Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: wRYIPai4hrL6wcajvm0NhmXaDf2t3ttfHlNsj1FOt4I=
Subject key identifier: 88:55:64:59:47:3D:2A:AA:32:14:5D:4F:57:A9:C8:9A:E7:71:31:66
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 01992330F32CA00E4EABF63F696FEC81CD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 05D3
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: pp/r+upNGsDkU5PG5TUzapv/uXg70jya8Kt34jNu9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f3:2c:a0:0e:4e:ab:f6:3f:69:6f:ec:81:cd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=88556459473d2aaa32145d4f57a9c89ae7713166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:e8:73:f8:f9:27:ea:f7:54:28:2d:df:4d:
86:66:67:fb:e2:36:40:33:21:fb:0a:58:4f:1a:a7:
d3:4c:45:dc:de:ee:eb:04:8d:78:d5:37:28:5c:b2:
b2:1b:03:2e:d1:d6:d2:d3:b1:8c:b5:d6:6f:00:d0:
8d:4c:81:25:47:4d:0f:cd:8f:11:48:27:2f:e2:ad:
f6:b5:de:2c:0d:12:6b:fe:b8:b3:14:5b:6d:9e:32:
2f:4a:64:34:a5:c8:bb:a8:09:9f:b8:50:fc:27:27:
25:ab:71:12:6d:79:ba:f0:8c:7f:9c:eb:ce:91:7c:
d8:15:ac:64:94:bd:aa:34:78:89:54:6f:5d:bf:24:
61:89:1d:c9:57:b1:de:95:94:c4:30:b1:28:e3:2b:
06:4c:59:d2:4e:d3:1a:2f:5d:0b:0d:19:0b:aa:1c:
b7:62:cb:3a:5e:6d:ce:33:05:19:64:24:26:67:e6:
8d:06:9f:c3:5f:ef:13:d5:10:43:7a:db:d6:fb:02:
79:f9:d3:57:37:df:3a:5c:34:2f:1d:73:22:60:14:
2c:3e:63:e4:e5:43:b8:85:4d:8c:32:7a:a7:ae:ad:
5d:19:10:28:d6:0b:ae:c0:62:71:88:49:69:58:b3:
86:a8:7c:c2:bc:c0:ff:5f:e2:52:10:ec:ac:00:87:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:55:64:59:47:3D:2A:AA:32:14:5D:4F:57:A9:C8:9A:E7:71:31:66
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1a:f2:7f:16:bf:b5:2d:8c:cb:3a:94:21:63:a5:77:d4:d4:
c4:73:84:d2:4d:3c:70:42:1a:34:ee:3b:00:c9:9e:76:77:26:
70:86:ab:ee:3f:73:24:54:f8:34:4d:13:33:3f:13:91:c8:c0:
86:35:95:a1:5e:58:51:fa:aa:4b:f8:e1:9e:df:ae:16:1a:63:
0f:93:18:e4:20:82:ad:fa:cc:e0:4d:2f:99:db:55:ce:dc:e1:
a9:fb:70:d2:45:10:21:56:77:7c:c5:09:68:aa:82:f3:87:0f:
32:e2:49:5c:46:23:e5:a6:d8:33:5b:e2:c5:3b:52:e3:0e:ed:
75:3e:a5:63:e8:dc:99:a1:b3:83:16:b5:85:b1:80:32:2e:4b:
5e:63:3a:85:54:1f:b3:03:86:78:82:b4:fc:7d:33:71:97:67:
9d:a0:30:8c:db:3f:f5:ce:b0:da:5a:92:2a:3d:2a:16:3e:91:
4d:a8:88:4b:05:3c:ff:f4:fd:b0:f7:29:4f:40:44:58:6b:8f:
c1:25:e7:e9:ef:ee:cc:5c:ea:4c:5b:5b:3c:36:1c:dc:c6:ec:
4c:58:b5:97:14:15:0f:9b:c5:f9:5f:e9:c8:e0:8d:c5:0d:4d:
70:dd:b1:46:13:d5:18:49:ac:32:54:7f:5f:71:f1:ba:05:a1:
95:a8:13:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMPMsoA5Oq/Y/aW/sgc1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx
Zjc2NGUwHhcNMjUwOTA3MDgwMDM0WhcNMjUwOTA4MDgwMDM0WjAzMTEwLwYDVQQD
Eyg4ODU1NjQ1OTQ3M2QyYWFhMzIxNDVkNGY1N2E5Yzg5YWU3NzEzMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4/oc/j5J+r3VCgt302GZmf74jZA
MyH7ClhPGqfTTEXc3u7rBI141TcoXLKyGwMu0dbS07GMtdZvANCNTIElR00PzY8R
SCcv4q32td4sDRJr/rizFFttnjIvSmQ0pci7qAmfuFD8Jyclq3ESbXm68Ix/nOvO
kXzYFaxklL2qNHiJVG9dvyRhiR3JV7HelZTEMLEo4ysGTFnSTtMaL10LDRkLqhy3
Yss6Xm3OMwUZZCQmZ+aNBp/DX+8T1RBDetvW+wJ5+dNXN986XDQvHXMiYBQsPmPk
5UO4hU2MMnqnrq1dGRAo1guuwGJxiElpWLOGqHzCvMD/X+JSEOysAIcQVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhVZFlHPSqqMhRdT1epyJrncTFmMB8GA1UdIwQY
MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt
NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4
LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHhryfxa/
tS2MyzqUIWOld9TUxHOE0k08cEIaNO47AMmedncmcIar7j9zJFT4NE0TMz8TkcjA
hjWVoV5YUfqqS/jhnt+uFhpjD5MY5CCCrfrM4E0vmdtVztzhqftw0kUQIVZ3fMUJ
aKqC84cPMuJJXEYj5abYM1vixTtS4w7tdT6lY+jcmaGzgxa1hbGAMi5LXmM6hVQf
swOGeIK0/H0zcZdnnaAwjNs/9c6w2lqSKj0qFj6RTaiISwU8//T9sPcpT0BEWGuP
wSXn6e/uzFzqTFtbPDYc3MbsTFi1lxQVD5vF+V/pyOCNxQ1NcN2xRhPVGEmsMlR/
X3HxugWhlagTkw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:40 2025 by rpki-client