Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: z2mWDjoT7SagUTMGrifpfh3nQ87pKeY34OIhuAvqMt4=
Subject key identifier: 33:F0:96:24:AF:B9:39:D7:A0:FE:27:3D:66:E9:C5:BA:77:1A:9B:F8
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 019A725C9E5F4A379F30E55B0913BBF8C526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: 02B4
Signing time: Tue 11 Nov 2025 10:01:03 +0000
Manifest this update: Tue 11 Nov 2025 10:01:03 +0000
Manifest next update: Wed 12 Nov 2025 10:01:03 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: 8vRg/WInAeBEIK0MD9XqZvH59R5RlUjqmiuu4y1HMxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:9e:5f:4a:37:9f:30:e5:5b:09:13:bb:f8:c5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: Nov 11 10:01:03 2025 GMT
Not After : Nov 12 10:01:03 2025 GMT
Subject: CN=33f09624afb939d7a0fe273d66e9c5ba771a9bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:28:5f:e7:38:3a:64:ff:4d:99:18:ec:2d:
ac:9c:c4:89:b2:69:39:81:d7:21:87:e1:5e:fe:37:
a8:cb:a6:d6:45:f4:7b:16:24:24:ca:bf:18:6d:37:
76:a2:4c:0d:da:42:d3:e6:16:3f:e6:00:0a:23:25:
cc:e3:13:dc:b4:2c:8a:df:7d:47:7c:9e:1a:51:2e:
4e:ca:23:7d:3c:76:4a:fe:3b:7d:ca:63:fc:a9:e2:
d4:91:00:61:2a:7f:35:9e:aa:10:e5:ef:5d:22:a9:
5b:7e:d6:5b:9a:37:56:c3:b9:0e:8f:03:ab:c6:ae:
f0:44:f2:96:f9:ee:e3:21:bf:d4:a3:e9:f6:b8:f1:
2a:b4:21:62:4d:b6:72:2f:ed:99:42:73:f0:6a:7a:
d2:0c:e8:0b:66:ee:41:7b:f6:bd:40:c6:48:b4:cb:
c9:af:a0:8c:ea:19:53:a4:8f:f3:6f:0b:6f:2c:c2:
d7:72:17:6c:57:ff:00:14:86:e4:28:ea:42:16:8d:
45:ad:3e:18:50:64:0a:8a:ea:78:1a:59:d3:cb:b6:
e7:88:a0:07:12:09:89:7f:80:0b:ac:9a:9d:98:3a:
a4:98:06:ea:0c:ab:66:58:66:4a:df:47:42:71:8e:
7b:9e:d6:97:14:b9:dc:14:0a:46:cb:b5:16:c1:f1:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F0:96:24:AF:B9:39:D7:A0:FE:27:3D:66:E9:C5:BA:77:1A:9B:F8
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:34:8e:b7:15:49:0c:e6:43:7f:58:7a:ad:3e:16:29:a5:16:
ec:5b:e0:c8:f7:97:dc:8a:33:8e:5a:c8:55:2d:fb:f5:a7:1e:
c2:3c:dd:a9:2a:d6:0a:00:3f:bd:ee:b8:89:b3:39:a5:2f:db:
b0:65:61:86:9c:24:57:79:7f:cb:3a:bf:35:a9:22:b6:86:77:
60:5e:67:d3:a2:95:87:39:4e:fd:a1:b0:06:9c:8e:19:23:fd:
9e:d5:43:9f:7e:c4:67:32:84:0c:5f:d6:ab:64:dc:58:ca:39:
ff:05:98:de:d4:9d:d1:36:00:65:60:e9:e6:35:86:a0:f5:cf:
c2:ad:64:3c:f3:ef:7e:5a:26:0e:5a:ff:c2:c0:f9:bc:cd:8c:
36:05:88:5b:3b:15:29:eb:74:df:84:9a:db:5c:b4:d1:8d:84:
eb:64:67:1e:aa:46:33:03:08:c1:5c:d4:de:c2:28:4e:57:27:
b9:54:a5:4b:31:fb:97:a1:c6:20:f3:1f:2a:8b:b0:a7:9d:71:
e2:71:21:ff:38:01:c7:75:5b:2d:af:5b:0e:43:a2:7e:b0:0e:
85:46:4c:c5:51:0f:c1:f8:24:42:b4:33:7d:c3:79:f2:1f:91:
af:83:94:9f:f9:c2:f6:ed:23:2a:f2:4e:41:c2:65:b2:41:36:
a8:57:b9:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJ5fSjefMOVbCRO7+MUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTdjY2QyYWVjMGJiZWZjNjM1MDg1NjUxMmE5NWZlMDIy
NTk5NTkwHhcNMjUxMTExMTAwMTAzWhcNMjUxMTEyMTAwMTAzWjAzMTEwLwYDVQQD
EygzM2YwOTYyNGFmYjkzOWQ3YTBmZTI3M2Q2NmU5YzViYTc3MWE5YmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF0oX+c4OmT/TZkY7C2snMSJsmk5
gdchh+Fe/jeoy6bWRfR7FiQkyr8YbTd2okwN2kLT5hY/5gAKIyXM4xPctCyK331H
fJ4aUS5OyiN9PHZK/jt9ymP8qeLUkQBhKn81nqoQ5e9dIqlbftZbmjdWw7kOjwOr
xq7wRPKW+e7jIb/Uo+n2uPEqtCFiTbZyL+2ZQnPwanrSDOgLZu5Be/a9QMZItMvJ
r6CM6hlTpI/zbwtvLMLXchdsV/8AFIbkKOpCFo1FrT4YUGQKiup4GlnTy7bniKAH
EgmJf4ALrJqdmDqkmAbqDKtmWGZK30dCcY57ntaXFLncFApGy7UWwfEzJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPwliSvuTnXoP4nPWbpxbp3Gpv4MB8GA1UdIwQY
MBaAFM6nzNKuwLvvxjUIVlEqlf4CJZlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMt
MzdmNTQ0NzZhOWQ3LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMtMzdmNTQ0NzZhOWQ3
LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTSOtxVJ
DOZDf1h6rT4WKaUW7FvgyPeX3IozjlrIVS379acewjzdqSrWCgA/ve64ibM5pS/b
sGVhhpwkV3l/yzq/NakitoZ3YF5n06KVhzlO/aGwBpyOGSP9ntVDn37EZzKEDF/W
q2TcWMo5/wWY3tSd0TYAZWDp5jWGoPXPwq1kPPPvflomDlr/wsD5vM2MNgWIWzsV
Ket034Sa21y00Y2E62RnHqpGMwMIwVzU3sIoTlcnuVSlSzH7l6HGIPMfKouwp51x
4nEh/zgBx3VbLa9bDkOifrAOhUZMxVEPwfgkQrQzfcN58h+Rr4OUn/nC9u0jKvJO
QcJlskE2qFe58A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:18:26 2025 by rpki-client