Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json)
Hash identifier: nTZ4FToed+IDP5bXeAVZen8uGVaNUrWUNgrqFYrNM4k=
Subject key identifier: 8A:6A:86:6E:B1:6F:14:CF:B6:37:3E:9E:AF:FD:50:D2:3A:62:B7:AA
Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64
Certificate serial: 01987ED3F3ACBD41ED0E3D8347F567AA21A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 10:01:16 +0000
Manifest this update: Wed 06 Aug 2025 10:01:16 +0000
Manifest next update: Thu 07 Aug 2025 10:01:16 +0000
Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: Jkj1hjpcfgMUsvN1CPkhBCePbIzCTt5T57BRYM3SLVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:f3:ac:bd:41:ed:0e:3d:83:47:f5:67:aa:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64
Validity
Not Before: Aug 6 10:01:16 2025 GMT
Not After : Aug 7 10:01:16 2025 GMT
Subject: CN=8a6a866eb16f14cfb6373e9eaffd50d23a62b7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:43:35:36:eb:0f:da:3f:01:b4:0f:9c:e4:
9c:0d:6f:2f:3c:ee:77:1f:bf:f0:0c:d7:79:ac:29:
d3:08:ea:29:29:b7:48:3d:8d:66:50:ed:88:95:a7:
24:93:53:d3:01:c3:1d:7e:59:60:0d:52:d2:04:e3:
01:39:8c:be:c9:b4:ce:30:79:19:18:0e:3c:7c:5b:
10:51:97:13:9e:97:8c:4f:31:11:98:df:7f:07:8a:
81:6b:6c:6b:ac:2b:ec:e1:8a:95:89:f4:d2:92:17:
45:ef:97:16:9a:c4:aa:5b:13:3a:7f:05:71:34:13:
fd:9c:bb:69:d7:0d:05:0c:d5:ec:8a:89:06:1e:38:
10:92:b7:c2:11:d4:f5:c3:00:2b:0c:af:05:2d:08:
3a:c0:5a:41:54:e9:d1:1e:41:f2:b3:4f:a3:2b:08:
07:01:c7:35:31:a5:d3:20:db:ea:d9:68:00:39:0f:
7a:9c:18:ca:59:f9:de:d0:2d:87:5e:73:f2:02:c9:
30:0d:dd:33:7b:14:2d:29:8c:40:fb:5e:2e:af:87:
d2:41:a6:a8:07:81:49:bf:ac:eb:1d:86:2c:60:7f:
00:b4:11:13:78:ec:6f:6e:41:52:ef:22:a7:e7:44:
fc:4f:35:6c:56:ba:2b:a1:3e:18:af:82:58:43:d6:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6A:86:6E:B1:6F:14:CF:B6:37:3E:9E:AF:FD:50:D2:3A:62:B7:AA
X509v3 Authority Key Identifier:
keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:57:98:56:42:1d:fb:9b:83:ee:d0:a9:0a:ed:46:15:eb:12:
93:ea:5b:f8:3f:fa:df:6f:f9:20:4f:d0:75:a7:98:ce:f9:cb:
da:02:df:fc:ff:03:18:c1:20:b5:cf:4d:b8:1b:71:b7:53:08:
04:35:90:85:14:df:01:c1:ea:48:b5:bd:dd:84:c6:7c:f3:15:
8f:a8:5b:62:a4:13:3a:03:b3:39:a7:df:98:f6:15:90:10:83:
b3:2a:67:a9:ae:30:d6:fa:74:2a:80:95:6a:92:82:df:9b:54:
5f:d2:0d:ca:43:95:44:a4:54:cd:c5:cd:c4:4e:f1:a3:c9:c0:
bc:a0:a1:d5:b8:dd:20:63:41:a5:0e:ba:b5:e0:af:6e:09:4c:
59:dc:75:c8:5d:3f:df:3f:9b:1b:bd:e0:58:25:21:bb:28:e0:
2a:53:95:d7:f2:90:b4:36:71:57:9a:da:16:63:aa:99:3a:b2:
06:19:e4:e5:f2:dc:18:0f:00:b9:d9:e5:8e:99:05:2a:9c:45:
58:27:f9:b7:bd:b7:32:20:65:00:50:2b:ba:58:14:67:b9:4c:
a4:b7:9f:f5:4a:0c:f6:ce:47:db:49:3c:3d:b3:1c:4c:ce:95:
4e:f2:53:07:d1:5c:16:3b:60:fa:bb:a4:91:27:c9:c3:38:fa:
e5:f2:90:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+0/OsvUHtDj2DR/VnqiGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYTY2NDY2MmRiMzdmYWY5Y2I1MzgwOWY4MTg5ZjY0NTQy
YThmNjQwHhcNMjUwODA2MTAwMTE2WhcNMjUwODA3MTAwMTE2WjAzMTEwLwYDVQQD
Eyg4YTZhODY2ZWIxNmYxNGNmYjYzNzNlOWVhZmZkNTBkMjNhNjJiN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBlDNTbrD9o/AbQPnOScDW8vPO53
H7/wDNd5rCnTCOopKbdIPY1mUO2Ilackk1PTAcMdfllgDVLSBOMBOYy+ybTOMHkZ
GA48fFsQUZcTnpeMTzERmN9/B4qBa2xrrCvs4YqVifTSkhdF75cWmsSqWxM6fwVx
NBP9nLtp1w0FDNXsiokGHjgQkrfCEdT1wwArDK8FLQg6wFpBVOnRHkHys0+jKwgH
Acc1MaXTINvq2WgAOQ96nBjKWfne0C2HXnPyAskwDd0zexQtKYxA+14ur4fSQaao
B4FJv6zrHYYsYH8AtBETeOxvbkFS7yKn50T8TzVsVroroT4Yr4JYQ9b6twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpqhm6xbxTPtjc+nq/9UNI6YreqMB8GA1UdIwQY
MBaAFJqmZGYts3+vnLU4CfgYn2RUKo9kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2ViMDctOWE3My00NDRiLWFkMGUt
OGUyMWM0ZDczODU1LzEvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82Y2ViMDctOWE3My00NDRiLWFkMGUtOGUyMWM0ZDczODU1
LzEvbXFaa1ppMnpmNi1jdFRnSi1CaWZaRlFxajJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1eYVkId
+5uD7tCpCu1GFesSk+pb+D/632/5IE/QdaeYzvnL2gLf/P8DGMEgtc9NuBtxt1MI
BDWQhRTfAcHqSLW93YTGfPMVj6hbYqQTOgOzOaffmPYVkBCDsypnqa4w1vp0KoCV
apKC35tUX9INykOVRKRUzcXNxE7xo8nAvKCh1bjdIGNBpQ66teCvbglMWdx1yF0/
3z+bG73gWCUhuyjgKlOV1/KQtDZxV5raFmOqmTqyBhnk5fLcGA8AudnljpkFKpxF
WCf5t723MiBlAFArulgUZ7lMpLef9UoM9s5H20k8PbMcTM6VTvJTB9FcFjtg+ruk
kSfJwzj65fKQWg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:42 2025 by rpki-client