Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
File: zkyVbVLdh2NjwhME-cAl8H1fJjE.mft (raw, json)
Hash identifier: LP0RA4oOho04LlRKtXcIalOfUU1xzOESH+WLsQBNdtU=
Subject key identifier: D5:30:61:AE:6E:76:E1:1B:BE:FC:2B:1E:8D:F2:4B:B9:19:71:B7:F1
Authority key identifier: CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
Certificate issuer: /CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Certificate serial: 0198D65FB597FA8DFD6D377BA977FE2D5F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
Manifest number: 05C3
Signing time: Sat 23 Aug 2025 10:00:53 +0000
Manifest this update: Sat 23 Aug 2025 10:00:53 +0000
Manifest next update: Sun 24 Aug 2025 10:00:53 +0000
Files and hashes: 1: zkyVbVLdh2NjwhME-cAl8H1fJjE.crl (hash: JgNied709FCAZcHvLUx4iGodce0F9wdwcoV+mWGCXTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b5:97:fa:8d:fd:6d:37:7b:a9:77:fe:2d:5f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4c956d52dd876363c21304f9c025f07d5f2631
Validity
Not Before: Aug 23 10:00:53 2025 GMT
Not After : Aug 24 10:00:53 2025 GMT
Subject: CN=d53061ae6e76e11bbefc2b1e8df24bb91971b7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c2:a5:b3:44:35:37:2f:c3:14:61:98:2c:87:
eb:60:07:ed:77:c2:f9:5b:8a:68:9c:d4:b7:33:75:
56:47:93:1b:ec:2a:1c:ac:a9:1d:03:03:9b:0a:71:
cf:aa:09:dd:7b:53:8f:ee:7d:fb:bd:b1:fe:1c:6b:
5b:fd:29:95:10:5a:2c:95:8f:34:c5:8e:dc:87:74:
41:58:53:98:49:24:3e:a6:08:a1:11:c1:98:d2:8e:
35:07:ea:9f:33:2c:24:55:96:cd:e6:b3:60:ec:44:
14:f7:aa:33:70:6e:55:d9:5a:bd:91:b9:fb:6b:50:
4d:37:2d:01:9c:1b:95:be:7f:cf:e0:72:c1:20:a2:
d9:c9:41:aa:c8:24:09:8b:02:8e:b7:0e:90:b1:37:
97:ba:69:3b:5e:d7:2d:79:db:20:3a:d1:db:83:6c:
ef:59:86:24:d1:cf:41:64:12:3a:d9:13:01:90:06:
b2:6e:7b:05:57:04:69:ec:8d:7f:fc:ec:2f:fa:aa:
d9:d2:2b:75:5c:0b:1b:6b:ba:02:dd:b0:cb:b4:09:
1a:f4:26:02:e1:dd:f0:c5:a7:25:c1:d2:22:df:c1:
78:17:73:26:1b:09:34:89:18:f8:ab:7d:e0:c3:84:
8d:eb:ca:d4:b8:1c:da:88:69:cf:86:d1:1f:ed:e8:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:30:61:AE:6E:76:E1:1B:BE:FC:2B:1E:8D:F2:4B:B9:19:71:B7:F1
X509v3 Authority Key Identifier:
keyid:CE:4C:95:6D:52:DD:87:63:63:C2:13:04:F9:C0:25:F0:7D:5F:26:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyVbVLdh2NjwhME-cAl8H1fJjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/03a52d-f9b5-4f71-b428-2d90001570e1/1/zkyVbVLdh2NjwhME-cAl8H1fJjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5c:b2:2a:4f:1c:13:b3:0c:cf:b1:7e:39:ab:e8:db:42:c3:
cb:75:a8:21:47:55:2e:a2:39:6d:60:34:8f:79:33:1d:12:d8:
b3:c6:f0:28:19:c7:34:bd:07:d9:66:5b:01:77:18:2e:eb:9c:
67:7c:2e:46:50:01:b9:ec:c8:cb:64:e6:c8:e7:0f:24:c4:2f:
ff:e0:d2:a4:68:80:93:f2:6b:d8:86:a8:50:66:12:19:d8:b7:
d0:0d:e7:ba:d3:e8:15:de:2d:f4:66:a0:d2:d2:52:ac:d9:09:
57:63:b3:13:f2:bb:2a:b2:6a:3f:d3:1b:35:31:b1:02:2f:7e:
83:ab:74:9e:e1:89:ed:f3:f6:be:85:73:ac:49:5b:05:ad:c6:
8a:c0:29:43:79:85:47:38:dc:59:74:de:1d:b7:97:26:1d:88:
58:1c:29:c7:e8:3a:11:01:f5:49:45:47:0a:97:e2:e0:41:2c:
7e:ca:51:d1:b5:ac:51:03:fe:bb:75:38:43:47:1f:ec:6a:a4:
b2:d3:18:ef:3e:e6:3c:10:39:b0:eb:75:35:0d:84:d7:4f:f0:
2e:fd:b8:c9:cb:b5:f1:ac:9a:c0:ba:21:ff:d2:e4:aa:ab:95:
17:0d:c7:ae:32:ed:9c:be:a7:29:0a:47:18:5f:23:0d:76:48:
98:b0:8c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX7WX+o39bTd7qXf+LV9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGM5NTZkNTJkZDg3NjM2M2MyMTMwNGY5YzAyNWYwN2Q1
ZjI2MzEwHhcNMjUwODIzMTAwMDUzWhcNMjUwODI0MTAwMDUzWjAzMTEwLwYDVQQD
EyhkNTMwNjFhZTZlNzZlMTFiYmVmYzJiMWU4ZGYyNGJiOTE5NzFiN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MKls0Q1Ny/DFGGYLIfrYAftd8L5
W4ponNS3M3VWR5Mb7CocrKkdAwObCnHPqgnde1OP7n37vbH+HGtb/SmVEFoslY80
xY7ch3RBWFOYSSQ+pgihEcGY0o41B+qfMywkVZbN5rNg7EQU96ozcG5V2Vq9kbn7
a1BNNy0BnBuVvn/P4HLBIKLZyUGqyCQJiwKOtw6QsTeXumk7XtctedsgOtHbg2zv
WYYk0c9BZBI62RMBkAaybnsFVwRp7I1//Owv+qrZ0it1XAsba7oC3bDLtAka9CYC
4d3wxaclwdIi38F4F3MmGwk0iRj4q33gw4SN68rUuBzaiGnPhtEf7eii1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUwYa5uduEbvvwrHo3yS7kZcbfxMB8GA1UdIwQY
MBaAFM5MlW1S3YdjY8ITBPnAJfB9XyYxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemt5VmJWTGRoMk5qd2hNRS1jQWw4SDFmSmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wM2E1MmQtZjliNS00ZjcxLWI0Mjgt
MmQ5MDAwMTU3MGUxLzEvemt5VmJWTGRoMk5qd2hNRS1jQWw4SDFmSmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8wM2E1MmQtZjliNS00ZjcxLWI0MjgtMmQ5MDAwMTU3MGUx
LzEvemt5VmJWTGRoMk5qd2hNRS1jQWw4SDFmSmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1yyKk8c
E7MMz7F+Oavo20LDy3WoIUdVLqI5bWA0j3kzHRLYs8bwKBnHNL0H2WZbAXcYLuuc
Z3wuRlABuezIy2TmyOcPJMQv/+DSpGiAk/Jr2IaoUGYSGdi30A3nutPoFd4t9Gag
0tJSrNkJV2OzE/K7KrJqP9MbNTGxAi9+g6t0nuGJ7fP2voVzrElbBa3GisApQ3mF
RzjcWXTeHbeXJh2IWBwpx+g6EQH1SUVHCpfi4EEsfspR0bWsUQP+u3U4Q0cf7Gqk
stMY7z7mPBA5sOt1NQ2E10/wLv24ycu18ayawLoh/9LkqquVFw3HrjLtnL6nKQpH
GF8jDXZImLCM4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:05 2025 by rpki-client