Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
File: _rzZRV4eVaXh1gG9SoV0ta_VQHU.mft (raw, json)
Hash identifier: dLVrG3A0E3BmWkkJJD/zdXunhF7Qzt2+6jHWZB6uXNE=
Subject key identifier: D4:D2:3A:F1:D2:A1:19:F8:CF:28:E9:21:66:BE:01:59:B6:61:4C:10
Authority key identifier: FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
Certificate issuer: /CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Certificate serial: 0199FB461E40EA3B35D1D0B62E608A7FA120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
Manifest number: 05FE
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: _rzZRV4eVaXh1gG9SoV0ta_VQHU.crl (hash: POZ7NTugWumnqsw4GaB5HSF2RZz3zedRGqKVAYQ/Kwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1e:40:ea:3b:35:d1:d0:b6:2e:60:8a:7f:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febcd9455e1e55a5e1d601bd4a8574b5afd54075
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=d4d23af1d2a119f8cf28e92166be0159b6614c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:81:98:29:80:48:ee:78:fd:c4:ce:b5:90:58:
74:06:26:11:80:1d:00:58:54:f4:50:b1:b6:c1:b7:
93:42:8b:9a:42:f5:7c:bb:d2:fd:ed:95:20:ae:53:
e6:c1:06:55:2f:54:e9:bf:1d:71:11:de:17:5c:88:
9b:4a:89:8b:26:9a:0c:93:39:7a:eb:d5:1c:56:ae:
a9:ee:20:ab:26:65:46:97:15:39:49:1c:09:95:ee:
fa:53:64:ad:2f:6b:68:0b:78:96:75:8d:4d:df:e4:
ef:36:fc:ab:a2:4e:47:9f:88:33:02:9e:48:97:53:
b9:86:ea:7a:95:16:81:20:c3:35:66:49:85:4d:c3:
7c:8c:bc:43:59:d8:13:95:1c:06:4f:a8:28:6e:95:
ce:e9:b2:88:ad:f0:45:48:70:24:af:0b:6f:ad:d7:
57:5f:da:8c:b9:31:fa:81:da:33:c9:b9:01:93:28:
85:c3:b5:c3:cc:23:f4:8b:fb:3a:37:dc:8d:78:e5:
21:b9:4d:47:b2:9f:37:70:f1:d7:ba:b6:47:0b:11:
51:1b:23:9c:8f:1b:6c:c4:7c:f8:fe:08:41:41:e6:
67:1f:4d:6e:f1:3d:66:94:3f:24:55:7c:af:f1:c9:
bc:7e:12:23:e4:e7:b2:dd:cd:e5:21:57:a2:c3:86:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:3A:F1:D2:A1:19:F8:CF:28:E9:21:66:BE:01:59:B6:61:4C:10
X509v3 Authority Key Identifier:
keyid:FE:BC:D9:45:5E:1E:55:A5:E1:D6:01:BD:4A:85:74:B5:AF:D5:40:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rzZRV4eVaXh1gG9SoV0ta_VQHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9df701-20d2-4c4f-ac94-16127c8a7eac/1/_rzZRV4eVaXh1gG9SoV0ta_VQHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d0:0b:90:bb:e8:7f:84:c6:21:62:1d:2f:68:35:5e:3c:22:
2d:bc:d8:c2:a5:28:58:ab:68:af:93:a1:89:51:19:54:65:88:
d4:13:85:0f:2a:1d:6d:ae:f6:f3:26:b4:c8:3c:3f:fa:0a:ed:
ad:fa:0e:4b:23:38:62:bb:1e:2b:c5:27:47:f5:35:f0:ac:5c:
91:cc:01:18:c0:fb:b5:e9:7f:97:06:be:57:ab:1c:00:4e:86:
8a:9d:dd:c7:b1:72:f8:3c:fe:ce:49:8f:75:d7:58:b1:34:b9:
be:5d:b7:22:5e:5f:0f:b5:4a:43:68:a6:8d:dc:23:94:f2:9f:
dd:c0:88:1d:85:d3:47:d3:89:f1:69:a0:4b:88:20:54:be:a7:
93:7f:35:7a:5b:9d:b5:95:2d:cc:72:5b:82:6b:c4:e7:14:63:
79:21:a3:17:2e:7a:3e:0b:56:56:b1:23:42:a4:a9:ac:f0:d6:
83:e3:26:dc:77:c4:23:05:9b:44:3b:52:85:d6:2c:5b:57:73:
ee:53:9b:a3:ae:2b:6a:0d:8e:22:93:b9:cf:09:c0:59:b4:51:
97:9c:b8:76:fb:8a:47:34:e1:1d:56:a8:e4:40:f7:e0:f1:49:
c5:32:0d:35:3d:38:d4:a7:69:f7:ae:e9:0a:48:62:e2:dc:b4:
e1:06:05:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rh5A6js10dC2LmCKf6EgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmNkOTQ1NWUxZTU1YTVlMWQ2MDFiZDRhODU3NGI1YWZk
NTQwNzUwHhcNMjUxMDE5MDcwMTQwWhcNMjUxMDIwMDcwMTQwWjAzMTEwLwYDVQQD
EyhkNGQyM2FmMWQyYTExOWY4Y2YyOGU5MjE2NmJlMDE1OWI2NjE0YzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4GYKYBI7nj9xM61kFh0BiYRgB0A
WFT0ULG2wbeTQouaQvV8u9L97ZUgrlPmwQZVL1Tpvx1xEd4XXIibSomLJpoMkzl6
69UcVq6p7iCrJmVGlxU5SRwJle76U2StL2toC3iWdY1N3+TvNvyrok5Hn4gzAp5I
l1O5hup6lRaBIMM1ZkmFTcN8jLxDWdgTlRwGT6gobpXO6bKIrfBFSHAkrwtvrddX
X9qMuTH6gdozybkBkyiFw7XDzCP0i/s6N9yNeOUhuU1Hsp83cPHXurZHCxFRGyOc
jxtsxHz4/ghBQeZnH01u8T1mlD8kVXyv8cm8fhIj5Oey3c3lIVeiw4ZiOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTSOvHSoRn4zyjpIWa+AVm2YUwQMB8GA1UdIwQY
MBaAFP682UVeHlWl4dYBvUqFdLWv1UB1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQt
MTYxMjdjOGE3ZWFjLzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC85ZGY3MDEtMjBkMi00YzRmLWFjOTQtMTYxMjdjOGE3ZWFj
LzEvX3J6WlJWNGVWYVhoMWdHOVNvVjB0YV9WUUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9ALkLvo
f4TGIWIdL2g1XjwiLbzYwqUoWKtor5OhiVEZVGWI1BOFDyodba728ya0yDw/+grt
rfoOSyM4YrseK8UnR/U18KxckcwBGMD7tel/lwa+V6scAE6Gip3dx7Fy+Dz+zkmP
dddYsTS5vl23Il5fD7VKQ2imjdwjlPKf3cCIHYXTR9OJ8WmgS4ggVL6nk381elud
tZUtzHJbgmvE5xRjeSGjFy56PgtWVrEjQqSprPDWg+Mm3HfEIwWbRDtShdYsW1dz
7lObo64rag2OIpO5zwnAWbRRl5y4dvuKRzThHVao5ED34PFJxTINNT041Kdp967p
Ckhi4ty04QYF0w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:19 2025 by rpki-client