Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
File: zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft (raw, json)
Hash identifier: 5bfymzrRnnw2klxhIodE9f+A3PZMMrIQmsED0H2kXeM=
Subject key identifier: 4B:55:26:AC:42:64:CD:77:FE:69:EC:47:B8:AB:4F:1F:52:EE:69:E8
Authority key identifier: CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
Certificate issuer: /CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Certificate serial: 019874F4F5BC6856CF1B93C6D61963B20899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
Manifest number: C9
Signing time: Mon 04 Aug 2025 12:01:07 +0000
Manifest this update: Mon 04 Aug 2025 12:01:07 +0000
Manifest next update: Tue 05 Aug 2025 12:01:07 +0000
Files and hashes: 1: zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl (hash: nNPdnnoXmVnd43oT33Fo4qxYWinsP42rMwJ/8mGwVVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:f5:bc:68:56:cf:1b:93:c6:d6:19:63:b2:08:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0a900d70bd10f7d2221a5648da54a5e3f44712
Validity
Not Before: Aug 4 12:01:07 2025 GMT
Not After : Aug 5 12:01:07 2025 GMT
Subject: CN=4b5526ac4264cd77fe69ec47b8ab4f1f52ee69e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:93:9a:76:c4:7b:43:26:35:a1:7c:6c:2f:
7b:3a:1d:2f:54:f6:5b:1f:90:94:bf:0a:3e:f5:38:
4d:19:fb:ca:8e:4a:80:a4:4e:9f:64:24:e8:1d:9b:
f2:a0:86:e4:af:5c:39:f5:39:ea:07:8e:32:d7:9f:
9f:0a:6a:49:a8:a6:80:c7:3a:d8:9c:b0:28:2f:1f:
1a:9f:0d:0e:7e:36:58:54:67:f1:a1:4f:37:74:47:
fa:55:ab:1f:37:b8:2a:0b:8e:0a:37:46:53:ae:70:
85:2a:41:8b:76:8a:4f:3e:9f:7c:61:99:19:bb:f1:
93:b9:0b:01:f7:ba:e2:a6:97:f5:8f:8a:fc:01:f6:
bd:b1:0a:3d:28:1d:d0:9e:b9:1f:7d:f5:ca:39:f5:
d1:00:fa:e1:89:7a:cb:df:09:74:16:c8:6f:39:2f:
78:9c:ef:e1:26:f6:64:41:c4:aa:d6:02:e1:15:02:
0a:5e:e1:a9:e5:a2:16:ac:38:b9:bb:5f:fe:7c:89:
3b:6b:31:06:28:22:79:92:92:41:c7:64:4d:b4:b6:
79:cd:98:76:c0:f8:77:81:da:92:28:56:b1:67:b8:
7c:f5:80:cf:70:34:27:4e:d4:dc:75:7b:ee:2f:9a:
bf:b7:21:ea:38:2e:86:eb:1c:52:a2:23:cf:30:a1:
a4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:55:26:AC:42:64:CD:77:FE:69:EC:47:B8:AB:4F:1F:52:EE:69:E8
X509v3 Authority Key Identifier:
keyid:CC:0A:90:0D:70:BD:10:F7:D2:22:1A:56:48:DA:54:A5:E3:F4:47:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAqQDXC9EPfSIhpWSNpUpeP0RxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/58a3b6-9a80-49c2-8775-3801c6216e6c/1/zAqQDXC9EPfSIhpWSNpUpeP0RxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4b:e3:e5:55:61:d3:98:16:e1:eb:8d:b4:1e:fc:de:c2:2c:
91:1e:4d:d8:5c:99:ea:dd:9f:31:c7:af:9b:cd:8d:d2:0f:ff:
26:5b:38:cc:c1:be:52:a8:94:e0:e6:df:69:b2:62:6d:92:f1:
6b:c3:8f:49:15:1a:22:41:c0:15:c5:bb:5d:cd:b1:2d:38:2a:
e2:b4:fb:55:a6:2b:1f:52:00:16:f5:96:98:ad:53:b9:54:c5:
8e:9c:c1:cf:68:ad:fb:58:29:26:69:a1:ec:9f:7a:0f:5f:79:
f9:45:c0:cf:2e:99:7c:7c:a5:08:95:79:38:fc:1b:10:a1:38:
7a:a7:fa:82:1d:63:00:c4:71:55:57:93:2e:65:15:91:6a:62:
5f:80:4a:2c:24:8b:5c:a1:20:b1:46:f4:60:b0:38:35:22:35:
d7:85:87:55:fc:fc:29:a7:9a:a8:22:de:cb:de:ec:83:1b:7c:
b4:75:44:eb:02:ae:9a:f9:ee:6f:87:52:3f:25:0c:44:2c:4a:
46:05:0a:2d:11:9c:58:a5:38:c3:29:86:83:b0:0d:96:23:61:
89:d8:d4:40:28:15:61:87:4f:b7:d5:6e:b6:03:e6:db:64:07:
7b:62:84:cd:de:c8:b6:73:65:3e:2b:cf:b5:4e:1a:0c:50:33:
2a:e6:90:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09PW8aFbPG5PG1hljsgiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMGE5MDBkNzBiZDEwZjdkMjIyMWE1NjQ4ZGE1NGE1ZTNm
NDQ3MTIwHhcNMjUwODA0MTIwMTA3WhcNMjUwODA1MTIwMTA3WjAzMTEwLwYDVQQD
Eyg0YjU1MjZhYzQyNjRjZDc3ZmU2OWVjNDdiOGFiNGYxZjUyZWU2OWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VqTmnbEe0MmNaF8bC97Oh0vVPZb
H5CUvwo+9ThNGfvKjkqApE6fZCToHZvyoIbkr1w59TnqB44y15+fCmpJqKaAxzrY
nLAoLx8anw0OfjZYVGfxoU83dEf6VasfN7gqC44KN0ZTrnCFKkGLdopPPp98YZkZ
u/GTuQsB97rippf1j4r8Afa9sQo9KB3QnrkfffXKOfXRAPrhiXrL3wl0FshvOS94
nO/hJvZkQcSq1gLhFQIKXuGp5aIWrDi5u1/+fIk7azEGKCJ5kpJBx2RNtLZ5zZh2
wPh3gdqSKFaxZ7h89YDPcDQnTtTcdXvuL5q/tyHqOC6G6xxSoiPPMKGkCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtVJqxCZM13/mnsR7irTx9S7mnoMB8GA1UdIwQY
MBaAFMwKkA1wvRD30iIaVkjaVKXj9EcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFxUURYQzlFUGZTSWhwV1NOcFVwZVAwUnhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OGEzYjYtOWE4MC00OWMyLTg3NzUt
MzgwMWM2MjE2ZTZjLzEvekFxUURYQzlFUGZTSWhwV1NOcFVwZVAwUnhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OGEzYjYtOWE4MC00OWMyLTg3NzUtMzgwMWM2MjE2ZTZj
LzEvekFxUURYQzlFUGZTSWhwV1NOcFVwZVAwUnhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEvj5VVh
05gW4euNtB783sIskR5N2FyZ6t2fMcevm82N0g//Jls4zMG+UqiU4ObfabJibZLx
a8OPSRUaIkHAFcW7Xc2xLTgq4rT7VaYrH1IAFvWWmK1TuVTFjpzBz2it+1gpJmmh
7J96D195+UXAzy6ZfHylCJV5OPwbEKE4eqf6gh1jAMRxVVeTLmUVkWpiX4BKLCSL
XKEgsUb0YLA4NSI114WHVfz8KaeaqCLey97sgxt8tHVE6wKumvnub4dSPyUMRCxK
RgUKLRGcWKU4wymGg7ANliNhidjUQCgVYYdPt9VutgPm22QHe2KEzd7ItnNlPivP
tU4aDFAzKuaQmg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:43 2025 by rpki-client