Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: l8Z2HlMQBwjbOuugUj7BvdKjv87d1kHK4loNow2hzhU=
Subject key identifier: 35:6A:01:49:5D:96:A4:54:0A:04:24:2A:F6:3B:A0:64:0D:13:2D:DB
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 0197B745A73B51C1BE05CFF8EB2A3736418C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0E73
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: 9uVlY8fmNTT23WdrpO7ulKPFqTuNI6zzdJOwUPIyxmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a7:3b:51:c1:be:05:cf:f8:eb:2a:37:36:41:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=356a01495d96a4540a04242af63ba0640d132ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:5d:87:6d:39:3e:84:7e:7a:b4:2a:20:fa:
cd:09:bb:ec:ad:0b:22:76:44:b8:b2:b7:88:52:a5:
f2:72:d2:b5:e4:6e:cd:8b:0f:e6:1a:68:85:3b:56:
45:a3:e5:29:e9:97:a2:41:e0:56:bf:6e:11:f0:a2:
80:dc:48:79:ee:19:71:ea:37:e1:bd:67:78:84:11:
69:e7:fa:2b:4f:5c:7e:6e:a8:2f:25:a7:00:28:cf:
55:46:5a:39:6b:78:03:b5:23:4e:96:0d:83:1b:07:
da:be:a4:7b:c9:aa:f0:6e:ff:a3:55:b8:eb:e3:15:
16:54:99:b4:7f:b3:a3:ad:1c:82:37:43:4c:08:71:
4a:58:4f:e7:50:80:f4:03:09:9c:86:b6:bd:50:d0:
08:7c:69:8b:c5:47:b3:97:4a:ad:21:df:21:98:22:
56:44:c6:f9:dc:3f:7d:35:d9:b7:ec:5c:2f:26:81:
73:f2:d4:1a:6d:e8:a8:83:06:0c:76:c8:61:0e:79:
b4:e7:b8:0b:16:17:11:1b:ad:79:27:7f:a6:6c:24:
ab:5f:7c:c3:0a:32:fb:9e:bc:43:fa:1c:93:c6:8a:
48:15:15:6b:40:e0:48:06:fb:a9:90:50:5b:a6:4e:
20:79:7c:50:29:f5:41:a9:a1:a9:79:d7:91:68:08:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:01:49:5D:96:A4:54:0A:04:24:2A:F6:3B:A0:64:0D:13:2D:DB
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a0:3e:b4:b2:26:21:fa:51:60:cb:0c:c6:05:57:af:fc:e7:
69:5f:0f:f6:85:fb:8a:a2:5b:20:7e:e4:2c:f6:03:66:d6:3a:
8d:2c:50:bf:95:0d:a3:80:6f:9e:6f:0f:ab:12:f5:78:b5:08:
ce:63:c1:02:90:67:80:9f:41:59:6f:c6:1a:63:39:62:29:08:
b3:9e:55:05:4f:48:bc:d9:77:37:87:81:25:05:27:0f:e9:88:
00:e7:91:a2:ea:e7:2b:eb:6a:f4:d0:f1:33:75:92:7c:c8:f7:
d4:57:ae:20:c3:8e:97:5a:c7:ad:26:98:e0:cb:a5:97:5c:96:
2f:32:8e:14:6d:5b:61:3e:13:05:14:a1:a2:21:bf:7c:3b:f9:
61:14:93:0c:e1:ae:c7:95:24:82:f7:1c:e4:ae:11:31:f8:0d:
7c:5e:f0:c8:d5:0d:6f:41:b3:c5:3c:26:c4:f6:d1:a7:00:d8:
e0:17:1b:a0:8a:a0:82:87:05:74:84:7e:f5:e9:4c:cc:56:6a:
be:04:16:89:ba:73:26:00:77:ff:d8:e3:9a:20:eb:87:64:03:
b8:4f:73:35:5b:f4:c0:da:cc:75:2f:c7:15:e7:12:c5:07:ff:
d9:67:90:53:aa:30:cf:c1:e1:91:19:8c:46:07:49:cf:9c:18:
87:b8:31:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Rac7UcG+Bc/46yo3NkGMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzE3OGY3YTAwNWY5Mzc3OWY0NjhkMzRiYWRiY2NjMWI5
Y2VhNTAwHhcNMjUwNjI4MTYwMTI0WhcNMjUwNjI5MTYwMTI0WjAzMTEwLwYDVQQD
EygzNTZhMDE0OTVkOTZhNDU0MGEwNDI0MmFmNjNiYTA2NDBkMTMyZGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7tdh205PoR+erQqIPrNCbvsrQsi
dkS4sreIUqXyctK15G7Niw/mGmiFO1ZFo+Up6ZeiQeBWv24R8KKA3Eh57hlx6jfh
vWd4hBFp5/orT1x+bqgvJacAKM9VRlo5a3gDtSNOlg2DGwfavqR7yarwbv+jVbjr
4xUWVJm0f7OjrRyCN0NMCHFKWE/nUID0Awmchra9UNAIfGmLxUezl0qtId8hmCJW
RMb53D99Ndm37FwvJoFz8tQabeiogwYMdshhDnm057gLFhcRG615J3+mbCSrX3zD
CjL7nrxD+hyTxopIFRVrQOBIBvupkFBbpk4geXxQKfVBqaGpedeRaAha/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVqAUldlqRUCgQkKvY7oGQNEy3bMB8GA1UdIwQY
MBaAFM9xePegBfk3efRo00utvMwbnOpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNTliZWEtMjkzMS00ZGUwLWJlNDIt
NWEzZDhmMGVjYmZkLzEvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yNTliZWEtMjkzMS00ZGUwLWJlNDItNWEzZDhmMGVjYmZk
LzEvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6A+tLIm
IfpRYMsMxgVXr/znaV8P9oX7iqJbIH7kLPYDZtY6jSxQv5UNo4Bvnm8PqxL1eLUI
zmPBApBngJ9BWW/GGmM5YikIs55VBU9IvNl3N4eBJQUnD+mIAOeRournK+tq9NDx
M3WSfMj31FeuIMOOl1rHrSaY4Mull1yWLzKOFG1bYT4TBRShoiG/fDv5YRSTDOGu
x5Ukgvcc5K4RMfgNfF7wyNUNb0GzxTwmxPbRpwDY4BcboIqggocFdIR+9elMzFZq
vgQWibpzJgB3/9jjmiDrh2QDuE9zNVv0wNrMdS/HFecSxQf/2WeQU6owz8HhkRmM
RgdJz5wYh7gxHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:08 2025 by rpki-client