Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
File: C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft (raw, json)
Hash identifier: aLAOkPScMt1s350oiDa3CMP31OKaJNwimqmUR0AYVZk=
Subject key identifier: 5F:9C:53:97:E9:54:13:D7:59:60:AB:41:8F:B8:FA:F0:09:1E:59:0B
Authority key identifier: 0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
Certificate issuer: /CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Certificate serial: 0198D5BBA645C61F958C4715699B48C7705B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
Manifest number: 0124
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl (hash: Z532Xqb7SrsLxvvnJ1dxbRZuHEBXq3MWoH2m6sDrXVg=)
2: ZFWlomNdM98mTRRpq_aoaHkQskg.roa (hash: 2nCI1N6NzlzYTCwqy1BPldF9j5r8eU6FY2+RvTWo+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a6:45:c6:1f:95:8c:47:15:69:9b:48:c7:70:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfcfde0a772fa7c3e9d19fa7077f7026bd771b2
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=5f9c5397e95413d75960ab418fb8faf0091e590b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:22:32:13:ee:c0:01:35:cf:7e:91:28:3d:
95:6a:f8:5c:ba:7b:54:19:d0:af:b4:cf:d0:6c:97:
cc:a6:29:84:c2:80:d6:7d:65:ff:32:2b:b1:48:aa:
cc:8b:7e:b0:a8:2b:f0:28:3c:1e:56:cf:37:7a:24:
cb:c5:b8:23:c1:5f:b9:b0:10:7f:36:3f:86:69:d9:
96:c2:09:51:48:24:ab:61:3c:1e:7a:d8:c0:b6:d1:
44:db:52:92:09:8e:2a:8e:17:11:39:f1:1f:d8:0a:
72:ef:8e:72:b2:fd:60:e9:42:0f:44:9e:e1:14:50:
7f:05:8d:c6:9a:54:00:93:25:05:29:5f:07:cb:db:
7d:ce:71:3b:56:cb:14:fd:7c:42:10:30:af:67:d9:
72:de:d9:96:fc:1a:a4:4d:2c:f5:6a:75:fa:2b:d8:
90:05:6d:58:eb:cd:f1:e6:6a:86:bd:96:ca:72:55:
2d:be:11:44:ad:81:2c:4d:73:9c:bb:39:e9:e7:91:
28:4d:1b:07:02:f9:a4:e3:79:21:80:9b:1b:7e:3d:
e7:f1:4a:fd:d6:e6:16:c9:d0:18:9b:af:e4:3c:b3:
42:41:fa:98:da:38:07:98:f4:1d:8e:7f:f8:3c:20:
59:f6:ce:6c:f4:6f:70:14:e1:44:da:ea:47:0f:37:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9C:53:97:E9:54:13:D7:59:60:AB:41:8F:B8:FA:F0:09:1E:59:0B
X509v3 Authority Key Identifier:
keyid:0B:FC:FD:E0:A7:72:FA:7C:3E:9D:19:FA:70:77:F7:02:6B:D7:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_z94Kdy-nw-nRn6cHf3AmvXcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5ce3dc-03e2-4783-a34c-4375d675fcf3/1/C_z94Kdy-nw-nRn6cHf3AmvXcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ec:fd:8d:37:57:28:1b:13:2e:78:65:74:40:dd:ba:0d:00:
e3:db:d9:80:af:3f:e9:52:b6:34:c0:54:e4:81:4f:cd:da:34:
04:99:95:0a:0e:15:b0:84:77:c1:e8:f4:1a:c0:7c:ba:ea:69:
f9:e1:87:0d:25:08:aa:ed:d5:f4:fb:e7:58:10:ce:7b:7f:d1:
e6:df:32:e1:4a:2a:41:46:58:e4:5a:c4:7f:8e:0a:2e:6a:3b:
f2:a2:52:6b:11:d8:ca:e9:fb:c3:19:95:bf:ec:3a:b7:57:dd:
de:df:8c:f0:7f:ef:64:d4:ea:74:36:a9:7b:dc:27:64:7a:64:
e6:9a:ca:1e:ce:3b:99:0e:4d:b6:a4:bd:23:b2:f7:ec:35:fd:
41:0a:b4:e3:88:00:c5:e5:df:f7:33:63:eb:1f:41:cf:db:6f:
6b:92:5e:14:8f:5e:9b:8b:97:f1:b4:ea:36:11:fe:82:4e:79:
54:13:39:88:42:64:93:a0:98:67:c9:48:3e:27:89:d2:1c:28:
48:3b:3b:f7:2b:f9:32:e7:e6:69:36:64:a0:4a:28:e6:cc:60:
4f:de:a6:36:ec:b2:b0:e5:ee:5c:85:aa:67:ce:ab:77:16:7c:
0b:67:cb:66:44:a1:b5:2e:57:02:18:0a:42:2b:ad:03:76:f1:
5a:d5:d6:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6ZFxh+VjEcVaZtIx3BbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZmNmZGUwYTc3MmZhN2MzZTlkMTlmYTcwNzdmNzAyNmJk
NzcxYjIwHhcNMjUwODIzMDcwMTQxWhcNMjUwODI0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg1ZjljNTM5N2U5NTQxM2Q3NTk2MGFiNDE4ZmI4ZmFmMDA5MWU1OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVoiMhPuwAE1z36RKD2VavhcuntU
GdCvtM/QbJfMpimEwoDWfWX/MiuxSKrMi36wqCvwKDweVs83eiTLxbgjwV+5sBB/
Nj+GadmWwglRSCSrYTweetjAttFE21KSCY4qjhcROfEf2Apy745ysv1g6UIPRJ7h
FFB/BY3GmlQAkyUFKV8Hy9t9znE7VssU/XxCEDCvZ9ly3tmW/BqkTSz1anX6K9iQ
BW1Y683x5mqGvZbKclUtvhFErYEsTXOcuznp55EoTRsHAvmk43khgJsbfj3n8Ur9
1uYWydAYm6/kPLNCQfqY2jgHmPQdjn/4PCBZ9s5s9G9wFOFE2upHDzfE0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+cU5fpVBPXWWCrQY+4+vAJHlkLMB8GA1UdIwQY
MBaAFAv8/eCncvp8Pp0Z+nB39wJr13GyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMt
NDM3NWQ2NzVmY2YzLzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2UzZGMtMDNlMi00NzgzLWEzNGMtNDM3NWQ2NzVmY2Yz
LzEvQ196OTRLZHktbnctblJuNmNIZjNBbXZYY2JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+z9jTdX
KBsTLnhldEDdug0A49vZgK8/6VK2NMBU5IFPzdo0BJmVCg4VsIR3wej0GsB8uupp
+eGHDSUIqu3V9PvnWBDOe3/R5t8y4UoqQUZY5FrEf44KLmo78qJSaxHYyun7wxmV
v+w6t1fd3t+M8H/vZNTqdDape9wnZHpk5prKHs47mQ5NtqS9I7L37DX9QQq044gA
xeXf9zNj6x9Bz9tva5JeFI9em4uX8bTqNhH+gk55VBM5iEJkk6CYZ8lIPieJ0hwo
SDs79yv5MufmaTZkoEoo5sxgT96mNuyysOXuXIWqZ86rdxZ8C2fLZkShtS5XAhgK
QiutA3bxWtXWQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:42 2025 by rpki-client