Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
File: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft (raw, json)
Hash identifier: RQkJzGEfoqwy3kyC2xtm/aUTuiVztACdAFkDGA3u8PA=
Subject key identifier: 1E:12:9A:4B:68:B2:05:0A:A7:0B:72:18:AB:B1:7E:62:32:0D:4D:E9
Authority key identifier: 67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
Certificate issuer: /CN=6790960ac4ba271502f1738a59490856f1975b1f
Certificate serial: 019773087FFCCDEEF4550238198E65EFDC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
Manifest number: 08C4
Signing time: Sun 15 Jun 2025 10:00:26 +0000
Manifest this update: Sun 15 Jun 2025 10:00:26 +0000
Manifest next update: Mon 16 Jun 2025 10:00:26 +0000
Files and hashes: 1: Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl (hash: 37n9/25ztz/LgHwG0zyhQqw1y+xp36kbRTFMJ8gj2MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:08:7f:fc:cd:ee:f4:55:02:38:19:8e:65:ef:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6790960ac4ba271502f1738a59490856f1975b1f
Validity
Not Before: Jun 15 10:00:26 2025 GMT
Not After : Jun 16 10:00:26 2025 GMT
Subject: CN=1e129a4b68b2050aa70b7218abb17e62320d4de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:bc:e7:68:f3:c5:02:14:88:fb:2e:58:2b:
6b:62:51:18:4d:2c:0d:c0:84:af:79:3e:ba:e8:49:
de:18:f1:b7:e5:75:21:f3:cb:f7:2e:d1:eb:6a:7a:
2e:4b:44:71:ae:81:f8:c4:70:52:86:cc:aa:2c:6e:
7c:fa:73:6a:df:ef:87:cb:35:a6:24:be:ba:ee:3c:
ed:7e:47:f7:d7:dd:e1:1e:cb:48:af:8a:73:94:1d:
cf:da:d7:f9:fc:6a:0b:53:4c:fb:68:74:25:12:bb:
95:e5:24:fb:8a:1b:6b:e6:04:73:1d:ce:a0:42:9a:
df:ff:63:6d:dd:63:3f:4f:91:cf:cc:33:72:7e:45:
85:59:92:9e:bf:4e:73:ab:d2:ae:2f:3b:37:ab:1f:
26:e3:16:52:83:b3:dd:ea:9f:7e:e5:8d:87:cf:0e:
52:a5:fd:2d:44:bd:e1:c2:2a:38:ef:d8:cd:a4:89:
60:7f:72:32:56:c2:38:31:c8:68:bc:bb:ee:d0:df:
a7:cd:3e:b6:36:8a:05:ca:e4:bc:30:47:75:10:e5:
11:11:6e:ee:f8:61:44:66:09:18:8f:05:c4:be:8f:
e9:c4:6a:03:91:b5:3c:eb:3c:ec:56:78:77:71:16:
13:71:8e:2e:4c:ec:6d:21:0e:13:2c:9c:ea:c1:55:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:9A:4B:68:B2:05:0A:A7:0B:72:18:AB:B1:7E:62:32:0D:4D:E9
X509v3 Authority Key Identifier:
keyid:67:90:96:0A:C4:BA:27:15:02:F1:73:8A:59:49:08:56:F1:97:5B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c97527-6fd2-4e73-ac5f-92828b153210/1/Z5CWCsS6JxUC8XOKWUkIVvGXWx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0e:f5:14:f1:d2:28:ea:3e:a8:80:54:5b:66:21:13:c6:74:
0e:49:16:26:03:b8:f7:58:37:61:be:4b:a0:a6:f4:a5:7b:a3:
11:f5:86:cd:d8:8f:4a:18:12:ed:32:82:dd:93:24:8b:5f:39:
3b:ee:71:2b:45:90:a5:4c:67:e8:bf:d3:39:36:a0:fb:59:a3:
78:32:76:f2:d6:a3:eb:9c:15:ed:14:e7:31:29:73:0c:db:84:
77:04:fe:3e:70:15:ad:18:5f:c7:66:6f:95:fd:cc:66:cd:7e:
b2:6c:e6:67:19:83:de:60:33:fc:7b:f8:fb:73:43:de:34:f5:
3f:37:ab:a7:91:63:c3:f6:c3:1e:93:9f:8f:57:4f:16:5b:5d:
76:57:2f:ba:18:85:c8:15:12:ba:cd:66:a0:9d:92:ba:fe:32:
4c:23:e2:e9:3d:c6:6c:f2:5b:60:27:9a:32:49:d3:34:31:34:
7c:32:1a:ae:a7:57:ff:d0:f4:aa:ea:0d:4d:64:4b:ec:b3:83:
ee:91:5a:4d:01:e0:a4:02:94:f9:6e:b6:24:36:d0:40:e7:08:
c5:ae:7c:de:05:73:25:a5:7b:f3:16:f6:ab:fc:56:ca:4f:44:
b8:dd:df:8d:92:d7:02:c7:e2:6f:a5:f5:68:d3:d7:2f:e2:17:
01:ab:b0:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCH/8ze70VQI4GY5l79xVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTA5NjBhYzRiYTI3MTUwMmYxNzM4YTU5NDkwODU2ZjE5
NzViMWYwHhcNMjUwNjE1MTAwMDI2WhcNMjUwNjE2MTAwMDI2WjAzMTEwLwYDVQQD
EygxZTEyOWE0YjY4YjIwNTBhYTcwYjcyMThhYmIxN2U2MjMyMGQ0ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRW852jzxQIUiPsuWCtrYlEYTSwN
wISveT666EneGPG35XUh88v3LtHranouS0RxroH4xHBShsyqLG58+nNq3++HyzWm
JL667jztfkf3193hHstIr4pzlB3P2tf5/GoLU0z7aHQlEruV5ST7ihtr5gRzHc6g
Qprf/2Nt3WM/T5HPzDNyfkWFWZKev05zq9KuLzs3qx8m4xZSg7Pd6p9+5Y2Hzw5S
pf0tRL3hwio479jNpIlgf3IyVsI4MchovLvu0N+nzT62NooFyuS8MEd1EOUREW7u
+GFEZgkYjwXEvo/pxGoDkbU86zzsVnh3cRYTcY4uTOxtIQ4TLJzqwVXxUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4SmktosgUKpwtyGKuxfmIyDU3pMB8GA1UdIwQY
MBaAFGeQlgrEuicVAvFzillJCFbxl1sfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYt
OTI4MjhiMTUzMjEwLzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTc1MjctNmZkMi00ZTczLWFjNWYtOTI4MjhiMTUzMjEw
LzEvWjVDV0NzUzZKeFVDOFhPS1dVa0lWdkdYV3g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJw71FPHS
KOo+qIBUW2YhE8Z0DkkWJgO491g3Yb5LoKb0pXujEfWGzdiPShgS7TKC3ZMki185
O+5xK0WQpUxn6L/TOTag+1mjeDJ28taj65wV7RTnMSlzDNuEdwT+PnAVrRhfx2Zv
lf3MZs1+smzmZxmD3mAz/Hv4+3ND3jT1Pzerp5Fjw/bDHpOfj1dPFltddlcvuhiF
yBUSus1moJ2Suv4yTCPi6T3GbPJbYCeaMknTNDE0fDIarqdX/9D0quoNTWRL7LOD
7pFaTQHgpAKU+W62JDbQQOcIxa583gVzJaV78xb2q/xWyk9EuN3fjZLXAsfib6X1
aNPXL+IXAauwLw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:31:11 2025 by rpki-client