Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
File: z379uI0GEsUL1dfhZa94NPDdPwQ.mft (raw, json)
Hash identifier: DU3HqEsFFeNeuOR/ET9yzXhOSfCSCjJNdei+g5ZW3cU=
Subject key identifier: 26:D8:C7:6C:E7:A7:D7:BF:46:49:96:09:75:31:D8:1D:FA:A0:02:0E
Authority key identifier: CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
Certificate issuer: /CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Certificate serial: 0197C613C6E005270DFBB57B445B50BB5072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
Manifest number: 71
Signing time: Tue 01 Jul 2025 13:01:14 +0000
Manifest this update: Tue 01 Jul 2025 13:01:14 +0000
Manifest next update: Wed 02 Jul 2025 13:01:14 +0000
Files and hashes: 1: z379uI0GEsUL1dfhZa94NPDdPwQ.crl (hash: FD1eIFMGv+7BeDwfggzvTssi9zzZ78NYGgE3nHhbEDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:c6:e0:05:27:0d:fb:b5:7b:44:5b:50:bb:50:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7efdb88d0612c50bd5d7e165af7834f0dd3f04
Validity
Not Before: Jul 1 13:01:14 2025 GMT
Not After : Jul 2 13:01:14 2025 GMT
Subject: CN=26d8c76ce7a7d7bf464996097531d81dfaa0020e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d9:aa:8d:ab:e5:a7:a1:28:c7:2e:e8:39:2f:
fe:1c:ca:06:67:60:74:d7:7a:13:34:61:b6:b3:df:
ae:c3:a8:b4:20:81:0b:29:e0:b5:2f:d0:cb:09:62:
04:51:c8:bf:a9:72:fc:5c:7d:d2:cb:71:56:fb:18:
02:b3:6a:d3:ab:4c:c2:91:ac:15:d3:0c:bd:ce:61:
24:3f:ad:cd:9d:c7:21:2d:d8:d0:86:7c:a3:75:25:
41:a2:19:93:46:4d:a7:f5:bb:b5:90:1e:40:49:78:
bc:76:c7:a7:2b:f8:f9:3b:5e:4b:f6:b8:a7:b3:b6:
cc:68:4d:fa:a7:23:78:33:95:ed:09:c8:c2:f3:ea:
d9:76:10:06:99:4e:6c:6f:02:70:85:cb:bf:38:55:
09:06:59:51:1e:a4:b8:0a:19:94:d5:8d:aa:18:c0:
54:f3:f3:54:e2:de:f2:67:9a:20:9e:e1:b2:20:27:
84:59:17:40:7e:bc:32:25:b8:16:2d:d3:d8:07:5a:
0b:88:7d:d9:e8:b3:e7:a0:0b:62:7c:c0:e4:aa:bc:
17:23:d7:b1:9f:8a:89:1a:10:b1:d1:69:f0:4f:29:
9a:69:b1:32:e9:74:33:fe:a5:18:59:59:cd:33:cb:
9d:ef:f1:7e:98:23:29:7d:d3:04:23:be:17:99:7b:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D8:C7:6C:E7:A7:D7:BF:46:49:96:09:75:31:D8:1D:FA:A0:02:0E
X509v3 Authority Key Identifier:
keyid:CF:7E:FD:B8:8D:06:12:C5:0B:D5:D7:E1:65:AF:78:34:F0:DD:3F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z379uI0GEsUL1dfhZa94NPDdPwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fe224f-25fa-420c-89af-7bcea3d38450/1/z379uI0GEsUL1dfhZa94NPDdPwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:39:8d:9f:b6:82:37:1a:c0:3f:c1:25:3c:c3:84:e9:3f:b0:
b3:b7:b8:16:09:91:f9:70:4d:6d:a4:22:5f:37:f3:ab:fc:cd:
78:6d:1c:8b:d3:c4:65:3a:3a:a0:ad:0f:08:e0:68:32:1a:3e:
71:6a:c0:57:e9:29:22:33:91:f0:19:fd:cc:8f:d8:4c:9b:40:
4e:7e:84:c4:b8:da:ea:9d:04:a0:60:24:88:0d:9b:9e:3b:e0:
13:86:d4:f9:4c:f9:de:85:60:8a:a9:3d:24:87:c4:4e:c0:64:
ca:b0:82:27:42:d2:1a:21:fd:67:be:60:32:b7:a5:82:25:7a:
89:2d:a5:9d:98:22:f9:39:ee:d5:18:c1:60:e6:cf:a8:ef:90:
3b:09:ae:32:36:cf:e4:d3:bb:11:48:04:92:b8:17:7b:12:b9:
d1:e5:b7:c9:92:44:b8:a2:d6:a4:fe:fb:f8:4d:e8:67:5d:ad:
da:7f:dc:64:f4:fd:45:92:b5:7e:1d:68:d8:fc:6f:8e:25:4b:
a1:bb:a0:36:64:13:3c:7d:79:b5:6a:29:f8:b1:f4:a5:1c:fa:
dd:d8:05:f4:94:09:87:74:95:37:d1:35:59:5b:42:0a:71:6f:
77:98:00:d2:08:c8:33:49:bf:b2:42:64:7d:7d:4b:f5:32:08:
08:df:7e:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGE8bgBScN+7V7RFtQu1ByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2VmZGI4OGQwNjEyYzUwYmQ1ZDdlMTY1YWY3ODM0ZjBk
ZDNmMDQwHhcNMjUwNzAxMTMwMTE0WhcNMjUwNzAyMTMwMTE0WjAzMTEwLwYDVQQD
EygyNmQ4Yzc2Y2U3YTdkN2JmNDY0OTk2MDk3NTMxZDgxZGZhYTAwMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdmqjavlp6Eoxy7oOS/+HMoGZ2B0
13oTNGG2s9+uw6i0IIELKeC1L9DLCWIEUci/qXL8XH3Sy3FW+xgCs2rTq0zCkawV
0wy9zmEkP63NncchLdjQhnyjdSVBohmTRk2n9bu1kB5ASXi8dsenK/j5O15L9rin
s7bMaE36pyN4M5XtCcjC8+rZdhAGmU5sbwJwhcu/OFUJBllRHqS4ChmU1Y2qGMBU
8/NU4t7yZ5ognuGyICeEWRdAfrwyJbgWLdPYB1oLiH3Z6LPnoAtifMDkqrwXI9ex
n4qJGhCx0WnwTymaabEy6XQz/qUYWVnNM8ud7/F+mCMpfdMEI74XmXuzPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbYx2znp9e/RkmWCXUx2B36oAIOMB8GA1UdIwQY
MBaAFM9+/biNBhLFC9XX4WWveDTw3T8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYt
N2JjZWEzZDM4NDUwLzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mZTIyNGYtMjVmYS00MjBjLTg5YWYtN2JjZWEzZDM4NDUw
LzEvejM3OXVJMEdFc1VMMWRmaFphOTROUERkUHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjmNn7aC
NxrAP8ElPMOE6T+ws7e4FgmR+XBNbaQiXzfzq/zNeG0ci9PEZTo6oK0PCOBoMho+
cWrAV+kpIjOR8Bn9zI/YTJtATn6ExLja6p0EoGAkiA2bnjvgE4bU+Uz53oVgiqk9
JIfETsBkyrCCJ0LSGiH9Z75gMrelgiV6iS2lnZgi+Tnu1RjBYObPqO+QOwmuMjbP
5NO7EUgEkrgXexK50eW3yZJEuKLWpP77+E3oZ12t2n/cZPT9RZK1fh1o2PxvjiVL
obugNmQTPH15tWop+LH0pRz63dgF9JQJh3SVN9E1WVtCCnFvd5gA0gjIM0m/skJk
fX1L9TIICN9+2g==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:02:01 2025 by rpki-client