Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: R8B0Or3sraRQyC3PymxowzXTFu0x5wRndClTGCqJflc=
Subject key identifier: 11:B9:29:60:CA:2D:97:C7:DF:DB:97:FB:8A:A1:A1:1C:04:47:3C:3C
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 0199FDD8D601B657188F6E439B3FBEF992AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0E17
Signing time: Sun 19 Oct 2025 19:01:10 +0000
Manifest this update: Sun 19 Oct 2025 19:01:10 +0000
Manifest next update: Mon 20 Oct 2025 19:01:10 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: NFAtvbH6uLYGe6KR1JXCvtame2q5DydlNpmDZkTx7e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d6:01:b6:57:18:8f:6e:43:9b:3f:be:f9:92:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Oct 19 19:01:10 2025 GMT
Not After : Oct 20 19:01:10 2025 GMT
Subject: CN=11b92960ca2d97c7dfdb97fb8aa1a11c04473c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:e9:1f:67:ec:84:c3:c8:2e:38:ad:d3:4f:
4c:6d:86:ca:0a:69:2a:99:0a:37:d5:6c:c1:84:bf:
2f:d2:d4:7b:03:4e:2a:37:c9:e1:f5:67:d9:62:dc:
dc:74:6a:53:71:9b:e3:ef:15:d5:42:a9:a6:0a:2a:
3c:67:5c:8b:9e:0b:f9:6f:7b:11:fb:7d:83:fd:ff:
ee:d8:e6:59:68:f8:3c:c9:dd:44:78:42:81:a5:e9:
51:ad:7d:78:23:22:f6:27:0d:a7:16:5f:bc:c1:3f:
03:72:4e:d7:1b:0f:5f:d3:a9:eb:ad:be:98:2e:2c:
8d:68:db:0b:9a:bb:9b:60:08:ef:fc:ef:c1:28:4a:
81:a9:f5:9c:47:da:03:f9:12:a7:6d:85:5b:b6:13:
39:45:94:e6:79:de:37:24:38:16:8a:da:4e:c4:4b:
77:91:e7:c7:19:83:f2:51:c4:43:f0:dd:c0:f5:18:
11:05:44:01:27:9a:b7:89:70:cc:99:e2:51:4b:2d:
13:7a:8b:77:85:0d:1d:f9:f0:6d:0e:33:19:21:c8:
0a:38:f8:74:0d:62:d7:7e:9c:50:fc:95:8c:62:f5:
d1:a2:71:b7:3c:8f:6f:71:cc:8c:f6:24:b1:59:20:
bc:0d:ae:93:37:cd:4b:8b:22:7b:df:3c:e0:a9:f4:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:29:60:CA:2D:97:C7:DF:DB:97:FB:8A:A1:A1:1C:04:47:3C:3C
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a1:87:9e:81:0e:1e:94:99:31:18:fe:d1:e6:fa:74:ad:bb:
7c:6c:d7:56:dd:19:24:e6:17:19:cd:31:ef:6c:6a:9b:d1:81:
b1:e6:70:b9:10:49:26:b0:7b:7d:e6:2f:03:a1:a7:66:3a:8f:
38:00:78:37:91:f6:da:28:a5:c0:c6:c5:1f:71:79:3b:b1:67:
e1:0e:83:62:80:28:15:25:cd:95:27:13:87:31:1f:85:cb:04:
ec:68:8b:c1:20:8d:46:e7:76:ab:f0:0d:40:50:57:e2:49:ab:
03:16:ca:b4:4c:79:0e:d8:03:b5:ea:99:e9:86:12:14:cf:28:
78:68:b2:49:7a:33:27:04:c9:04:de:4e:1b:77:d8:00:8c:c8:
3e:2b:70:22:bf:82:70:d0:61:ef:c8:b4:66:75:e6:18:69:f0:
bb:52:1c:53:39:4e:b5:3f:31:e2:17:1f:35:43:0c:7d:fc:b0:
8b:e6:17:bc:b0:d0:1f:a2:16:f4:3b:b4:25:c2:db:69:72:57:
74:3f:cf:43:ba:bf:3b:91:9f:6a:ec:63:23:06:88:b5:fa:bc:
f3:21:40:16:38:ce:64:77:92:60:13:8d:df:ee:de:4e:32:7b:
b4:a5:0b:11:ab:f5:44:e6:51:b9:b3:ab:e8:f0:9e:64:de:a0:
99:89:39:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92NYBtlcYj25Dmz+++ZKtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTJmMzU2MGMxNWI5NGQxZWY0OTc3MjY4NDVkNzg2Nzg2
YmM3NjIwHhcNMjUxMDE5MTkwMTEwWhcNMjUxMDIwMTkwMTEwWjAzMTEwLwYDVQQD
EygxMWI5Mjk2MGNhMmQ5N2M3ZGZkYjk3ZmI4YWExYTExYzA0NDczYzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun/pH2fshMPILjit009MbYbKCmkq
mQo31WzBhL8v0tR7A04qN8nh9WfZYtzcdGpTcZvj7xXVQqmmCio8Z1yLngv5b3sR
+32D/f/u2OZZaPg8yd1EeEKBpelRrX14IyL2Jw2nFl+8wT8Dck7XGw9f06nrrb6Y
LiyNaNsLmrubYAjv/O/BKEqBqfWcR9oD+RKnbYVbthM5RZTmed43JDgWitpOxEt3
kefHGYPyUcRD8N3A9RgRBUQBJ5q3iXDMmeJRSy0Teot3hQ0d+fBtDjMZIcgKOPh0
DWLXfpxQ/JWMYvXRonG3PI9vccyM9iSxWSC8Da6TN81LiyJ73zzgqfT1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBG5KWDKLZfH39uX+4qhoRwERzw8MB8GA1UdIwQY
MBaAFHGS81YMFblNHvSXcmhF14Z4a8diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgt
NzVlZTI0YTNmOTZiLzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgtNzVlZTI0YTNmOTZi
LzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKGHnoEO
HpSZMRj+0eb6dK27fGzXVt0ZJOYXGc0x72xqm9GBseZwuRBJJrB7feYvA6GnZjqP
OAB4N5H22iilwMbFH3F5O7Fn4Q6DYoAoFSXNlScThzEfhcsE7GiLwSCNRud2q/AN
QFBX4kmrAxbKtEx5DtgDteqZ6YYSFM8oeGiySXozJwTJBN5OG3fYAIzIPitwIr+C
cNBh78i0ZnXmGGnwu1IcUzlOtT8x4hcfNUMMffywi+YXvLDQH6IW9Du0JcLbaXJX
dD/PQ7q/O5GfauxjIwaItfq88yFAFjjOZHeSYBON3+7eTjJ7tKULEav1ROZRubOr
6PCeZN6gmYk5WA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:34 2025 by rpki-client