Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier: AsgVipdFFjm8E8pH2dog9zOlrmgoLdYVt6wU7eC390o=
Subject key identifier: B8:04:66:14:F8:B2:DD:EA:FE:0B:FA:E3:65:D0:7D:C0:5D:34:97:2C
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial: 0197B70ED298C8CF25F4C598A54D6F3EF3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: PQBgn08SDVMETaTnbFLiiAh6ZQJU1/CEgyuqjZsi8/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d2:98:c8:cf:25:f4:c5:98:a5:4d:6f:3e:f3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=b8046614f8b2ddeafe0bfae365d07dc05d34972c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:a4:1c:51:24:c0:80:5d:a1:c9:e4:8a:68:
74:7d:35:cb:09:04:f0:01:f8:2b:60:b3:b6:32:2c:
89:d8:f4:40:01:f9:8f:8e:a3:a0:01:ee:48:89:7c:
eb:42:76:b6:40:ad:4e:17:52:ec:59:d4:3e:94:49:
9d:fc:77:c7:92:3b:d2:87:90:9d:f5:0c:17:c6:60:
7d:86:75:aa:7c:f2:5d:e0:e9:c3:03:04:83:f9:92:
68:4c:4f:db:d2:6b:39:4f:65:37:ac:8a:ac:ae:ea:
66:db:4d:26:7f:3b:30:81:66:bd:15:e1:08:95:18:
b6:b7:8e:b0:68:ac:6f:92:a8:ae:56:62:9e:ef:83:
d6:ca:eb:49:cc:a4:19:e5:ca:7c:b8:bc:52:ad:dd:
0a:98:bc:43:50:b7:67:49:00:f3:e5:d4:1c:91:01:
bb:3c:a5:d7:9f:9c:c5:59:ea:37:7c:14:8a:e7:d0:
34:c4:43:96:42:cc:0f:71:b6:74:15:6d:aa:2f:f6:
6d:6c:4c:19:8a:16:88:99:e0:27:4f:9a:e7:08:b0:
25:24:3a:0a:c0:98:c0:56:0b:89:74:0f:da:49:8c:
f0:07:17:d1:c5:7a:42:e0:3f:79:c8:04:ec:e8:1f:
54:4e:a4:63:15:0d:a5:68:cd:51:e3:4d:bc:9f:1d:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:04:66:14:F8:B2:DD:EA:FE:0B:FA:E3:65:D0:7D:C0:5D:34:97:2C
X509v3 Authority Key Identifier:
keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4b:05:27:61:5e:f5:30:4b:06:01:49:ad:72:f5:8e:4a:3e:
b2:82:95:dd:bc:a2:e6:a9:22:df:74:74:3c:85:88:18:2b:c4:
b6:bf:a8:bd:0c:fb:af:e0:a9:c1:f3:6a:d1:36:1a:c4:d4:d0:
ea:53:e2:55:f5:aa:85:95:7f:55:62:83:61:18:75:95:7c:32:
0a:f9:10:76:ef:5f:f0:cb:05:da:b6:90:60:27:4b:4b:4e:32:
76:54:7b:5f:ae:ae:3c:a6:b9:c7:fb:fe:f1:36:4b:53:b6:60:
c5:6e:19:db:48:b0:39:ad:fe:f9:f0:a2:97:f8:63:54:6d:9b:
33:bd:7b:e9:34:56:98:66:ae:66:a4:a0:95:d3:67:64:81:9c:
33:80:b3:67:20:38:27:46:9a:0c:ba:a8:96:51:a2:f5:87:7a:
68:36:04:6d:ca:ea:18:a6:f8:10:f3:ce:6c:d2:6e:fe:62:aa:
2d:b3:34:37:90:5b:1c:f2:fe:fc:6b:b9:04:ef:8f:59:88:b2:
87:89:ba:6f:22:a3:b0:3d:c2:91:78:8a:53:4e:41:e3:e8:d3:
cc:90:8a:0b:de:eb:ef:e2:42:22:38:7e:50:7e:7c:c0:85:c7:
0c:fa:39:c1:48:be:5b:44:6f:40:bb:7c:46:3f:cc:2e:b6:d8:
fb:99:56:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DtKYyM8l9MWYpU1vPvOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0
YThiMTIwHhcNMjUwNjI4MTUwMTMxWhcNMjUwNjI5MTUwMTMxWjAzMTEwLwYDVQQD
EyhiODA0NjYxNGY4YjJkZGVhZmUwYmZhZTM2NWQwN2RjMDVkMzQ5NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oOkHFEkwIBdocnkimh0fTXLCQTw
AfgrYLO2MiyJ2PRAAfmPjqOgAe5IiXzrQna2QK1OF1LsWdQ+lEmd/HfHkjvSh5Cd
9QwXxmB9hnWqfPJd4OnDAwSD+ZJoTE/b0ms5T2U3rIqsrupm200mfzswgWa9FeEI
lRi2t46waKxvkqiuVmKe74PWyutJzKQZ5cp8uLxSrd0KmLxDULdnSQDz5dQckQG7
PKXXn5zFWeo3fBSK59A0xEOWQswPcbZ0FW2qL/ZtbEwZihaImeAnT5rnCLAlJDoK
wJjAVguJdA/aSYzwBxfRxXpC4D95yATs6B9UTqRjFQ2laM1R4028nx1CtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgEZhT4st3q/gv642XQfcBdNJcsMB8GA1UdIwQY
MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt
NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl
LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0sFJ2Fe
9TBLBgFJrXL1jko+soKV3byi5qki33R0PIWIGCvEtr+ovQz7r+CpwfNq0TYaxNTQ
6lPiVfWqhZV/VWKDYRh1lXwyCvkQdu9f8MsF2raQYCdLS04ydlR7X66uPKa5x/v+
8TZLU7ZgxW4Z20iwOa3++fCil/hjVG2bM7176TRWmGauZqSgldNnZIGcM4CzZyA4
J0aaDLqollGi9Yd6aDYEbcrqGKb4EPPObNJu/mKqLbM0N5BbHPL+/Gu5BO+PWYiy
h4m6byKjsD3CkXiKU05B4+jTzJCKC97r7+JCIjh+UH58wIXHDPo5wUi+W0RvQLt8
Rj/MLrbY+5lWaw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:50 2025 by rpki-client