Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
File: cZSy_8iUT-E1eWAoERzOc0cew38.mft (raw, json)
Hash identifier: T85sKvmIje4SIuNW/CAmuOi+Out4b1wgnHoAo31Q1rk=
Subject key identifier: 70:B8:E2:F5:31:53:BF:39:86:41:7A:E6:23:D3:69:B6:76:B6:4F:42
Authority key identifier: 71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
Certificate issuer: /CN=7194b2ffc8944fe135796028111cce73471ec37f
Certificate serial: 0197B70E4E329B7DC33E584134DEF58D7B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
Manifest number: 04AF
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: cZSy_8iUT-E1eWAoERzOc0cew38.crl (hash: VRWzLMsrhMED1yqcOQsWP3MrpAZy587JJugpyOYciRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4e:32:9b:7d:c3:3e:58:41:34:de:f5:8d:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7194b2ffc8944fe135796028111cce73471ec37f
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=70b8e2f53153bf3986417ae623d369b676b64f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:e3:bd:fb:6d:0a:99:49:63:d4:53:77:f4:
5e:8e:22:3f:d6:00:f1:02:40:ed:e6:39:7c:7c:51:
be:e3:8c:00:d1:9a:d3:38:d9:df:f8:68:99:02:df:
0b:e5:99:d8:90:09:6e:4c:98:db:2d:6c:42:88:78:
db:18:47:f9:91:53:9b:4d:dd:39:da:08:41:3d:f8:
27:01:9c:ec:06:87:51:8e:de:1f:b5:a0:79:e3:0e:
14:f5:cc:4e:06:5e:64:f2:13:a7:ea:be:da:51:8b:
58:e1:06:e6:1a:52:32:f1:96:b1:80:12:9d:88:68:
9f:46:52:86:0e:0c:64:52:3e:f9:05:43:95:c6:2f:
d0:53:24:58:34:44:81:3b:de:bf:38:4a:05:47:60:
b6:44:8b:78:fd:cf:3a:e1:89:a7:1a:ff:9b:c1:57:
86:3e:2d:06:3e:18:23:e4:48:b6:cb:05:5f:ab:a2:
da:77:24:39:54:d5:08:44:ba:81:63:5b:26:74:d5:
f7:be:21:b6:cf:00:16:4a:5f:2f:bc:77:14:98:11:
05:9e:f8:cb:4f:9c:cf:53:64:09:80:36:b7:ee:93:
7e:da:82:e4:1b:93:22:3a:ac:9d:a9:24:f1:57:24:
ef:2e:71:7a:66:9f:ff:37:ce:18:f9:d1:e3:d9:06:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B8:E2:F5:31:53:BF:39:86:41:7A:E6:23:D3:69:B6:76:B6:4F:42
X509v3 Authority Key Identifier:
keyid:71:94:B2:FF:C8:94:4F:E1:35:79:60:28:11:1C:CE:73:47:1E:C3:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSy_8iUT-E1eWAoERzOc0cew38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/1069ef-3dc1-444e-a7df-0eab8139b23a/1/cZSy_8iUT-E1eWAoERzOc0cew38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d5:bb:ce:e8:fa:77:06:f7:0c:ed:d5:6b:65:7f:e9:b2:39:
42:83:ff:5d:8e:cb:ca:f8:a3:0b:80:52:b5:0e:cd:fc:8b:14:
a6:7f:fd:b8:88:b7:f7:0b:c4:fd:1d:51:d7:73:2f:98:8b:8e:
b0:27:99:15:70:bb:1e:28:4e:b2:3f:16:12:7a:3f:1d:08:53:
7f:7f:11:ba:64:4d:c4:a0:31:96:54:c7:9e:34:2c:db:fd:59:
ef:4c:64:2e:6b:5a:8a:a9:f3:9e:fd:78:dc:13:29:e1:f2:15:
08:f1:42:d7:1b:e8:89:b2:ab:67:d9:2b:c5:95:01:03:35:61:
36:41:5c:46:38:64:aa:6b:53:a2:f6:a8:64:6f:67:e7:05:14:
32:a9:53:b8:72:6c:15:1b:d8:ea:f0:16:14:19:13:10:11:2b:
9e:61:62:d6:33:5c:8e:03:07:d8:16:54:22:d6:1a:89:94:01:
16:ba:fb:e2:a5:6c:6f:ec:28:df:fe:80:00:32:3a:a5:dc:80:
08:57:eb:ff:e9:e5:cb:47:9f:de:4c:1d:33:46:5b:36:58:b8:
3d:ff:03:2f:32:ad:65:e3:a6:86:2e:b1:42:d3:c6:c8:ce:59:
da:d9:f7:8d:1b:9d:d2:eb:6a:a9:21:7a:61:a8:4d:6b:59:d9:
c5:f8:03:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dk4ym33DPlhBNN71jXsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTRiMmZmYzg5NDRmZTEzNTc5NjAyODExMWNjZTczNDcx
ZWMzN2YwHhcNMjUwNjI4MTUwMDU3WhcNMjUwNjI5MTUwMDU3WjAzMTEwLwYDVQQD
Eyg3MGI4ZTJmNTMxNTNiZjM5ODY0MTdhZTYyM2QzNjliNjc2YjY0ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXbjvfttCplJY9RTd/RejiI/1gDx
AkDt5jl8fFG+44wA0ZrTONnf+GiZAt8L5ZnYkAluTJjbLWxCiHjbGEf5kVObTd05
2ghBPfgnAZzsBodRjt4ftaB54w4U9cxOBl5k8hOn6r7aUYtY4QbmGlIy8ZaxgBKd
iGifRlKGDgxkUj75BUOVxi/QUyRYNESBO96/OEoFR2C2RIt4/c864YmnGv+bwVeG
Pi0GPhgj5Ei2ywVfq6LadyQ5VNUIRLqBY1smdNX3viG2zwAWSl8vvHcUmBEFnvjL
T5zPU2QJgDa37pN+2oLkG5MiOqydqSTxVyTvLnF6Zp//N84Y+dHj2QZUyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC44vUxU785hkF65iPTabZ2tk9CMB8GA1UdIwQY
MBaAFHGUsv/IlE/hNXlgKBEcznNHHsN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pTeV84aVVULUUxZVdBb0VSek9jMGNldzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMDY5ZWYtM2RjMS00NDRlLWE3ZGYt
MGVhYjgxMzliMjNhLzEvY1pTeV84aVVULUUxZVdBb0VSek9jMGNldzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMDY5ZWYtM2RjMS00NDRlLWE3ZGYtMGVhYjgxMzliMjNh
LzEvY1pTeV84aVVULUUxZVdBb0VSek9jMGNldzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9W7zuj6
dwb3DO3Va2V/6bI5QoP/XY7LyvijC4BStQ7N/IsUpn/9uIi39wvE/R1R13MvmIuO
sCeZFXC7HihOsj8WEno/HQhTf38RumRNxKAxllTHnjQs2/1Z70xkLmtaiqnznv14
3BMp4fIVCPFC1xvoibKrZ9krxZUBAzVhNkFcRjhkqmtTovaoZG9n5wUUMqlTuHJs
FRvY6vAWFBkTEBErnmFi1jNcjgMH2BZUItYaiZQBFrr74qVsb+wo3/6AADI6pdyA
CFfr/+nly0ef3kwdM0ZbNli4Pf8DLzKtZeOmhi6xQtPGyM5Z2tn3jRud0utqqSF6
YahNa1nZxfgD4A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:26 2025 by rpki-client