Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json)
Hash identifier: QpWhta927y+4HEw/cF1H7LpTcSeeLWdrFExYk4L2+Mw=
Subject key identifier: 47:22:85:0E:19:F2:E0:C3:3F:08:A4:36:F4:90:8C:A3:B6:3D:17:CC
Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781
Certificate serial: 0198D4E0D3D681ACBBC44D4CA9D0556E7B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: DEuX2Xm3bGlyF7xB3cl5QtPT0llXiQn7Wvue9gK+skQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d3:d6:81:ac:bb:c4:4d:4c:a9:d0:55:6e:7b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=4722850e19f2e0c33f08a436f4908ca3b63d17cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:6e:a1:f7:5e:62:f9:4a:ef:7b:3c:55:b7:
2b:53:f6:49:a5:21:48:a9:57:37:ab:96:31:65:e1:
bc:d1:90:72:b4:5a:ff:52:4d:5a:e1:26:2e:7a:18:
2c:aa:2b:41:0d:24:39:7e:70:01:31:8a:8d:dc:e1:
a9:61:52:ab:fb:b1:af:8e:71:ae:bc:c6:82:41:5a:
7c:26:0d:bf:f5:da:df:de:7d:4f:a8:83:7a:dd:22:
4b:e5:86:f6:cc:c3:ea:f6:c5:a5:0c:b7:24:1b:38:
8b:d8:7a:e6:91:33:0b:5a:07:fd:70:cc:af:50:fa:
a2:e9:05:28:f0:06:a8:26:71:51:b6:fb:21:ff:77:
1b:87:22:1e:79:08:55:11:42:c4:9d:5c:4a:2a:03:
b8:8c:41:39:cc:a6:a1:19:ea:c7:09:97:47:0c:81:
14:8a:6f:28:c3:c0:da:53:f0:8c:3f:3f:04:6e:ed:
9e:6a:81:fb:c5:45:43:e4:dd:a8:c8:1c:a8:60:fe:
7d:d7:12:f9:38:c4:26:7e:ae:e0:1a:76:d4:f2:39:
f4:28:66:b3:be:1d:ee:ad:6d:71:4a:11:ad:6a:23:
64:9e:07:58:df:59:6f:91:81:a1:52:e6:4d:22:5d:
15:bd:34:70:95:12:51:82:09:fb:b6:af:78:6d:dc:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:22:85:0E:19:F2:E0:C3:3F:08:A4:36:F4:90:8C:A3:B6:3D:17:CC
X509v3 Authority Key Identifier:
keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9f:f5:62:55:e6:53:81:81:fe:54:e8:6a:b7:8d:d0:78:c8:
68:35:ad:2e:ba:e9:38:9a:78:dd:52:41:67:6b:71:f3:4f:d9:
a5:ca:14:c6:60:cb:d0:29:8c:c8:20:66:d5:bd:34:ef:0c:c5:
3d:99:28:19:0a:86:26:e6:62:ea:f3:c3:b2:24:86:7c:a0:be:
b5:da:2d:57:20:ae:43:48:90:cf:b8:de:97:0e:53:8d:fb:4b:
b0:33:4c:80:fc:ff:4f:6e:05:a8:1a:31:31:03:13:12:bd:d0:
1e:5c:ac:65:e7:30:b9:fb:c7:7e:bc:0f:b0:44:ae:7b:58:db:
c4:61:22:77:dd:b3:5d:01:46:0d:7f:7e:69:cc:89:29:ed:bb:
c5:6f:11:b3:d8:8d:5e:11:00:69:c7:78:b8:76:a7:73:32:3c:
42:54:0b:4a:78:18:55:2e:4c:1b:0f:61:17:3d:2f:ee:c9:c8:
f9:75:0a:80:c7:f3:0c:6a:d0:c0:8e:5b:1e:94:78:64:78:96:
b3:f4:f7:d7:2f:3c:8a:4b:34:cf:81:4d:4c:a3:17:50:34:a1:
78:f4:85:bb:1f:3b:d1:42:94:a2:57:ab:9b:ac:cd:20:a6:e9:
76:0b:ef:99:ae:81:bb:90:46:ed:4f:ac:2a:30:31:ab:af:62:
03:89:07:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4NPWgay7xE1MqdBVbntzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYTEwNDU3NzI2NmVjOWIxNDY3MzZjOGNjOWRhNzM2NmIx
ZDk3ODEwHhcNMjUwODIzMDMwMjQwWhcNMjUwODI0MDMwMjQwWjAzMTEwLwYDVQQD
Eyg0NzIyODUwZTE5ZjJlMGMzM2YwOGE0MzZmNDkwOGNhM2I2M2QxN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeVuofdeYvlK73s8VbcrU/ZJpSFI
qVc3q5YxZeG80ZBytFr/Uk1a4SYuehgsqitBDSQ5fnABMYqN3OGpYVKr+7GvjnGu
vMaCQVp8Jg2/9drf3n1PqIN63SJL5Yb2zMPq9sWlDLckGziL2HrmkTMLWgf9cMyv
UPqi6QUo8AaoJnFRtvsh/3cbhyIeeQhVEULEnVxKKgO4jEE5zKahGerHCZdHDIEU
im8ow8DaU/CMPz8Ebu2eaoH7xUVD5N2oyByoYP591xL5OMQmfq7gGnbU8jn0KGaz
vh3urW1xShGtaiNkngdY31lvkYGhUuZNIl0VvTRwlRJRggn7tq94bdxoqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcihQ4Z8uDDPwikNvSQjKO2PRfMMB8GA1UdIwQY
MBaAFM2hBFdyZuybFGc2yMydpzZrHZeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYt
NWZiMDlmMjFjNjA3LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYtNWZiMDlmMjFjNjA3
LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ/1YlXm
U4GB/lToareN0HjIaDWtLrrpOJp43VJBZ2tx80/ZpcoUxmDL0CmMyCBm1b007wzF
PZkoGQqGJuZi6vPDsiSGfKC+tdotVyCuQ0iQz7jelw5TjftLsDNMgPz/T24FqBox
MQMTEr3QHlysZecwufvHfrwPsESue1jbxGEid92zXQFGDX9+acyJKe27xW8Rs9iN
XhEAacd4uHanczI8QlQLSngYVS5MGw9hFz0v7snI+XUKgMfzDGrQwI5bHpR4ZHiW
s/T31y88iks0z4FNTKMXUDShePSFux870UKUolerm6zNIKbpdgvvma6Bu5BG7U+s
KjAxq69iA4kHdw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:28 2025 by rpki-client