Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
File: zfQLRgtIuPNm_sXKObMcOAxkWjI.mft (raw, json)
Hash identifier: amkWZn/zTqMLx0kziNPAAM7KayD00h8ZFbmYM/7hMZY=
Subject key identifier: 64:68:53:FE:2D:93:EB:67:B6:C7:44:EC:A6:63:9E:2A:23:29:30:F9
Authority key identifier: CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
Certificate issuer: /CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Certificate serial: 019A70DC4B3DAD49561F8561416183A80EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
Manifest number: 01E5
Signing time: Tue 11 Nov 2025 03:01:16 +0000
Manifest this update: Tue 11 Nov 2025 03:01:16 +0000
Manifest next update: Wed 12 Nov 2025 03:01:16 +0000
Files and hashes: 1: zfQLRgtIuPNm_sXKObMcOAxkWjI.crl (hash: hKO50HaCB/Nbq174Y724SkeBWx6w1jDWqCcejOQcCbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4b:3d:ad:49:56:1f:85:61:41:61:83:a8:0e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf40b460b48b8f366fec5ca39b31c380c645a32
Validity
Not Before: Nov 11 03:01:16 2025 GMT
Not After : Nov 12 03:01:16 2025 GMT
Subject: CN=646853fe2d93eb67b6c744eca6639e2a232930f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f3:c7:ee:6e:a0:d6:5d:73:57:ca:4a:9f:e0:
de:d4:13:46:3d:c0:44:e9:20:f5:99:1f:14:40:b1:
dd:b6:28:57:e7:8b:2a:12:51:62:47:2f:36:9b:17:
18:06:4e:e5:23:b4:c4:63:12:70:11:f6:b5:28:9a:
c8:60:ca:e6:44:51:00:5e:cd:ff:71:01:d5:4c:cf:
ee:a8:88:a8:c1:8c:17:52:c8:e0:75:20:a1:64:e1:
1b:6c:03:6a:a0:66:c9:ba:01:db:d4:51:fe:02:e7:
7f:2c:3e:ce:50:41:82:ec:2b:54:d3:0c:d4:b0:d2:
4e:ed:8b:79:3b:56:f7:cb:ba:81:4b:94:31:68:82:
9b:39:c2:b0:b2:3f:b1:99:0f:46:21:58:4d:ca:5b:
64:ca:23:4e:42:08:3d:f8:90:15:a1:ed:7c:6e:32:
f2:cf:17:90:a9:16:71:af:74:ae:b3:ab:e5:a1:0d:
de:7b:ff:e9:b0:c7:49:ad:9d:c9:bb:8a:e6:c0:f4:
76:e6:05:de:bc:59:39:12:87:75:eb:36:da:05:d3:
d8:a2:8e:e9:1e:75:d0:ba:d1:58:11:2e:1a:6e:f5:
9b:32:37:69:47:c6:7e:9f:07:1a:49:68:b0:c0:ec:
e1:8f:8b:74:46:ec:ca:27:b3:d0:0f:e9:f7:79:bb:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:53:FE:2D:93:EB:67:B6:C7:44:EC:A6:63:9E:2A:23:29:30:F9
X509v3 Authority Key Identifier:
keyid:CD:F4:0B:46:0B:48:B8:F3:66:FE:C5:CA:39:B3:1C:38:0C:64:5A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfQLRgtIuPNm_sXKObMcOAxkWjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7ac50f-4491-44a5-90bf-a7ef1dcfd5f1/1/zfQLRgtIuPNm_sXKObMcOAxkWjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d9:da:2e:03:4d:f8:5d:ef:f9:04:15:6f:ae:11:dc:0b:19:
1b:4f:36:d5:19:00:dc:8a:86:c7:33:a3:5c:2c:80:32:18:36:
11:79:19:a1:4c:f9:70:fe:22:79:fe:23:a7:97:81:6a:e7:db:
cf:f5:22:a3:aa:90:8a:a2:d2:67:5d:bc:5a:92:d2:1d:cd:2e:
72:47:44:82:19:7f:1f:fa:d0:0d:45:40:ec:a1:83:89:c3:a6:
c0:0e:3a:ad:48:bb:45:56:0c:37:da:7a:70:ae:a8:d5:3e:a6:
ba:13:33:cf:0f:2a:fb:3c:e3:ff:a1:1c:19:7e:0c:01:3d:b6:
31:be:b5:9b:4e:b4:0a:d2:82:da:45:81:c9:87:ff:fa:09:61:
a9:f5:0b:70:9d:5b:11:9f:5d:7b:55:53:e4:a2:28:5c:0f:62:
48:75:f4:3f:90:43:80:a6:80:8d:fe:ae:a0:52:92:2c:0c:85:
e4:9e:d7:23:b7:c6:72:7d:50:d2:b5:39:0d:6f:e9:e5:e7:7f:
6f:14:cd:5f:3d:32:8d:a0:41:6c:39:44:53:15:08:49:8d:63:
48:a8:e0:57:0e:98:75:00:84:29:b9:f7:0c:73:5d:ad:d8:86:
e1:53:cf:65:ed:5c:07:19:1a:e2:49:b3:f1:48:fa:4f:83:ad:
f4:99:f1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3Es9rUlWH4VhQWGDqA74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjQwYjQ2MGI0OGI4ZjM2NmZlYzVjYTM5YjMxYzM4MGM2
NDVhMzIwHhcNMjUxMTExMDMwMTE2WhcNMjUxMTEyMDMwMTE2WjAzMTEwLwYDVQQD
Eyg2NDY4NTNmZTJkOTNlYjY3YjZjNzQ0ZWNhNjYzOWUyYTIzMjkzMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/PH7m6g1l1zV8pKn+De1BNGPcBE
6SD1mR8UQLHdtihX54sqElFiRy82mxcYBk7lI7TEYxJwEfa1KJrIYMrmRFEAXs3/
cQHVTM/uqIiowYwXUsjgdSChZOEbbANqoGbJugHb1FH+Aud/LD7OUEGC7CtU0wzU
sNJO7Yt5O1b3y7qBS5QxaIKbOcKwsj+xmQ9GIVhNyltkyiNOQgg9+JAVoe18bjLy
zxeQqRZxr3Sus6vloQ3ee//psMdJrZ3Ju4rmwPR25gXevFk5Eod16zbaBdPYoo7p
HnXQutFYES4abvWbMjdpR8Z+nwcaSWiwwOzhj4t0RuzKJ7PQD+n3ebtKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRoU/4tk+tntsdE7KZjniojKTD5MB8GA1UdIwQY
MBaAFM30C0YLSLjzZv7FyjmzHDgMZFoyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YWM1MGYtNDQ5MS00NGE1LTkwYmYt
YTdlZjFkY2ZkNWYxLzEvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS83YWM1MGYtNDQ5MS00NGE1LTkwYmYtYTdlZjFkY2ZkNWYx
LzEvemZRTFJndEl1UE5tX3NYS09iTWNPQXhrV2pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNnaLgNN
+F3v+QQVb64R3AsZG0821RkA3IqGxzOjXCyAMhg2EXkZoUz5cP4ief4jp5eBaufb
z/Uio6qQiqLSZ128WpLSHc0uckdEghl/H/rQDUVA7KGDicOmwA46rUi7RVYMN9p6
cK6o1T6muhMzzw8q+zzj/6EcGX4MAT22Mb61m060CtKC2kWByYf/+glhqfULcJ1b
EZ9de1VT5KIoXA9iSHX0P5BDgKaAjf6uoFKSLAyF5J7XI7fGcn1Q0rU5DW/p5ed/
bxTNXz0yjaBBbDlEUxUISY1jSKjgVw6YdQCEKbn3DHNdrdiG4VPPZe1cBxka4kmz
8Uj6T4Ot9JnxXQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:12 2025 by rpki-client