
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
File: ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft (raw, json)
Hash identifier: 1kSHbLoacoVlVsj7tD2Yg9asEzguFJvbAU7+FnYJbU0=
Subject key identifier: 01:94:45:59:BC:F1:30:E0:FD:5B:27:61:5D:3B:6E:F2:1A:D5:CF:5D
Authority key identifier: CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
Certificate issuer: /CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Certificate serial: 019892C86FA86E290B45DB9D68461212DE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
Manifest number: 10E8
Signing time: Sun 10 Aug 2025 07:01:05 +0000
Manifest this update: Sun 10 Aug 2025 07:01:05 +0000
Manifest next update: Mon 11 Aug 2025 07:01:05 +0000
Files and hashes: 1: ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl (hash: ZE+LufTSEhqg+EYH3tPCXSIpByJYg1mSrE0Xlo5KE3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:6f:a8:6e:29:0b:45:db:9d:68:46:12:12:de:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced1b93ac3da64eb37685d7eaa19aab74c237f37
Validity
Not Before: Aug 10 07:01:05 2025 GMT
Not After : Aug 11 07:01:05 2025 GMT
Subject: CN=01944559bcf130e0fd5b27615d3b6ef21ad5cf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:a2:82:7e:a4:bc:3d:d3:d7:e5:32:96:3a:
61:e4:1f:84:ea:d8:00:d1:52:86:e1:e1:48:09:46:
a3:f1:f6:5d:06:f4:e6:3e:fa:a5:4a:99:23:d2:df:
f3:22:4e:db:06:61:f5:f1:20:cb:bb:7d:ea:1c:ca:
bf:a4:2a:97:71:5b:d5:65:7d:91:05:1f:cf:a3:c2:
b1:6e:9d:ab:de:d4:5f:ba:8d:94:27:6e:9c:a5:00:
d5:66:d0:e8:c0:e0:f3:28:6c:8c:d8:97:8c:04:75:
14:19:99:cc:a3:7a:1f:7b:76:45:73:fd:c1:70:29:
b2:85:3f:09:72:e9:53:be:9e:57:9e:7c:a4:c5:6c:
c5:1d:76:49:ff:80:10:94:0b:d2:8c:7c:6b:d1:70:
a0:40:e2:7a:90:6c:62:5c:54:4e:02:65:84:dc:c8:
8b:34:68:5c:ca:fe:49:c9:57:bf:6e:f7:7e:e8:f1:
74:48:ea:42:64:ac:23:d8:00:34:38:14:dc:a3:e4:
ed:1a:f7:99:e3:21:b0:8d:21:f3:9b:ae:37:ee:75:
aa:1e:4b:e9:e9:39:8f:7c:72:ac:3d:e7:95:e7:66:
cc:78:13:f6:4b:12:f3:0c:6b:1e:2f:7f:0b:d2:69:
8a:43:0f:f2:f0:ec:ff:02:6a:f4:93:72:a7:cd:a0:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:45:59:BC:F1:30:E0:FD:5B:27:61:5D:3B:6E:F2:1A:D5:CF:5D
X509v3 Authority Key Identifier:
keyid:CE:D1:B9:3A:C3:DA:64:EB:37:68:5D:7E:AA:19:AA:B7:4C:23:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztG5OsPaZOs3aF1-qhmqt0wjfzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cef398-d7a2-439a-9781-816cb853aedd/1/ztG5OsPaZOs3aF1-qhmqt0wjfzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:54:3d:36:e3:36:2a:2e:33:12:36:4f:88:ab:85:43:79:
a7:9b:da:91:63:b4:8a:e4:af:ec:3f:74:18:70:46:3a:2a:12:
d7:77:69:84:77:1b:d9:e8:96:16:e7:2c:d2:76:0b:f8:1a:cb:
df:19:ef:55:bd:2b:3a:e5:42:4a:a2:12:42:d7:29:f4:2d:8d:
cb:1c:e6:4f:64:db:87:70:eb:b7:01:71:df:12:df:3a:6c:a6:
6b:e8:c6:b8:e0:b5:d3:cd:f7:9f:00:bc:40:62:80:29:b4:27:
2d:9e:c3:ee:48:bd:2c:0c:8f:26:5c:54:ca:ed:c4:c3:bf:c7:
03:e1:85:00:9e:74:00:4f:89:f3:14:f3:26:75:e4:ca:52:44:
4c:e3:df:2d:49:80:4f:21:c2:b6:28:8c:5a:f2:fe:ec:8f:48:
57:26:7b:86:de:f0:a5:a8:83:8d:b7:80:ee:a6:99:38:ca:b1:
d4:b4:58:fe:46:58:fc:22:4d:d7:d8:70:e0:ea:37:92:2a:53:
1e:a9:39:94:4f:76:cd:d9:73:9c:6d:2c:a7:e3:05:a0:29:73:
a5:9e:8a:f0:b9:27:4f:c1:62:91:f0:5e:96:e9:b7:b1:62:27:
c3:74:10:8e:52:bd:36:c4:ab:22:01:64:bf:0f:3a:f0:af:2c:
49:c4:69:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyG+obikLRdudaEYSEt6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDFiOTNhYzNkYTY0ZWIzNzY4NWQ3ZWFhMTlhYWI3NGMy
MzdmMzcwHhcNMjUwODEwMDcwMTA1WhcNMjUwODExMDcwMTA1WjAzMTEwLwYDVQQD
EygwMTk0NDU1OWJjZjEzMGUwZmQ1YjI3NjE1ZDNiNmVmMjFhZDVjZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQmign6kvD3T1+Uyljph5B+E6tgA
0VKG4eFICUaj8fZdBvTmPvqlSpkj0t/zIk7bBmH18SDLu33qHMq/pCqXcVvVZX2R
BR/Po8Kxbp2r3tRfuo2UJ26cpQDVZtDowODzKGyM2JeMBHUUGZnMo3ofe3ZFc/3B
cCmyhT8JculTvp5XnnykxWzFHXZJ/4AQlAvSjHxr0XCgQOJ6kGxiXFROAmWE3MiL
NGhcyv5JyVe/bvd+6PF0SOpCZKwj2AA0OBTco+TtGveZ4yGwjSHzm6437nWqHkvp
6TmPfHKsPeeV52bMeBP2SxLzDGseL38L0mmKQw/y8Oz/Amr0k3KnzaDXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGURVm88TDg/VsnYV07bvIa1c9dMB8GA1UdIwQY
MBaAFM7RuTrD2mTrN2hdfqoZqrdMI383MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEt
ODE2Y2I4NTNhZWRkLzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jZWYzOTgtZDdhMi00MzlhLTk3ODEtODE2Y2I4NTNhZWRk
LzEvenRHNU9zUGFaT3MzYUYxLXFobXF0MHdqZnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7NUPTbj
NiouMxI2T4irhUN5p5vakWO0iuSv7D90GHBGOioS13dphHcb2eiWFucs0nYL+BrL
3xnvVb0rOuVCSqISQtcp9C2NyxzmT2Tbh3DrtwFx3xLfOmyma+jGuOC10833nwC8
QGKAKbQnLZ7D7ki9LAyPJlxUyu3Ew7/HA+GFAJ50AE+J8xTzJnXkylJETOPfLUmA
TyHCtiiMWvL+7I9IVyZ7ht7wpaiDjbeA7qaZOMqx1LRY/kZY/CJN19hw4Oo3kipT
Hqk5lE92zdlznG0sp+MFoClzpZ6K8LknT8FikfBelum3sWInw3QQjlK9NsSrIgFk
vw868K8sScRpXw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:56:32 2025 by rpki-client