Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
File: iZFbtGEcVfYprTpMz-NXwECh3BI.mft (raw, json)
Hash identifier: vPOgOUjFq0JP5c9XKzAXfeQYx4OD5RC3jxnzc7JVVYw=
Subject key identifier: 33:87:C1:85:28:BD:EC:12:05:9A:2B:7D:A3:47:D1:3D:C3:10:17:DB
Authority key identifier: 89:91:5B:B4:61:1C:55:F6:29:AD:3A:4C:CF:E3:57:C0:40:A1:DC:12
Certificate issuer: /CN=89915bb4611c55f629ad3a4ccfe357c040a1dc12
Certificate serial: 0197B7EA5FFA27B24F2A777233EBB98AF16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
Manifest number: 0581
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: iZFbtGEcVfYprTpMz-NXwECh3BI.crl (hash: INf1aQhCmtu22j1cSI+scJAUpdIqJWzqPT1dUaVHxDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5f:fa:27:b2:4f:2a:77:72:33:eb:b9:8a:f1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89915bb4611c55f629ad3a4ccfe357c040a1dc12
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=3387c18528bdec12059a2b7da347d13dc31017db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:4e:04:8a:3f:61:7c:41:2b:8b:15:96:2e:
cc:5c:91:09:6f:9c:af:17:4a:2e:80:d6:ab:9b:b9:
6b:f3:d5:96:20:0d:81:61:bf:a6:9c:8b:35:ac:0a:
cb:41:70:39:da:5e:00:f3:a6:b2:67:45:a7:a1:02:
59:b4:bd:13:81:51:ed:7e:c7:3a:2e:d5:1a:39:39:
ce:ed:44:15:1a:11:9b:be:35:a1:bc:13:7d:f8:e9:
73:e7:4b:fb:10:82:03:00:fa:7c:f9:60:54:be:40:
9a:13:b1:0f:b4:89:24:76:ee:84:68:94:e4:bc:ac:
a5:82:68:97:11:51:52:85:9d:c1:f7:77:dc:e5:c7:
77:60:91:0a:99:aa:50:79:ef:a1:80:40:47:f4:72:
f5:0d:e2:75:70:fc:eb:49:a2:97:e3:91:2b:b5:d3:
22:64:bd:4e:1f:da:cb:d3:2a:73:a8:03:97:78:98:
2e:d7:d8:cd:97:b9:de:7e:35:12:41:14:07:48:d4:
a9:4b:1c:fe:f9:78:ef:cb:55:66:53:2e:b4:99:49:
a4:9b:67:5c:cc:b7:a0:fe:11:1e:63:de:83:4e:15:
fb:76:a1:cf:d6:37:8a:6f:79:7a:f2:a3:31:cb:b5:
61:0a:bf:45:2b:fd:36:51:98:6c:71:a2:5a:00:89:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:87:C1:85:28:BD:EC:12:05:9A:2B:7D:A3:47:D1:3D:C3:10:17:DB
X509v3 Authority Key Identifier:
keyid:89:91:5B:B4:61:1C:55:F6:29:AD:3A:4C:CF:E3:57:C0:40:A1:DC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:dd:ba:d8:17:2f:a2:59:f4:0b:ec:c4:1f:bb:a2:c3:b2:ea:
52:10:62:d0:88:49:35:68:26:d4:99:c9:6c:52:ae:fb:7b:0d:
b4:29:73:57:ea:59:74:6b:5a:2b:13:af:c9:b3:db:c2:cb:3c:
2c:e8:a0:11:3e:da:99:83:57:12:66:dd:1c:9c:3b:06:68:e4:
78:24:08:2f:86:d0:17:69:6e:76:d5:7c:29:22:1f:32:3a:f8:
eb:3f:61:46:65:92:d5:20:29:58:55:e8:20:16:3a:6a:d2:a6:
96:ee:c5:86:8b:9f:1e:41:a7:31:0d:13:30:d4:57:4f:55:79:
c2:0e:be:fe:7a:a2:2a:45:21:44:54:c2:19:de:73:f4:43:2e:
84:1d:58:02:0c:3a:ea:c2:91:7a:43:1d:43:d2:04:80:93:b1:
49:53:4e:21:ed:a1:22:8b:e4:89:6a:aa:2b:01:22:dd:c3:e1:
1e:43:6f:4f:16:46:a4:55:91:82:2e:3a:65:14:13:b4:9b:23:
cc:43:82:1c:c3:f6:8b:2d:5c:8b:b4:88:ee:33:32:59:1a:5f:
2f:3b:2a:89:ab:36:a2:59:98:19:63:54:dd:46:06:f1:38:15:
ff:84:71:01:7d:51:9b:7a:fd:e8:02:c0:30:36:35:f8:58:65:
8f:ec:91:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36l/6J7JPKndyM+u5ivFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTE1YmI0NjExYzU1ZjYyOWFkM2E0Y2NmZTM1N2MwNDBh
MWRjMTIwHhcNMjUwNjI4MTkwMTE5WhcNMjUwNjI5MTkwMTE5WjAzMTEwLwYDVQQD
EygzMzg3YzE4NTI4YmRlYzEyMDU5YTJiN2RhMzQ3ZDEzZGMzMTAxN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLtOBIo/YXxBK4sVli7MXJEJb5yv
F0ougNarm7lr89WWIA2BYb+mnIs1rArLQXA52l4A86ayZ0WnoQJZtL0TgVHtfsc6
LtUaOTnO7UQVGhGbvjWhvBN9+Olz50v7EIIDAPp8+WBUvkCaE7EPtIkkdu6EaJTk
vKylgmiXEVFShZ3B93fc5cd3YJEKmapQee+hgEBH9HL1DeJ1cPzrSaKX45ErtdMi
ZL1OH9rL0ypzqAOXeJgu19jNl7nefjUSQRQHSNSpSxz++Xjvy1VmUy60mUmkm2dc
zLeg/hEeY96DThX7dqHP1jeKb3l68qMxy7VhCr9FK/02UZhscaJaAIlpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOHwYUovewSBZorfaNH0T3DEBfbMB8GA1UdIwQY
MBaAFImRW7RhHFX2Ka06TM/jV8BAodwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpGYnRHRWNWZllwclRwTXotTlh3RUNoM0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NGFjOWQtMmE1My00YWU1LWJhNzIt
NjJhZmNiOTk3MmQ3LzEvaVpGYnRHRWNWZllwclRwTXotTlh3RUNoM0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NGFjOWQtMmE1My00YWU1LWJhNzItNjJhZmNiOTk3MmQ3
LzEvaVpGYnRHRWNWZllwclRwTXotTlh3RUNoM0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet262Bcv
oln0C+zEH7uiw7LqUhBi0IhJNWgm1JnJbFKu+3sNtClzV+pZdGtaKxOvybPbwss8
LOigET7amYNXEmbdHJw7BmjkeCQIL4bQF2ludtV8KSIfMjr46z9hRmWS1SApWFXo
IBY6atKmlu7FhoufHkGnMQ0TMNRXT1V5wg6+/nqiKkUhRFTCGd5z9EMuhB1YAgw6
6sKRekMdQ9IEgJOxSVNOIe2hIovkiWqqKwEi3cPhHkNvTxZGpFWRgi46ZRQTtJsj
zEOCHMP2iy1ci7SI7jMyWRpfLzsqias2olmYGWNU3UYG8TgV/4RxAX1Rm3r96ALA
MDY1+Fhlj+yRMg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:45 2025 by rpki-client