Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File: C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier: jOnHjIl6A8HYHDMOlZX+eBi49xxXYWQ5vqINX5St3M8=
Subject key identifier: DE:A4:E8:B2:73:B6:EE:E7:26:41:66:C5:16:10:16:10:CA:91:66:4B
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer: /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial: 0198D5BC32C198C66933718F22662220D292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number: 0C5C
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: ZKjX+3TB1YDEika/D4mM/r2OZtjisxFanCAHk2MwOhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:32:c1:98:c6:69:33:71:8f:22:66:22:20:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=dea4e8b273b6eee7264166c516101610ca91664b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:f0:ad:0f:29:5b:98:c4:62:18:5a:f1:c4:
c4:f6:77:d4:0f:e1:61:f2:66:ed:e9:57:6e:64:42:
12:2b:5e:6e:ce:9b:5e:91:31:f7:31:02:6e:29:61:
bf:d3:a4:aa:30:c8:e2:89:66:51:b8:f4:12:96:ac:
cd:c2:a8:71:5e:a9:99:9d:34:11:5c:ed:8a:20:71:
13:7d:f7:70:ac:03:0b:50:34:ff:05:a4:dd:bc:de:
73:44:11:83:34:76:d5:5f:3c:a0:d6:3a:b4:7b:6e:
30:7a:c7:d8:08:47:6e:f9:e8:16:c7:50:ca:f7:32:
10:2b:9d:a4:33:21:35:30:56:75:90:a1:86:88:b7:
2d:f5:a4:e2:ff:12:fe:f7:84:0d:b4:d8:d5:f4:d2:
55:83:52:3f:e2:dc:95:b7:a5:bc:bb:d9:bd:29:04:
22:1b:b6:07:16:e4:24:e8:3c:54:73:4b:ee:fd:22:
ff:c8:60:13:37:fe:e1:0f:91:47:a4:f2:4a:92:97:
95:db:bf:a6:2a:fb:5b:40:8c:91:46:84:78:f5:47:
9b:27:23:d5:9e:cb:a3:88:42:35:e6:37:b5:6d:da:
1c:06:88:ae:9e:f2:b2:0d:79:cf:52:f6:a1:ec:7d:
f6:60:f6:4a:9d:a9:41:13:c9:c7:ef:70:0f:58:3b:
f8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:E8:B2:73:B6:EE:E7:26:41:66:C5:16:10:16:10:CA:91:66:4B
X509v3 Authority Key Identifier:
keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5e:b0:18:97:a2:73:49:15:f3:30:59:20:e0:37:a8:83:66:
b5:ab:95:9b:bc:16:72:e1:33:67:0c:d4:15:42:10:12:b4:5f:
11:24:1d:98:c9:0a:ab:a8:e3:f5:d4:8e:d9:15:c6:2e:b7:ca:
0e:22:f4:b8:8d:e9:1c:28:95:bf:a8:5e:5a:f1:51:9c:eb:b6:
b3:9a:77:cf:0c:2d:eb:67:63:58:75:5e:08:66:5f:8a:97:f6:
72:84:30:28:c6:c7:92:20:6a:f0:a5:9d:21:42:bf:f6:0f:3b:
68:df:db:5d:7c:41:78:5f:9f:78:97:92:c2:f4:cb:71:21:bb:
a4:cc:8f:44:a1:19:0f:bf:62:40:0c:3f:48:5e:54:67:75:ac:
07:bb:f9:0d:20:94:26:bf:3a:9e:a2:d6:5a:d3:24:a7:80:a2:
8c:65:59:c9:19:8d:e8:46:df:0b:c8:51:0d:93:30:41:ab:f1:
82:a3:bd:54:89:38:b6:4d:ef:38:1f:3b:74:b9:3e:fd:22:29:
48:af:98:df:d1:42:d1:2e:f3:f1:f9:ea:60:28:a9:41:25:b5:
de:41:b1:f4:f2:0f:c3:17:25:71:08:22:e2:d9:d3:b1:18:95:
b1:63:bd:a8:fd:ce:43:2a:49:cd:ae:2c:ea:46:05:29:f7:3f:
52:63:49:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDLBmMZpM3GPImYiINKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTY3MzlkNGFmMjA5ODU5NzE5MGFhMDkyODMwZGVhOWMx
N2E3MDAwHhcNMjUwODIzMDcwMjE3WhcNMjUwODI0MDcwMjE3WjAzMTEwLwYDVQQD
EyhkZWE0ZThiMjczYjZlZWU3MjY0MTY2YzUxNjEwMTYxMGNhOTE2NjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRbwrQ8pW5jEYhha8cTE9nfUD+Fh
8mbt6VduZEISK15uzptekTH3MQJuKWG/06SqMMjiiWZRuPQSlqzNwqhxXqmZnTQR
XO2KIHETffdwrAMLUDT/BaTdvN5zRBGDNHbVXzyg1jq0e24wesfYCEdu+egWx1DK
9zIQK52kMyE1MFZ1kKGGiLct9aTi/xL+94QNtNjV9NJVg1I/4tyVt6W8u9m9KQQi
G7YHFuQk6DxUc0vu/SL/yGATN/7hD5FHpPJKkpeV27+mKvtbQIyRRoR49UebJyPV
nsujiEI15je1bdocBoiunvKyDXnPUvah7H32YPZKnalBE8nH73APWDv4xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6k6LJztu7nJkFmxRYQFhDKkWZLMB8GA1UdIwQY
MBaAFAumc51K8gmFlxkKoJKDDeqcF6cAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYt
YTQzYWVjNjIzMmFhLzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yZWM1YjItNDZmNi00MTFiLWI5MGYtYTQzYWVjNjIzMmFh
LzEvQzZaem5VcnlDWVdYR1FxZ2tvTU42cHdYcHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj16wGJei
c0kV8zBZIOA3qINmtauVm7wWcuEzZwzUFUIQErRfESQdmMkKq6jj9dSO2RXGLrfK
DiL0uI3pHCiVv6heWvFRnOu2s5p3zwwt62djWHVeCGZfipf2coQwKMbHkiBq8KWd
IUK/9g87aN/bXXxBeF+feJeSwvTLcSG7pMyPRKEZD79iQAw/SF5UZ3WsB7v5DSCU
Jr86nqLWWtMkp4CijGVZyRmN6EbfC8hRDZMwQavxgqO9VIk4tk3vOB87dLk+/SIp
SK+Y39FC0S7z8fnqYCipQSW13kGx9PIPwxclcQgi4tnTsRiVsWO9qP3OQypJza4s
6kYFKfc/UmNJBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:01 2025 by rpki-client