Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json)
Hash identifier: jH+BQ/uBKic1cNx0nUPlLJ10OMo4KU8GhSxPq9czdoE=
Subject key identifier: 41:B1:A3:43:D9:B1:56:B3:F7:A8:E2:00:27:F2:A8:2A:44:E3:2F:59
Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Certificate serial: 0198D660786180037C58D076DD82F8FB6B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
Manifest number: 01F4
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: r39WRJYINP7GQANsGjBHXGl/oBVf4DU0NxYLawUWGjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:78:61:80:03:7c:58:d0:76:dd:82:f8:fb:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=41b1a343d9b156b3f7a8e20027f2a82a44e32f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:a3:95:be:bf:3c:c5:26:98:74:69:fd:c0:
24:84:c7:8a:5b:25:2d:49:bd:0f:c7:27:c4:f6:de:
6e:05:c3:d8:cd:5a:37:2c:08:35:54:17:66:a2:4d:
f9:56:f9:77:d8:09:11:4e:83:90:46:51:70:e9:6c:
07:93:8d:9a:5f:e0:80:fe:a6:d8:53:1e:93:b0:a5:
09:45:d7:4c:3f:7c:11:87:27:32:40:59:1e:e7:f2:
68:74:61:f5:ce:9a:9f:88:ea:ce:b1:84:e2:6b:1c:
b4:5c:2c:b7:a2:c9:53:70:e1:d0:d7:72:9a:fd:7b:
54:9f:e4:14:f9:5e:40:56:37:5e:df:69:ad:c6:e0:
01:3d:f4:50:7a:eb:82:a3:2a:4f:c6:e2:31:e7:d4:
f4:16:da:c9:b1:45:6a:0b:5f:4c:30:ef:48:03:5a:
3f:0f:be:8a:9a:17:9a:b5:0e:6f:ef:30:7f:8a:89:
ce:ef:11:ae:19:50:56:c0:29:ef:7f:71:2d:f8:ef:
41:ea:e6:90:91:2a:50:fc:d6:6d:8b:3d:73:10:4e:
97:e6:3b:04:d5:a9:38:50:be:19:6c:fd:ac:76:71:
60:1f:c2:d4:e4:52:2d:7e:d9:23:18:98:c1:d9:c9:
b7:54:04:47:6b:67:5f:85:0c:7b:c3:4a:5a:b8:e1:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:A3:43:D9:B1:56:B3:F7:A8:E2:00:27:F2:A8:2A:44:E3:2F:59
X509v3 Authority Key Identifier:
keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:a7:70:fc:ab:fa:ca:a2:d9:64:ce:f3:d4:26:4b:57:e0:94:
e7:5f:3b:5b:bf:b2:ee:d4:11:a1:db:5c:19:b9:a7:da:48:6e:
df:7a:03:74:cd:80:93:f7:9c:0d:a1:3d:05:67:9a:62:2d:76:
54:65:e7:ea:a9:90:19:38:17:d4:94:19:a2:5d:2d:2e:7e:99:
dc:c9:b3:70:e1:10:ce:10:42:fe:17:46:fa:5e:7c:b0:c0:ab:
b6:51:13:e2:d7:58:7a:46:3a:ae:f9:f8:b2:52:f3:c9:52:ed:
fd:f3:1f:b2:8a:bb:af:36:f6:a1:ce:c7:5c:c1:bb:5f:09:7e:
31:16:ad:1b:e0:7e:eb:10:c0:98:9c:2b:9e:8f:fb:97:23:3d:
96:af:5c:07:8c:00:b8:01:e9:d9:a3:6c:93:44:8d:c1:33:c3:
69:7b:65:4a:79:d7:72:ad:61:19:6b:8c:92:fd:f1:34:2f:86:
4e:3c:12:a0:99:40:b1:73:8e:35:ad:38:b9:40:16:c6:8e:ad:
54:16:f1:fd:35:6b:96:a4:ae:09:79:43:42:22:70:1d:ee:8e:
04:a9:ca:6b:d7:ec:c7:a0:14:ea:78:3b:0d:94:a1:db:25:a8:
d7:fa:8f:4d:5d:7a:b8:61:eb:47:7f:64:f0:8b:77:10:f5:13:
be:04:87:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYHhhgAN8WNB23YL4+2tfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzExN2FlOWQ2YWUwZTFlNGEzOGI3NDlhYmJmOWQ5ZTQ5
MmMyODUwHhcNMjUwODIzMTAwMTQzWhcNMjUwODI0MTAwMTQzWjAzMTEwLwYDVQQD
Eyg0MWIxYTM0M2Q5YjE1NmIzZjdhOGUyMDAyN2YyYTgyYTQ0ZTMyZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsWjlb6/PMUmmHRp/cAkhMeKWyUt
Sb0PxyfE9t5uBcPYzVo3LAg1VBdmok35Vvl32AkRToOQRlFw6WwHk42aX+CA/qbY
Ux6TsKUJRddMP3wRhycyQFke5/JodGH1zpqfiOrOsYTiaxy0XCy3oslTcOHQ13Ka
/XtUn+QU+V5AVjde32mtxuABPfRQeuuCoypPxuIx59T0FtrJsUVqC19MMO9IA1o/
D76KmheatQ5v7zB/ionO7xGuGVBWwCnvf3Et+O9B6uaQkSpQ/NZtiz1zEE6X5jsE
1ak4UL4ZbP2sdnFgH8LU5FItftkjGJjB2cm3VARHa2dfhQx7w0pauOHEFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGxo0PZsVaz96jiACfyqCpE4y9ZMB8GA1UdIwQY
MBaAFP8xF66dauDh5KOLdJq7+dnkksKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmIt
NDcyYmUzZTdjOGQ0LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmItNDcyYmUzZTdjOGQ0
LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyqdw/Kv6
yqLZZM7z1CZLV+CU5187W7+y7tQRodtcGbmn2khu33oDdM2Ak/ecDaE9BWeaYi12
VGXn6qmQGTgX1JQZol0tLn6Z3MmzcOEQzhBC/hdG+l58sMCrtlET4tdYekY6rvn4
slLzyVLt/fMfsoq7rzb2oc7HXMG7Xwl+MRatG+B+6xDAmJwrno/7lyM9lq9cB4wA
uAHp2aNsk0SNwTPDaXtlSnnXcq1hGWuMkv3xNC+GTjwSoJlAsXOONa04uUAWxo6t
VBbx/TVrlqSuCXlDQiJwHe6OBKnKa9fsx6AU6ng7DZSh2yWo1/qPTV16uGHrR39k
8It3EPUTvgSHjA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:42 2025 by rpki-client