Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: ISAPhxB8MUAL5GzK3q3eFKGgx6J6ZeQHUonLv5lKV3w=
Subject key identifier: BF:2B:34:02:DA:B5:37:B3:C7:F0:38:49:4E:70:A5:0E:F2:4A:EA:67
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 0198D660CB99D0D653AAEA701E3E343848E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0D7E
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: vkh4sqewpJ5d3zka57vPTKeLGLJ9NZQ3BMuvE6hg/rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cb:99:d0:d6:53:aa:ea:70:1e:3e:34:38:48:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=bf2b3402dab537b3c7f038494e70a50ef24aea67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:8f:74:4b:63:12:2b:50:d8:0b:49:c6:35:
09:b8:af:ae:4f:26:0f:65:f5:5b:24:b8:b4:af:7a:
ec:b2:9b:89:5f:01:82:0d:8f:95:06:a7:44:98:34:
08:35:c2:80:6a:f2:db:8a:4c:2e:50:61:4e:bb:c7:
4d:48:37:95:73:a8:a7:4a:97:86:f6:59:a7:78:76:
80:f6:f8:f9:69:99:95:4c:57:ac:29:01:4c:b4:b0:
30:13:e3:57:a2:80:d9:54:d7:e6:cd:75:65:aa:de:
6b:cd:82:ef:65:12:3b:6e:6b:5a:f5:60:4b:ed:e1:
b0:f5:34:83:2a:aa:f0:fc:ee:a4:db:15:72:ad:24:
81:a5:0c:27:df:97:10:03:33:77:0c:cf:57:00:c1:
26:45:94:29:89:7a:38:b0:31:e9:0f:97:57:0c:52:
e0:2e:37:cd:65:44:5d:45:a2:f4:79:85:fb:7c:cb:
40:c6:7b:19:4f:e6:a7:89:9f:6d:b9:f4:4e:6f:1a:
43:03:cd:8b:10:2d:2d:3e:4c:69:5b:f1:91:36:19:
65:68:f5:ef:df:4a:e5:08:e4:db:f9:b0:6f:14:d0:
37:ae:ae:2b:6e:b4:aa:b8:58:48:4f:21:3e:3b:eb:
24:81:fa:69:26:7f:ab:71:bb:46:cc:09:18:61:6a:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2B:34:02:DA:B5:37:B3:C7:F0:38:49:4E:70:A5:0E:F2:4A:EA:67
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7e:ef:cc:a2:a1:66:42:36:5d:96:d4:8c:89:29:cc:dd:18:
17:2e:e8:39:23:0b:8c:b9:3e:8d:cd:c3:b1:b0:80:c7:cc:47:
bc:c4:ac:20:db:5f:14:16:bc:5b:ff:43:db:33:07:2a:40:e8:
8b:7c:55:65:59:4e:37:9f:38:11:c0:63:34:25:32:4c:8e:b3:
f5:80:e6:3a:2c:45:f8:e6:6a:27:28:b5:0f:96:59:28:71:87:
85:2b:e1:13:e4:2c:e1:0b:f5:09:79:e1:6c:8f:0c:7b:2f:ac:
b5:b8:89:75:53:0c:20:2e:ae:22:b8:16:74:13:9d:49:a2:c5:
14:bb:35:8f:01:1c:46:18:b0:e9:f9:50:2b:54:63:f0:e0:1d:
fe:59:7b:23:78:6a:ad:86:5e:0a:60:09:86:98:f5:fa:4c:bd:
29:81:a6:20:e2:75:04:e9:01:ca:8b:0a:69:c5:a3:b4:9f:e6:
63:1a:18:3f:57:8b:fe:99:44:45:57:67:3d:ce:cc:c9:81:31:
2f:a8:bf:f7:0a:26:c1:5d:37:a3:ac:50:40:a2:53:da:4a:09:
7f:23:b9:2c:a8:48:60:cd:07:cd:d2:07:aa:12:ab:5e:8f:a8:
0b:c7:2b:72:20:ec:98:4b:7e:be:5d:50:78:a0:41:c7:62:08:
8e:e4:3a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMuZ0NZTqupwHj40OEjpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTJmMzU2MGMxNWI5NGQxZWY0OTc3MjY4NDVkNzg2Nzg2
YmM3NjIwHhcNMjUwODIzMTAwMjA0WhcNMjUwODI0MTAwMjA0WjAzMTEwLwYDVQQD
EyhiZjJiMzQwMmRhYjUzN2IzYzdmMDM4NDk0ZTcwYTUwZWYyNGFlYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNmPdEtjEitQ2AtJxjUJuK+uTyYP
ZfVbJLi0r3rsspuJXwGCDY+VBqdEmDQINcKAavLbikwuUGFOu8dNSDeVc6inSpeG
9lmneHaA9vj5aZmVTFesKQFMtLAwE+NXooDZVNfmzXVlqt5rzYLvZRI7bmta9WBL
7eGw9TSDKqrw/O6k2xVyrSSBpQwn35cQAzN3DM9XAMEmRZQpiXo4sDHpD5dXDFLg
LjfNZURdRaL0eYX7fMtAxnsZT+aniZ9tufRObxpDA82LEC0tPkxpW/GRNhllaPXv
30rlCOTb+bBvFNA3rq4rbrSquFhITyE+O+skgfppJn+rcbtGzAkYYWpnqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8rNALatTezx/A4SU5wpQ7ySupnMB8GA1UdIwQY
MBaAFHGS81YMFblNHvSXcmhF14Z4a8diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgt
NzVlZTI0YTNmOTZiLzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgtNzVlZTI0YTNmOTZi
LzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmH7vzKKh
ZkI2XZbUjIkpzN0YFy7oOSMLjLk+jc3DsbCAx8xHvMSsINtfFBa8W/9D2zMHKkDo
i3xVZVlON584EcBjNCUyTI6z9YDmOixF+OZqJyi1D5ZZKHGHhSvhE+Qs4Qv1CXnh
bI8Mey+stbiJdVMMIC6uIrgWdBOdSaLFFLs1jwEcRhiw6flQK1Rj8OAd/ll7I3hq
rYZeCmAJhpj1+ky9KYGmIOJ1BOkByosKacWjtJ/mYxoYP1eL/plERVdnPc7MyYEx
L6i/9womwV03o6xQQKJT2koJfyO5LKhIYM0HzdIHqhKrXo+oC8crciDsmEt+vl1Q
eKBBx2IIjuQ6Rw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:13 2025 by rpki-client