Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json)
Hash identifier: DhPh2BwtEgpuNeUcg2JueO0zkUOMDIHNQUYDrjG28OQ=
Subject key identifier: A8:65:A3:D3:1B:AF:CF:51:08:0A:C9:07:94:94:A0:96:F8:EB:AA:03
Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Certificate serial: 019873E3DEB10227C97634ABD16F652EA7C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
Manifest number: 0F6E
Signing time: Mon 04 Aug 2025 07:02:50 +0000
Manifest this update: Mon 04 Aug 2025 07:02:50 +0000
Manifest next update: Tue 05 Aug 2025 07:02:50 +0000
Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: c7YrVbGhwpCSgq519yFC9IbS10iCYiVsgzqZxqc9qE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:de:b1:02:27:c9:76:34:ab:d1:6f:65:2e:a7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa
Validity
Not Before: Aug 4 07:02:50 2025 GMT
Not After : Aug 5 07:02:50 2025 GMT
Subject: CN=a865a3d31bafcf51080ac9079494a096f8ebaa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:92:96:68:51:88:c5:96:41:40:37:87:b7:
60:6d:6b:d3:0d:85:14:5d:3b:69:3b:53:93:32:bf:
2a:0c:4f:b1:61:3a:5d:e7:fd:4b:2f:36:b5:8f:70:
d2:c8:95:ad:72:d4:55:28:79:41:4b:93:83:fa:85:
07:0b:4c:ee:8c:8a:1c:9e:ef:83:d2:a3:76:ef:9c:
6d:97:6e:17:76:c6:8b:58:ad:7a:9d:5d:91:51:1f:
3d:52:05:04:0d:77:89:86:bf:6a:3b:87:8a:b4:33:
87:08:77:24:70:4f:4f:34:bf:00:0d:7c:60:4e:33:
7d:3b:a7:ed:87:12:02:d6:e0:b1:3a:90:b3:7d:98:
cb:6b:d3:16:86:91:3d:bd:09:54:24:c5:37:48:21:
5b:14:c6:f5:4b:3d:63:f5:7f:b3:4c:be:93:3e:3a:
d3:71:b5:c2:c1:fb:10:90:c4:93:20:96:0f:32:a6:
13:42:00:81:32:ab:4a:3b:5b:b9:94:c1:44:ef:c4:
9f:68:ed:24:59:77:6f:f2:bb:bd:e2:a3:16:29:98:
28:76:e1:0e:2b:09:bd:55:4f:25:ec:00:23:7a:c4:
2e:e7:0f:c0:ab:0f:bd:d1:20:42:a5:02:e7:27:4a:
63:35:b1:63:0e:6a:78:e8:88:8c:3f:57:c7:46:58:
c2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:65:A3:D3:1B:AF:CF:51:08:0A:C9:07:94:94:A0:96:F8:EB:AA:03
X509v3 Authority Key Identifier:
keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:12:ae:ec:7f:80:3f:e1:7d:7d:a9:1f:d5:3b:44:14:a5:63:
f9:97:48:b3:75:f8:41:6b:88:26:25:ef:fd:94:e1:80:05:72:
6f:94:f1:05:99:5f:cb:1a:2f:74:df:0a:e7:c7:24:78:7f:0b:
b0:d1:c0:87:b5:09:1c:eb:04:01:76:bd:72:d6:06:fd:b3:dc:
68:11:15:4e:2d:84:f7:f0:58:bb:89:8b:18:b4:f7:39:ee:a6:
95:67:02:92:a9:d3:4c:10:10:68:41:73:2a:17:0d:ac:ca:8f:
49:c5:0a:e0:95:d2:0f:fd:fe:c1:f3:d2:cb:11:da:04:e9:f3:
80:bc:52:de:b5:a0:5a:42:bc:33:83:c1:64:87:f1:76:39:39:
b0:a9:99:cb:9b:0d:52:22:14:1b:e9:4e:3d:01:d7:9f:7f:f9:
19:87:49:09:04:3a:20:3f:8f:e0:e1:96:c4:0d:e6:b0:ce:8c:
76:bf:b6:44:fb:37:a9:ef:32:81:3e:b1:55:fa:92:33:03:de:
7f:89:d4:48:19:ed:c8:65:60:45:5f:f0:4c:30:d0:9b:8a:83:
86:ac:f3:a3:37:1f:db:5a:8b:df:ff:d7:dc:97:e5:d8:79:5e:
90:51:86:a1:54:7c:65:68:84:48:19:85:40:28:e1:1a:24:df:
0c:e7:a7:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz496xAifJdjSr0W9lLqfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZTIwMmMwMWE4MjkwZWU5NTMyNWQzYTRmMzdmZjQwZTk5
NjQ4ZmEwHhcNMjUwODA0MDcwMjUwWhcNMjUwODA1MDcwMjUwWjAzMTEwLwYDVQQD
EyhhODY1YTNkMzFiYWZjZjUxMDgwYWM5MDc5NDk0YTA5NmY4ZWJhYTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIqSlmhRiMWWQUA3h7dgbWvTDYUU
XTtpO1OTMr8qDE+xYTpd5/1LLza1j3DSyJWtctRVKHlBS5OD+oUHC0zujIocnu+D
0qN275xtl24XdsaLWK16nV2RUR89UgUEDXeJhr9qO4eKtDOHCHckcE9PNL8ADXxg
TjN9O6fthxIC1uCxOpCzfZjLa9MWhpE9vQlUJMU3SCFbFMb1Sz1j9X+zTL6TPjrT
cbXCwfsQkMSTIJYPMqYTQgCBMqtKO1u5lMFE78SfaO0kWXdv8ru94qMWKZgoduEO
Kwm9VU8l7AAjesQu5w/Aqw+90SBCpQLnJ0pjNbFjDmp46IiMP1fHRljCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhlo9Mbr89RCArJB5SUoJb466oDMB8GA1UdIwQY
MBaAFM3iAsAagpDulTJdOk83/0Dplkj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYt
OTQzNzgyYzc5ZDBjLzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYtOTQzNzgyYzc5ZDBj
LzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhKu7H+A
P+F9fakf1TtEFKVj+ZdIs3X4QWuIJiXv/ZThgAVyb5TxBZlfyxovdN8K58ckeH8L
sNHAh7UJHOsEAXa9ctYG/bPcaBEVTi2E9/BYu4mLGLT3Oe6mlWcCkqnTTBAQaEFz
KhcNrMqPScUK4JXSD/3+wfPSyxHaBOnzgLxS3rWgWkK8M4PBZIfxdjk5sKmZy5sN
UiIUG+lOPQHXn3/5GYdJCQQ6ID+P4OGWxA3msM6Mdr+2RPs3qe8ygT6xVfqSMwPe
f4nUSBntyGVgRV/wTDDQm4qDhqzzozcf21qL3//X3Jfl2HlekFGGoVR8ZWiESBmF
QCjhGiTfDOenmQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:55 2025 by rpki-client