Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
File: zEHDryzVmGV10bz2Xsnod2Zu3jY.mft (raw, json)
Hash identifier: y7244KQK9KpQiKaVswPmIrPZNu2FSN3mtG9Jn6yS35A=
Subject key identifier: 91:AD:39:D4:8C:AD:01:61:93:85:A8:10:13:07:98:F4:0B:ED:47:1F
Authority key identifier: CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
Certificate issuer: /CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Certificate serial: 019778D48F4ED9BA11D80EE2302EF8C2BA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
Manifest number: 1226
Signing time: Mon 16 Jun 2025 13:01:25 +0000
Manifest this update: Mon 16 Jun 2025 13:01:25 +0000
Manifest next update: Tue 17 Jun 2025 13:01:25 +0000
Files and hashes: 1: zEHDryzVmGV10bz2Xsnod2Zu3jY.crl (hash: FoKbkJTYJOx+oRM3shtWzBsZtxa2YazjGau6aJQRA4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:8f:4e:d9:ba:11:d8:0e:e2:30:2e:f8:c2:ba:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc41c3af2cd5986575d1bcf65ec9e877666ede36
Validity
Not Before: Jun 16 13:01:25 2025 GMT
Not After : Jun 17 13:01:25 2025 GMT
Subject: CN=91ad39d48cad01619385a810130798f40bed471f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:a8:b2:00:64:c1:b6:71:34:94:9c:75:5a:
64:67:47:83:22:28:4f:9f:76:6c:96:cb:cc:db:11:
e2:29:b1:ea:ac:94:03:f3:79:0b:0b:95:61:5d:38:
ec:74:9b:c3:78:59:b8:7b:fc:c5:a1:3e:dc:43:93:
3f:72:a1:43:50:80:3f:61:be:f1:80:6b:92:c4:be:
9c:45:56:bf:df:3a:92:64:09:d9:83:a4:b9:93:14:
e8:f1:2b:be:fe:e1:5c:38:1a:2d:97:b8:59:23:30:
a1:fd:53:3d:db:3c:a8:4d:8b:d7:65:02:b9:af:01:
5f:ee:29:9e:27:d2:87:fa:b0:99:75:45:c9:98:83:
76:80:45:1e:49:17:f9:a8:98:1f:ce:b4:f1:42:87:
2c:21:45:0d:7a:e0:70:9b:72:d0:bf:32:5b:0a:61:
4f:3a:b0:cf:cf:70:e6:2c:56:09:58:84:38:70:a4:
80:95:55:8d:69:28:e5:40:ad:c7:6b:30:a7:69:f5:
0d:c6:2d:65:c2:ff:03:59:7a:ff:f1:9f:23:cc:aa:
b0:79:6b:7a:ce:a1:51:66:8f:c1:24:ca:3e:fb:54:
f9:12:3f:cc:e6:42:2a:51:d6:52:74:ee:ce:bb:a4:
b3:1d:9d:91:d3:9f:96:0f:3d:7c:bf:4b:c8:12:66:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AD:39:D4:8C:AD:01:61:93:85:A8:10:13:07:98:F4:0B:ED:47:1F
X509v3 Authority Key Identifier:
keyid:CC:41:C3:AF:2C:D5:98:65:75:D1:BC:F6:5E:C9:E8:77:66:6E:DE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEHDryzVmGV10bz2Xsnod2Zu3jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a6e51-4a8f-40d3-b0fa-4c6522453c9a/1/zEHDryzVmGV10bz2Xsnod2Zu3jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c8:37:96:d9:f8:68:d4:56:08:fa:bc:87:16:af:a2:7a:ee:
07:d2:73:76:80:07:2a:36:57:9a:82:fa:af:a6:0b:e1:3d:7a:
77:56:5a:ba:80:0e:74:02:0d:91:9c:82:3a:e6:48:a8:e5:4b:
22:cb:1d:ba:ec:8d:13:dc:ce:47:65:43:e1:b4:64:6e:cf:66:
4d:85:9b:d3:7a:35:01:5c:f6:48:0c:e3:3c:01:1e:66:68:76:
54:3b:90:66:32:b9:a9:79:84:4e:69:57:71:6e:89:8b:14:19:
68:5e:9f:04:35:59:1f:05:a4:81:b7:03:c9:a9:2f:53:6d:64:
b8:88:cd:df:6e:c0:3c:45:06:a0:9a:9d:ec:b7:cc:cc:48:fd:
00:53:78:84:f9:8f:74:32:33:23:73:c9:12:49:13:8d:38:f8:
8a:89:55:46:a5:f4:a8:b1:69:81:0d:4e:09:85:c8:e2:3e:67:
5a:66:ea:90:2c:aa:8e:40:06:ce:e2:f5:a2:d1:6d:6b:5f:30:
23:28:d9:dd:15:4e:97:be:71:b5:d8:1a:56:ba:f0:99:39:2a:
ee:74:ec:56:58:0f:da:fb:da:63:f2:c4:28:2e:cc:0f:c5:9b:
38:83:db:1f:57:92:43:6c:fa:0e:4f:58:c8:c4:2a:1c:18:d1:
2f:a0:c0:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd41I9O2boR2A7iMC74wrqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDFjM2FmMmNkNTk4NjU3NWQxYmNmNjVlYzllODc3NjY2
ZWRlMzYwHhcNMjUwNjE2MTMwMTI1WhcNMjUwNjE3MTMwMTI1WjAzMTEwLwYDVQQD
Eyg5MWFkMzlkNDhjYWQwMTYxOTM4NWE4MTAxMzA3OThmNDBiZWQ0NzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFCosgBkwbZxNJScdVpkZ0eDIihP
n3ZslsvM2xHiKbHqrJQD83kLC5VhXTjsdJvDeFm4e/zFoT7cQ5M/cqFDUIA/Yb7x
gGuSxL6cRVa/3zqSZAnZg6S5kxTo8Su+/uFcOBotl7hZIzCh/VM92zyoTYvXZQK5
rwFf7imeJ9KH+rCZdUXJmIN2gEUeSRf5qJgfzrTxQocsIUUNeuBwm3LQvzJbCmFP
OrDPz3DmLFYJWIQ4cKSAlVWNaSjlQK3HazCnafUNxi1lwv8DWXr/8Z8jzKqweWt6
zqFRZo/BJMo++1T5Ej/M5kIqUdZSdO7Ou6SzHZ2R05+WDz18v0vIEma/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGtOdSMrQFhk4WoEBMHmPQL7UcfMB8GA1UdIwQY
MBaAFMxBw68s1ZhlddG89l7J6Hdmbt42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEt
NGM2NTIyNDUzYzlhLzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YTZlNTEtNGE4Zi00MGQzLWIwZmEtNGM2NTIyNDUzYzlh
LzEvekVIRHJ5elZtR1YxMGJ6Mlhzbm9kMlp1M2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcg3ltn4
aNRWCPq8hxavonruB9JzdoAHKjZXmoL6r6YL4T16d1ZauoAOdAINkZyCOuZIqOVL
IssduuyNE9zOR2VD4bRkbs9mTYWb03o1AVz2SAzjPAEeZmh2VDuQZjK5qXmETmlX
cW6JixQZaF6fBDVZHwWkgbcDyakvU21kuIjN327APEUGoJqd7LfMzEj9AFN4hPmP
dDIzI3PJEkkTjTj4iolVRqX0qLFpgQ1OCYXI4j5nWmbqkCyqjkAGzuL1otFta18w
IyjZ3RVOl75xtdgaVrrwmTkq7nTsVlgP2vvaY/LEKC7MD8WbOIPbH1eSQ2z6Dk9Y
yMQqHBjRL6DAyA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:48:24 2025 by rpki-client