Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
File: zv4YrJccgqd399sZ_6szSjJTdwM.mft (raw, json)
Hash identifier: y/ra1NO6MvN2AELycM+bmPeZIIC6QFIJHWawUaT5R64=
Subject key identifier: D7:06:A2:D7:E4:F9:47:69:22:EA:FC:26:AF:6C:0A:D1:5C:CF:0E:4E
Authority key identifier: CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
Certificate issuer: /CN=cefe18ac971c82a777f7db19ffab334a32537703
Certificate serial: 0198D5BBDD4E982123020D5D0432FA9EA7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
Manifest number: 10FC
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: zv4YrJccgqd399sZ_6szSjJTdwM.crl (hash: UmCpDFbNh5RZMYAIR8ZTeEFYc4Mzk7Dqn6uYxYSpyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:dd:4e:98:21:23:02:0d:5d:04:32:fa:9e:a7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefe18ac971c82a777f7db19ffab334a32537703
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=d706a2d7e4f9476922eafc26af6c0ad15ccf0e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:63:f3:a4:fe:62:1d:8b:ee:3e:09:cb:27:
2d:18:11:7f:67:d3:78:de:ba:e2:05:56:98:aa:23:
15:9c:b3:ea:75:51:b7:ee:fa:7c:63:d8:19:9b:7e:
ab:ca:ab:3a:2d:bd:5a:0f:c3:d7:9c:47:84:8e:ff:
5d:29:40:81:73:68:48:86:05:b8:f2:4d:27:aa:cc:
b9:e3:74:db:af:d7:fd:25:36:8a:8e:4c:e4:7f:15:
e0:7e:a3:db:9b:a7:33:d7:37:d7:19:14:01:06:fb:
c3:c0:c4:14:b6:e6:fe:e9:bc:c9:ef:49:40:71:cd:
b7:7c:2d:bc:1d:88:0a:8e:6e:41:41:dd:32:0a:b2:
6b:bc:b8:c6:b1:e9:77:30:a6:ea:cc:54:e1:56:09:
bd:e9:43:fe:5a:ca:d7:b3:1a:8c:df:bd:5e:82:12:
02:f3:a1:82:1e:e2:d2:9a:6a:88:fb:bc:78:42:a7:
30:7b:e2:80:0d:4c:9d:9c:31:45:27:ce:52:ed:c0:
e6:9c:02:1d:2a:a3:fb:e7:97:15:bc:34:b8:ca:63:
d3:b1:e5:ae:cf:74:b0:1f:e9:06:bc:31:5b:af:10:
9e:93:4b:95:88:bf:8b:cc:58:43:07:99:11:ca:e0:
c4:81:1c:a7:8d:69:b3:61:f7:6f:db:a6:7e:b5:7f:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:A2:D7:E4:F9:47:69:22:EA:FC:26:AF:6C:0A:D1:5C:CF:0E:4E
X509v3 Authority Key Identifier:
keyid:CE:FE:18:AC:97:1C:82:A7:77:F7:DB:19:FF:AB:33:4A:32:53:77:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv4YrJccgqd399sZ_6szSjJTdwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7c79a9-61b0-484c-87e5-816111344fbf/1/zv4YrJccgqd399sZ_6szSjJTdwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3f:83:5a:cc:c1:1d:a2:64:f6:bb:b0:a0:a3:f3:a4:87:f8:
41:ae:54:ea:2c:b9:b6:33:4b:93:c3:5c:25:c5:e7:da:8f:a7:
e5:69:c1:b5:da:da:a5:49:e6:65:1d:3b:2b:ef:a8:88:99:6f:
4e:47:65:92:f4:c4:13:6b:93:9f:76:5c:bf:c4:ce:94:68:bd:
37:cc:e4:06:32:a3:21:f1:10:dc:a3:ad:30:3c:04:fb:45:93:
85:6e:8d:54:ae:45:fe:8b:00:2a:71:0f:98:ac:eb:fb:a5:fc:
33:e9:77:13:f3:7c:ee:9c:64:00:9f:cd:af:a5:21:37:69:0f:
60:8c:e9:ea:b8:c6:27:5e:85:74:5f:1e:91:bf:0d:84:9e:c6:
dd:c7:ff:53:40:a9:2a:2e:46:60:d3:c1:c2:1d:ea:f5:4c:9a:
07:0d:54:83:f7:8b:c5:4f:93:f2:88:3f:1a:d2:22:fc:fa:e4:
59:b5:23:eb:81:2b:1e:29:9b:02:ad:73:1d:ba:3f:58:db:66:
37:97:3d:bb:28:b5:c8:73:08:72:93:84:a2:ce:69:0d:93:ce:
9a:69:f4:e5:22:31:00:a0:d0:1b:8c:5c:3f:c4:a9:fb:84:e4:
f5:c7:a6:76:f4:f8:a0:e2:e2:78:c9:5d:fc:34:15:ac:8a:d4:
b2:49:11:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu91OmCEjAg1dBDL6nqe2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZmUxOGFjOTcxYzgyYTc3N2Y3ZGIxOWZmYWIzMzRhMzI1
Mzc3MDMwHhcNMjUwODIzMDcwMTU1WhcNMjUwODI0MDcwMTU1WjAzMTEwLwYDVQQD
EyhkNzA2YTJkN2U0Zjk0NzY5MjJlYWZjMjZhZjZjMGFkMTVjY2YwZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLhj86T+Yh2L7j4JyyctGBF/Z9N4
3rriBVaYqiMVnLPqdVG37vp8Y9gZm36ryqs6Lb1aD8PXnEeEjv9dKUCBc2hIhgW4
8k0nqsy543Tbr9f9JTaKjkzkfxXgfqPbm6cz1zfXGRQBBvvDwMQUtub+6bzJ70lA
cc23fC28HYgKjm5BQd0yCrJrvLjGsel3MKbqzFThVgm96UP+WsrXsxqM371eghIC
86GCHuLSmmqI+7x4Qqcwe+KADUydnDFFJ85S7cDmnAIdKqP755cVvDS4ymPTseWu
z3SwH+kGvDFbrxCek0uViL+LzFhDB5kRyuDEgRynjWmzYfdv26Z+tX+auQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcGotfk+UdpIur8Jq9sCtFczw5OMB8GA1UdIwQY
MBaAFM7+GKyXHIKnd/fbGf+rM0oyU3cDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUt
ODE2MTExMzQ0ZmJmLzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83Yzc5YTktNjFiMC00ODRjLTg3ZTUtODE2MTExMzQ0ZmJm
LzEvenY0WXJKY2NncWQzOTlzWl82c3pTakpUZHdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT+DWszB
HaJk9ruwoKPzpIf4Qa5U6iy5tjNLk8NcJcXn2o+n5WnBtdrapUnmZR07K++oiJlv
TkdlkvTEE2uTn3Zcv8TOlGi9N8zkBjKjIfEQ3KOtMDwE+0WThW6NVK5F/osAKnEP
mKzr+6X8M+l3E/N87pxkAJ/Nr6UhN2kPYIzp6rjGJ16FdF8ekb8NhJ7G3cf/U0Cp
Ki5GYNPBwh3q9UyaBw1Ug/eLxU+T8og/GtIi/PrkWbUj64ErHimbAq1zHbo/WNtm
N5c9uyi1yHMIcpOEos5pDZPOmmn05SIxAKDQG4xcP8Sp+4Tk9cemdvT4oOLieMld
/DQVrIrUskkR4A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:21 2025 by rpki-client