Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: gqYo+22+TFkBCQWl9EtIpRCRSGBCO2MzFCELapcbwwk=
Subject key identifier: F0:0E:44:4C:61:95:95:58:E3:2D:F4:13:3B:1A:B9:73:BF:6D:37:CF
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 0199FC589390A22CECF873E7BE2FD9581F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: AxxJdIUTR7bqCZ23hsqRID3pvktr4ggVK5S9h7Wj7FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:93:90:a2:2c:ec:f8:73:e7:be:2f:d9:58:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=f00e444c61959558e32df4133b1ab973bf6d37cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:ba:7f:6f:d5:9e:af:fc:4e:c7:ca:cb:ac:
8a:72:2b:f6:83:12:05:50:4c:9c:75:67:83:1c:ea:
34:9d:8d:28:4c:6f:0b:68:7b:dd:07:91:80:98:c4:
b4:6b:ba:97:5a:cd:ad:d8:da:b0:55:a6:79:d7:95:
3a:32:0c:98:f9:ae:f3:79:29:23:90:7a:60:72:6a:
48:b4:24:bc:fa:16:be:83:10:61:27:fc:b8:dc:a9:
74:84:33:6a:72:44:01:2a:f1:7e:3e:0d:88:22:0b:
f7:67:2b:2a:8e:ed:a7:4f:93:4d:14:d9:83:67:16:
2f:73:f5:8c:35:91:18:52:e9:e8:d0:f3:40:f4:ee:
d9:b8:e0:6a:a7:e4:d8:02:43:d6:f1:9a:51:d2:cb:
da:6b:fd:49:44:76:14:21:73:9e:ec:05:d5:26:e4:
50:fe:77:89:8a:16:da:6b:2b:23:be:90:69:69:c9:
9d:8b:a1:24:b8:98:28:0d:59:3b:7e:37:65:94:7d:
4f:83:27:8d:ff:43:86:3c:fb:a7:bb:8b:ce:8e:a8:
36:b2:51:e6:14:c7:7e:e5:6d:9a:6c:2d:61:b1:ca:
a7:0a:86:80:f6:fb:99:fc:f5:b9:c7:3e:6c:e1:e5:
83:7c:2d:6b:ab:fc:04:ac:e6:c6:a6:ac:f3:73:6e:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0E:44:4C:61:95:95:58:E3:2D:F4:13:3B:1A:B9:73:BF:6D:37:CF
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1a:f3:da:8f:77:d2:99:50:2d:e7:52:0c:5d:d7:7f:39:ed:
f7:4e:a2:83:70:3c:75:16:5b:00:3c:7d:cb:41:25:5e:31:fa:
16:ce:65:e7:2b:cf:6e:1d:15:67:3f:c9:d0:e6:4d:d2:19:4e:
42:69:a7:c5:4e:f7:d4:51:5d:92:31:96:03:3c:9a:5f:2a:6e:
ec:be:2f:b8:56:13:2a:4b:55:d0:cc:26:d1:33:4a:b2:ad:36:
58:66:8c:5a:5e:e1:f3:2f:81:b4:02:c6:4b:ae:86:92:a8:87:
24:83:81:f1:4d:d9:7d:34:a5:b3:8a:f2:f6:08:07:02:ee:70:
15:8b:b2:be:b5:fc:4e:6b:b3:c5:31:1d:d9:45:bc:c5:11:d4:
ff:b2:3a:1f:de:2e:f1:18:b4:64:a9:5f:fd:af:94:16:67:6e:
36:dc:7e:2f:83:5f:9c:b0:3f:9d:2b:a7:dc:32:19:74:bc:84:
f4:6c:66:93:f6:34:97:0d:bb:35:4a:be:a5:bc:81:02:c4:a5:
86:12:9a:7b:46:0d:45:04:3d:42:c9:39:2b:d6:26:8d:a6:76:
51:b1:69:60:0d:51:c9:10:13:2f:f5:3a:68:f6:fb:3d:ae:9b:
2e:34:b4:ac:d2:11:fb:64:74:87:d2:17:33:be:ff:22:97:b9:
f9:1d:f7:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJOQoizs+HPnvi/ZWB8IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy
ZmUzYTYwHhcNMjUxMDE5MTIwMTI3WhcNMjUxMDIwMTIwMTI3WjAzMTEwLwYDVQQD
EyhmMDBlNDQ0YzYxOTU5NTU4ZTMyZGY0MTMzYjFhYjk3M2JmNmQzN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2S6f2/Vnq/8TsfKy6yKciv2gxIF
UEycdWeDHOo0nY0oTG8LaHvdB5GAmMS0a7qXWs2t2NqwVaZ515U6MgyY+a7zeSkj
kHpgcmpItCS8+ha+gxBhJ/y43Kl0hDNqckQBKvF+Pg2IIgv3Zysqju2nT5NNFNmD
ZxYvc/WMNZEYUuno0PNA9O7ZuOBqp+TYAkPW8ZpR0svaa/1JRHYUIXOe7AXVJuRQ
/neJihbaaysjvpBpacmdi6EkuJgoDVk7fjdllH1PgyeN/0OGPPunu4vOjqg2slHm
FMd+5W2abC1hscqnCoaA9vuZ/PW5xz5s4eWDfC1rq/wErObGpqzzc26vhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAORExhlZVY4y30EzsauXO/bTfPMB8GA1UdIwQY
MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt
M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy
LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShrz2o93
0plQLedSDF3Xfznt906ig3A8dRZbADx9y0ElXjH6Fs5l5yvPbh0VZz/J0OZN0hlO
QmmnxU731FFdkjGWAzyaXypu7L4vuFYTKktV0Mwm0TNKsq02WGaMWl7h8y+BtALG
S66GkqiHJIOB8U3ZfTSls4ry9ggHAu5wFYuyvrX8TmuzxTEd2UW8xRHU/7I6H94u
8Ri0ZKlf/a+UFmduNtx+L4NfnLA/nSun3DIZdLyE9Gxmk/Y0lw27NUq+pbyBAsSl
hhKae0YNRQQ9Qsk5K9YmjaZ2UbFpYA1RyRATL/U6aPb7Pa6bLjS0rNIR+2R0h9IX
M77/Ipe5+R33lw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:25 2025 by rpki-client