Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: o/n44SkLdQqqIhOThh5Clmr3oM0z1LFryTX1LWQlCqM=
Subject key identifier: DC:DB:09:D1:96:73:42:5E:E5:6E:83:D1:3D:E5:FE:02:E7:2B:98:DB
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 0197B7EA38A295066C270F3A22741A739314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 0892
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: 74Pv5K5tAg24knyREiVmNOfSelN5Qy7+qu6X6SBdi+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:38:a2:95:06:6c:27:0f:3a:22:74:1a:73:93:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=dcdb09d19673425ee56e83d13de5fe02e72b98db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:5b:d1:8c:d0:5b:ed:77:20:97:da:f1:44:
e2:2f:87:0d:57:62:5a:ca:ea:f0:05:37:34:e5:76:
5b:90:4b:7f:e2:0b:3e:9b:58:2c:28:a6:1a:6d:99:
01:1d:5e:27:4c:4a:7d:75:03:50:b2:f1:5c:63:bd:
8a:34:27:12:b2:5d:26:00:05:36:37:09:53:bb:b8:
bf:5f:54:7c:c2:ff:c3:d5:d9:08:02:5d:10:a4:03:
6d:84:fe:04:dc:d4:e6:99:56:db:ba:3d:6e:0f:b4:
bf:1e:df:b3:75:e8:4a:40:fe:2f:e9:7d:1a:f1:ae:
64:51:04:63:2e:4a:36:f2:ad:03:f6:c8:76:0b:25:
d3:2e:84:a1:75:a3:84:8e:56:f2:74:77:ce:09:bd:
ed:94:01:c6:72:0e:b7:cd:70:ca:81:55:20:00:8f:
c0:90:ec:61:a3:0a:0f:cf:87:cd:ca:7e:66:0b:f5:
7e:2f:4a:f8:df:cb:a2:76:b7:cf:4c:8d:5e:f2:7e:
3e:1f:95:38:2e:0a:d9:04:35:d2:f8:b2:b9:ba:c3:
35:df:4a:3d:f3:ee:39:f5:1b:8c:ad:0e:5c:81:3d:
b3:fd:e1:37:27:58:30:06:31:fc:df:8c:62:1c:79:
43:1f:8a:1c:a6:e6:a4:89:eb:d2:06:d0:02:90:09:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:09:D1:96:73:42:5E:E5:6E:83:D1:3D:E5:FE:02:E7:2B:98:DB
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f0:d1:ee:3f:95:d8:c3:2c:1e:42:cd:81:bb:8d:18:fd:10:
72:37:47:73:85:99:fc:65:80:89:80:72:e7:97:d0:d6:15:e4:
ec:99:16:3f:fa:b3:96:70:aa:eb:fa:fb:96:05:d6:39:c3:38:
b0:87:2a:74:bd:57:65:c5:f2:c0:5c:56:01:1b:95:b1:fc:68:
3d:c5:ac:34:52:48:60:e2:26:8f:bf:5b:fe:73:58:54:34:b3:
7a:69:f4:ca:e0:ab:bb:b0:c2:ef:05:36:c1:4d:39:33:3b:2a:
42:36:63:76:d0:9f:66:e8:7e:01:64:de:5e:be:7b:61:c2:48:
89:94:ee:f6:95:36:75:6f:ea:ba:22:c4:ea:37:01:9d:ea:f7:
39:eb:f2:e7:50:0a:61:d8:56:a9:e6:cf:85:2a:61:da:ab:dd:
f3:9b:d4:47:72:ae:18:bb:e4:63:01:6a:dc:f6:74:ff:10:2a:
40:ce:03:ff:02:2e:1e:17:c4:89:82:95:6e:98:19:43:ec:7e:
f0:d1:90:66:8e:ed:95:1a:9e:35:6e:ff:ad:ca:db:e6:e6:2f:
ed:cd:bd:17:ca:11:20:ce:03:c7:4c:01:99:87:db:f3:7d:0c:
ce:48:03:6a:aa:3d:25:1e:5f:ef:85:71:a2:8d:3e:e1:0a:04:
62:53:e4:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36jiilQZsJw86InQac5MUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmUzZDFmZmY5YmQ1NDc5YTEzMzBmODhmYTJlYzA3YzBl
YWVjNDkwHhcNMjUwNjI4MTkwMTA5WhcNMjUwNjI5MTkwMTA5WjAzMTEwLwYDVQQD
EyhkY2RiMDlkMTk2NzM0MjVlZTU2ZTgzZDEzZGU1ZmUwMmU3MmI5OGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJNb0YzQW+13IJfa8UTiL4cNV2Ja
yurwBTc05XZbkEt/4gs+m1gsKKYabZkBHV4nTEp9dQNQsvFcY72KNCcSsl0mAAU2
NwlTu7i/X1R8wv/D1dkIAl0QpANthP4E3NTmmVbbuj1uD7S/Ht+zdehKQP4v6X0a
8a5kUQRjLko28q0D9sh2CyXTLoShdaOEjlbydHfOCb3tlAHGcg63zXDKgVUgAI/A
kOxhowoPz4fNyn5mC/V+L0r438uidrfPTI1e8n4+H5U4LgrZBDXS+LK5usM130o9
8+459RuMrQ5cgT2z/eE3J1gwBjH834xiHHlDH4ocpuakievSBtACkAkP0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzbCdGWc0Je5W6D0T3l/gLnK5jbMB8GA1UdIwQY
MBaAFM8uPR//m9VHmhMw+I+i7AfA6uxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMt
NTMxMjM1ZTU1YjIzLzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMtNTMxMjM1ZTU1YjIz
LzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvDR7j+V
2MMsHkLNgbuNGP0QcjdHc4WZ/GWAiYBy55fQ1hXk7JkWP/qzlnCq6/r7lgXWOcM4
sIcqdL1XZcXywFxWARuVsfxoPcWsNFJIYOImj79b/nNYVDSzemn0yuCru7DC7wU2
wU05MzsqQjZjdtCfZuh+AWTeXr57YcJIiZTu9pU2dW/quiLE6jcBner3Oevy51AK
YdhWqebPhSph2qvd85vUR3KuGLvkYwFq3PZ0/xAqQM4D/wIuHhfEiYKVbpgZQ+x+
8NGQZo7tlRqeNW7/rcrb5uYv7c29F8oRIM4Dx0wBmYfb830MzkgDaqo9JR5f74Vx
oo0+4QoEYlPk2Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:30 2025 by rpki-client