
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json)
Hash identifier: CxvdYIrVJepQuAxE5B5vYvj9xV4f/53SHcXqC0hAQ7U=
Subject key identifier: 6E:1D:56:88:4C:CA:54:6C:C5:AA:50:D4:E4:D3:48:66:BE:C5:22:8C
Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Certificate serial: 019872CF277219D9CF5B156DE52FA97606D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
Manifest number: 0D50
Signing time: Mon 04 Aug 2025 02:00:35 +0000
Manifest this update: Mon 04 Aug 2025 02:00:35 +0000
Manifest next update: Tue 05 Aug 2025 02:00:35 +0000
Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: 97ckkfEqnpaEGpXEjMUdiZUFNLQen3aE/+YDlsOpGL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:27:72:19:d9:cf:5b:15:6d:e5:2f:a9:76:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4
Validity
Not Before: Aug 4 02:00:35 2025 GMT
Not After : Aug 5 02:00:35 2025 GMT
Subject: CN=6e1d56884cca546cc5aa50d4e4d34866bec5228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:2c:3e:59:af:bf:31:36:b0:c0:c5:e5:57:
d8:ed:68:62:14:25:4a:35:da:a9:8e:10:e6:c0:fd:
65:78:39:fc:a1:f3:d1:36:47:5f:0b:a1:7d:48:d0:
e6:5b:f4:e0:bd:94:a2:98:bd:0a:a2:d6:5e:f7:0a:
8d:62:3b:2f:32:0a:4f:e2:8f:9d:80:e8:ed:fc:26:
f2:8d:40:20:02:f5:cb:49:99:0b:1f:3d:95:3b:9d:
2d:6b:69:27:56:62:e2:6c:6b:04:59:d1:8d:f1:50:
bd:a5:5e:00:f8:39:80:e7:e9:9a:2f:96:ce:5b:ea:
35:82:c6:f1:5e:79:e6:59:14:05:02:2d:89:08:ca:
70:f4:98:5c:f6:ee:27:1a:db:24:f2:f1:0f:e0:5b:
15:84:98:77:45:11:c2:99:55:53:4b:a5:4a:14:43:
9d:df:ca:64:7f:fd:f6:b0:63:89:af:78:16:7a:4d:
07:f1:9b:92:af:fd:eb:2b:63:57:1e:2d:13:6a:95:
08:7e:a6:10:fd:9e:4f:33:30:34:d7:95:8b:27:5b:
66:29:f0:05:01:04:52:28:61:9c:b3:33:42:71:a3:
f6:e0:27:91:60:2e:23:bb:51:34:49:83:bd:1e:fd:
04:ab:e6:86:e4:4a:10:a0:db:78:7f:a4:b4:d1:4c:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:56:88:4C:CA:54:6C:C5:AA:50:D4:E4:D3:48:66:BE:C5:22:8C
X509v3 Authority Key Identifier:
keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:54:49:b2:0f:65:c2:38:48:25:37:ef:43:ec:c4:f4:0a:cf:
37:93:52:8e:cb:76:2e:2f:74:91:c0:9b:7a:f0:58:02:44:74:
2d:ff:d6:79:14:fb:38:19:26:8c:f6:5d:14:c3:11:96:ad:b2:
12:fe:fc:72:78:64:5f:23:fb:f5:fe:8d:6b:b0:71:b4:43:2d:
ba:93:f4:f1:c3:9f:ee:36:87:11:48:2d:13:38:a5:67:64:5a:
e1:bb:df:90:a6:f9:b8:7d:32:77:4a:d3:0f:43:ce:58:4b:a5:
55:01:0a:f3:bc:d7:8d:b1:fe:53:08:82:d6:ed:ca:03:75:e6:
83:23:33:fe:96:02:4f:c8:15:ee:13:29:5a:f8:58:5b:56:5f:
f4:f7:44:8a:de:dd:52:78:aa:81:1d:60:78:6a:e7:27:91:f4:
27:e5:1a:6c:db:9e:44:cd:f6:50:b9:5f:b4:a0:6c:8c:44:36:
d4:80:42:fb:c6:5c:b0:21:41:71:8a:27:97:d3:8f:6f:0e:34:
5f:11:22:6d:43:ff:7a:ac:e6:8a:f2:dc:18:39:ef:1a:50:32:
2d:4d:eb:7e:df:79:22:22:fc:c1:02:11:36:13:60:4d:4a:ef:
a7:ef:aa:e2:34:8e:ba:1c:fc:a4:e5:10:fd:c8:e7:b0:09:56:
6c:a1:30:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyzydyGdnPWxVt5S+pdgbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGM5MjNhZTNhY2UzYTEwODYwZDFmODE3YThkNzUwYzE1
MzU0YzQwHhcNMjUwODA0MDIwMDM1WhcNMjUwODA1MDIwMDM1WjAzMTEwLwYDVQQD
Eyg2ZTFkNTY4ODRjY2E1NDZjYzVhYTUwZDRlNGQzNDg2NmJlYzUyMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgcsPlmvvzE2sMDF5VfY7WhiFCVK
NdqpjhDmwP1leDn8ofPRNkdfC6F9SNDmW/TgvZSimL0KotZe9wqNYjsvMgpP4o+d
gOjt/CbyjUAgAvXLSZkLHz2VO50ta2knVmLibGsEWdGN8VC9pV4A+DmA5+maL5bO
W+o1gsbxXnnmWRQFAi2JCMpw9Jhc9u4nGtsk8vEP4FsVhJh3RRHCmVVTS6VKFEOd
38pkf/32sGOJr3gWek0H8ZuSr/3rK2NXHi0TapUIfqYQ/Z5PMzA015WLJ1tmKfAF
AQRSKGGcszNCcaP24CeRYC4ju1E0SYO9Hv0Eq+aG5EoQoNt4f6S00Uz52QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4dVohMylRsxapQ1OTTSGa+xSKMMB8GA1UdIwQY
MBaAFGeMkjrjrOOhCGDR+Beo11DBU1TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjkt
ZGIwZDYxNmE4ODkxLzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjktZGIwZDYxNmE4ODkx
LzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFRJsg9l
wjhIJTfvQ+zE9ArPN5NSjst2Li90kcCbevBYAkR0Lf/WeRT7OBkmjPZdFMMRlq2y
Ev78cnhkXyP79f6Na7BxtEMtupP08cOf7jaHEUgtEzilZ2Ra4bvfkKb5uH0yd0rT
D0POWEulVQEK87zXjbH+UwiC1u3KA3XmgyMz/pYCT8gV7hMpWvhYW1Zf9PdEit7d
UniqgR1geGrnJ5H0J+UabNueRM32ULlftKBsjEQ21IBC+8ZcsCFBcYonl9OPbw40
XxEibUP/eqzmivLcGDnvGlAyLU3rft95IiL8wQIRNhNgTUrvp++q4jSOuhz8pOUQ
/cjnsAlWbKEwdQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:34 2025 by rpki-client