Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: P9hmuwN6L2EsUwRT5JrXL66FoELSnESMExK6kj9uCvs=
Subject key identifier: CC:FF:26:EC:A4:CA:EB:B6:2C:F4:B0:5D:A6:F4:38:88:49:7B:2D:43
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 0198D472602F5C68EF7E0765580968D29DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:02 +0000
Manifest this update: Sat 23 Aug 2025 01:02:02 +0000
Manifest next update: Sun 24 Aug 2025 01:02:02 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: 6OnCPinxr0Zt1WApAAptjihQVzKZzwPj1YCWjyTX9LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:60:2f:5c:68:ef:7e:07:65:58:09:68:d2:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Aug 23 01:02:02 2025 GMT
Not After : Aug 24 01:02:02 2025 GMT
Subject: CN=ccff26eca4caebb62cf4b05da6f43888497b2d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:e1:25:b5:b0:be:5e:dd:71:0a:b9:57:97:
f1:0e:b0:cc:07:8c:a0:61:4c:0b:6c:ec:62:bf:d3:
f0:ed:e6:d5:e2:88:c1:85:0b:6a:ca:ae:1c:27:81:
e4:c9:91:69:00:ad:5c:af:2d:9f:1c:7b:a8:fd:54:
d7:91:5e:57:5f:e8:17:7e:b6:62:57:9d:12:9b:3c:
05:d7:02:bc:81:29:15:1b:39:af:6c:ed:d7:cd:70:
5e:fc:9c:c7:4d:1a:c7:19:a1:3c:7c:21:b9:91:bd:
c6:3e:a5:0c:c1:94:ce:df:79:eb:b3:78:6e:22:16:
0d:94:d2:49:7e:0e:5b:30:9a:9a:01:a0:74:18:8a:
61:c6:9d:04:9b:cc:87:ae:c9:89:5a:61:23:ae:d6:
ae:fe:e6:bb:e7:18:c2:63:7a:4b:e5:63:6d:d4:d0:
81:62:c4:04:82:45:b9:55:21:e6:83:4e:4c:0c:0a:
91:d7:33:2e:1c:17:fc:8c:51:e8:bb:cb:0f:27:1e:
da:df:f1:c5:8c:b6:f4:b0:36:47:f9:5c:e5:ec:43:
3f:8c:3b:7a:63:0b:9d:fe:50:10:91:53:c8:61:af:
a1:7b:35:a6:13:51:48:85:e3:1d:a1:99:a1:62:63:
05:85:fe:d6:35:5f:cd:e3:f9:b2:9d:89:1f:2c:02:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FF:26:EC:A4:CA:EB:B6:2C:F4:B0:5D:A6:F4:38:88:49:7B:2D:43
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:28:bc:31:bd:cd:9f:12:00:27:ce:23:fa:e1:1a:15:bf:04:
ef:8a:17:66:9f:42:ba:7e:3b:1f:76:f9:19:c7:4e:1a:b1:92:
7d:26:e1:8f:b0:40:29:5c:da:8d:ff:ad:12:17:8c:83:f0:94:
a1:4d:ae:20:c5:1c:89:32:74:33:65:53:24:f7:20:c0:d7:7d:
b8:a7:5f:58:f4:9d:f9:ba:31:92:ef:9b:12:15:4d:03:62:73:
6b:41:e2:83:ff:10:2f:19:bc:a0:e3:8d:ce:d2:28:f4:cb:aa:
a0:6b:77:65:b2:e5:45:85:57:cf:0a:1b:1a:81:db:ce:91:9a:
87:fe:cb:e5:b4:b3:e8:ee:71:69:86:f1:73:48:60:3b:d6:04:
a9:57:3f:ba:c1:ad:3d:4d:ca:1b:9b:64:18:30:7b:da:9e:2f:
1a:bd:e2:e3:8c:60:2c:0a:97:b5:9e:47:69:d8:8d:f9:a5:b5:
22:db:b0:4f:8c:a4:c7:2c:f4:b0:72:c5:eb:e1:e9:81:03:8f:
2d:da:eb:d7:4f:aa:c1:f3:a1:11:ee:82:08:5c:8b:1d:40:f5:
78:00:d0:1e:ac:3c:e2:39:28:68:48:67:de:e0:e0:3d:0a:98:
6d:33:6a:d9:43:20:36:3c:ce:fc:55:2d:94:dc:ef:ff:fa:c7:
29:97:c6:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcmAvXGjvfgdlWAlo0p2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmRjYmU1ODBlOTQyZjIxMGEyNzg3MWI1NjUwYzhjMjkw
NjM4NTEwHhcNMjUwODIzMDEwMjAyWhcNMjUwODI0MDEwMjAyWjAzMTEwLwYDVQQD
EyhjY2ZmMjZlY2E0Y2FlYmI2MmNmNGIwNWRhNmY0Mzg4ODQ5N2IyZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR7hJbWwvl7dcQq5V5fxDrDMB4yg
YUwLbOxiv9Pw7ebV4ojBhQtqyq4cJ4HkyZFpAK1cry2fHHuo/VTXkV5XX+gXfrZi
V50SmzwF1wK8gSkVGzmvbO3XzXBe/JzHTRrHGaE8fCG5kb3GPqUMwZTO33nrs3hu
IhYNlNJJfg5bMJqaAaB0GIphxp0Em8yHrsmJWmEjrtau/ua75xjCY3pL5WNt1NCB
YsQEgkW5VSHmg05MDAqR1zMuHBf8jFHou8sPJx7a3/HFjLb0sDZH+Vzl7EM/jDt6
Ywud/lAQkVPIYa+hezWmE1FIheMdoZmhYmMFhf7WNV/N4/mynYkfLAKf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz/Juykyuu2LPSwXab0OIhJey1DMB8GA1UdIwQY
MBaAFM8ty+WA6ULyEKJ4cbVlDIwpBjhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2It
NWQ0OTM2OGRkMmZmLzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2ItNWQ0OTM2OGRkMmZm
LzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJyi8Mb3N
nxIAJ84j+uEaFb8E74oXZp9Cun47H3b5GcdOGrGSfSbhj7BAKVzajf+tEheMg/CU
oU2uIMUciTJ0M2VTJPcgwNd9uKdfWPSd+boxku+bEhVNA2Jza0Hig/8QLxm8oOON
ztIo9MuqoGt3ZbLlRYVXzwobGoHbzpGah/7L5bSz6O5xaYbxc0hgO9YEqVc/usGt
PU3KG5tkGDB72p4vGr3i44xgLAqXtZ5HadiN+aW1ItuwT4ykxyz0sHLF6+HpgQOP
Ldrr10+qwfOhEe6CCFyLHUD1eADQHqw84jkoaEhn3uDgPQqYbTNq2UMgNjzO/FUt
lNzv//rHKZfGdQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:24 2025 by rpki-client