Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: aoutl0k7iE742hLhm6cEOvPXVrFHjDzxdUUDpHFahTY=
Subject key identifier: 79:8D:30:2A:E2:4B:88:51:E6:1D:7D:2A:84:66:39:EB:31:A4:D9:45
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 0197B77CBD90E0BBD94BFD0D24587F775AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0CF8
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: NzzSymQKC9y3d3d0FuVlyp7JGqKqRl2qhd5GAQ6hVHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bd:90:e0:bb:d9:4b:fd:0d:24:58:7f:77:5a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=798d302ae24b8851e61d7d2a846639eb31a4d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:b2:c6:2d:97:92:66:55:48:d1:a3:3a:35:
d2:4a:e1:7f:45:6a:3a:de:20:33:78:7b:40:c0:0b:
9e:b8:4b:e2:8a:42:5a:9f:d1:49:01:93:a7:4e:ec:
63:ad:bc:9d:05:69:18:d0:73:3c:b3:de:c9:4e:61:
a5:7a:de:b4:e0:18:6b:e1:f2:df:f7:24:62:cf:32:
4d:b8:4e:da:44:c2:c8:ab:56:5e:65:34:50:dd:6e:
0a:4b:c5:77:c1:5e:b2:4e:ab:ae:8a:ab:5b:7f:5f:
46:2d:ac:30:dd:2c:81:fe:af:20:df:57:1d:7a:e9:
c5:d5:f1:6d:fc:48:5c:0f:ab:31:01:ce:92:d3:44:
37:8a:64:b5:27:f5:e2:5b:e5:c1:b7:46:35:fa:2c:
dd:91:0f:2d:aa:16:cf:79:f1:ef:8d:40:f8:16:1f:
c1:57:94:a2:ac:29:8c:de:19:d5:4c:0f:06:7d:ca:
e0:8b:5b:72:10:49:bd:59:8a:e8:76:c2:eb:47:db:
26:ba:ce:f6:00:ce:3e:4b:d7:9b:f9:6d:67:93:32:
a0:30:8e:f1:52:44:ef:98:51:44:f4:30:1a:a2:85:
5c:b9:e5:0f:99:2e:13:df:42:1f:46:15:fe:23:71:
dd:72:41:be:3b:8e:84:8c:19:55:b7:7f:6a:41:bc:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8D:30:2A:E2:4B:88:51:E6:1D:7D:2A:84:66:39:EB:31:A4:D9:45
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:14:12:54:e8:ec:54:6f:d5:db:b8:a3:90:e8:fe:ed:bd:
6f:cf:a2:3f:c9:f9:fa:20:5f:51:62:9d:52:73:12:0e:e6:74:
6c:8f:cd:fd:52:0b:13:15:55:5c:29:e5:ef:5c:db:62:02:e3:
b0:34:79:b2:63:81:d7:af:ae:8e:f7:ca:d1:dd:22:db:56:6d:
a8:04:9a:0c:3d:78:85:2f:ee:2d:09:cf:30:d5:6f:cc:54:20:
11:a9:4e:92:82:09:ee:af:f6:3f:a3:d3:0b:4c:1f:69:e8:47:
58:e2:9d:d9:62:0d:ed:90:eb:4f:d3:61:43:b3:53:1c:1a:74:
48:09:44:91:f5:08:a2:18:24:f9:0b:db:8a:bd:05:52:c4:cf:
6b:f4:ab:46:79:2e:28:f9:c3:18:a4:9d:a8:fe:3e:ee:6d:31:
79:79:86:79:b6:2f:bb:61:f3:6e:8d:43:9a:46:a1:4b:d0:fe:
3d:a1:42:b9:e6:fd:cb:f7:e6:fa:8c:b0:df:cd:26:00:34:52:
e7:4f:a5:bb:88:90:c3:6e:35:04:b1:86:45:0b:db:57:42:00:
d9:62:ea:d2:19:a7:75:d9:dd:3c:59:4c:2d:c7:03:7f:00:3e:
8b:a1:04:3e:8c:be:51:81:ef:2e:28:01:d9:76:a7:b7:f3:67:
03:9f:f9:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fL2Q4LvZS/0NJFh/d1ryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1
YWNkNGEwHhcNMjUwNjI4MTcwMTM0WhcNMjUwNjI5MTcwMTM0WjAzMTEwLwYDVQQD
Eyg3OThkMzAyYWUyNGI4ODUxZTYxZDdkMmE4NDY2MzllYjMxYTRkOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm6yxi2XkmZVSNGjOjXSSuF/RWo6
3iAzeHtAwAueuEviikJan9FJAZOnTuxjrbydBWkY0HM8s97JTmGlet604Bhr4fLf
9yRizzJNuE7aRMLIq1ZeZTRQ3W4KS8V3wV6yTquuiqtbf19GLaww3SyB/q8g31cd
eunF1fFt/EhcD6sxAc6S00Q3imS1J/XiW+XBt0Y1+izdkQ8tqhbPefHvjUD4Fh/B
V5SirCmM3hnVTA8Gfcrgi1tyEEm9WYrodsLrR9smus72AM4+S9eb+W1nkzKgMI7x
UkTvmFFE9DAaooVcueUPmS4T30IfRhX+I3HdckG+O46EjBlVt39qQbxBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmNMCriS4hR5h19KoRmOesxpNlFMB8GA1UdIwQY
MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt
MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0
LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7sUElTo
7FRv1du4o5Do/u29b8+iP8n5+iBfUWKdUnMSDuZ0bI/N/VILExVVXCnl71zbYgLj
sDR5smOB16+ujvfK0d0i21ZtqASaDD14hS/uLQnPMNVvzFQgEalOkoIJ7q/2P6PT
C0wfaehHWOKd2WIN7ZDrT9NhQ7NTHBp0SAlEkfUIohgk+Qvbir0FUsTPa/SrRnku
KPnDGKSdqP4+7m0xeXmGebYvu2Hzbo1DmkahS9D+PaFCueb9y/fm+oyw380mADRS
50+lu4iQw241BLGGRQvbV0IA2WLq0hmnddndPFlMLccDfwA+i6EEPoy+UYHvLigB
2Xant/NnA5/5tQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:17:30 2025 by rpki-client