Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: uC+L23ynt5VV1fUL6VMgmHYzzlTNEkJleCk6B92qVxM=
Subject key identifier: 4A:FE:66:6B:FD:2C:A2:D6:CD:28:14:1C:A0:3A:1C:F2:D7:2A:B2:5A
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 0197B7EACB908544615C5877FD8314AF4184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 14CF
Signing time: Sat 28 Jun 2025 19:01:47 +0000
Manifest this update: Sat 28 Jun 2025 19:01:47 +0000
Manifest next update: Sun 29 Jun 2025 19:01:47 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: fKDboN/6nYSkBr7DaVmIfAXLoDmDdnLb0k+aqfzhAkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:cb:90:85:44:61:5c:58:77:fd:83:14:af:41:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Jun 28 19:01:47 2025 GMT
Not After : Jun 29 19:01:47 2025 GMT
Subject: CN=4afe666bfd2ca2d6cd28141ca03a1cf2d72ab25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:59:6f:7a:ed:4b:92:99:65:f8:59:91:42:
ad:c8:cb:c2:47:f2:31:c0:e3:fd:c9:77:60:f5:7c:
83:19:70:f1:b8:76:2c:02:fa:8e:9f:29:73:20:84:
4a:76:8d:4c:9e:7a:dc:d5:fd:81:7b:4e:dc:65:f4:
fe:b5:a9:81:8d:82:3c:3b:19:83:64:1f:5a:e0:59:
8c:10:71:bc:4f:b0:db:1a:f0:2a:23:b4:92:66:80:
6a:1e:ed:de:a7:50:75:e8:08:fb:ae:76:ca:19:68:
a1:17:ec:6b:79:e0:b9:d5:1b:f0:c4:37:87:39:e5:
d7:81:4a:31:14:2a:3c:58:2d:6f:76:d2:29:8a:0e:
6a:50:30:8d:00:55:f3:9b:90:9c:27:6c:6e:84:3c:
46:93:ed:99:4f:e3:7f:34:4e:4b:eb:cd:da:55:42:
40:a8:24:f7:53:34:9e:88:d4:23:f7:60:73:d2:0c:
58:a1:0e:3e:26:7b:99:25:e4:47:5a:f3:e1:7b:41:
af:75:4f:82:a4:24:f2:55:a8:32:35:b0:5c:c0:7a:
c4:fd:4c:d3:df:b7:79:9a:94:68:6d:29:b3:33:0b:
d1:fc:13:7c:19:25:f2:f2:a9:c4:98:c9:2c:a2:b6:
44:01:6c:99:56:88:e1:49:40:bf:31:13:b8:df:b9:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:66:6B:FD:2C:A2:D6:CD:28:14:1C:A0:3A:1C:F2:D7:2A:B2:5A
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:16:81:76:c6:07:13:76:bd:91:f1:d7:6c:91:a2:56:60:fa:
55:67:f1:34:3e:b5:6a:11:f8:77:60:4b:cf:00:d5:05:2b:26:
80:cd:9b:73:e8:0c:4f:44:4d:b4:b1:05:d6:10:1d:6e:80:08:
c7:2c:c6:79:6c:4f:58:ab:e5:73:e1:d9:51:4a:5b:e1:1e:de:
b8:ba:e6:07:0e:49:6e:a7:79:70:19:a3:ce:a6:71:1a:25:be:
4d:34:0f:66:8b:f1:fb:7d:b0:70:d7:a7:7f:70:08:33:a3:19:
39:65:af:70:76:85:60:3d:cd:75:32:95:dd:59:94:6d:be:78:
b3:08:0e:03:c0:29:b4:3c:ec:70:90:79:12:66:89:f8:6f:d3:
17:aa:01:42:75:7c:94:1c:ee:10:d4:67:ac:c4:1f:19:31:31:
21:32:f6:50:01:58:b8:da:f8:f7:7f:1c:82:c2:31:08:7e:b8:
c8:ca:7d:9a:0b:8a:ef:5d:40:03:a1:4d:38:b4:aa:0a:98:94:
aa:9f:5a:a2:ea:b0:47:18:7a:d0:6b:01:9f:98:9b:06:51:84:
ad:95:8f:c1:59:6d:ec:3e:3d:ea:32:a8:3c:62:30:9f:a6:69:
52:c9:17:b7:a7:5f:fa:88:c2:00:82:da:b7:27:02:71:51:b1:
79:71:82:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36suQhURhXFh3/YMUr0GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDY4NmFhMWE1MzJjZTRiMGMyY2UwODIzMTdlMjQ5NGU4
MTgxYTIwHhcNMjUwNjI4MTkwMTQ3WhcNMjUwNjI5MTkwMTQ3WjAzMTEwLwYDVQQD
Eyg0YWZlNjY2YmZkMmNhMmQ2Y2QyODE0MWNhMDNhMWNmMmQ3MmFiMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEVZb3rtS5KZZfhZkUKtyMvCR/Ix
wOP9yXdg9XyDGXDxuHYsAvqOnylzIIRKdo1Mnnrc1f2Be07cZfT+tamBjYI8OxmD
ZB9a4FmMEHG8T7DbGvAqI7SSZoBqHu3ep1B16Aj7rnbKGWihF+xreeC51RvwxDeH
OeXXgUoxFCo8WC1vdtIpig5qUDCNAFXzm5CcJ2xuhDxGk+2ZT+N/NE5L683aVUJA
qCT3UzSeiNQj92Bz0gxYoQ4+JnuZJeRHWvPhe0GvdU+CpCTyVagyNbBcwHrE/UzT
37d5mpRobSmzMwvR/BN8GSXy8qnEmMksorZEAWyZVojhSUC/MRO437n43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr+Zmv9LKLWzSgUHKA6HPLXKrJaMB8GA1UdIwQY
MBaAFMxGhqoaUyzksMLOCCMX4klOgYGiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVhR3FocFRMT1N3d3M0SUl4ZmlTVTZCZ2FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80OTNmZGItYTM4NC00NzBjLTlmZmMt
NjFjMTQzYjFjM2E0LzEvekVhR3FocFRMT1N3d3M0SUl4ZmlTVTZCZ2FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80OTNmZGItYTM4NC00NzBjLTlmZmMtNjFjMTQzYjFjM2E0
LzEvekVhR3FocFRMT1N3d3M0SUl4ZmlTVTZCZ2FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxaBdsYH
E3a9kfHXbJGiVmD6VWfxND61ahH4d2BLzwDVBSsmgM2bc+gMT0RNtLEF1hAdboAI
xyzGeWxPWKvlc+HZUUpb4R7euLrmBw5Jbqd5cBmjzqZxGiW+TTQPZovx+32wcNen
f3AIM6MZOWWvcHaFYD3NdTKV3VmUbb54swgOA8AptDzscJB5EmaJ+G/TF6oBQnV8
lBzuENRnrMQfGTExITL2UAFYuNr4938cgsIxCH64yMp9mguK711AA6FNOLSqCpiU
qp9aouqwRxh60GsBn5ibBlGErZWPwVlt7D496jKoPGIwn6ZpUskXt6df+ojCAILa
tycCcVGxeXGCrg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:22 2025 by rpki-client