Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: vfHkktPruXGxl7GjTtf25tuKNxjXuKR7Jlld6fDgP8g=
Subject key identifier: A0:4E:07:65:BF:1F:FF:7C:55:7B:99:ED:8C:8D:C3:F4:00:40:A2:77
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 0198D473D268505DD55DB381CED795A69975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:36 +0000
Manifest this update: Sat 23 Aug 2025 01:03:36 +0000
Manifest next update: Sun 24 Aug 2025 01:03:36 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: SGEF/gM1v40+Fb9ysmfAOVquME/8eU8Pak8zj995dW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d2:68:50:5d:d5:5d:b3:81:ce:d7:95:a6:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Aug 23 01:03:36 2025 GMT
Not After : Aug 24 01:03:36 2025 GMT
Subject: CN=a04e0765bf1fff7c557b99ed8c8dc3f40040a277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:62:3d:db:17:e3:ef:6c:56:cc:b5:79:48:
9a:24:5d:eb:a4:98:9d:af:11:19:56:53:da:5c:f8:
0f:fd:89:c2:c3:ca:3b:85:e6:c0:9e:33:d3:bf:bf:
a5:05:1d:b0:94:66:e9:dd:ec:91:0e:fc:6a:2c:82:
a2:3b:08:b4:24:4b:5d:94:c5:7e:da:44:bd:79:c1:
80:97:8d:4a:50:fe:9d:ba:f6:0e:84:ff:58:f4:97:
ab:ce:44:88:dc:8a:9e:a9:0f:01:03:bc:c6:ad:31:
3a:70:97:cf:0e:75:41:9a:0a:de:58:70:73:56:e7:
64:e4:50:a3:cc:42:a5:5b:90:44:13:59:cc:23:31:
22:53:ac:d3:1c:90:53:87:4b:3d:21:16:9e:b2:92:
54:41:15:2b:82:4a:9a:1a:69:e3:b4:1c:7a:7b:ed:
37:53:1e:aa:5b:aa:e3:39:36:4c:a2:59:91:cb:1f:
4c:9a:c0:b7:68:ed:ef:e3:79:2c:9d:94:0f:a6:11:
b2:61:be:cd:9d:53:95:1a:f2:5e:c9:8c:0b:c4:a8:
d4:c4:6a:68:33:5f:af:e6:23:f2:b5:a8:47:8d:d0:
1b:7b:10:1f:ef:d2:2a:fa:d5:04:5c:51:4a:9a:c0:
22:e4:f2:e2:20:27:8c:33:42:fd:ee:02:7e:98:2d:
f5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4E:07:65:BF:1F:FF:7C:55:7B:99:ED:8C:8D:C3:F4:00:40:A2:77
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5c:9e:a4:af:ec:81:f3:1d:17:f8:69:27:cf:e4:81:58:c4:
a3:f0:37:81:44:98:ba:d2:c7:da:69:20:c9:a0:5c:47:2b:38:
eb:25:0e:a5:20:a8:5e:6c:41:2e:91:3a:6f:ca:00:96:f1:8d:
37:b4:e5:07:5d:53:98:c3:29:da:7f:e9:22:cf:5f:16:ec:67:
d2:e3:d0:79:22:e7:0d:4f:64:63:ee:14:f9:99:93:de:18:1c:
21:4c:0c:52:25:0e:e4:d7:cc:e4:56:5a:3e:97:25:62:53:b0:
fa:ed:03:82:30:71:b9:40:bb:7d:f6:2c:dc:dd:08:7e:7c:a7:
32:20:b5:85:1f:03:27:b3:19:28:05:4c:56:eb:9b:23:36:47:
b9:af:26:2a:e5:11:d2:7b:49:fa:b3:54:1f:e4:a8:f3:10:81:
96:2c:35:a3:dd:4d:c7:8a:45:58:ba:b5:a2:3a:9b:ad:3b:49:
14:65:b6:89:08:c7:ee:8d:17:88:7a:10:c4:a6:48:85:bb:2c:
a6:12:9a:38:28:4c:fa:00:35:98:ba:1a:5b:50:67:aa:8d:30:
62:62:6e:ee:3b:03:4d:87:7d:6b:87:d8:15:f2:12:d9:e6:be:
89:fe:a9:68:36:ae:86:f2:06:e4:f5:c2:de:39:2a:45:27:0b:
57:3d:76:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9JoUF3VXbOBzteVppl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzczMDE4ODNiZTBkMjFhYmQ5YzZjYzBiZDc1MDBhN2Fi
NDc5ODgwHhcNMjUwODIzMDEwMzM2WhcNMjUwODI0MDEwMzM2WjAzMTEwLwYDVQQD
EyhhMDRlMDc2NWJmMWZmZjdjNTU3Yjk5ZWQ4YzhkYzNmNDAwNDBhMjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUNiPdsX4+9sVsy1eUiaJF3rpJid
rxEZVlPaXPgP/YnCw8o7hebAnjPTv7+lBR2wlGbp3eyRDvxqLIKiOwi0JEtdlMV+
2kS9ecGAl41KUP6duvYOhP9Y9JerzkSI3IqeqQ8BA7zGrTE6cJfPDnVBmgreWHBz
Vudk5FCjzEKlW5BEE1nMIzEiU6zTHJBTh0s9IRaespJUQRUrgkqaGmnjtBx6e+03
Ux6qW6rjOTZMolmRyx9MmsC3aO3v43ksnZQPphGyYb7NnVOVGvJeyYwLxKjUxGpo
M1+v5iPytahHjdAbexAf79Iq+tUEXFFKmsAi5PLiICeMM0L97gJ+mC31GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBOB2W/H/98VXuZ7YyNw/QAQKJ3MB8GA1UdIwQY
MBaAFM93MBiDvg0hq9nGzAvXUAp6tHmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYt
OGZkNjA4NTNjZGUwLzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYtOGZkNjA4NTNjZGUw
LzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFyepK/s
gfMdF/hpJ8/kgVjEo/A3gUSYutLH2mkgyaBcRys46yUOpSCoXmxBLpE6b8oAlvGN
N7TlB11TmMMp2n/pIs9fFuxn0uPQeSLnDU9kY+4U+ZmT3hgcIUwMUiUO5NfM5FZa
PpclYlOw+u0DgjBxuUC7ffYs3N0IfnynMiC1hR8DJ7MZKAVMVuubIzZHua8mKuUR
0ntJ+rNUH+So8xCBliw1o91Nx4pFWLq1ojqbrTtJFGW2iQjH7o0XiHoQxKZIhbss
phKaOChM+gA1mLoaW1Bnqo0wYmJu7jsDTYd9a4fYFfIS2ea+if6paDauhvIG5PXC
3jkqRScLVz12FA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:16 2025 by rpki-client