Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
File: cZSy_8iUT-E1eWAoERzOc0cew38.mft (raw, json)
Hash identifier: n1ne54UCPRG+UP81ZkLptYzwh0HeKoN0LP5dCMMP61k=
Subject key identifier: 92:3D:0E:1A:8C:3B:31:DE:6A:5B:13:F0:7E:A3:60:6C:94:43:9C:51
Authority key identifier: 71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
Certificate issuer: /CN=7194b2ffc8944fe135796028111cce73471ec37f
Certificate serial: 0198D4DFCBC1CD8EC19913E96C9753A9E5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
Manifest number: 0543
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: cZSy_8iUT-E1eWAoERzOc0cew38.crl (hash: u7/f2xfjzjt200agIAQTouu4NJeBpdMDDHSOW3VQCyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cb:c1:cd:8e:c1:99:13:e9:6c:97:53:a9:e5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7194b2ffc8944fe135796028111cce73471ec37f
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=923d0e1a8c3b31de6a5b13f07ea3606c94439c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:59:8f:ee:a4:88:eb:e1:47:9f:93:c7:79:
7f:46:f4:c1:31:e5:28:56:c5:78:ed:37:3c:a3:5d:
92:bd:2f:dd:51:30:36:54:96:a9:a6:e0:c7:b4:3b:
fa:38:8b:14:22:67:32:2d:44:75:7d:09:4d:7d:1b:
80:46:46:ec:e7:6f:31:fa:45:5c:7b:b4:7d:77:f3:
66:4d:20:92:d6:97:1d:7c:30:e9:85:9e:b1:89:25:
b6:8f:9f:1b:f1:78:18:cd:7d:82:6d:ca:ce:1c:dd:
60:c8:4b:26:ca:50:2f:7e:2a:0d:49:0a:2f:71:6b:
dd:29:80:33:ce:17:12:b1:a1:3a:a7:cc:91:7d:88:
97:dc:45:c2:5e:5b:fa:bd:3b:90:46:f6:67:cc:e7:
13:6e:02:ea:bc:3a:dd:bb:4f:5d:93:e4:5c:07:56:
4f:8f:0a:cc:a8:0f:f9:b3:d0:c0:ef:5e:e0:a7:70:
63:de:47:2f:47:e3:c2:d0:d4:17:0e:42:86:19:1b:
d2:3f:f8:fe:2c:69:be:5c:c4:08:9b:74:12:2a:d6:
73:72:94:19:49:69:bf:01:da:66:55:db:19:fb:cf:
bf:b6:00:02:5f:c1:80:02:13:18:4d:91:b1:7b:14:
af:e3:b0:bb:aa:fb:01:f3:c4:66:47:d7:6d:1d:ce:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:0E:1A:8C:3B:31:DE:6A:5B:13:F0:7E:A3:60:6C:94:43:9C:51
X509v3 Authority Key Identifier:
keyid:71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c4:06:ad:f9:01:5a:55:7b:23:21:34:d0:84:bc:37:4e:ab:
30:97:d2:a1:be:59:5f:95:e1:21:f6:75:bb:71:04:54:b0:fa:
8a:7b:72:3f:70:37:e5:cd:8e:0c:60:83:03:12:1e:1b:3c:fa:
a5:1e:e9:0d:09:f1:e7:40:bb:ae:4b:c1:c1:2c:3b:96:f4:be:
a4:8f:c0:66:dd:9b:e8:99:03:e5:89:ee:f4:25:13:85:cf:24:
1e:79:6d:ac:d5:12:13:8a:bf:4c:47:8b:35:4c:3e:e5:f1:1f:
26:19:65:8c:67:29:7f:5d:e6:29:2d:27:b9:9f:84:1d:da:7b:
8f:17:19:b7:0f:35:d3:74:d3:0f:da:b3:30:cd:75:87:c6:f5:
d4:1f:6c:21:e5:e8:c4:a2:09:31:43:12:6b:22:5a:fc:e7:4b:
56:39:ce:80:42:eb:6b:db:f8:e8:6d:06:a8:75:4f:6a:20:14:
d9:a7:b6:eb:82:8d:c8:48:bb:b2:2f:b8:53:24:65:de:99:d3:
dd:fb:93:32:0c:b4:9b:95:3c:d1:98:5e:d3:a7:26:29:51:b9:
0e:8f:c5:8f:63:d5:2c:1a:93:8b:1b:e2:04:7d:c4:ab:88:a0:
61:e7:83:e4:77:6f:59:ce:bb:f5:69:8f:d7:e6:90:4e:26:d6:
f8:a9:9b:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU38vBzY7BmRPpbJdTqeXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTRiMmZmYzg5NDRmZTEzNTc5NjAyODExMWNjZTczNDcx
ZWMzN2YwHhcNMjUwODIzMDMwMTMzWhcNMjUwODI0MDMwMTMzWjAzMTEwLwYDVQQD
Eyg5MjNkMGUxYThjM2IzMWRlNmE1YjEzZjA3ZWEzNjA2Yzk0NDM5YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQtZj+6kiOvhR5+Tx3l/RvTBMeUo
VsV47Tc8o12SvS/dUTA2VJappuDHtDv6OIsUImcyLUR1fQlNfRuARkbs528x+kVc
e7R9d/NmTSCS1pcdfDDphZ6xiSW2j58b8XgYzX2CbcrOHN1gyEsmylAvfioNSQov
cWvdKYAzzhcSsaE6p8yRfYiX3EXCXlv6vTuQRvZnzOcTbgLqvDrdu09dk+RcB1ZP
jwrMqA/5s9DA717gp3Bj3kcvR+PC0NQXDkKGGRvSP/j+LGm+XMQIm3QSKtZzcpQZ
SWm/AdpmVdsZ+8+/tgACX8GAAhMYTZGxexSv47C7qvsB88RmR9dtHc5mBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI9DhqMOzHealsT8H6jYGyUQ5xRMB8GA1UdIwQY
MBaAFHGUsv/IlE/hNXlgKBEcznNHHsN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pTeV84aVVULUUxZVdBb0VSek9jMGNldzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMDY5ZWYtM2RjMS00NDRlLWE3ZGYt
MGVhYjgxMzliMjNhLzEvY1pTeV84aVVULUUxZVdBb0VSek9jMGNldzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMDY5ZWYtM2RjMS00NDRlLWE3ZGYtMGVhYjgxMzliMjNh
LzEvY1pTeV84aVVULUUxZVdBb0VSek9jMGNldzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcQGrfkB
WlV7IyE00IS8N06rMJfSob5ZX5XhIfZ1u3EEVLD6intyP3A35c2ODGCDAxIeGzz6
pR7pDQnx50C7rkvBwSw7lvS+pI/AZt2b6JkD5Ynu9CUThc8kHnltrNUSE4q/TEeL
NUw+5fEfJhlljGcpf13mKS0nuZ+EHdp7jxcZtw8103TTD9qzMM11h8b11B9sIeXo
xKIJMUMSayJa/OdLVjnOgELra9v46G0GqHVPaiAU2ae264KNyEi7si+4UyRl3pnT
3fuTMgy0m5U80Zhe06cmKVG5Do/Fj2PVLBqTixviBH3Eq4igYeeD5HdvWc679WmP
1+aQTibW+Kmbxw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:54 2025 by rpki-client