Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: aP3L6dHEv5mP/bAH1FNHfvlUiwYgQYrBc7lcbsvCIck=
Subject key identifier: 6A:76:21:25:06:B7:28:66:11:9E:A2:6F:C6:54:90:3C:A7:C8:7B:2E
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 0198D5F169C927E6069C4D6912C61D58E958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 05AB
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: Jw8Mu5pD4ASQiwPV3Qa4JI1x6ADvg21EBichVGl04DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:69:c9:27:e6:06:9c:4d:69:12:c6:1d:58:e9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=6a76212506b72866119ea26fc654903ca7c87b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:6e:53:30:c5:b7:5a:3b:2e:44:21:bb:55:
94:8c:8e:51:79:3c:70:bf:e6:de:bf:93:40:25:21:
47:11:6e:54:92:21:7a:09:74:48:c9:39:80:70:3f:
0e:38:93:8e:64:6f:5f:20:41:31:3c:ea:3c:1c:65:
fd:60:c5:b5:f7:e7:20:0e:f9:7b:f0:6c:98:b1:89:
29:ba:57:92:ca:12:11:c9:41:c3:ee:f1:38:3d:49:
3a:2f:8f:12:e0:ee:d3:dc:d5:13:ba:4e:16:d0:94:
96:cc:c3:3b:d1:67:7b:71:24:53:f1:d9:da:c6:db:
46:54:c1:b2:0c:fe:c1:a3:ac:44:17:b5:a0:65:76:
6b:fe:11:d8:47:20:75:19:a6:c2:e2:72:29:e1:71:
94:df:5f:d4:67:77:85:d7:f3:9e:f3:69:cd:52:66:
91:b7:df:d6:24:ea:84:e1:01:45:ea:cb:a0:ce:28:
1f:d8:bd:b4:52:d8:31:22:07:6f:db:9a:87:dc:77:
9a:61:7d:c5:78:ae:a6:ff:9e:b3:72:63:41:20:0f:
56:03:6e:3e:e2:71:07:be:e9:21:fe:60:66:f1:51:
7a:b1:06:d4:20:27:6c:7b:a1:0b:2c:bc:43:ac:69:
f7:08:1b:00:b9:74:58:c6:12:7d:ae:6b:d6:fc:6d:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:76:21:25:06:B7:28:66:11:9E:A2:6F:C6:54:90:3C:A7:C8:7B:2E
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:34:e8:f5:f7:1d:5e:10:a8:ef:46:51:86:e0:83:f0:43:35:
4e:eb:03:99:ee:b1:eb:22:bd:91:bb:b0:fb:e6:66:c2:e7:70:
82:2c:fc:b9:fd:4f:5d:4f:f4:82:4f:08:01:96:17:c4:07:cf:
1d:9d:16:ce:84:3c:62:89:1c:ba:4e:50:ac:62:b6:65:0c:2e:
b8:e3:c6:ce:ca:ee:ef:89:f7:f9:ee:39:03:87:fe:a2:1a:34:
33:93:78:f8:7a:e5:91:a8:96:84:66:59:61:64:75:02:87:16:
81:70:1f:ab:d5:e2:8c:56:d5:64:dd:2f:17:e4:52:a4:03:be:
35:7e:71:d9:1f:75:3a:6f:50:cc:a3:51:77:53:4a:13:98:34:
a7:48:7c:b9:88:4d:e6:7f:f5:3c:e2:6e:56:16:18:e0:a2:67:
46:b2:5f:b9:cc:d5:99:1f:2f:57:ce:63:83:0c:73:83:f4:db:
53:d5:12:5b:48:be:69:bc:a5:11:b8:4b:81:42:39:16:5f:e2:
dc:0a:92:c7:73:52:66:b5:d2:d3:40:03:66:35:58:43:0e:16:
5b:fb:81:37:29:fd:69:83:34:9e:44:71:9e:04:a9:41:f1:a9:
5e:76:6d:37:12:0d:57:f5:d4:15:86:f5:83:5e:7d:e6:af:b9:
bc:d6:cf:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WnJJ+YGnE1pEsYdWOlYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx
Zjc2NGUwHhcNMjUwODIzMDgwMDI0WhcNMjUwODI0MDgwMDI0WjAzMTEwLwYDVQQD
Eyg2YTc2MjEyNTA2YjcyODY2MTE5ZWEyNmZjNjU0OTAzY2E3Yzg3YjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ZuUzDFt1o7LkQhu1WUjI5ReTxw
v+bev5NAJSFHEW5UkiF6CXRIyTmAcD8OOJOOZG9fIEExPOo8HGX9YMW19+cgDvl7
8GyYsYkpuleSyhIRyUHD7vE4PUk6L48S4O7T3NUTuk4W0JSWzMM70Wd7cSRT8dna
xttGVMGyDP7Bo6xEF7WgZXZr/hHYRyB1GabC4nIp4XGU31/UZ3eF1/Oe82nNUmaR
t9/WJOqE4QFF6sugzigf2L20UtgxIgdv25qH3HeaYX3FeK6m/56zcmNBIA9WA24+
4nEHvukh/mBm8VF6sQbUICdse6ELLLxDrGn3CBsAuXRYxhJ9rmvW/G06iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp2ISUGtyhmEZ6ib8ZUkDynyHsuMB8GA1UdIwQY
MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt
NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4
LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljTo9fcd
XhCo70ZRhuCD8EM1TusDme6x6yK9kbuw++Zmwudwgiz8uf1PXU/0gk8IAZYXxAfP
HZ0WzoQ8Yokcuk5QrGK2ZQwuuOPGzsru74n3+e45A4f+oho0M5N4+HrlkaiWhGZZ
YWR1AocWgXAfq9XijFbVZN0vF+RSpAO+NX5x2R91Om9QzKNRd1NKE5g0p0h8uYhN
5n/1POJuVhYY4KJnRrJfuczVmR8vV85jgwxzg/TbU9USW0i+abylEbhLgUI5Fl/i
3AqSx3NSZrXS00ADZjVYQw4WW/uBNyn9aYM0nkRxngSpQfGpXnZtNxINV/XUFYb1
g1595q+5vNbPeg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:38 2025 by rpki-client