Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: Bfvk/YC2Rp5VnasuS898fVVsQA4fWWf7TlY0yxEZMQg=
Subject key identifier: AC:57:6A:3F:C7:C7:5E:2D:30:E3:2A:01:A9:4E:EA:12:3E:95:7B:DC
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 0199FB7CB7F1B5E6DCDCB7BC329CE2C8EDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 0643
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: h1PaV7BFoiIyavjL48ajj+WU+WqUycrDfKduIXji3/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b7:f1:b5:e6:dc:dc:b7:bc:32:9c:e2:c8:ed:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=ac576a3fc7c75e2d30e32a01a94eea123e957bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:c9:f4:c5:c4:e8:68:52:51:79:40:0b:70:
43:6f:e4:b4:ff:e0:e4:47:1a:80:34:94:02:2c:b9:
72:2c:0c:5e:6a:a1:e9:f9:f3:fd:99:6c:8a:4b:76:
eb:96:42:67:5d:8c:a4:f1:f4:2a:0c:7b:cb:6e:d4:
fa:bc:c9:3b:f5:15:d5:33:b3:18:8e:f6:f4:75:fe:
ae:f6:6b:64:95:f3:7a:b5:76:4d:ca:0b:56:f5:d3:
85:f6:c0:70:ab:46:63:54:84:23:b0:b6:d7:45:21:
11:67:d2:07:43:9f:50:dc:91:77:b7:6b:b9:01:28:
bd:bc:fb:f9:18:df:dc:e5:99:62:82:fe:12:7f:1b:
33:39:ba:3c:65:c6:8e:7f:a8:c4:64:99:81:49:84:
7f:28:95:f5:3e:de:da:ff:b2:4a:f3:3b:04:45:09:
07:bf:97:b9:0a:89:0e:a1:26:59:05:5a:fc:a9:26:
5c:78:84:21:ce:9a:ea:bb:12:f6:eb:36:4a:3f:e2:
d2:f2:fd:29:f6:5d:3b:65:0a:c1:7c:20:3c:00:da:
9d:f7:65:5e:38:79:33:df:57:80:b4:9e:6a:a2:cc:
97:d7:0a:23:de:a4:cb:42:ea:87:16:e4:a6:65:5f:
31:20:ee:c9:ba:76:61:aa:fd:fb:28:16:12:f1:ec:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:57:6A:3F:C7:C7:5E:2D:30:E3:2A:01:A9:4E:EA:12:3E:95:7B:DC
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5e:aa:1c:50:9f:ff:e3:b4:29:2c:22:e3:73:36:37:d5:2e:
c7:76:50:4b:e6:c6:73:e2:b1:08:e1:4c:9c:ae:7a:b4:20:0f:
10:99:d2:dc:ef:d8:aa:cf:71:12:d3:7b:3b:36:68:29:41:2b:
87:a3:a6:90:3f:92:70:67:65:2b:d1:21:59:86:ba:6a:50:de:
83:c0:7c:d2:98:d2:32:19:32:b1:0a:97:7c:fa:81:09:9b:f7:
68:f6:fc:3f:1f:0d:50:2b:33:b4:96:b8:e6:da:c9:a1:a4:41:
fb:01:8f:4c:96:3b:eb:76:4d:d7:bd:9f:0c:74:9b:d8:f4:c5:
f2:9b:f7:cb:3d:fb:50:eb:14:f0:99:0f:22:b7:73:2c:e0:82:
b5:4e:71:98:cd:ee:3d:00:bb:41:0c:f6:fe:03:9a:81:6d:fd:
04:06:33:6b:a6:43:93:95:b3:30:4a:65:ec:09:79:76:06:4f:
42:92:af:bb:79:ad:cc:16:a9:22:64:20:41:fe:25:87:c1:92:
57:cc:f7:d7:3a:eb:7b:2c:ee:c5:f2:eb:22:34:4c:a9:5f:5d:
61:6c:7b:fa:62:05:3e:cf:10:79:2e:c1:02:75:5b:20:07:6f:
19:54:da:15:8e:26:26:ae:fb:a8:65:ae:d6:fd:58:ad:bc:ef:
7b:27:bb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:23 2025 by rpki-client