Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json)
Hash identifier: q95TRn8jsI+lgqohV4YmS2iiHtAaT9rWUQQe1+TWevI=
Subject key identifier: F0:A4:A6:79:F2:EA:7D:1D:1A:8F:25:E9:C9:4B:48:94:B9:25:29:80
Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
Certificate issuer: /CN=6790960ac4ba271502f1738a59490856f1975b1f
Certificate serial: 0198D4725B10B58FC11D7022DDF4D65D5480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
Manifest number: 097B
Signing time: Sat 23 Aug 2025 01:02:00 +0000
Manifest this update: Sat 23 Aug 2025 01:02:00 +0000
Manifest next update: Sun 24 Aug 2025 01:02:00 +0000
Files and hashes: 1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: 1pvMJQwLhufePUFdDxkIIhwKFnf44XHZAEEGX5SKS/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:5b:10:b5:8f:c1:1d:70:22:dd:f4:d6:5d:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f
Validity
Not Before: Aug 23 01:02:00 2025 GMT
Not After : Aug 24 01:02:00 2025 GMT
Subject: CN=f0a4a679f2ea7d1d1a8f25e9c94b4894b9252980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:73:02:28:82:77:df:44:70:d4:ff:58:6a:
d4:22:a1:7d:f8:5f:d5:2a:93:6a:67:52:bc:12:8c:
db:29:d8:ad:e0:60:9d:9f:3d:98:da:ac:94:a9:97:
1c:8e:92:92:b7:5c:aa:24:7f:45:29:6a:38:a1:50:
ff:bc:ae:cf:c4:76:69:a4:f8:91:02:10:cd:31:4d:
a8:a7:35:4d:39:9b:f9:9d:ff:d0:91:d4:c1:0e:61:
e8:ba:17:b2:b6:79:f8:a7:6b:63:1a:ed:ca:9c:a2:
dd:9d:ed:f8:71:13:c8:5b:f5:10:36:17:a5:4f:79:
2b:34:0d:c6:a6:d0:af:8c:5e:7f:4a:b4:38:c2:95:
5f:61:a9:23:29:2f:b7:e3:49:f0:03:a1:97:a0:b5:
96:d7:63:ca:33:15:fa:06:c4:30:a5:02:bc:83:3b:
09:ae:cc:c9:1c:97:eb:74:26:0b:1c:41:f8:5d:f9:
96:bb:3e:51:65:dd:71:5b:83:3a:45:f9:ad:9d:9e:
84:e9:e1:59:8b:cb:c4:43:ee:f1:3a:22:6c:aa:f7:
1d:f1:60:5f:73:8f:aa:98:77:07:79:ca:b3:aa:63:
38:e4:c9:bd:9c:8a:61:55:c0:14:a0:eb:a2:96:c5:
7d:46:73:19:93:0c:2c:b7:00:d0:ce:a0:20:8c:d3:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:A6:79:F2:EA:7D:1D:1A:8F:25:E9:C9:4B:48:94:B9:25:29:80
X509v3 Authority Key Identifier:
keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ee:1f:c4:24:ae:54:fa:d7:5a:b3:84:23:d6:b1:eb:93:99:
ba:9d:e4:f7:c9:d6:29:87:4c:b3:36:8a:24:66:25:91:79:1f:
b2:c6:b6:fd:30:01:c0:c6:53:e7:27:8f:d8:56:1c:da:91:61:
3e:83:b2:1d:a9:02:bc:c6:b9:66:c6:9d:cd:2f:b3:90:c3:98:
bb:45:08:04:45:f4:1b:3a:80:c3:38:90:3e:ff:f2:5a:08:46:
bc:39:27:99:53:82:1b:da:21:b5:cc:c7:2d:90:0e:54:c2:a7:
4a:2d:38:03:6f:6f:e2:fc:80:07:5a:fe:8a:83:71:a0:a9:83:
15:89:5c:0c:64:15:b0:83:9e:1e:c7:ff:73:9f:0a:32:11:37:
74:70:cd:6a:a6:8f:6c:df:b7:f4:7f:f7:d4:41:b8:5e:a8:b3:
fa:c5:4e:d2:af:57:26:83:c5:83:c6:f9:b7:9e:28:28:c1:2d:
c3:ad:05:e7:59:f4:d5:ca:42:11:4f:37:7f:70:e8:26:c1:81:
c6:0c:59:1d:d8:59:ec:f2:4a:15:8d:ab:96:49:13:5a:e4:ba:
4c:59:9e:c0:7c:e2:64:f0:d2:b2:c2:83:70:d6:db:25:37:28:
17:a9:b1:da:6e:a0:05:93:ee:8e:0f:93:ca:09:8e:bd:0c:90:
1b:d0:b9:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUclsQtY/BHXAi3fTWXVSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTA5NjBhYzRiYTI3MTUwMmYxNzM4YTU5NDkwODU2ZjE5
NzViMWYwHhcNMjUwODIzMDEwMjAwWhcNMjUwODI0MDEwMjAwWjAzMTEwLwYDVQQD
EyhmMGE0YTY3OWYyZWE3ZDFkMWE4ZjI1ZTljOTRiNDg5NGI5MjUyOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOdzAiiCd99EcNT/WGrUIqF9+F/V
KpNqZ1K8EozbKdit4GCdnz2Y2qyUqZccjpKSt1yqJH9FKWo4oVD/vK7PxHZppPiR
AhDNMU2opzVNOZv5nf/QkdTBDmHouheytnn4p2tjGu3KnKLdne34cRPIW/UQNhel
T3krNA3GptCvjF5/SrQ4wpVfYakjKS+340nwA6GXoLWW12PKMxX6BsQwpQK8gzsJ
rszJHJfrdCYLHEH4XfmWuz5RZd1xW4M6RfmtnZ6E6eFZi8vEQ+7xOiJsqvcd8WBf
c4+qmHcHecqzqmM45Mm9nIphVcAUoOuilsV9RnMZkwwstwDQzqAgjNNTRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCkpnny6n0dGo8l6clLSJS5JSmAMB8GA1UdIwQY
MBaAFGeQlgrEuicVAvFzillJCFbxl1sfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYt
OTI4MjhiMTUzMjEwLzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYtOTI4MjhiMTUzMjEw
LzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+4fxCSu
VPrXWrOEI9ax65OZup3k98nWKYdMszaKJGYlkXkfssa2/TABwMZT5yeP2FYc2pFh
PoOyHakCvMa5ZsadzS+zkMOYu0UIBEX0GzqAwziQPv/yWghGvDknmVOCG9ohtczH
LZAOVMKnSi04A29v4vyAB1r+ioNxoKmDFYlcDGQVsIOeHsf/c58KMhE3dHDNaqaP
bN+39H/31EG4Xqiz+sVO0q9XJoPFg8b5t54oKMEtw60F51n01cpCEU83f3DoJsGB
xgxZHdhZ7PJKFY2rlkkTWuS6TFmewHziZPDSssKDcNbbJTcoF6mx2m6gBZPujg+T
ygmOvQyQG9C5jg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:52 2025 by rpki-client