Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: /EhT1P1Yj2GIv7wN5y+hpc9LR1IV4qFVVOdLZ67CH/s=
Subject key identifier: 22:C3:C5:25:56:2E:FE:A7:71:54:24:70:76:C8:64:ED:21:F9:F8:1C
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 0197B6A089765ADE9544A5E4608F4A6D9685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0F0C
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: CAb8kJ/Zpg3fCf5mJO6JJk1kl0rSKG/G0V01E+aGXkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:89:76:5a:de:95:44:a5:e4:60:8f:4a:6d:96:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=22c3c525562efea77154247076c864ed21f9f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:db:63:58:46:77:37:6f:dc:77:81:52:46:69:
0c:cd:6d:d7:21:b0:af:3b:5d:88:62:d3:86:ea:04:
00:70:6c:13:73:e0:b1:4e:53:ce:21:84:f2:e0:45:
ae:e9:fd:46:bc:bc:02:fc:f2:67:ad:57:c0:6b:5b:
2d:4c:83:75:91:c3:3d:12:1b:bc:e9:d6:74:28:ad:
b6:48:a4:db:b2:d2:eb:bb:97:0a:21:fe:3e:a0:3b:
ac:13:6a:9e:93:d0:33:02:4c:8b:70:07:e4:3e:e7:
cd:67:20:44:89:b8:51:14:2d:90:81:44:1c:18:38:
7f:6e:01:ff:5c:db:51:6d:46:09:b7:ac:a1:6e:31:
19:08:44:41:cf:87:62:00:94:7a:86:62:fa:7b:bb:
89:51:ae:7a:cf:8e:82:db:9b:5c:a7:90:70:e1:aa:
4e:ce:f7:6b:64:6c:60:33:b8:f4:f2:e0:af:90:90:
10:4d:e4:ff:d4:32:cb:87:f5:56:55:b6:f5:e0:b6:
49:05:01:bd:9a:ea:df:f2:05:95:0f:15:da:96:ad:
45:a9:f3:1e:4c:a6:43:4e:87:9e:3d:e9:26:a4:53:
4e:bf:a4:ea:b3:dc:f6:73:22:17:f6:07:a1:29:28:
6c:5f:4f:0e:37:78:ab:f2:73:33:0c:2b:2f:e9:ec:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:C5:25:56:2E:FE:A7:71:54:24:70:76:C8:64:ED:21:F9:F8:1C
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:88:ba:da:8f:a0:6b:50:e6:4a:b4:2c:d7:8e:ed:48:97:
6d:d0:aa:b0:11:0b:61:80:03:cc:36:bc:4f:08:5a:1e:c3:69:
d4:1f:80:75:8e:b7:af:b6:49:c8:dd:bf:8e:e6:76:23:43:e3:
97:22:da:f8:bf:a7:6c:e7:30:b8:43:2c:18:81:d6:70:ba:08:
51:14:f1:3b:fe:2b:26:75:ac:f2:ff:fa:b2:f5:6c:bc:1c:e9:
ad:82:ae:56:33:10:83:c3:85:08:b4:e5:0c:f6:20:e5:be:2a:
e2:4d:26:77:70:d2:e9:cc:02:e0:c8:e7:32:17:ac:6d:ca:4d:
83:58:2b:30:09:57:1d:8c:40:da:0c:ba:8a:c0:5b:f4:ce:f2:
fd:77:18:0e:c7:ff:88:e7:0a:70:12:1f:c8:c0:fd:8c:82:1b:
2a:77:48:95:02:61:6f:7f:59:d8:c8:13:c7:b4:3b:ae:57:38:
38:73:0c:69:06:6f:67:e2:8f:b1:7c:80:46:b7:e5:97:d2:ac:
a9:3e:84:fa:4e:d7:76:5f:21:df:f2:e5:10:42:a9:4c:5d:e4:
62:c7:8f:29:1f:ac:fc:43:ae:4b:79:97:33:e0:6b:1b:bc:ea:
fd:cb:fa:b9:2a:8e:19:80:12:5e:e0:fa:dc:b6:16:29:5d:8d:
01:04:2d:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIl2Wt6VRKXkYI9KbZaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTIwMmMwMWE4MjkwZWU5NTMyNWQzYTRmMzdmZjQwZTk5
NjQ4ZmEwHhcNMjUwNjI4MTMwMTAzWhcNMjUwNjI5MTMwMTAzWjAzMTEwLwYDVQQD
EygyMmMzYzUyNTU2MmVmZWE3NzE1NDI0NzA3NmM4NjRlZDIxZjlmODFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNtjWEZ3N2/cd4FSRmkMzW3XIbCv
O12IYtOG6gQAcGwTc+CxTlPOIYTy4EWu6f1GvLwC/PJnrVfAa1stTIN1kcM9Ehu8
6dZ0KK22SKTbstLru5cKIf4+oDusE2qek9AzAkyLcAfkPufNZyBEibhRFC2QgUQc
GDh/bgH/XNtRbUYJt6yhbjEZCERBz4diAJR6hmL6e7uJUa56z46C25tcp5Bw4apO
zvdrZGxgM7j08uCvkJAQTeT/1DLLh/VWVbb14LZJBQG9murf8gWVDxXalq1FqfMe
TKZDToeePekmpFNOv6Tqs9z2cyIX9gehKShsX08ON3ir8nMzDCsv6ezzEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLDxSVWLv6ncVQkcHbIZO0h+fgcMB8GA1UdIwQY
MBaAFM3iAsAagpDulTJdOk83/0Dplkj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYt
OTQzNzgyYzc5ZDBjLzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYtOTQzNzgyYzc5ZDBj
LzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIniIutqP
oGtQ5kq0LNeO7UiXbdCqsBELYYADzDa8TwhaHsNp1B+AdY63r7ZJyN2/juZ2I0Pj
lyLa+L+nbOcwuEMsGIHWcLoIURTxO/4rJnWs8v/6svVsvBzprYKuVjMQg8OFCLTl
DPYg5b4q4k0md3DS6cwC4MjnMhesbcpNg1grMAlXHYxA2gy6isBb9M7y/XcYDsf/
iOcKcBIfyMD9jIIbKndIlQJhb39Z2MgTx7Q7rlc4OHMMaQZvZ+KPsXyARrfll9Ks
qT6E+k7Xdl8h3/LlEEKpTF3kYsePKR+s/EOuS3mXM+BrG7zq/cv6uSqOGYASXuD6
3LYWKV2NAQQtMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:25 2025 by rpki-client