
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: K2PaHVosibxZomZ/EN6eM80pIRo3BACZAQXxedrjLcI=
Subject key identifier: 77:9B:E8:2A:AB:F3:8C:00:C4:6F:A7:D5:0A:E9:29:36:B3:EC:28:26
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 0198D515F3BF15DBD2F8AE433D8AA2888290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: 01DE
Signing time: Sat 23 Aug 2025 04:00:42 +0000
Manifest this update: Sat 23 Aug 2025 04:00:42 +0000
Manifest next update: Sun 24 Aug 2025 04:00:42 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: +ZtDagtplEbXgTG3Nxkzf+YLyDgAn3dnrwZGFHx70Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f3:bf:15:db:d2:f8:ae:43:3d:8a:a2:88:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: Aug 23 04:00:42 2025 GMT
Not After : Aug 24 04:00:42 2025 GMT
Subject: CN=779be82aabf38c00c46fa7d50ae92936b3ec2826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:cd:66:88:e1:8f:f1:de:07:dc:8b:8b:b4:
8d:be:6f:4b:5d:f3:3c:84:66:4e:2e:a1:96:08:a4:
7f:58:d0:b5:37:1b:9c:89:b9:75:e4:a8:4a:fb:7a:
84:c1:07:32:3a:a4:9c:8f:df:9b:a4:68:8f:bc:0a:
06:c4:4b:2e:a4:42:7a:8e:db:9d:b2:0d:79:23:6f:
9f:72:34:8c:86:54:bc:b8:5c:66:5b:b5:34:46:aa:
7a:87:4d:8c:af:17:44:d0:0b:5f:a6:90:47:c5:76:
ad:61:f1:1d:45:44:c4:e5:f0:26:2b:af:ae:62:12:
94:fb:de:a0:19:34:f5:dc:df:09:a0:60:b6:5a:1a:
85:ba:aa:7d:66:06:6e:7d:49:0a:11:b4:9d:29:c7:
03:3f:76:e7:74:c1:d8:d6:e4:82:03:67:f6:8c:98:
e7:85:ac:64:ef:09:e6:61:7d:7d:da:42:56:8f:a2:
9d:4b:37:b1:15:5b:74:86:44:91:23:d7:e2:7e:e1:
32:23:27:2d:19:75:97:46:56:9f:e9:e6:4f:54:3b:
24:07:32:f7:7c:6f:d4:a7:91:e5:66:b1:d9:96:e7:
25:2c:bb:84:04:89:db:b0:d4:0d:4d:6a:38:9d:79:
f2:85:e7:66:0b:09:c0:87:ec:0c:6d:99:ae:29:69:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9B:E8:2A:AB:F3:8C:00:C4:6F:A7:D5:0A:E9:29:36:B3:EC:28:26
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5d:6d:ab:ab:11:0a:ea:dc:7f:4a:50:6d:d6:16:49:91:4c:
cb:53:d9:76:ff:28:d4:79:8f:2e:cb:b3:75:07:dd:ee:88:81:
7b:49:6b:17:5a:b2:fd:5c:4b:9a:23:73:95:c9:fb:54:45:20:
21:e8:a1:40:09:c9:c6:03:c2:e3:38:9c:08:0f:10:6d:c8:ec:
b8:fd:69:dd:dc:8f:60:77:fe:be:65:5c:fb:c3:c9:c7:0f:11:
20:21:15:f8:ff:1f:b1:a0:b6:d5:91:58:ed:30:a8:b7:a7:a6:
b9:7f:01:92:2f:d8:b4:02:70:7e:0f:5a:43:68:64:0b:9a:83:
0a:95:b3:86:1e:26:d0:2e:64:e5:60:d4:25:a9:d1:35:40:0b:
29:a2:b9:c3:ee:d6:0d:54:06:45:88:ca:1e:56:29:e3:06:c3:
cc:1e:38:db:e2:52:61:95:48:8e:f6:8c:01:9f:45:b6:51:87:
da:03:56:1f:23:85:9a:45:27:0f:77:36:db:fc:8d:fa:e7:25:
f2:df:bc:59:07:c8:09:b8:e3:98:9f:c8:5f:0a:2a:45:71:59:
37:af:4c:17:dc:34:20:c1:f4:24:b5:82:e9:34:c0:00:e6:f2:
b7:a3:6e:b1:16:74:f9:4b:ec:93:17:47:8c:2a:f1:05:aa:e9:
02:f1:02:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFfO/FdvS+K5DPYqiiIKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTdjY2QyYWVjMGJiZWZjNjM1MDg1NjUxMmE5NWZlMDIy
NTk5NTkwHhcNMjUwODIzMDQwMDQyWhcNMjUwODI0MDQwMDQyWjAzMTEwLwYDVQQD
Eyg3NzliZTgyYWFiZjM4YzAwYzQ2ZmE3ZDUwYWU5MjkzNmIzZWMyODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0DNZojhj/HeB9yLi7SNvm9LXfM8
hGZOLqGWCKR/WNC1Nxucibl15KhK+3qEwQcyOqScj9+bpGiPvAoGxEsupEJ6jtud
sg15I2+fcjSMhlS8uFxmW7U0Rqp6h02MrxdE0AtfppBHxXatYfEdRUTE5fAmK6+u
YhKU+96gGTT13N8JoGC2WhqFuqp9ZgZufUkKEbSdKccDP3bndMHY1uSCA2f2jJjn
haxk7wnmYX192kJWj6KdSzexFVt0hkSRI9fifuEyIyctGXWXRlaf6eZPVDskBzL3
fG/Up5HlZrHZluclLLuEBInbsNQNTWo4nXnyhedmCwnAh+wMbZmuKWnTGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeb6Cqr84wAxG+n1QrpKTaz7CgmMB8GA1UdIwQY
MBaAFM6nzNKuwLvvxjUIVlEqlf4CJZlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMt
MzdmNTQ0NzZhOWQ3LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzlhM2QtN2YyOS00OTdiLWFlMmMtMzdmNTQ0NzZhOWQ3
LzEvenFmTTBxN0F1LV9HTlFoV1VTcVZfZ0lsbVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADV1tq6sR
Curcf0pQbdYWSZFMy1PZdv8o1HmPLsuzdQfd7oiBe0lrF1qy/VxLmiNzlcn7VEUg
IeihQAnJxgPC4zicCA8QbcjsuP1p3dyPYHf+vmVc+8PJxw8RICEV+P8fsaC21ZFY
7TCot6emuX8Bki/YtAJwfg9aQ2hkC5qDCpWzhh4m0C5k5WDUJanRNUALKaK5w+7W
DVQGRYjKHlYp4wbDzB442+JSYZVIjvaMAZ9FtlGH2gNWHyOFmkUnD3c22/yN+ucl
8t+8WQfICbjjmJ/IXwoqRXFZN69MF9w0IMH0JLWC6TTAAObyt6NusRZ0+UvskxdH
jCrxBarpAvECYA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:09 2025 by rpki-client