Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: h8n49JL+ov8ayhGXmiK2yscSeVMFuqha/2ky1Uhuyno=
Subject key identifier: D3:A6:9B:B1:DE:74:43:13:63:EB:15:62:FE:4A:5D:F6:ED:90:FB:87
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 0198D7A89A33EBCF647EBF7ABC46A189A0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0B01
Signing time: Sat 23 Aug 2025 16:00:07 +0000
Manifest this update: Sat 23 Aug 2025 16:00:07 +0000
Manifest next update: Sun 24 Aug 2025 16:00:07 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: 9eixxKwTy2q5CGzh9LTKvR2jkjgjDcqsRB5KoG522yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:9a:33:eb:cf:64:7e:bf:7a:bc:46:a1:89:a0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Aug 23 16:00:07 2025 GMT
Not After : Aug 24 16:00:07 2025 GMT
Subject: CN=d3a69bb1de74431363eb1562fe4a5df6ed90fb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:ef:f5:9f:44:63:93:d6:2b:0b:50:e9:0f:
57:68:dd:3f:21:3e:4c:77:bd:ef:66:f0:50:ad:43:
4d:87:04:d2:be:14:bb:39:d7:d5:f0:11:dd:87:ba:
58:12:02:1d:b0:56:36:d7:62:c5:9b:49:3c:b6:4a:
98:c4:26:22:4a:26:47:ac:4f:66:e7:40:c2:a2:64:
1a:ca:fb:d2:c4:32:c8:cd:f1:21:33:90:3b:d3:80:
44:0d:db:be:63:11:a2:c0:cb:d9:ea:c0:18:3c:a0:
f9:d9:b8:4a:72:01:7c:83:da:70:80:39:4d:c1:0c:
92:c7:bf:ce:d6:b5:79:48:4b:fe:7d:ae:f6:29:cb:
49:c3:85:3b:35:95:72:8c:0a:3b:51:96:29:77:a9:
38:f2:27:37:0d:12:bc:e3:65:d4:29:cc:8c:0e:d4:
a3:ff:9b:9e:6e:a6:7e:67:72:b8:a0:0a:97:4f:75:
ba:00:aa:8c:c5:bb:f7:1e:cd:5a:87:17:47:f4:c2:
7a:fa:0f:c1:d9:10:38:5d:e7:c5:8c:ab:35:86:79:
a5:0a:c7:7c:8a:9e:9a:a6:d2:df:58:02:3c:e3:62:
5b:da:a0:9b:12:0f:6c:52:51:c9:c5:f5:ce:08:8f:
a6:93:44:2b:03:72:1b:8d:fd:62:22:43:22:82:d1:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:9B:B1:DE:74:43:13:63:EB:15:62:FE:4A:5D:F6:ED:90:FB:87
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:25:de:98:de:9f:a6:d3:b4:18:52:ff:5e:d5:88:f7:e4:
ee:35:2b:ce:0a:4c:5e:83:3b:5a:5e:16:1f:03:b0:d6:e2:8d:
33:6e:b1:4c:f8:27:b4:60:90:cb:df:f2:22:a6:08:d9:dd:f6:
52:d8:20:fe:65:08:15:d6:6e:00:99:e7:55:26:bc:ec:a3:6a:
32:d8:4e:bd:0a:38:74:73:69:46:f6:3d:d0:29:af:5e:22:a4:
97:6f:8e:4c:ff:80:30:f8:2c:09:1a:78:b0:74:7d:dc:13:4f:
d9:ec:e0:46:8d:a3:a3:e8:a4:7e:c6:f1:7c:88:d6:02:6d:7d:
78:b6:c7:da:a5:ac:c3:f8:33:99:c9:fb:bc:0a:34:b1:2a:43:
4c:0d:8e:4b:d6:86:d2:2a:14:db:ca:b0:12:81:79:14:24:98:
1d:05:bf:95:fa:39:05:a3:99:50:76:01:4e:e1:6f:2d:af:27:
f5:da:70:2e:d5:56:7c:cd:81:0f:f2:c5:21:a3:2d:8a:d3:bf:
1a:11:61:4f:e6:c2:c0:18:12:e3:2c:c0:83:03:cd:94:91:f3:
5d:ad:bc:4e:cf:17:ae:65:f5:51:c8:44:30:ef:46:1e:e0:7c:
2c:88:19:6a:29:a3:17:23:22:95:10:18:5e:ce:cf:20:aa:0e:
42:16:42:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqJoz689kfr96vEahiaCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzJlYzBlOTFkYmJmOTRkZGExZDY1MDQ0N2QyNjg5NzZk
NjIwOWEwHhcNMjUwODIzMTYwMDA3WhcNMjUwODI0MTYwMDA3WjAzMTEwLwYDVQQD
EyhkM2E2OWJiMWRlNzQ0MzEzNjNlYjE1NjJmZTRhNWRmNmVkOTBmYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYfv9Z9EY5PWKwtQ6Q9XaN0/IT5M
d73vZvBQrUNNhwTSvhS7OdfV8BHdh7pYEgIdsFY212LFm0k8tkqYxCYiSiZHrE9m
50DComQayvvSxDLIzfEhM5A704BEDdu+YxGiwMvZ6sAYPKD52bhKcgF8g9pwgDlN
wQySx7/O1rV5SEv+fa72KctJw4U7NZVyjAo7UZYpd6k48ic3DRK842XUKcyMDtSj
/5uebqZ+Z3K4oAqXT3W6AKqMxbv3Hs1ahxdH9MJ6+g/B2RA4XefFjKs1hnmlCsd8
ip6aptLfWAI842Jb2qCbEg9sUlHJxfXOCI+mk0QrA3Ibjf1iIkMigtGdTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOmm7HedEMTY+sVYv5KXfbtkPuHMB8GA1UdIwQY
MBaAFEcy7A6R27+U3aHWUER9Jol21iCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMt
Nzg4ZGIwOWQwZmU2LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMtNzg4ZGIwOWQwZmU2
LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWAl3pje
n6bTtBhS/17ViPfk7jUrzgpMXoM7Wl4WHwOw1uKNM26xTPgntGCQy9/yIqYI2d32
Utgg/mUIFdZuAJnnVSa87KNqMthOvQo4dHNpRvY90CmvXiKkl2+OTP+AMPgsCRp4
sHR93BNP2ezgRo2jo+ikfsbxfIjWAm19eLbH2qWsw/gzmcn7vAo0sSpDTA2OS9aG
0ioU28qwEoF5FCSYHQW/lfo5BaOZUHYBTuFvLa8n9dpwLtVWfM2BD/LFIaMtitO/
GhFhT+bCwBgS4yzAgwPNlJHzXa28Ts8XrmX1UchEMO9GHuB8LIgZaimjFyMilRAY
Xs7PIKoOQhZCgw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:13 2025 by rpki-client