Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: f3eTkhvVtKOEhf86tWwFUc0bK4j9q4Zcq4GTbHM6Wck=
Subject key identifier: 1A:00:24:F3:94:80:C4:A2:6E:24:BB:EC:13:A2:42:D1:2C:C6:8F:A4
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 019A1C199AAD17E36BEB74278CE267BAE072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 09CF
Signing time: Sat 25 Oct 2025 16:00:31 +0000
Manifest this update: Sat 25 Oct 2025 16:00:31 +0000
Manifest next update: Sun 26 Oct 2025 16:00:31 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: qD/836N/dEzpOk0UgbEtsf8nUAJjr1gXsxd8/4wmdGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:9a:ad:17:e3:6b:eb:74:27:8c:e2:67:ba:e0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Oct 25 16:00:31 2025 GMT
Not After : Oct 26 16:00:31 2025 GMT
Subject: CN=1a0024f39480c4a26e24bbec13a242d12cc68fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:ea:4d:45:e8:65:e0:31:c1:a5:06:b2:19:
28:cc:df:f5:6e:f5:88:84:78:2a:b3:31:56:0d:d6:
e4:c2:bb:08:8e:77:db:61:c1:c0:69:63:34:bc:0f:
f9:c7:9d:4a:c0:41:0b:51:6e:92:bd:db:27:44:f2:
1d:1c:d1:0a:4d:62:4a:f4:94:d2:37:07:02:80:20:
10:a2:04:5a:e0:80:df:af:76:89:f4:3c:61:62:55:
f6:9d:5d:c6:5c:cb:5b:b0:33:01:4a:8a:17:85:20:
97:2c:9f:25:11:c8:ba:bc:df:18:c1:e2:41:0d:24:
0d:09:78:0a:88:92:99:a0:c5:ee:4e:11:3a:04:d0:
70:8d:d0:b0:1a:0f:f3:5b:e6:04:92:af:cb:2b:f5:
af:d6:b4:35:04:39:2b:f8:36:bd:2a:be:6c:bd:38:
18:fb:b6:42:08:40:b9:c2:4a:5d:fb:a7:4b:f3:56:
db:9f:01:1b:c8:58:e4:33:a1:45:2c:8e:9b:5b:6d:
c1:75:fd:e2:15:e7:e1:b3:ba:03:a5:87:86:f4:58:
25:d5:3f:c2:c3:1d:b3:36:83:90:51:13:0f:8c:57:
ca:cc:d0:2f:6f:68:32:54:77:da:2f:56:d2:32:c2:
dc:82:36:29:65:66:49:e0:c7:6c:e2:78:35:88:fb:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:00:24:F3:94:80:C4:A2:6E:24:BB:EC:13:A2:42:D1:2C:C6:8F:A4
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bb:3f:00:8d:a8:ee:e8:2a:4e:25:79:b3:f6:1d:14:19:22:
ae:d7:86:07:62:15:5a:af:4d:93:79:28:72:84:52:87:a0:9c:
47:e9:ad:9f:7a:80:29:e0:cf:62:cd:cd:75:f7:d7:df:f4:75:
67:7b:cb:b0:ed:b5:ae:08:86:ca:e9:98:63:32:41:95:6c:c8:
55:06:6e:51:d6:33:3d:61:48:f7:7a:3f:3c:62:56:bb:d2:ae:
af:59:86:cb:9a:94:d6:65:d5:60:71:b2:a1:2f:55:0b:c8:6a:
6f:cd:4d:f7:e7:ad:8d:b3:ea:85:39:33:04:7b:87:5a:59:3a:
9c:c8:07:64:7e:c4:ec:96:55:51:f1:6d:c5:e6:13:e3:55:25:
3f:76:21:f0:c1:e4:7b:20:4d:f7:7a:8e:94:28:35:97:3b:73:
16:b0:08:81:e2:72:bd:79:29:22:d7:61:be:b5:70:a2:c7:23:
e6:e7:30:eb:e4:70:ea:bd:1e:10:6b:96:d4:a1:19:07:f1:f1:
af:e2:bf:a0:6c:9c:d9:99:4d:cb:c4:65:a3:43:f1:26:5d:35:
4a:1d:15:34:5a:e8:e2:0d:66:8f:73:d3:a9:2b:26:4e:0d:c9:
ae:d0:ac:9a:e4:8c:55:a2:4d:ae:ae:4b:be:fa:bd:50:c5:63:
87:93:0f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocGZqtF+Nr63QnjOJnuuByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OTNlYjA2YWJiOThkNGEyNTVjZmIyYjMyM2E2NWYzYzRm
NzFiYWQwHhcNMjUxMDI1MTYwMDMxWhcNMjUxMDI2MTYwMDMxWjAzMTEwLwYDVQQD
EygxYTAwMjRmMzk0ODBjNGEyNmUyNGJiZWMxM2EyNDJkMTJjYzY4ZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpbqTUXoZeAxwaUGshkozN/1bvWI
hHgqszFWDdbkwrsIjnfbYcHAaWM0vA/5x51KwEELUW6SvdsnRPIdHNEKTWJK9JTS
NwcCgCAQogRa4IDfr3aJ9DxhYlX2nV3GXMtbsDMBSooXhSCXLJ8lEci6vN8YweJB
DSQNCXgKiJKZoMXuThE6BNBwjdCwGg/zW+YEkq/LK/Wv1rQ1BDkr+Da9Kr5svTgY
+7ZCCEC5wkpd+6dL81bbnwEbyFjkM6FFLI6bW23Bdf3iFefhs7oDpYeG9Fgl1T/C
wx2zNoOQURMPjFfKzNAvb2gyVHfaL1bSMsLcgjYpZWZJ4Mds4ng1iPu1cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoAJPOUgMSibiS77BOiQtEsxo+kMB8GA1UdIwQY
MBaAFKmT6waruY1KJVz7KzI6ZfPE9xutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZTA1NjYtM2MwMS00Yzk1LWJlYTct
NTY1ZTc4ZGQwMTdkLzEvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZTA1NjYtM2MwMS00Yzk1LWJlYTctNTY1ZTc4ZGQwMTdk
LzEvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrs/AI2o
7ugqTiV5s/YdFBkirteGB2IVWq9Nk3kocoRSh6CcR+mtn3qAKeDPYs3NdffX3/R1
Z3vLsO21rgiGyumYYzJBlWzIVQZuUdYzPWFI93o/PGJWu9Kur1mGy5qU1mXVYHGy
oS9VC8hqb81N9+etjbPqhTkzBHuHWlk6nMgHZH7E7JZVUfFtxeYT41UlP3Yh8MHk
eyBN93qOlCg1lztzFrAIgeJyvXkpItdhvrVwoscj5ucw6+Rw6r0eEGuW1KEZB/Hx
r+K/oGyc2ZlNy8Rlo0PxJl01Sh0VNFro4g1mj3PTqSsmTg3JrtCsmuSMVaJNrq5L
vvq9UMVjh5MPwQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 01:50:17 2025 by rpki-client