Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
File: zy3L5YDpQvIQonhxtWUMjCkGOFE.mft (raw, json)
Hash identifier: tLkH58mDNFXheYm7MrpQMrkvveIHXyvRJpjRT+HZczM=
Subject key identifier: FA:A4:64:15:A7:2C:34:AD:FB:73:1D:3D:D2:4D:DC:93:51:01:7C:B0
Authority key identifier: CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
Certificate issuer: /CN=cf2dcbe580e942f210a27871b5650c8c29063851
Certificate serial: 0197C614B5302220B548A34008172BA3A4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 13:02:15 +0000
Manifest this update: Tue 01 Jul 2025 13:02:15 +0000
Manifest next update: Wed 02 Jul 2025 13:02:15 +0000
Files and hashes: 1: zy3L5YDpQvIQonhxtWUMjCkGOFE.crl (hash: BEpwDHG02Jlq8+ETdjPOXmPdQfXX2Z2EdJfdHr/NOz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:b5:30:22:20:b5:48:a3:40:08:17:2b:a3:a4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2dcbe580e942f210a27871b5650c8c29063851
Validity
Not Before: Jul 1 13:02:15 2025 GMT
Not After : Jul 2 13:02:15 2025 GMT
Subject: CN=faa46415a72c34adfb731d3dd24ddc9351017cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fa:c9:06:be:87:12:5f:17:6b:38:b3:da:7d:
4a:ca:15:bd:a4:92:10:15:b8:46:7a:f5:b9:e1:2a:
64:dd:07:69:eb:49:a0:d7:d5:be:89:d6:b2:0d:10:
b9:da:9f:80:9b:5e:24:dd:a6:70:28:51:ed:12:d2:
47:ba:0b:cf:28:00:3d:45:f2:28:dd:82:26:db:1c:
71:d9:b5:27:d7:1c:20:36:67:80:de:70:7d:d7:8a:
ff:0e:58:86:fd:1d:c8:51:0f:a8:49:94:a7:2a:01:
38:c4:a1:98:87:f2:fd:f0:5b:6d:59:b6:8b:be:65:
34:87:b4:44:de:89:68:a0:f1:80:fa:99:df:09:fd:
e3:52:8f:4b:89:c9:e6:f7:3f:64:d1:8b:9b:52:aa:
02:27:49:b8:75:ff:b3:c8:87:42:4b:9e:87:22:98:
36:27:91:6a:d8:ca:84:ec:83:a8:20:86:54:60:e4:
80:5e:e3:9e:b1:15:52:65:df:d1:84:3a:0d:f7:8b:
4a:c9:98:39:2f:90:b4:7e:23:86:ac:ca:50:87:1c:
25:71:28:7e:44:a5:ba:1c:48:80:df:f2:c5:08:3c:
27:f3:e4:24:c8:9c:ea:ac:6b:5d:f2:dd:46:1f:02:
b0:e3:c8:e8:43:10:65:66:f4:97:a9:86:d8:16:ee:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:64:15:A7:2C:34:AD:FB:73:1D:3D:D2:4D:DC:93:51:01:7C:B0
X509v3 Authority Key Identifier:
keyid:CF:2D:CB:E5:80:E9:42:F2:10:A2:78:71:B5:65:0C:8C:29:06:38:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy3L5YDpQvIQonhxtWUMjCkGOFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d8713e-d499-451c-88cb-5d49368dd2ff/1/zy3L5YDpQvIQonhxtWUMjCkGOFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d1:c2:be:36:fc:26:4a:81:45:a5:20:66:51:7b:54:05:94:
49:be:e1:43:dc:e8:cc:88:ac:4e:2e:f2:3e:9a:02:11:c7:f6:
2f:57:24:13:02:07:11:84:fd:a5:64:41:d0:d7:00:3a:77:da:
f8:ef:41:68:9a:48:e6:e6:27:24:c6:69:b8:b6:75:74:04:f8:
0a:ee:99:b2:08:e7:25:d1:e7:14:3a:2b:65:ca:8c:55:29:af:
91:b9:f6:26:31:20:5a:75:7e:8d:0a:8e:9a:f1:aa:54:bb:80:
fa:54:b3:34:af:9b:c9:6a:eb:31:14:f7:e2:d6:04:31:56:79:
cb:90:06:f1:a3:0c:e5:62:79:95:5e:13:a6:70:81:a3:37:65:
bd:8e:ef:80:5b:18:7c:12:82:22:71:b6:1f:61:33:35:b1:a8:
d0:9a:fa:0c:ba:c1:2e:d6:41:59:cc:7e:d6:9a:4b:9d:ff:9c:
67:41:6a:bd:99:29:de:ed:84:e5:6d:a6:9b:aa:72:d8:5e:b2:
e4:61:33:7e:b4:5d:98:ca:97:08:7a:fa:f1:83:67:d9:f8:62:
d5:c6:ee:32:45:6d:f0:bb:ba:a5:1d:ef:ac:75:58:ef:ef:fe:
72:70:c0:03:d7:9a:40:7d:ca:08:ff:56:6f:67:cd:6e:84:3c:
fc:12:5a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGFLUwIiC1SKNACBcro6SuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmRjYmU1ODBlOTQyZjIxMGEyNzg3MWI1NjUwYzhjMjkw
NjM4NTEwHhcNMjUwNzAxMTMwMjE1WhcNMjUwNzAyMTMwMjE1WjAzMTEwLwYDVQQD
EyhmYWE0NjQxNWE3MmMzNGFkZmI3MzFkM2RkMjRkZGM5MzUxMDE3Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/rJBr6HEl8Xaziz2n1KyhW9pJIQ
FbhGevW54Spk3Qdp60mg19W+idayDRC52p+Am14k3aZwKFHtEtJHugvPKAA9RfIo
3YIm2xxx2bUn1xwgNmeA3nB914r/DliG/R3IUQ+oSZSnKgE4xKGYh/L98FttWbaL
vmU0h7RE3olooPGA+pnfCf3jUo9Licnm9z9k0YubUqoCJ0m4df+zyIdCS56HIpg2
J5Fq2MqE7IOoIIZUYOSAXuOesRVSZd/RhDoN94tKyZg5L5C0fiOGrMpQhxwlcSh+
RKW6HEiA3/LFCDwn8+QkyJzqrGtd8t1GHwKw48joQxBlZvSXqYbYFu7NpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqkZBWnLDSt+3MdPdJN3JNRAXywMB8GA1UdIwQY
MBaAFM8ty+WA6ULyEKJ4cbVlDIwpBjhRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2It
NWQ0OTM2OGRkMmZmLzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kODcxM2UtZDQ5OS00NTFjLTg4Y2ItNWQ0OTM2OGRkMmZm
LzEvenkzTDVZRHBRdklRb25oeHRXVU1qQ2tHT0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdHCvjb8
JkqBRaUgZlF7VAWUSb7hQ9zozIisTi7yPpoCEcf2L1ckEwIHEYT9pWRB0NcAOnfa
+O9BaJpI5uYnJMZpuLZ1dAT4Cu6ZsgjnJdHnFDorZcqMVSmvkbn2JjEgWnV+jQqO
mvGqVLuA+lSzNK+byWrrMRT34tYEMVZ5y5AG8aMM5WJ5lV4TpnCBozdlvY7vgFsY
fBKCInG2H2EzNbGo0Jr6DLrBLtZBWcx+1ppLnf+cZ0FqvZkp3u2E5W2mm6py2F6y
5GEzfrRdmMqXCHr68YNn2fhi1cbuMkVt8Lu6pR3vrHVY7+/+cnDAA9eaQH3KCP9W
b2fNboQ8/BJaLA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:21:51 2025 by rpki-client