
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
File: fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft (raw, json)
Hash identifier: MSN7YYX2AjcerScipIh+WvJH8IWCu07HkBTZ+v1oy9w=
Subject key identifier: CE:57:8D:5F:F2:02:95:CD:81:89:93:28:D2:C9:6A:F0:B4:42:B2:A6
Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
Certificate issuer: /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Certificate serial: 019923A03A9B7A3CDF44347D3C4B134ACE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
Manifest number: 027D
Signing time: Sun 07 Sep 2025 10:02:07 +0000
Manifest this update: Sun 07 Sep 2025 10:02:07 +0000
Manifest next update: Mon 08 Sep 2025 10:02:07 +0000
Files and hashes: 1: fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl (hash: klptNBJZWo72zYBLRlA+NcsE6ohxqvx+i1fLlAgO/Fg=)
2: kgTnhPtf5U0Bz8tjOOggGBZkLG8.roa (hash: HNiluWUdkJ/NWqiUVgEDQcdv9s5KKhDvu8H4CNi9wMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:3a:9b:7a:3c:df:44:34:7d:3c:4b:13:4a:ce:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Validity
Not Before: Sep 7 10:02:07 2025 GMT
Not After : Sep 8 10:02:07 2025 GMT
Subject: CN=ce578d5ff20295cd81899328d2c96af0b442b2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f6:2a:84:d5:a2:8a:9a:48:be:77:67:33:8f:
8f:a2:a6:14:59:27:4c:25:8e:00:69:87:e8:ec:c9:
a6:29:2f:6a:84:cd:ce:d7:c8:6c:e5:5e:6c:20:bc:
0f:67:9a:5f:59:27:76:88:56:ea:12:1f:f2:42:95:
1d:4d:68:37:ae:a9:d1:77:78:41:f8:26:b9:04:98:
3f:c0:e0:dc:a7:2f:10:ad:a9:5f:01:b3:12:e5:66:
b0:b9:9c:57:9b:fe:14:d5:33:80:fa:aa:8d:e1:81:
b2:36:c5:c2:d4:c7:66:7a:ee:56:0d:75:13:dc:3a:
66:00:d7:c0:74:3e:91:a6:92:22:bf:e0:42:8a:dd:
34:0b:c6:1a:76:0f:d1:30:d4:df:03:f4:70:33:8b:
25:b8:54:b7:c3:58:f2:0f:ca:b9:0e:54:dd:35:de:
2f:73:4e:59:b5:15:65:65:12:8e:36:3e:35:09:27:
bd:3e:bd:fc:66:54:68:d4:a1:a7:d1:7f:a6:14:60:
99:1e:35:25:10:c6:57:74:dc:46:e1:11:42:5c:00:
ac:16:a5:ac:22:19:b2:cf:19:c8:40:9a:d5:33:1c:
4c:e9:9d:02:5d:5e:7e:e1:46:02:53:47:f9:aa:f1:
9a:ef:8e:4b:64:24:7c:01:57:19:86:9e:17:27:c8:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:57:8D:5F:F2:02:95:CD:81:89:93:28:D2:C9:6A:F0:B4:42:B2:A6
X509v3 Authority Key Identifier:
keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:b0:ae:23:95:6d:e8:27:67:d9:94:76:9c:79:01:e9:6a:
16:29:cb:cd:e4:cd:3f:e0:5d:7e:db:ea:7d:2a:6a:f0:e3:09:
9c:3d:74:e7:41:0f:34:cf:4e:18:a2:dd:20:5d:89:4f:f6:d3:
17:44:fb:1b:2e:e1:98:8a:71:1f:70:be:be:59:ba:c6:60:51:
93:41:d7:ae:91:d3:b2:22:20:87:de:8c:bb:b7:39:3a:8b:7c:
ab:27:cb:fb:e3:14:26:85:81:68:16:e6:cc:19:32:0c:d1:7a:
64:9e:2c:b0:20:01:8a:11:50:c2:b1:47:09:32:c4:ff:6b:b8:
17:33:8d:34:b2:82:35:39:da:4b:bd:6c:0e:40:28:6a:c4:87:
72:fb:ae:72:86:4f:22:20:02:f0:c1:67:2a:9a:66:f7:bf:af:
db:48:59:98:9e:7e:15:ff:67:e2:c6:a0:43:20:68:cc:2b:07:
80:47:31:ea:1a:93:d1:80:e4:d7:45:46:7b:fe:6b:15:ba:53:
8e:4e:49:c3:ba:ce:b1:45:cc:bd:fe:d1:f6:53:12:39:2a:46:
a2:e8:ed:c0:c8:68:76:14:00:de:6c:df:09:4b:a6:7f:f8:60:
94:17:ca:2a:ca:00:86:50:fc:7e:e9:35:52:ab:02:ee:27:30:
b2:48:42:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoDqbejzfRDR9PEsTSs4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYTY2ZjlkZDZiNzJjNTY3MThjODVjNWUxOGY2Njg1ZjU3
OTVjNzUwHhcNMjUwOTA3MTAwMjA3WhcNMjUwOTA4MTAwMjA3WjAzMTEwLwYDVQQD
EyhjZTU3OGQ1ZmYyMDI5NWNkODE4OTkzMjhkMmM5NmFmMGI0NDJiMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfYqhNWiippIvndnM4+PoqYUWSdM
JY4AaYfo7MmmKS9qhM3O18hs5V5sILwPZ5pfWSd2iFbqEh/yQpUdTWg3rqnRd3hB
+Ca5BJg/wODcpy8QralfAbMS5WawuZxXm/4U1TOA+qqN4YGyNsXC1Mdmeu5WDXUT
3DpmANfAdD6RppIiv+BCit00C8Yadg/RMNTfA/RwM4sluFS3w1jyD8q5DlTdNd4v
c05ZtRVlZRKONj41CSe9Pr38ZlRo1KGn0X+mFGCZHjUlEMZXdNxG4RFCXACsFqWs
IhmyzxnIQJrVMxxM6Z0CXV5+4UYCU0f5qvGa745LZCR8AVcZhp4XJ8ie6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5XjV/yApXNgYmTKNLJavC0QrKmMB8GA1UdIwQY
MBaAFH6mb53WtyxWcYyFxeGPZoX1eVx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMt
MWYyZjQ2NGJlYTJhLzEvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMtMWYyZjQ2NGJlYTJh
LzEvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGywriOV
begnZ9mUdpx5AelqFinLzeTNP+BdftvqfSpq8OMJnD1050EPNM9OGKLdIF2JT/bT
F0T7Gy7hmIpxH3C+vlm6xmBRk0HXrpHTsiIgh96Mu7c5Oot8qyfL++MUJoWBaBbm
zBkyDNF6ZJ4ssCABihFQwrFHCTLE/2u4FzONNLKCNTnaS71sDkAoasSHcvuucoZP
IiAC8MFnKppm97+v20hZmJ5+Ff9n4sagQyBozCsHgEcx6hqT0YDk10VGe/5rFbpT
jk5Jw7rOsUXMvf7R9lMSOSpGoujtwMhodhQA3mzfCUumf/hglBfKKsoAhlD8fuk1
UqsC7icwskhC8Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:58 2025 by rpki-client