Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: WRvgP09maL2jHUmXFqyhNNwl1TqUTSXFhD2MGhFOzdU=
Subject key identifier: CC:B5:EA:06:88:B8:CC:BF:14:5F:30:DB:AC:FB:36:1C:5C:3C:A6:12
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019A4F620B359CEA87399B02BF106031245B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:00:16 +0000
Manifest this update: Tue 04 Nov 2025 15:00:16 +0000
Manifest next update: Wed 05 Nov 2025 15:00:16 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: YgBgQRehpNOJjGFJBb9W5cP6tUCd5pKfGXjdqHHqzsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0b:35:9c:ea:87:39:9b:02:bf:10:60:31:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Nov 4 15:00:16 2025 GMT
Not After : Nov 5 15:00:16 2025 GMT
Subject: CN=ccb5ea0688b8ccbf145f30dbacfb361c5c3ca612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9a:d4:05:c2:d4:cb:4f:3e:69:56:a7:41:e2:
e0:1a:03:e1:45:97:ae:2f:6d:1c:b7:2e:24:ee:7e:
a9:b1:ad:ce:07:c9:f2:7a:f9:3c:8e:8c:84:9b:af:
c6:ed:1e:54:d4:8f:92:3b:ba:7c:ca:50:de:31:6c:
8f:82:ef:a1:6c:74:21:14:f1:b8:f1:e4:39:32:10:
55:4a:04:41:2c:c3:bc:61:8d:dc:a2:27:4e:6f:4e:
90:15:42:16:44:b5:1d:93:90:bf:43:6d:c3:5f:91:
8a:cc:0e:cf:1e:c5:70:b5:54:d2:44:6c:63:9e:99:
29:35:7b:9b:79:13:12:46:90:f9:15:e3:d7:92:bd:
bf:8d:d2:d2:b9:d1:aa:de:78:04:46:74:8e:c6:85:
62:7e:95:5a:d6:a1:06:06:76:de:42:e7:c2:a3:59:
c1:c5:3c:97:9c:a0:d4:18:36:4d:49:82:f6:d2:77:
51:ad:ec:e6:a6:46:c3:1e:70:00:40:39:cd:52:27:
aa:5c:aa:ae:7e:59:3a:e2:8f:c8:49:7a:ab:21:c8:
e5:c8:32:62:1f:30:45:42:d8:8f:70:3f:cb:b4:ed:
78:ef:eb:24:39:0d:37:7a:7d:11:94:fb:98:37:27:
bd:a8:ff:d9:e0:16:95:ed:fd:c7:8e:1d:0a:e8:23:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:EA:06:88:B8:CC:BF:14:5F:30:DB:AC:FB:36:1C:5C:3C:A6:12
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:99:40:c9:3d:66:69:3a:44:89:2c:4c:cd:3c:26:20:96:c2:
b4:c5:e6:75:2a:f1:44:82:7e:4c:43:9c:2c:d2:e8:bc:74:54:
25:a2:59:71:6e:c3:5b:f1:58:84:cd:71:32:c6:d3:bc:78:4f:
ec:5b:66:a6:a5:a0:76:1b:be:ff:f0:26:d5:61:53:50:eb:c7:
30:9c:6d:40:29:b8:ce:ee:5f:50:dd:64:41:27:70:c5:7c:1c:
f6:99:a9:a6:7d:50:ba:06:ea:d4:56:ab:34:a3:a6:2a:c9:2d:
66:61:51:d5:3f:86:db:dc:74:bc:9f:04:51:86:64:e0:5f:81:
01:c0:4e:a6:01:05:bb:5c:37:71:11:54:b6:f1:cd:5a:51:5c:
cf:ac:5e:d9:4f:42:a6:91:e5:2c:48:e7:bf:2b:92:81:db:53:
cd:11:02:3c:d6:a9:d3:aa:7a:85:39:cf:58:9c:96:53:d9:a3:
bf:6d:d5:fb:c7:08:94:ff:86:80:80:09:b2:3c:fa:59:8a:85:
37:85:65:64:f1:f2:a5:ed:7a:ba:98:3d:df:f9:58:4f:37:0c:
d1:93:0b:12:d3:5a:39:07:20:fc:b0:20:df:f6:84:45:60:0c:
d9:55:86:dd:2c:43:76:fa:db:0e:7c:8e:6a:84:3a:55:1b:a4:
3c:1f:04:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYgs1nOqHOZsCvxBgMSRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy
ZmUzYTYwHhcNMjUxMTA0MTUwMDE2WhcNMjUxMTA1MTUwMDE2WjAzMTEwLwYDVQQD
EyhjY2I1ZWEwNjg4YjhjY2JmMTQ1ZjMwZGJhY2ZiMzYxYzVjM2NhNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85rUBcLUy08+aVanQeLgGgPhRZeu
L20cty4k7n6psa3OB8nyevk8joyEm6/G7R5U1I+SO7p8ylDeMWyPgu+hbHQhFPG4
8eQ5MhBVSgRBLMO8YY3coidOb06QFUIWRLUdk5C/Q23DX5GKzA7PHsVwtVTSRGxj
npkpNXubeRMSRpD5FePXkr2/jdLSudGq3ngERnSOxoVifpVa1qEGBnbeQufCo1nB
xTyXnKDUGDZNSYL20ndRrezmpkbDHnAAQDnNUieqXKquflk64o/ISXqrIcjlyDJi
HzBFQtiPcD/LtO147+skOQ03en0RlPuYNye9qP/Z4BaV7f3Hjh0K6CMlBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy16gaIuMy/FF8w26z7NhxcPKYSMB8GA1UdIwQY
MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt
M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy
LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5lAyT1m
aTpEiSxMzTwmIJbCtMXmdSrxRIJ+TEOcLNLovHRUJaJZcW7DW/FYhM1xMsbTvHhP
7FtmpqWgdhu+//Am1WFTUOvHMJxtQCm4zu5fUN1kQSdwxXwc9pmppn1Qugbq1Far
NKOmKsktZmFR1T+G29x0vJ8EUYZk4F+BAcBOpgEFu1w3cRFUtvHNWlFcz6xe2U9C
ppHlLEjnvyuSgdtTzRECPNap06p6hTnPWJyWU9mjv23V+8cIlP+GgIAJsjz6WYqF
N4VlZPHype16upg93/lYTzcM0ZMLEtNaOQcg/LAg3/aERWAM2VWG3SxDdvrbDnyO
aoQ6VRukPB8E3g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:25 2025 by rpki-client