Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
File: 1_ZqQbymh7J1jPx7scX0s0ae2HA.mft (raw, json)
Hash identifier: v6uqnmT5gVQX2fLth84XDc9DMsalxYYN1/IW5F9q3bs=
Subject key identifier: 00:2C:9A:34:20:41:99:8A:CC:B2:7C:86:24:72:B7:3C:F7:5C:7B:61
Authority key identifier: D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
Certificate issuer: /CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Certificate serial: 019A29670FF8530389AB4B51A59698CB7A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
Manifest number: 14CB
Signing time: Tue 28 Oct 2025 06:00:11 +0000
Manifest this update: Tue 28 Oct 2025 06:00:11 +0000
Manifest next update: Wed 29 Oct 2025 06:00:11 +0000
Files and hashes: 1: 1_ZqQbymh7J1jPx7scX0s0ae2HA.crl (hash: LewsavEYnfHU+qO7/AHJUvLGgjBxGwuzC4C37z6qzzg=)
2: sdPecCSO0KixXu_CzDAp6RAcnGQ.roa (hash: lK/qLvjn0531iisqXiHNH5vrvX6cngnheVb4lVEkcTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:0f:f8:53:03:89:ab:4b:51:a5:96:98:cb:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f66a41bca687b2758cfc7bb1c5f4b3469ed870
Validity
Not Before: Oct 28 06:00:11 2025 GMT
Not After : Oct 29 06:00:11 2025 GMT
Subject: CN=002c9a342041998accb27c862472b73cf75c7b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:11:fc:88:64:35:7f:45:e9:d6:af:0e:d9:
9c:58:cc:6a:1f:19:1b:ff:3f:9d:c7:d1:83:a1:45:
43:c4:36:aa:df:2a:a7:b2:c8:5d:84:16:4c:ad:17:
72:1f:01:75:8c:e6:94:f7:9f:4e:1b:4a:9e:fe:f5:
93:fa:dc:e2:86:fc:df:11:8e:bc:c3:8a:bc:d3:87:
af:5e:7a:5c:9e:a1:34:3e:d7:78:5a:23:6c:64:c8:
38:af:48:3c:fe:3f:e2:fe:09:ca:3c:1d:98:11:12:
43:fc:d4:cf:96:b4:01:30:ae:2d:f4:f7:30:28:d5:
71:59:b9:90:17:5f:90:8b:e5:77:1f:b1:7b:9c:17:
df:6f:b5:4f:a1:39:e3:ef:f9:00:f4:df:25:d1:f3:
5b:f0:0d:69:6d:2b:51:19:97:ce:88:34:cb:29:6c:
1e:34:bf:d5:69:a3:65:cc:be:dd:cb:08:2d:27:fc:
6e:19:62:91:41:17:a6:d0:b8:39:f5:a3:f4:7c:e5:
c8:97:2c:17:d5:f6:a4:dc:f5:15:cc:56:c2:7f:2e:
b8:e5:d9:2d:c6:e0:5e:b2:f3:f6:56:06:6e:f2:67:
8d:73:e6:57:c4:e5:2a:60:2f:27:ce:f2:9c:67:df:
1a:c7:f0:47:e9:12:69:7a:40:8d:0c:5b:30:67:c2:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:9A:34:20:41:99:8A:CC:B2:7C:86:24:72:B7:3C:F7:5C:7B:61
X509v3 Authority Key Identifier:
keyid:D7:F6:6A:41:BC:A6:87:B2:75:8C:FC:7B:B1:C5:F4:B3:46:9E:D8:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_ZqQbymh7J1jPx7scX0s0ae2HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/c9e02c-ad51-4314-90fc-4a7cc75e3e6f/1/1_ZqQbymh7J1jPx7scX0s0ae2HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f9:95:5a:3c:ee:1f:c0:79:1f:9b:29:f6:99:07:14:1a:9a:
09:89:f4:a6:06:bd:3b:c2:95:2e:df:e0:da:a0:e4:13:1f:a3:
2a:03:94:f6:1a:69:5e:03:00:08:89:53:65:d8:08:5e:30:13:
fb:99:43:53:ed:f7:85:20:ce:eb:1a:bf:ba:e1:d0:c9:e7:f6:
2d:db:bd:e3:c3:39:27:e4:8f:b5:14:40:08:14:58:ee:39:6d:
7a:3a:13:1b:d7:6f:88:0b:22:4f:76:be:85:10:45:bc:7f:d6:
76:74:fb:a7:3d:08:2c:34:50:25:e7:1d:b5:4d:2a:d1:7c:5e:
e3:59:dd:d2:fb:cc:e7:2a:bd:69:0f:ee:05:0e:ca:a9:30:ac:
cd:c4:d8:74:1b:fe:a2:95:e5:40:12:9e:64:b4:d2:ae:64:73:
6c:e6:f5:c7:37:ce:a4:d2:07:e5:e6:b4:8f:78:c7:72:8b:d0:
86:9e:7d:61:7e:af:42:ff:c3:49:6b:b4:ad:fc:27:d8:c5:25:
40:a8:d9:ad:4c:f0:c5:f9:82:93:c1:c2:26:d2:44:3a:39:a0:
a8:d3:3a:e6:a7:43:3d:e3:8f:c2:ed:e3:e7:c7:a2:c4:9a:7e:
f4:92:c5:0b:7d:0c:6f:72:82:92:4a:43:b8:f0:8e:7b:8d:76:
83:52:f3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZw/4UwOJq0tRpZaYy3pOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZjY2YTQxYmNhNjg3YjI3NThjZmM3YmIxYzVmNGIzNDY5
ZWQ4NzAwHhcNMjUxMDI4MDYwMDExWhcNMjUxMDI5MDYwMDExWjAzMTEwLwYDVQQD
EygwMDJjOWEzNDIwNDE5OThhY2NiMjdjODYyNDcyYjczY2Y3NWM3YjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP0R/IhkNX9F6davDtmcWMxqHxkb
/z+dx9GDoUVDxDaq3yqnsshdhBZMrRdyHwF1jOaU959OG0qe/vWT+tzihvzfEY68
w4q804evXnpcnqE0Ptd4WiNsZMg4r0g8/j/i/gnKPB2YERJD/NTPlrQBMK4t9Pcw
KNVxWbmQF1+Qi+V3H7F7nBffb7VPoTnj7/kA9N8l0fNb8A1pbStRGZfOiDTLKWwe
NL/VaaNlzL7dywgtJ/xuGWKRQRem0Lg59aP0fOXIlywX1fak3PUVzFbCfy645dkt
xuBesvP2VgZu8meNc+ZXxOUqYC8nzvKcZ98ax/BH6RJpekCNDFswZ8IvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAsmjQgQZmKzLJ8hiRytzz3XHthMB8GA1UdIwQY
MBaAFNf2akG8poeydYz8e7HF9LNGnthwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jOWUwMmMtYWQ1MS00MzE0LTkwZmMt
NGE3Y2M3NWUzZTZmLzEvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9jOWUwMmMtYWQ1MS00MzE0LTkwZmMtNGE3Y2M3NWUzZTZm
LzEvMV9acVFieW1oN0oxalB4N3NjWDBzMGFlMkhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/mVWjzu
H8B5H5sp9pkHFBqaCYn0pga9O8KVLt/g2qDkEx+jKgOU9hppXgMACIlTZdgIXjAT
+5lDU+33hSDO6xq/uuHQyef2Ldu948M5J+SPtRRACBRY7jltejoTG9dviAsiT3a+
hRBFvH/WdnT7pz0ILDRQJecdtU0q0Xxe41nd0vvM5yq9aQ/uBQ7KqTCszcTYdBv+
opXlQBKeZLTSrmRzbOb1xzfOpNIH5ea0j3jHcovQhp59YX6vQv/DSWu0rfwn2MUl
QKjZrUzwxfmCk8HCJtJEOjmgqNM65qdDPeOPwu3j58eixJp+9JLFC30Mb3KCkkpD
uPCOe412g1Lz1g==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:24 2025 by rpki-client