5c:03:89:15:f1:37:
35:64:59:37:28:03:cd:a1:0b:ff:9e:ea:b8:1f:e0:
b5:b2:b1:a6:0a:73:d3:ee:33:23:d7:b5:d0:59:46:
f5:75:f5:6e:bd:ea:48:e9:26:d0:dc:56:e2:5a:6d:
f1:18:36:a2:a1:4f:c5:80:ef:74:5e:92:1b:99:cb:
af:27:9e:70:7f:15:6d:18:54:78:f9:58:fb:f6:0e:
37:1d:4a:26:17:fb:2b:31:20:54:74:8a:34:86:28:
e1:03:0c:6b:df:fd:c4:0a:4a:cb:84:16:b1:24:75:
73:c0:db:e7:a8:0e:07:2f:62:3d:8c:f5:e7:a4:0e:
96:54:a8:6a:6a:a5:03:a7:ae:c1:5c:96:ed:5c:5c:
56:81:84:b7:ef:79:2b:9a:43:97:2b:1a:20:19:43:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:55:13:CA:B3:76:D1:E5:43:6A:D5:0D:38:ED:6D:BD:F8:3C:1B:63
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7e:f2:11:97:63:4d:ec:c9:e0:d8:bf:51:aa:a3:c0:2c:42:
ef:7a:48:b8:67:02:c1:19:f6:1d:fb:85:57:f2:56:08:0b:ed:
79:c7:bd:9a:b9:b9:c6:91:37:b8:c4:ea:82:fa:66:8e:c2:c3:
7b:e6:46:26:24:1e:a3:e7:86:65:4b:fa:d7:76:ac:3b:2e:02:
12:93:cf:2b:77:9d:54:1d:f2:fa:89:7f:77:2a:c4:1f:4a:da:
76:fc:0f:74:6b:c6:f9:c7:01:4c:22:a6:81:83:e0:6e:86:72:
7c:4b:28:01:71:c6:29:06:a8:88:ca:cb:39:03:c8:19:5e:08:
48:bf:34:23:96:dc:69:36:4c:89:d5:8f:89:d7:41:15:74:66:
e0:72:b5:c9:dd:f4:b5:d4:2d:9c:60:eb:50:8c:80:8b:57:78:
63:3a:ff:74:7e:9b:12:46:c0:b0:6d:18:30:68:bf:de:35:71:
6c:20:ca:16:3c:df:13:51:21:aa:1d:b7:28:3a:9b:a7:e4:59:
5e:26:e7:72:50:62:24:c6:54:8a:40:1e:81:8e:0d:c3:d2:b9:
92:55:80:35:7e:5f:5e:ad:02:04:e5:cf:e1:f9:09:ee:17:be:
69:24:7b:1c:2a:10:e5:b8:0e:3c:59:5d:ed:fc:33:9f:d4:28:
ec:4c:5d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnvQFVqzCI8q1DpcmY8xdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTNlZGRmMTg3YWM2YzFhODRmODg5NGQ2M2FiYjYwNTk2
Mjc5ZWMwHhcNMjUwOTA3MTAwMDQzWhcNMjUwOTA4MTAwMDQzWjAzMTEwLwYDVQQD
EygzZTU1MTNjYWIzNzZkMWU1NDM2YWQ1MGQzOGVkNmRiZGY4M2MxYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMYtW/7ipsZZ5ikfJG9ZUbfNpVGg
MfvsBBBY9TnuhdnsTHYVKU9pr+56vs2SC3DIPhyuyqDKwku7JXeh5igIw8OsprSC
NO1j464Ukx1qwhTYY5VLSQqNAp5KXSfPbNBTIXZcA4kV8Tc1ZFk3KAPNoQv/nuq4
H+C1srGmCnPT7jMj17XQWUb1dfVuvepI6SbQ3FbiWm3xGDaioU/FgO90XpIbmcuv
J55wfxVtGFR4+Vj79g43HUomF/srMSBUdIo0hijhAwxr3/3ECkrLhBaxJHVzwNvn
qA4HL2I9jPXnpA6WVKhqaqUDp67BXJbtXFxWgYS373krmkOXKxogGUPxtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5VE8qzdtHlQ2rVDTjtbb34PBtjMB8GA1UdIwQY
MBaAFM6j7d8YesbBqE+IlNY6u2BZYnnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEt
MTMzNTk5MTU0YmUxLzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEtMTMzNTk5MTU0YmUx
LzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE37yEZdj
TezJ4Ni/UaqjwCxC73pIuGcCwRn2HfuFV/JWCAvtece9mrm5xpE3uMTqgvpmjsLD
e+ZGJiQeo+eGZUv613asOy4CEpPPK3edVB3y+ol/dyrEH0radvwPdGvG+ccBTCKm
gYPgboZyfEsoAXHGKQaoiMrLOQPIGV4ISL80I5bcaTZMidWPiddBFXRm4HK1yd30
tdQtnGDrUIyAi1d4Yzr/dH6bEkbAsG0YMGi/3jVxbCDKFjzfE1Ehqh23KDqbp+RZ
XibnclBiJMZUikAegY4Nw9K5klWANX5fXq0CBOXP4fkJ7he+aSR7HCoQ5bgOPFld
7fwzn9Qo7Exdzw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:55 2025 by rpki-client