Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: czLTSIgzpXJ0nWyDfcwIBzuywGf/3TnGM16ch0pG0II=
Subject key identifier: 09:D9:DC:05:BB:8A:2D:5E:33:50:C9:49:C8:C7:82:25:C9:D5:61:85
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 019A71B92B32D53B55C861F566F21BB8FD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0F1C
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: 1JqxW6uA6Nk+f/pPA/fvRRlVR1MZRYcI4zEGFp9pO70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2b:32:d5:3b:55:c8:61:f5:66:f2:1b:b8:fd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=09d9dc05bb8a2d5e3350c949c8c78225c9d56185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:f3:d5:8f:56:d2:f5:ed:5c:f0:6e:50:20:
56:86:7e:50:ae:7a:56:83:23:73:69:3b:cd:83:3f:
46:9d:6b:a0:bb:e0:44:f4:e7:49:28:01:8a:8c:5d:
37:ae:a5:ca:f8:68:33:55:95:c3:f3:9a:ed:f5:31:
28:87:a0:95:72:83:c7:fe:17:7e:fc:d2:ac:51:54:
3d:00:d2:17:ec:a8:55:8c:03:a3:c0:50:ea:24:b0:
38:f1:58:31:eb:e0:70:7c:99:5b:5a:d3:ba:93:e4:
99:66:a6:56:96:b5:3d:c1:43:e3:be:3c:91:25:60:
eb:b1:a9:10:00:08:b2:9c:26:b3:54:c1:be:fe:b1:
97:c9:d5:1b:2b:f0:05:9f:00:4d:c5:0a:e3:0c:09:
13:b3:2a:9f:15:ce:44:77:47:8c:c1:a4:d1:7e:78:
15:b9:d1:92:e6:d5:cc:22:35:d8:ba:9d:1b:1c:26:
9e:3f:09:4c:e2:de:6a:c1:6a:ae:ba:2f:40:74:6a:
d5:81:fa:7f:dc:f2:1a:bc:d2:78:4b:8e:ad:ab:fe:
bd:64:a5:75:dc:78:f2:8c:cd:54:a3:26:a1:91:23:
3d:c0:f3:b3:ee:2d:b9:89:c3:0d:a4:50:c3:9f:51:
28:71:e3:3d:45:93:ae:f7:87:1f:1b:d3:fb:1f:b2:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D9:DC:05:BB:8A:2D:5E:33:50:C9:49:C8:C7:82:25:C9:D5:61:85
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d1:ec:51:41:62:fa:19:f2:c6:b5:15:2d:ae:41:a5:6b:00:
d3:d4:fc:cd:80:d2:10:1f:95:f1:73:65:81:77:ab:bc:0c:36:
4c:c6:ba:5e:ef:e5:87:ce:f2:80:c3:4e:7f:37:ed:9f:b6:b3:
1d:0a:b0:4f:98:18:91:c0:d0:6e:c1:44:6d:37:e9:c3:b1:95:
e3:5e:59:d6:26:fb:6d:59:ed:a8:c2:d7:1d:25:66:f0:e1:b7:
67:7a:9b:cf:ae:71:55:90:12:4c:9e:89:c2:7d:39:cc:7a:dc:
82:33:55:ad:1b:9b:4c:b2:e6:3f:8b:5c:7f:06:dc:d1:b3:2a:
36:0c:dc:15:d4:15:9f:2e:6d:3b:60:fe:1a:1c:52:fe:96:e0:
4c:8b:26:45:9e:ee:2d:6a:04:91:6c:b1:98:57:3b:2c:b0:47:
43:4a:ed:a0:cc:7d:9d:87:53:b9:55:5b:f0:47:11:44:9f:72:
19:bf:0a:8a:0d:87:c3:09:d3:59:9c:df:f1:ea:09:bc:a7:98:
b8:1c:33:c7:6b:82:27:ea:4c:8d:03:9a:f9:f2:cb:58:15:61:
98:c7:3e:df:d1:24:7a:24:c8:7b:4e:04:bd:ce:b4:d4:72:1d:
f6:74:f1:13:c0:41:de:1d:88:25:97:c3:15:f0:4a:62:87:f5:
8a:7d:c8:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSsy1TtVyGH1ZvIbuP0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTNlZGRmMTg3YWM2YzFhODRmODg5NGQ2M2FiYjYwNTk2
Mjc5ZWMwHhcNMjUxMTExMDcwMjMxWhcNMjUxMTEyMDcwMjMxWjAzMTEwLwYDVQQD
EygwOWQ5ZGMwNWJiOGEyZDVlMzM1MGM5NDljOGM3ODIyNWM5ZDU2MTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlbz1Y9W0vXtXPBuUCBWhn5QrnpW
gyNzaTvNgz9GnWugu+BE9OdJKAGKjF03rqXK+GgzVZXD85rt9TEoh6CVcoPH/hd+
/NKsUVQ9ANIX7KhVjAOjwFDqJLA48Vgx6+BwfJlbWtO6k+SZZqZWlrU9wUPjvjyR
JWDrsakQAAiynCazVMG+/rGXydUbK/AFnwBNxQrjDAkTsyqfFc5Ed0eMwaTRfngV
udGS5tXMIjXYup0bHCaePwlM4t5qwWquui9AdGrVgfp/3PIavNJ4S46tq/69ZKV1
3HjyjM1UoyahkSM9wPOz7i25icMNpFDDn1EoceM9RZOu94cfG9P7H7JPRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnZ3AW7ii1eM1DJScjHgiXJ1WGFMB8GA1UdIwQY
MBaAFM6j7d8YesbBqE+IlNY6u2BZYnnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEt
MTMzNTk5MTU0YmUxLzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEtMTMzNTk5MTU0YmUx
LzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdHsUUFi
+hnyxrUVLa5BpWsA09T8zYDSEB+V8XNlgXervAw2TMa6Xu/lh87ygMNOfzftn7az
HQqwT5gYkcDQbsFEbTfpw7GV415Z1ib7bVntqMLXHSVm8OG3Z3qbz65xVZASTJ6J
wn05zHrcgjNVrRubTLLmP4tcfwbc0bMqNgzcFdQVny5tO2D+GhxS/pbgTIsmRZ7u
LWoEkWyxmFc7LLBHQ0rtoMx9nYdTuVVb8EcRRJ9yGb8Kig2HwwnTWZzf8eoJvKeY
uBwzx2uCJ+pMjQOa+fLLWBVhmMc+39EkeiTIe04Evc601HId9nTxE8BB3h2IJZfD
FfBKYof1in3IbA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:57 2025 by rpki-client