Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json)
Hash identifier: oXgR1ZgRwtlCfa5KX6WxG3/GEQYqIbMQN4dKKyZxliQ=
Subject key identifier: A3:DC:00:79:67:C7:83:83:F2:17:99:42:A0:00:83:D5:83:21:66:83
Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Certificate serial: 0197B6A0FAE39F3FFE210A4C93D548379C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
Manifest number: 1063
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: ZOI4UTNozGwJXr/63vsQivWYlevmvmEf/CfDAvejnfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fa:e3:9f:3f:fe:21:0a:4c:93:d5:48:37:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=a3dc007967c78383f2179942a00083d583216683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5a:c1:b2:fa:b4:96:db:d4:6f:12:24:2c:76:
64:75:0d:c9:94:79:01:a7:7b:b6:0d:8a:d4:15:77:
11:86:8d:02:59:bc:ac:7a:d3:61:ec:ac:b3:71:4c:
82:27:3e:82:d3:2d:6c:cd:0e:37:1d:2d:21:01:a6:
bf:81:c4:0c:e7:81:d2:23:21:55:10:61:e3:f6:81:
db:63:d7:2a:ee:ba:9c:e0:c5:fe:5d:8d:8c:67:48:
11:89:44:9b:b1:10:68:a9:f6:03:2f:3c:cf:90:6a:
fc:47:98:f0:8c:7a:d2:66:87:02:3b:99:45:91:fa:
da:3c:a8:ab:c9:fd:6f:70:60:9d:d6:37:41:27:82:
fd:8b:18:5f:04:2b:33:85:d8:a5:de:a5:dd:e4:49:
94:5c:51:3c:91:61:25:42:71:33:35:3d:c5:a0:5e:
70:cc:d9:e7:82:47:67:a7:04:27:cf:e6:9c:3e:37:
20:3d:c1:d2:5e:18:2c:fe:d3:e2:01:58:2b:07:cc:
59:32:68:86:1c:41:e3:bd:e9:3c:89:e4:cd:8e:40:
db:57:55:79:7c:fa:22:1e:05:a0:dd:59:c4:d7:54:
2a:df:6d:25:ed:b8:26:0d:a8:44:5e:0e:0f:23:30:
24:e6:69:3c:fd:11:b2:0d:68:a6:75:bc:91:73:a1:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DC:00:79:67:C7:83:83:F2:17:99:42:A0:00:83:D5:83:21:66:83
X509v3 Authority Key Identifier:
keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:27:40:67:dc:a5:0e:e8:5b:51:aa:99:1d:48:4d:25:13:a4:
8c:0c:f0:51:aa:76:4f:53:0d:b6:46:66:f9:1a:34:2a:ca:54:
c8:e4:67:2b:f1:f5:5e:dd:79:2d:02:74:ba:b7:b0:82:9a:9d:
0b:aa:24:3a:ee:e0:ee:12:22:80:e4:b6:d3:4b:66:66:7c:96:
5e:f6:0d:ff:e1:83:d9:33:ef:8c:73:45:64:cd:65:bf:6a:d1:
53:4c:9a:f5:3c:0b:3d:6f:8d:be:9c:91:df:e0:f1:c3:64:37:
da:93:4f:61:cc:2f:aa:3f:eb:df:db:72:ac:b8:e3:65:9f:ab:
79:b9:b8:a2:a2:24:22:e2:d2:c8:71:f4:cc:5e:7e:2a:47:f3:
c5:df:7c:2a:19:04:33:d3:8c:a7:a5:bf:2c:67:1d:d6:c3:f4:
56:69:a3:7c:a3:ab:5a:92:d8:93:b0:92:e4:cf:82:f9:a5:0a:
b4:a4:40:81:4f:44:f8:f5:5a:54:ef:ab:75:1e:a1:1b:9f:79:
47:93:a5:77:16:01:44:de:1e:43:33:e0:76:45:c0:c2:2e:8b:
e3:71:52:fe:ce:27:07:f6:b6:9b:ca:25:bc:36:0a:da:4d:d1:
69:91:98:94:99:3e:42:af:8c:02:6b:bb:9f:e3:a2:74:4a:cf:
8b:d0:78:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPrjnz/+IQpMk9VIN5yPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmJmNjBlYjA4ZjFlMjNhYmE4YmE3OTdjMTE3MjQ0NGNl
MTViNzEwHhcNMjUwNjI4MTMwMTMyWhcNMjUwNjI5MTMwMTMyWjAzMTEwLwYDVQQD
EyhhM2RjMDA3OTY3Yzc4MzgzZjIxNzk5NDJhMDAwODNkNTgzMjE2NjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlrBsvq0ltvUbxIkLHZkdQ3JlHkB
p3u2DYrUFXcRho0CWbysetNh7KyzcUyCJz6C0y1szQ43HS0hAaa/gcQM54HSIyFV
EGHj9oHbY9cq7rqc4MX+XY2MZ0gRiUSbsRBoqfYDLzzPkGr8R5jwjHrSZocCO5lF
kfraPKiryf1vcGCd1jdBJ4L9ixhfBCszhdil3qXd5EmUXFE8kWElQnEzNT3FoF5w
zNnngkdnpwQnz+acPjcgPcHSXhgs/tPiAVgrB8xZMmiGHEHjvek8ieTNjkDbV1V5
fPoiHgWg3VnE11Qq320l7bgmDahEXg4PIzAk5mk8/RGyDWimdbyRc6GAWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPcAHlnx4OD8heZQqAAg9WDIWaDMB8GA1UdIwQY
MBaAFM1r9g6wjx4jq6i6eXwRckRM4VtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUt
MmEwNzIyYWUxNjQ0LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUtMmEwNzIyYWUxNjQ0
LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARidAZ9yl
DuhbUaqZHUhNJROkjAzwUap2T1MNtkZm+Ro0KspUyORnK/H1Xt15LQJ0urewgpqd
C6okOu7g7hIigOS200tmZnyWXvYN/+GD2TPvjHNFZM1lv2rRU0ya9TwLPW+NvpyR
3+Dxw2Q32pNPYcwvqj/r39tyrLjjZZ+rebm4oqIkIuLSyHH0zF5+Kkfzxd98KhkE
M9OMp6W/LGcd1sP0VmmjfKOrWpLYk7CS5M+C+aUKtKRAgU9E+PVaVO+rdR6hG595
R5OldxYBRN4eQzPgdkXAwi6L43FS/s4nB/a2m8olvDYK2k3RaZGYlJk+Qq+MAmu7
n+OidErPi9B4zQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:04 2025 by rpki-client