Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: Y/j0KjW7JnqZH68ifuGTQMjCWN4hl1Y/4e9L3aEzqjA=
Subject key identifier: 6F:8C:67:47:FA:FD:85:73:1B:F6:5E:D9:D0:4B:4E:71:2E:04:A3:5D
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 0198D6612218DF876DF43013A5799BEEDC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: TQ4gd7PnzgTZT6dRgoqaO0z4YzxWpzOvlSUEpRBythk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:22:18:df:87:6d:f4:30:13:a5:79:9b:ee:dc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=6f8c6747fafd85731bf65ed9d04b4e712e04a35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:70:d9:6c:4c:1e:94:6e:c6:ce:68:4b:4e:
05:28:25:2f:00:ec:71:c6:b5:1d:af:70:00:cf:1f:
08:d4:9d:c0:93:16:31:16:27:4f:b7:cb:f9:b5:69:
cd:52:54:b2:f9:7f:5f:b3:0e:c1:29:bd:e2:b5:b8:
c4:57:79:6c:b0:80:77:e1:4f:e6:42:54:43:5c:2b:
e8:2a:c0:c4:6b:31:4e:e1:2c:ed:2e:d3:e6:ad:79:
81:81:99:5a:c0:84:17:70:e8:3d:5f:bd:85:90:bb:
09:10:53:1f:18:4d:8d:21:13:4c:00:9c:41:eb:71:
9a:a4:f6:e2:e2:29:8e:58:22:df:ff:52:20:06:a1:
e8:ec:4b:4f:8b:be:c1:6b:69:41:a8:e8:6c:61:d1:
05:28:de:96:25:1f:37:52:83:9a:f3:56:67:97:a5:
10:e3:b3:52:a0:63:5f:c8:db:31:17:35:35:72:a3:
72:5c:9b:12:ce:82:7e:6c:3b:d0:40:7c:c0:5b:db:
f0:fa:39:11:c8:cf:60:d5:89:37:50:89:05:3c:cf:
98:0a:95:81:3d:26:d3:64:01:ee:85:ef:0b:03:f8:
5f:2b:6f:dd:2c:6b:1a:28:c9:62:cd:ff:c4:de:90:
ff:6d:a2:48:df:e3:4d:42:9a:a6:31:b5:c2:aa:d3:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:67:47:FA:FD:85:73:1B:F6:5E:D9:D0:4B:4E:71:2E:04:A3:5D
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6a:9f:9f:fa:af:b8:72:9d:31:f2:10:95:6f:c5:36:2f:4c:
bc:65:ab:24:2e:8f:fc:9f:9d:25:54:72:48:e9:44:f8:23:f1:
48:3f:a6:10:d8:57:88:d5:e2:aa:89:11:3e:ca:16:ba:c0:15:
1d:b8:f8:71:30:ea:b5:eb:b2:c2:dd:78:2e:2d:38:fd:66:ed:
b9:a0:e1:67:9a:00:1e:b4:bd:19:17:12:5a:d7:b6:d3:c2:e2:
1f:2c:7f:e7:71:d4:4a:27:9c:15:1e:30:4e:b1:14:93:d4:59:
c3:b5:af:de:11:36:62:35:62:71:a9:35:e0:cb:25:b1:11:83:
c0:d6:ec:ef:d6:0c:59:a9:4d:63:cc:9f:9c:fa:d6:9d:c6:85:
8c:62:24:3f:74:0e:05:67:99:d5:67:41:d4:36:e4:c2:08:7b:
52:a9:97:90:47:61:90:96:0c:91:00:0a:62:9c:92:05:f5:b4:
1d:d7:b8:25:d2:f8:02:42:67:97:4d:0e:16:23:dd:8e:f7:51:
03:c2:b8:7e:6d:eb:e4:ea:ec:53:c9:7a:59:4f:88:cc:b4:ea:
4b:13:ea:e3:58:11:0d:86:f2:90:5b:56:a8:56:fe:c1:d2:96:
0a:d9:8d:81:4d:19:78:27:bd:f1:49:69:07:36:94:59:58:ad:
5e:88:63:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYSIY34dt9DATpXmb7twEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2VmZGI4OGQwNjEyYzUwYmQ1ZDdlMTY1YWY3ODM0ZjBk
ZDNmMDQwHhcNMjUwODIzMTAwMjI2WhcNMjUwODI0MTAwMjI2WjAzMTEwLwYDVQQD
Eyg2ZjhjNjc0N2ZhZmQ4NTczMWJmNjVlZDlkMDRiNGU3MTJlMDRhMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHtw2WxMHpRuxs5oS04FKCUvAOxx
xrUdr3AAzx8I1J3AkxYxFidPt8v5tWnNUlSy+X9fsw7BKb3itbjEV3lssIB34U/m
QlRDXCvoKsDEazFO4SztLtPmrXmBgZlawIQXcOg9X72FkLsJEFMfGE2NIRNMAJxB
63GapPbi4imOWCLf/1IgBqHo7EtPi77Ba2lBqOhsYdEFKN6WJR83UoOa81Znl6UQ
47NSoGNfyNsxFzU1cqNyXJsSzoJ+bDvQQHzAW9vw+jkRyM9g1Yk3UIkFPM+YCpWB
PSbTZAHuhe8LA/hfK2/dLGsaKMlizf/E3pD/baJI3+NNQpqmMbXCqtOOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+MZ0f6/YVzG/Ze2dBLTnEuBKNdMB8GA1UdIwQY
MBaAFM9+/biNBhLFC9XX4WWveDTw3T8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYt
N2JjZWEzZDM4NDUwLzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYtN2JjZWEzZDM4NDUw
LzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGqfn/qv
uHKdMfIQlW/FNi9MvGWrJC6P/J+dJVRySOlE+CPxSD+mENhXiNXiqokRPsoWusAV
Hbj4cTDqteuywt14Li04/WbtuaDhZ5oAHrS9GRcSWte208LiHyx/53HUSiecFR4w
TrEUk9RZw7Wv3hE2YjVicak14MslsRGDwNbs79YMWalNY8yfnPrWncaFjGIkP3QO
BWeZ1WdB1Dbkwgh7UqmXkEdhkJYMkQAKYpySBfW0Hde4JdL4AkJnl00OFiPdjvdR
A8K4fm3r5OrsU8l6WU+IzLTqSxPq41gRDYbykFtWqFb+wdKWCtmNgU0ZeCe98Ulp
BzaUWVitXohj0A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:52 2025 by rpki-client