Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: dSSuSiioXbN0sXVWa3nOnbDWh23J91rmEcLe/KMAKUk=
Subject key identifier: E0:E3:C6:41:9D:D6:26:2C:22:CA:8D:B7:E2:46:21:2D:54:69:12:05
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 0199FB45B512990BC08303BF4AE5A9A83536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 09BE
Signing time: Sun 19 Oct 2025 07:01:13 +0000
Manifest this update: Sun 19 Oct 2025 07:01:13 +0000
Manifest next update: Mon 20 Oct 2025 07:01:13 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: FGgl+Wul7eXwz65cKi19nJqYy7HlgCIOPsaTc2OwOwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b5:12:99:0b:c0:83:03:bf:4a:e5:a9:a8:35:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Oct 19 07:01:13 2025 GMT
Not After : Oct 20 07:01:13 2025 GMT
Subject: CN=e0e3c6419dd6262c22ca8db7e246212d54691205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:b0:c5:f3:c8:25:7b:84:7b:2d:b3:7c:3a:
23:6c:8e:0b:b6:b3:73:08:98:68:9b:9d:26:66:c8:
1e:22:75:64:35:e1:3e:f0:98:8b:87:3c:29:75:a2:
ef:5a:b1:87:25:bb:ce:3e:38:b8:62:71:8d:71:41:
99:30:8f:0b:aa:e4:79:4a:b7:a2:ee:28:e9:23:0d:
4e:6b:89:54:37:75:b9:cc:ea:58:04:0a:a1:57:f0:
6e:0c:22:56:14:f6:9e:bd:61:fd:b0:34:a2:bb:f0:
5c:27:29:83:25:14:a0:4d:5d:7e:18:54:2d:a3:dd:
29:16:39:8f:99:44:d9:8c:1e:a9:56:28:b8:92:18:
b8:36:6d:66:c5:60:ba:1d:0d:58:35:e3:03:10:13:
e0:75:8d:61:05:92:b6:10:40:b2:58:22:71:19:35:
49:d2:ef:c0:40:ad:7a:ad:90:30:85:88:37:aa:51:
58:f2:5c:89:09:77:9e:8b:4a:f2:20:fc:0b:e2:94:
b1:55:74:3d:50:3e:e4:b8:9d:ba:5e:68:f8:03:2c:
cd:13:93:c8:c5:61:07:6f:1f:3a:a5:03:d1:fd:86:
33:b4:99:86:7b:73:0d:c8:bb:dc:8f:bf:17:43:10:
ee:56:06:25:d2:ae:76:88:b9:a2:41:94:74:8f:11:
11:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:C6:41:9D:D6:26:2C:22:CA:8D:B7:E2:46:21:2D:54:69:12:05
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:26:31:72:c1:a4:40:5c:1d:41:b2:3d:0d:1f:b6:1d:df:0a:
73:ba:ee:ab:2b:53:44:f1:ca:da:41:99:88:fc:83:17:76:ee:
45:73:b5:50:6f:07:90:fc:3c:db:35:74:1c:10:56:52:b1:0e:
33:9e:b3:34:e5:35:b0:cf:23:dd:9d:97:64:ff:27:51:6c:6b:
93:7a:b4:0e:95:bd:07:74:cb:b3:22:cf:21:dd:85:1a:b5:d5:
a7:e0:f0:95:95:c6:56:b2:99:d7:ec:41:8f:72:9d:c5:d8:62:
da:8e:28:9f:8f:40:62:6e:21:a7:a2:67:a1:64:64:a1:7e:07:
ab:3c:11:1d:9c:8d:b7:93:06:93:fe:37:4c:7a:01:f2:8f:55:
00:f4:f2:c8:c7:6f:84:8f:95:a4:aa:a4:72:10:d9:66:d3:f3:
45:44:04:d3:52:78:f2:26:10:60:d8:7a:5a:01:34:61:03:65:
98:f3:6d:94:96:04:9a:7e:f2:5f:4e:7e:2e:de:ce:7c:d4:be:
17:7b:58:b7:5a:65:56:b5:a2:7d:9f:0b:96:f2:af:b3:dc:e2:
6e:4c:98:81:b8:77:c6:b0:0d:be:0f:77:9d:35:a0:28:53:3b:
95:38:b7:c7:48:4e:bf:7c:1a:ce:2f:4f:7a:a2:1e:b5:78:68:
14:61:00:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RbUSmQvAgwO/SuWpqDU2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OTNlYjA2YWJiOThkNGEyNTVjZmIyYjMyM2E2NWYzYzRm
NzFiYWQwHhcNMjUxMDE5MDcwMTEzWhcNMjUxMDIwMDcwMTEzWjAzMTEwLwYDVQQD
EyhlMGUzYzY0MTlkZDYyNjJjMjJjYThkYjdlMjQ2MjEyZDU0NjkxMjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVmwxfPIJXuEey2zfDojbI4LtrNz
CJhom50mZsgeInVkNeE+8JiLhzwpdaLvWrGHJbvOPji4YnGNcUGZMI8LquR5Srei
7ijpIw1Oa4lUN3W5zOpYBAqhV/BuDCJWFPaevWH9sDSiu/BcJymDJRSgTV1+GFQt
o90pFjmPmUTZjB6pVii4khi4Nm1mxWC6HQ1YNeMDEBPgdY1hBZK2EECyWCJxGTVJ
0u/AQK16rZAwhYg3qlFY8lyJCXeei0ryIPwL4pSxVXQ9UD7kuJ26Xmj4AyzNE5PI
xWEHbx86pQPR/YYztJmGe3MNyLvcj78XQxDuVgYl0q52iLmiQZR0jxERPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODjxkGd1iYsIsqNt+JGIS1UaRIFMB8GA1UdIwQY
MBaAFKmT6waruY1KJVz7KzI6ZfPE9xutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80ZTA1NjYtM2MwMS00Yzk1LWJlYTct
NTY1ZTc4ZGQwMTdkLzEvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80ZTA1NjYtM2MwMS00Yzk1LWJlYTctNTY1ZTc4ZGQwMTdk
LzEvcVpQckJxdTVqVW9sWFBzck1qcGw4OFQzRzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSYxcsGk
QFwdQbI9DR+2Hd8Kc7ruqytTRPHK2kGZiPyDF3buRXO1UG8HkPw82zV0HBBWUrEO
M56zNOU1sM8j3Z2XZP8nUWxrk3q0DpW9B3TLsyLPId2FGrXVp+DwlZXGVrKZ1+xB
j3Kdxdhi2o4on49AYm4hp6JnoWRkoX4HqzwRHZyNt5MGk/43THoB8o9VAPTyyMdv
hI+VpKqkchDZZtPzRUQE01J48iYQYNh6WgE0YQNlmPNtlJYEmn7yX05+Lt7OfNS+
F3tYt1plVrWifZ8LlvKvs9zibkyYgbh3xrANvg93nTWgKFM7lTi3x0hOv3wazi9P
eqIetXhoFGEAmQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:48 2025 by rpki-client