Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: HAyTNhJjpdKrsgemWm992h81UDNwy++ZNp1duAMBE9I=
Subject key identifier: 13:DC:46:41:88:E7:E0:65:F0:9F:83:3E:B6:62:98:A1:09:9E:F8:D6
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 0198D65F2D83420D4463FD9661905F078601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: 3mi73lxC9C2vLjnGKNtcfeuTuRP3rSVwuFK0/XKUoqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2d:83:42:0d:44:63:fd:96:61:90:5f:07:86:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=13dc464188e7e065f09f833eb66298a1099ef8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:00:51:58:97:03:7b:4f:9e:6c:d4:ed:39:
2b:c5:6a:ca:52:16:57:f1:ef:e8:74:6c:e7:16:d8:
9e:e2:28:2c:51:56:3f:9a:a1:0a:9c:63:ad:1f:96:
33:c6:dd:d5:37:2f:45:88:60:0c:e1:fb:cc:cb:b0:
46:7d:73:a5:fa:8f:b8:8e:8b:01:a4:87:0a:38:97:
11:f8:07:cc:90:32:43:a6:11:02:d1:72:0b:8d:35:
22:80:ec:b3:33:03:ca:e2:7e:53:60:5b:e1:ee:10:
09:07:00:68:ff:b1:9d:38:8f:7d:8a:d3:77:47:37:
b5:7d:e2:98:dc:14:18:fa:0b:09:6c:c8:2e:54:44:
5d:ef:22:c3:d8:a0:fe:9e:6d:e9:be:ad:70:0e:81:
d1:16:09:ee:af:d4:67:58:cc:6d:1f:a3:aa:90:20:
73:66:80:9e:b4:cd:19:58:d8:6f:f2:f5:b8:e2:d7:
c6:0b:04:3f:5f:59:c9:c6:e6:80:ac:d0:0f:50:50:
de:99:f6:7d:ed:48:58:25:0a:17:f1:ec:13:1f:cd:
26:70:18:ca:f2:7d:d8:4e:7a:d9:82:df:31:1d:6d:
2f:96:cd:f8:13:ac:65:d4:cb:f4:4d:30:45:70:e5:
95:4c:4b:19:46:bf:d8:67:d8:0d:fc:0c:2c:33:51:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:46:41:88:E7:E0:65:F0:9F:83:3E:B6:62:98:A1:09:9E:F8:D6
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d1:88:90:ae:56:94:11:3d:30:69:12:42:7a:ad:3f:6b:f1:
bf:81:80:29:ea:07:91:2b:fd:87:bd:c6:38:32:4a:b6:10:33:
33:35:b1:20:be:58:31:75:72:66:2d:e4:60:90:ec:bf:65:8a:
48:f2:4f:ae:bb:dc:91:f7:ab:32:d7:fd:5b:40:fd:03:95:cf:
0b:d6:08:e0:0e:7e:1d:96:90:c1:f7:9e:b8:a8:a1:ac:8e:40:
a9:ec:fd:40:80:86:2d:ee:76:0f:d9:09:68:cd:65:48:6e:14:
f0:49:37:af:f6:c1:9a:f0:2a:72:00:98:fa:05:ad:e3:b8:92:
4b:a8:fb:2b:5b:0a:ec:51:ff:f5:a9:f4:6f:1c:8f:ef:16:c2:
bf:4d:d1:00:4c:17:eb:43:6c:02:a8:07:0d:b0:79:59:a0:a5:
ee:ad:38:bb:d5:85:c7:08:55:5e:63:b2:fb:15:cc:e0:6b:8f:
39:e3:89:88:d7:87:8c:39:49:49:b4:9f:a9:d0:04:06:09:b7:
ab:d8:05:c2:5e:95:9b:58:63:cf:9f:40:6e:da:cc:af:cc:d6:
29:9e:79:30:ba:d3:20:2b:ba:4a:ad:fe:11:e9:6f:62:d5:35:
9d:53:0b:81:21:89:f2:28:93:36:0d:34:5b:06:8c:72:33:94:
40:b5:1d:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXy2DQg1EY/2WYZBfB4YBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDFjM2FmMmNkNTk4NjU3NWQxYmNmNjVlYzllODc3NjY2
ZWRlMzYwHhcNMjUwODIzMTAwMDE4WhcNMjUwODI0MTAwMDE4WjAzMTEwLwYDVQQD
EygxM2RjNDY0MTg4ZTdlMDY1ZjA5ZjgzM2ViNjYyOThhMTA5OWVmOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGkAUViXA3tPnmzU7TkrxWrKUhZX
8e/odGznFtie4igsUVY/mqEKnGOtH5Yzxt3VNy9FiGAM4fvMy7BGfXOl+o+4josB
pIcKOJcR+AfMkDJDphEC0XILjTUigOyzMwPK4n5TYFvh7hAJBwBo/7GdOI99itN3
Rze1feKY3BQY+gsJbMguVERd7yLD2KD+nm3pvq1wDoHRFgnur9RnWMxtH6OqkCBz
ZoCetM0ZWNhv8vW44tfGCwQ/X1nJxuaArNAPUFDemfZ97UhYJQoX8ewTH80mcBjK
8n3YTnrZgt8xHW0vls34E6xl1Mv0TTBFcOWVTEsZRr/YZ9gN/AwsM1EqZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPcRkGI5+Bl8J+DPrZimKEJnvjWMB8GA1UdIwQY
MBaAFMxBw68s1ZhlddG89l7J6Hdmbt42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEt
NGM2NTIyNDUzYzlhLzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEtNGM2NTIyNDUzYzlh
LzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdGIkK5W
lBE9MGkSQnqtP2vxv4GAKeoHkSv9h73GODJKthAzMzWxIL5YMXVyZi3kYJDsv2WK
SPJPrrvckferMtf9W0D9A5XPC9YI4A5+HZaQwfeeuKihrI5Aqez9QICGLe52D9kJ
aM1lSG4U8Ek3r/bBmvAqcgCY+gWt47iSS6j7K1sK7FH/9an0bxyP7xbCv03RAEwX
60NsAqgHDbB5WaCl7q04u9WFxwhVXmOy+xXM4GuPOeOJiNeHjDlJSbSfqdAEBgm3
q9gFwl6Vm1hjz59AbtrMr8zWKZ55MLrTICu6Sq3+EelvYtU1nVMLgSGJ8iiTNg00
WwaMcjOUQLUdCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:57 2025 by rpki-client