Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: AtQsTnZjGRLgyI2LB17flSeCJNYqADmsryecA/Ma2to=
Subject key identifier: 0F:9E:D0:94:B6:D1:D6:4D:4F:34:E1:65:7B:E4:99:3C:8A:BE:C0:EA
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 0197BA7EA30A5481DB754818169BC47C0E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 0EAE
Signing time: Sun 29 Jun 2025 07:02:30 +0000
Manifest this update: Sun 29 Jun 2025 07:02:30 +0000
Manifest next update: Mon 30 Jun 2025 07:02:30 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: RXzwjcwf2PicXkDl5fjAJra4vTEGmStKDo5uJ3+gjZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:a3:0a:54:81:db:75:48:18:16:9b:c4:7c:0e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Jun 29 07:02:30 2025 GMT
Not After : Jun 30 07:02:30 2025 GMT
Subject: CN=0f9ed094b6d1d64d4f34e1657be4993c8abec0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:49:3b:ce:fe:fa:29:40:ce:2d:77:66:0d:
af:8c:58:ff:96:78:a7:87:cb:91:d8:6c:e5:96:83:
0c:6a:85:fa:d6:6a:08:54:74:f0:6b:e5:35:ba:1c:
5a:1a:66:f7:02:d8:e0:29:71:0a:57:13:dd:05:46:
85:03:2f:d2:73:38:5b:85:cf:88:b8:0d:e0:4f:a9:
24:70:82:16:a4:8d:bc:24:f1:9d:4b:71:12:6a:ba:
ae:8b:c9:93:71:1e:72:10:92:02:cf:cb:21:c8:4f:
1b:eb:bb:37:15:93:52:4e:45:93:a8:82:90:3d:86:
d8:ea:0b:a2:44:14:fc:16:27:57:5b:b5:70:df:b1:
ca:cc:d4:b6:28:b5:3a:7a:b7:f5:35:62:a2:7e:00:
99:09:30:0a:db:c5:26:54:e2:c7:88:8c:7f:ba:85:
f9:fa:19:1f:07:07:49:b9:1e:e0:5a:32:7f:9d:2f:
b7:11:c0:8e:b9:1c:9b:03:ce:88:f9:b2:f6:73:58:
d2:e0:0d:83:22:2d:ed:f8:ef:55:d4:2f:56:93:55:
18:0d:23:22:48:66:19:a3:38:cd:f6:61:b7:a0:ba:
8c:b2:6c:60:0f:06:b6:9c:b1:40:f2:c1:37:45:04:
ce:57:87:c4:84:c4:15:94:21:a3:c7:57:d5:dc:c6:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:D0:94:B6:D1:D6:4D:4F:34:E1:65:7B:E4:99:3C:8A:BE:C0:EA
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9e:e9:1a:76:46:19:c0:d8:00:5b:66:39:f9:b4:ab:fe:ba:
62:ae:c1:ec:0c:18:2e:ea:e6:ad:b3:03:9e:65:a0:20:f9:99:
bd:5a:be:68:18:94:f3:d2:1d:70:0b:a7:a3:09:c0:7c:5c:7c:
38:f7:39:7b:ce:af:fb:eb:84:66:5a:fb:2f:e0:ca:bd:c4:0f:
90:5c:47:e1:08:4d:0b:f9:69:bb:f7:b1:f7:33:77:30:e1:9d:
e1:c0:d0:a0:a1:3e:f5:b3:d9:a5:9b:ca:6a:b2:88:95:6a:29:
4b:ac:c4:9a:0f:32:59:0b:db:c6:ea:7f:be:6c:a2:47:fb:6d:
bc:6a:61:20:df:5e:dd:83:d8:07:0d:e5:4c:d6:28:54:93:c9:
79:8d:fa:97:e7:a7:3c:3c:4c:93:1d:77:14:9f:95:4f:35:d3:
59:0c:56:32:e7:9b:93:04:ba:96:24:fc:8c:9d:2d:f8:e3:28:
ce:b6:4b:98:9e:2d:5c:bf:5b:42:72:f9:5b:75:10:cc:b3:b7:
07:08:f6:bc:0c:41:66:cb:67:9a:ef:7f:9c:b1:9e:b4:62:a3:
5f:35:8e:09:16:f6:d7:0e:0c:69:96:97:10:7a:23:56:4b:eb:
75:3f:c2:76:1d:25:e5:e0:9f:10:5f:01:93:b5:21:c0:1e:9d:
94:ba:04:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fqMKVIHbdUgYFpvEfA4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OTlhZDgyY2EwZmRiYTA2ZmUwOGI3YjllMGQxMzczYjcx
Y2I0NjkwHhcNMjUwNjI5MDcwMjMwWhcNMjUwNjMwMDcwMjMwWjAzMTEwLwYDVQQD
EygwZjllZDA5NGI2ZDFkNjRkNGYzNGUxNjU3YmU0OTkzYzhhYmVjMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDJJO87++ilAzi13Zg2vjFj/lnin
h8uR2GzlloMMaoX61moIVHTwa+U1uhxaGmb3AtjgKXEKVxPdBUaFAy/Sczhbhc+I
uA3gT6kkcIIWpI28JPGdS3ESarqui8mTcR5yEJICz8shyE8b67s3FZNSTkWTqIKQ
PYbY6guiRBT8FidXW7Vw37HKzNS2KLU6erf1NWKifgCZCTAK28UmVOLHiIx/uoX5
+hkfBwdJuR7gWjJ/nS+3EcCOuRybA86I+bL2c1jS4A2DIi3t+O9V1C9Wk1UYDSMi
SGYZozjN9mG3oLqMsmxgDwa2nLFA8sE3RQTOV4fEhMQVlCGjx1fV3MaNfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+e0JS20dZNTzThZXvkmTyKvsDqMB8GA1UdIwQY
MBaAFNWZrYLKD9ugb+CLe54NE3O3HLRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85MzQwNzMtMDIxYi00ZmJlLWIwMTkt
YjZhNmY4ZWRhNzVhLzEvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85MzQwNzMtMDIxYi00ZmJlLWIwMTktYjZhNmY4ZWRhNzVh
LzEvMVptdGdzb1AyNkJ2NEl0N25nMFRjN2NjdEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo57pGnZG
GcDYAFtmOfm0q/66Yq7B7AwYLurmrbMDnmWgIPmZvVq+aBiU89IdcAunownAfFx8
OPc5e86v++uEZlr7L+DKvcQPkFxH4QhNC/lpu/ex9zN3MOGd4cDQoKE+9bPZpZvK
arKIlWopS6zEmg8yWQvbxup/vmyiR/ttvGphIN9e3YPYBw3lTNYoVJPJeY36l+en
PDxMkx13FJ+VTzXTWQxWMuebkwS6liT8jJ0t+OMozrZLmJ4tXL9bQnL5W3UQzLO3
Bwj2vAxBZstnmu9/nLGetGKjXzWOCRb21w4MaZaXEHojVkvrdT/Cdh0l5eCfEF8B
k7UhwB6dlLoEUw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:40:58 2025 by rpki-client