Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: MIx18koOo9QRJGbk/wYfbrBSSGuY91QZyAI/TKR4bCI=
Subject key identifier: 12:74:0F:C5:17:79:75:F3:3F:21:07:40:06:3E:AB:75:D8:79:DD:33
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 0199221E37F028DA50285153D2BA2E3B7855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 061B
Signing time: Sun 07 Sep 2025 03:00:29 +0000
Manifest this update: Sun 07 Sep 2025 03:00:29 +0000
Manifest next update: Mon 08 Sep 2025 03:00:29 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: YAglccLFF5vbj8TaZAwizgk9s9bRKiD1/2JVo5hbHeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:37:f0:28:da:50:28:51:53:d2:ba:2e:3b:78:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Sep 7 03:00:29 2025 GMT
Not After : Sep 8 03:00:29 2025 GMT
Subject: CN=12740fc5177975f33f210740063eab75d879dd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:a5:b8:a4:ac:de:ce:7b:5c:24:31:f7:89:
a0:8b:5e:a5:d2:cc:82:1a:1f:e9:8b:70:b2:cc:d2:
ee:e3:57:35:c4:c3:af:2a:41:23:00:5d:d7:d8:92:
82:41:68:ba:56:c3:cb:56:61:fd:9c:8c:d0:fd:b9:
b8:a6:6d:2e:3e:5a:a8:2e:4f:37:db:1d:24:2c:55:
f4:a9:a8:55:df:37:f4:28:95:ff:84:c0:c5:70:ba:
ca:78:8b:62:87:5f:e6:ec:c4:a4:46:65:19:b6:ac:
c8:9f:0d:fe:1a:9f:28:3d:8b:f5:24:3f:91:ff:6d:
ed:84:5f:7a:2f:cf:db:6a:2f:19:29:f1:4b:8e:e7:
80:19:57:ca:b8:18:e2:1f:c0:ac:5f:41:51:f1:13:
ce:0b:2f:1f:56:a1:c1:b1:30:06:d7:5d:35:2a:1e:
b9:d2:d8:8d:e9:fc:28:c1:15:05:81:66:49:3c:5f:
0a:10:56:37:58:a3:33:f7:6a:fb:b3:03:77:7e:25:
f0:de:a9:e0:76:26:0e:f2:8f:3b:e6:b7:59:f5:5c:
40:43:72:4b:5b:33:58:29:98:24:7f:8f:94:c2:2f:
45:63:14:9f:55:36:b3:5a:f7:72:b9:ce:a2:15:4c:
4e:1d:60:56:76:f2:3b:25:d6:81:2b:f1:3b:b0:21:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:74:0F:C5:17:79:75:F3:3F:21:07:40:06:3E:AB:75:D8:79:DD:33
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6e:8b:b4:25:d3:80:7e:82:45:a7:ff:47:10:94:ca:0b:67:
8b:a8:57:ff:02:ac:e5:1c:1e:9d:df:7a:52:39:a5:8c:bf:4b:
bc:37:cd:07:02:a2:02:fc:82:21:ac:f7:27:29:04:82:40:96:
80:2f:03:ad:a8:82:a8:c4:81:17:7f:04:0c:db:1f:bd:b7:14:
48:21:db:ca:1e:01:21:5a:55:49:69:a4:4a:4f:e4:4f:12:af:
79:f3:e5:40:9f:1c:c1:e9:86:ff:bd:75:e3:de:38:79:4d:6d:
c1:f4:f2:af:37:b3:fe:4c:73:7b:77:d1:2d:ff:d4:f6:1b:91:
f3:2f:12:31:70:04:ee:db:8a:9e:28:8f:13:71:32:e3:75:66:
af:ba:6f:39:bc:f5:e2:b3:36:0c:f5:97:05:9b:f6:12:0b:78:
ee:66:36:81:68:8a:43:2a:79:fe:3f:44:12:0e:ce:d0:8e:5e:
22:88:5c:93:69:90:8c:87:f9:71:60:0b:50:e0:82:79:97:d8:
8a:e0:91:7e:ad:af:a6:39:1b:b2:3f:81:e9:49:c4:be:25:ec:
d2:b0:91:b3:e0:64:6a:a3:cf:75:3d:0c:fd:ca:54:66:de:63:
a0:71:5c:80:af:76:fc:f0:6a:7e:24:aa:e3:3f:39:b9:0d:fe:
94:4f:a9:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHjfwKNpQKFFT0rouO3hVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm
Y2M3ODEwHhcNMjUwOTA3MDMwMDI5WhcNMjUwOTA4MDMwMDI5WjAzMTEwLwYDVQQD
EygxMjc0MGZjNTE3Nzk3NWYzM2YyMTA3NDAwNjNlYWI3NWQ4NzlkZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ6luKSs3s57XCQx94mgi16l0syC
Gh/pi3CyzNLu41c1xMOvKkEjAF3X2JKCQWi6VsPLVmH9nIzQ/bm4pm0uPlqoLk83
2x0kLFX0qahV3zf0KJX/hMDFcLrKeItih1/m7MSkRmUZtqzInw3+Gp8oPYv1JD+R
/23thF96L8/bai8ZKfFLjueAGVfKuBjiH8CsX0FR8RPOCy8fVqHBsTAG1101Kh65
0tiN6fwowRUFgWZJPF8KEFY3WKMz92r7swN3fiXw3qngdiYO8o875rdZ9VxAQ3JL
WzNYKZgkf4+Uwi9FYxSfVTazWvdyuc6iFUxOHWBWdvI7JdaBK/E7sCEl+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJ0D8UXeXXzPyEHQAY+q3XYed0zMB8GA1UdIwQY
MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt
ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm
LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW6LtCXT
gH6CRaf/RxCUygtni6hX/wKs5Rwend96UjmljL9LvDfNBwKiAvyCIaz3JykEgkCW
gC8DraiCqMSBF38EDNsfvbcUSCHbyh4BIVpVSWmkSk/kTxKvefPlQJ8cwemG/711
4944eU1twfTyrzez/kxze3fRLf/U9huR8y8SMXAE7tuKniiPE3Ey43Vmr7pvObz1
4rM2DPWXBZv2Egt47mY2gWiKQyp5/j9EEg7O0I5eIohck2mQjIf5cWALUOCCeZfY
iuCRfq2vpjkbsj+B6UnEviXs0rCRs+BkaqPPdT0M/cpUZt5joHFcgK92/PBqfiSq
4z85uQ3+lE+psA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:07 2025 by rpki-client