Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier: 4I3ptdO2jJCWYzpd026XD+DBVzqiLC8cKr51c2nrock=
Subject key identifier: 9E:02:A3:35:A1:B6:95:17:E4:19:A1:AD:EE:F5:82:9E:9A:23:2F:87
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial: 0197B6A0A0791716480B02B6340B67BCC2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number: 0DD3
Signing time: Sat 28 Jun 2025 13:01:09 +0000
Manifest this update: Sat 28 Jun 2025 13:01:09 +0000
Manifest next update: Sun 29 Jun 2025 13:01:09 +0000
Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: KjHtM09vFCRx9ivOn2yA9BjV8ml5lsL2F1ktyX3H68Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a0:79:17:16:48:0b:02:b6:34:0b:67:bc:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
Validity
Not Before: Jun 28 13:01:09 2025 GMT
Not After : Jun 29 13:01:09 2025 GMT
Subject: CN=9e02a335a1b69517e419a1adeef5829e9a232f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:46:80:a4:49:3f:56:b1:d2:94:f5:10:31:
05:2a:8c:2d:cd:9d:3e:c4:7c:29:13:3c:32:8d:c5:
0c:e0:5a:21:4f:c3:69:61:74:84:71:06:fb:2a:a9:
fe:88:05:a6:4e:9d:63:39:b1:30:bd:83:25:ce:f3:
3b:32:04:45:8d:f4:83:53:39:7c:ba:66:a2:53:8a:
e8:f5:ee:f0:9c:2e:c5:0e:1d:ae:55:1b:77:50:79:
8f:ee:91:6f:4e:fb:cb:60:54:2e:83:e3:62:e2:9d:
6c:06:8b:6d:e6:87:5d:87:c4:d8:de:fd:8c:2b:c0:
b1:74:53:05:5e:26:a0:4d:32:44:b1:fc:cd:54:68:
d4:96:68:5c:f4:fb:c1:18:a1:30:8e:40:d5:b4:19:
8d:99:0b:f3:16:94:79:de:3f:2e:3d:b3:6f:7b:71:
98:16:95:02:e5:6d:11:34:17:e0:f4:2d:08:44:13:
37:22:fe:e3:1a:cd:cf:83:ac:c6:39:5c:c5:28:2d:
9b:40:70:16:6f:e7:22:60:b9:c6:84:31:36:02:f9:
8c:61:41:a0:25:b4:95:67:d9:06:c0:12:4b:8e:78:
54:3d:ae:19:5f:56:9a:5c:c5:d8:be:c8:8a:68:8e:
20:c7:31:5e:9c:41:e6:e5:b4:9a:b9:c6:5f:29:3b:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:02:A3:35:A1:B6:95:17:E4:19:A1:AD:EE:F5:82:9E:9A:23:2F:87
X509v3 Authority Key Identifier:
keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cc:d5:8b:52:c7:d6:8f:a4:e9:64:c1:c2:6e:a2:ad:00:68:
b5:c8:b0:70:27:2f:fd:e6:69:cb:43:5c:69:a1:2a:85:e5:ed:
b3:a3:30:15:09:4e:0c:0a:fe:eb:80:07:73:e8:b7:2a:11:aa:
ca:c4:d5:d3:25:a7:2c:d0:af:55:5f:3e:b6:73:4a:3c:13:5d:
9b:23:0a:89:9d:d8:18:9c:ca:b4:12:15:ea:e3:e2:fd:2c:d0:
6d:4c:cd:56:25:77:98:a0:14:fb:03:c8:a5:f1:d7:19:62:7b:
63:0c:03:8b:13:da:e9:b0:bd:e8:24:13:5b:8a:da:8c:bd:d3:
2b:4f:21:b4:3b:a0:52:a4:75:76:90:1b:95:6d:56:e7:b2:d6:
a2:8a:c5:31:63:f9:8a:e7:7e:f4:b8:07:27:00:16:b0:bf:4d:
01:de:4a:16:de:44:55:47:4d:7a:95:f6:30:39:e1:e4:0e:c6:
93:d2:2e:59:bd:8c:3b:45:9f:88:0d:f1:6b:df:80:3f:dc:a9:
fe:be:c2:1b:eb:1f:ea:59:fd:bd:85:a2:ff:c2:25:26:17:63:
dd:2a:3e:61:d4:4e:2e:68:53:aa:b4:c7:5e:46:02:44:4d:07:
9e:1c:ba:d2:ea:48:3a:95:b7:a1:9b:d5:97:56:57:de:60:1f:
f0:fe:52:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKB5FxZICwK2NAtnvMLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2RhNDMxMTg1ODgyMjVhMzc2ZWMyMTQ5YzczMzZjNDYz
MzY0NDAwHhcNMjUwNjI4MTMwMTA5WhcNMjUwNjI5MTMwMTA5WjAzMTEwLwYDVQQD
Eyg5ZTAyYTMzNWExYjY5NTE3ZTQxOWExYWRlZWY1ODI5ZTlhMjMyZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs99GgKRJP1ax0pT1EDEFKowtzZ0+
xHwpEzwyjcUM4FohT8NpYXSEcQb7Kqn+iAWmTp1jObEwvYMlzvM7MgRFjfSDUzl8
umaiU4ro9e7wnC7FDh2uVRt3UHmP7pFvTvvLYFQug+Ni4p1sBott5oddh8TY3v2M
K8CxdFMFXiagTTJEsfzNVGjUlmhc9PvBGKEwjkDVtBmNmQvzFpR53j8uPbNve3GY
FpUC5W0RNBfg9C0IRBM3Iv7jGs3Pg6zGOVzFKC2bQHAWb+ciYLnGhDE2AvmMYUGg
JbSVZ9kGwBJLjnhUPa4ZX1aaXMXYvsiKaI4gxzFenEHm5bSaucZfKTvjjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4CozWhtpUX5Bmhre71gp6aIy+HMB8GA1UdIwQY
MBaAFM99pDEYWIIlo3bsIUnHM2xGM2RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUt
YzVmMTdlYWI0MWQ1LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUtYzVmMTdlYWI0MWQ1
LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoszVi1LH
1o+k6WTBwm6irQBotciwcCcv/eZpy0NcaaEqheXts6MwFQlODAr+64AHc+i3KhGq
ysTV0yWnLNCvVV8+tnNKPBNdmyMKiZ3YGJzKtBIV6uPi/SzQbUzNViV3mKAU+wPI
pfHXGWJ7YwwDixPa6bC96CQTW4rajL3TK08htDugUqR1dpAblW1W57LWoorFMWP5
iud+9LgHJwAWsL9NAd5KFt5EVUdNepX2MDnh5A7Gk9IuWb2MO0WfiA3xa9+AP9yp
/r7CG+sf6ln9vYWi/8IlJhdj3So+YdROLmhTqrTHXkYCRE0Hnhy60upIOpW3oZvV
l1ZX3mAf8P5SVg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:27 2025 by rpki-client