Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
File: zRvlrhITa5bNnXilwkykct6Ixlg.mft (raw, json)
Hash identifier: p20sCD1SPFg7Ih+xTcxoSnUSEUyL7u5ig+aDCa6j6rI=
Subject key identifier: 76:E0:FA:FD:8D:0E:D4:86:DA:57:B6:83:92:2D:A3:2B:51:66:4D:8E
Authority key identifier: CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
Certificate issuer: /CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Certificate serial: 0198917E94A2CE3FF757A2FA27F79E065239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
Manifest number: 0859
Signing time: Sun 10 Aug 2025 01:00:48 +0000
Manifest this update: Sun 10 Aug 2025 01:00:48 +0000
Manifest next update: Mon 11 Aug 2025 01:00:48 +0000
Files and hashes: 1: zRvlrhITa5bNnXilwkykct6Ixlg.crl (hash: 67Uc9spPLqHYuPBdKd+C9s8WPEs4tN8RgD/boKThlS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:94:a2:ce:3f:f7:57:a2:fa:27:f7:9e:06:52:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Validity
Not Before: Aug 10 01:00:48 2025 GMT
Not After : Aug 11 01:00:48 2025 GMT
Subject: CN=76e0fafd8d0ed486da57b683922da32b51664d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:0f:62:59:79:1f:84:67:fd:be:5f:22:1e:
2f:d6:b7:c8:c6:b9:66:6a:05:c9:55:af:af:49:cb:
58:06:93:1d:0b:98:ed:13:6a:43:5b:72:7d:02:db:
d4:ef:96:c2:44:ea:cf:5d:aa:23:a7:46:22:03:66:
df:05:a8:0d:0e:c2:f2:0c:62:cd:f1:bb:82:87:9b:
21:d8:12:a4:ca:ba:62:ab:d5:1d:e1:42:bd:74:72:
34:20:7d:80:f5:98:ef:3f:5f:07:3a:8b:98:68:21:
94:59:7c:b3:41:05:af:93:a7:7c:b5:c3:2c:c7:06:
40:bd:9a:4f:b2:c2:fc:ff:a7:d2:12:de:59:f0:9f:
50:29:d3:b6:6a:04:dc:f7:3d:93:72:31:52:3d:ee:
6b:5f:6a:24:15:32:58:4b:ad:3d:58:91:20:a6:b0:
ba:6a:88:d8:bb:b7:08:50:6b:4c:ee:8d:3b:36:c4:
c6:f2:2c:9d:4f:d2:bd:7a:bf:8c:74:02:04:c0:33:
27:57:dc:fa:31:04:f4:11:12:bd:4a:49:66:33:98:
66:ea:32:fe:38:89:1c:7c:d3:c3:58:22:ed:e3:29:
79:92:df:db:07:68:6c:04:56:39:b7:0a:61:04:7a:
6e:99:11:84:4a:59:a5:34:df:74:b2:54:df:77:74:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E0:FA:FD:8D:0E:D4:86:DA:57:B6:83:92:2D:A3:2B:51:66:4D:8E
X509v3 Authority Key Identifier:
keyid:CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5e:30:d9:12:7c:e0:91:8c:4e:b9:3f:7a:37:8d:54:b4:96:
65:f6:8c:4b:3f:51:97:50:29:65:2e:d1:32:9c:c0:b1:3b:0e:
d6:26:74:ac:65:91:52:25:f1:27:65:f7:8d:16:d9:ea:41:64:
1b:4b:db:c2:5a:59:69:99:8f:2b:5c:89:69:10:5d:d6:d2:ad:
5d:08:a2:f3:49:97:bf:16:8b:02:29:97:f4:c2:9a:9c:f4:f2:
22:8d:51:51:47:9c:c1:8d:0f:76:05:55:76:16:de:40:7b:7f:
2b:e3:62:92:f2:f8:5e:8a:8f:8e:d1:09:fe:b6:0d:58:10:85:
62:a5:7f:18:47:c9:fb:12:e4:43:09:f4:af:c8:3c:85:87:f6:
c6:ca:68:9b:e8:89:64:07:d8:14:d5:bd:0f:18:8c:83:bc:3a:
f2:eb:03:59:33:83:59:d5:1a:c3:39:b0:a2:14:1b:73:e6:58:
b0:f2:8a:b5:ea:79:51:92:40:7c:e5:a1:b0:26:77:57:b8:92:
84:6e:b9:14:09:81:f4:bb:32:f2:19:7d:7d:98:72:1c:3b:60:
7c:05:ee:67:0e:50:90:b0:87:97:6c:b3:f1:3f:c7:03:2b:c0:
cd:1e:91:88:0d:ad:47:4c:f3:c0:40:ca:66:77:8f:43:7e:1e:
47:e7:0f:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiRfpSizj/3V6L6J/eeBlI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMWJlNWFlMTIxMzZiOTZjZDlkNzhhNWMyNGNhNDcyZGU4
OGM2NTgwHhcNMjUwODEwMDEwMDQ4WhcNMjUwODExMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg3NmUwZmFmZDhkMGVkNDg2ZGE1N2I2ODM5MjJkYTMyYjUxNjY0ZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJMPYll5H4Rn/b5fIh4v1rfIxrlm
agXJVa+vSctYBpMdC5jtE2pDW3J9AtvU75bCROrPXaojp0YiA2bfBagNDsLyDGLN
8buCh5sh2BKkyrpiq9Ud4UK9dHI0IH2A9ZjvP18HOouYaCGUWXyzQQWvk6d8tcMs
xwZAvZpPssL8/6fSEt5Z8J9QKdO2agTc9z2TcjFSPe5rX2okFTJYS609WJEgprC6
aojYu7cIUGtM7o07NsTG8iydT9K9er+MdAIEwDMnV9z6MQT0ERK9SklmM5hm6jL+
OIkcfNPDWCLt4yl5kt/bB2hsBFY5twphBHpumRGESlmlNN90slTfd3TpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbg+v2NDtSG2le2g5ItoytRZk2OMB8GA1UdIwQY
MBaAFM0b5a4SE2uWzZ14pcJMpHLeiMZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelJ2bHJoSVRhNWJOblhpbHdreWtjdDZJeGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi81YjExMjktMjFkZC00ZWE1LTk2NDgt
NWYxNmRlNWM4NjU4LzEvelJ2bHJoSVRhNWJOblhpbHdreWtjdDZJeGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi81YjExMjktMjFkZC00ZWE1LTk2NDgtNWYxNmRlNWM4NjU4
LzEvelJ2bHJoSVRhNWJOblhpbHdreWtjdDZJeGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl4w2RJ8
4JGMTrk/ejeNVLSWZfaMSz9Rl1ApZS7RMpzAsTsO1iZ0rGWRUiXxJ2X3jRbZ6kFk
G0vbwlpZaZmPK1yJaRBd1tKtXQii80mXvxaLAimX9MKanPTyIo1RUUecwY0PdgVV
dhbeQHt/K+NikvL4XoqPjtEJ/rYNWBCFYqV/GEfJ+xLkQwn0r8g8hYf2xspom+iJ
ZAfYFNW9DxiMg7w68usDWTODWdUawzmwohQbc+ZYsPKKtep5UZJAfOWhsCZ3V7iS
hG65FAmB9Lsy8hl9fZhyHDtgfAXuZw5QkLCHl2yz8T/HAyvAzR6RiA2tR0zzwEDK
ZnePQ34eR+cPUg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:44:37 2025 by rpki-client