Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: j+nZkT43JpY8bQikVQTgm2uBALVBfK5XUGflhvwcEJE=
Subject key identifier: 4C:79:3C:0F:E1:4B:CE:A8:BD:D6:3C:C6:0F:E6:56:12:6A:4D:40:62
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 019882E744ACFB8385A76680EA0C789CB7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 0580
Signing time: Thu 07 Aug 2025 05:00:51 +0000
Manifest this update: Thu 07 Aug 2025 05:00:51 +0000
Manifest next update: Fri 08 Aug 2025 05:00:51 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: BTFZdA7ySlNRFUmsmrUNgargTNE2424OhfdkZR44xWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:44:ac:fb:83:85:a7:66:80:ea:0c:78:9c:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Aug 7 05:00:51 2025 GMT
Not After : Aug 8 05:00:51 2025 GMT
Subject: CN=4c793c0fe14bcea8bdd63cc60fe656126a4d4062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:49:ae:c6:59:0f:1e:c5:85:32:6a:26:92:af:
ac:32:d8:f6:ed:97:5b:07:09:1c:61:b6:fa:a6:5b:
bf:aa:3d:20:5b:b5:7a:57:d3:b6:a1:82:a3:4c:88:
5b:f8:db:ee:95:dd:2c:ba:81:a2:09:6b:3b:53:f0:
db:51:d0:67:fa:e5:3e:aa:fb:4d:c7:b6:39:fc:38:
de:01:08:08:ce:1b:f6:bc:c4:a0:11:32:1d:e3:86:
70:a8:9f:6b:d8:4c:7c:a6:47:dd:ac:af:fb:ee:38:
2e:0d:9d:25:cf:37:fa:57:9a:e9:a3:a2:6d:aa:e5:
69:fc:6f:b4:0d:a2:ab:b4:f5:fb:89:90:a0:84:90:
99:0b:d6:99:13:b4:29:83:ae:14:19:1b:5f:78:d5:
7c:7c:60:d5:6b:6d:37:99:db:dd:fe:30:70:95:0a:
dd:6a:bf:3f:05:bb:72:b2:86:3e:78:f5:4a:eb:fd:
f0:f5:5f:6d:2a:a2:ac:84:5b:0e:97:2f:97:ca:c3:
39:ab:76:74:63:f5:53:01:b4:61:70:7b:ab:06:43:
53:70:c0:e5:50:a1:d1:8a:2d:69:b3:6a:be:98:b2:
66:b5:04:f2:e9:fa:8f:3e:5b:32:a7:60:1c:21:24:
24:10:dc:1e:f3:fb:65:c9:aa:e2:d8:9e:32:a9:99:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:79:3C:0F:E1:4B:CE:A8:BD:D6:3C:C6:0F:E6:56:12:6A:4D:40:62
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d8:a2:b9:73:f4:5b:71:ea:32:19:a3:d3:ba:2d:7d:80:7e:
37:0c:4e:f1:c0:4c:f8:d8:b8:4d:39:7b:6c:a0:84:eb:97:54:
de:5a:86:96:55:9c:1a:73:7d:ee:23:c7:e8:5c:b6:0b:9a:c2:
c5:80:09:a0:02:a0:3b:d6:8c:6c:36:a0:97:9d:eb:21:f8:ec:
ff:53:4e:2d:20:39:98:09:f6:c6:50:ef:63:a6:78:c7:48:1d:
a8:49:44:8d:71:fd:5f:06:2f:a3:f8:9b:3c:85:79:d5:4b:79:
7d:e2:d9:46:c2:c0:89:b7:87:1e:58:6f:2d:da:72:b6:10:86:
ac:b8:34:51:e9:df:dd:e3:0d:da:c3:d2:ed:40:83:3f:f7:58:
14:83:e1:97:e5:65:3f:74:c5:cc:2a:ca:4a:7d:b4:4a:ce:bd:
93:70:09:ed:88:40:b4:e5:1f:fa:73:9f:02:b4:da:1a:64:6e:
5d:6f:70:f6:dd:e5:5c:7e:be:31:77:1c:55:30:9b:53:7c:7f:
10:a6:92:f1:05:7e:39:10:7c:a9:5c:9d:2d:08:fe:01:df:34:
3c:9c:58:3f:65:a3:25:81:97:76:ff:dc:00:05:69:bc:34:d2:
c2:6a:b9:2c:8c:a4:7d:30:7f:e7:48:9a:67:38:cc:7e:da:bb:
6e:f1:d7:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiC50Ss+4OFp2aA6gx4nLeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx
Zjc2NGUwHhcNMjUwODA3MDUwMDUxWhcNMjUwODA4MDUwMDUxWjAzMTEwLwYDVQQD
Eyg0Yzc5M2MwZmUxNGJjZWE4YmRkNjNjYzYwZmU2NTYxMjZhNGQ0MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEmuxlkPHsWFMmomkq+sMtj27Zdb
BwkcYbb6plu/qj0gW7V6V9O2oYKjTIhb+Nvuld0suoGiCWs7U/DbUdBn+uU+qvtN
x7Y5/DjeAQgIzhv2vMSgETId44ZwqJ9r2Ex8pkfdrK/77jguDZ0lzzf6V5rpo6Jt
quVp/G+0DaKrtPX7iZCghJCZC9aZE7Qpg64UGRtfeNV8fGDVa203mdvd/jBwlQrd
ar8/BbtysoY+ePVK6/3w9V9tKqKshFsOly+XysM5q3Z0Y/VTAbRhcHurBkNTcMDl
UKHRii1ps2q+mLJmtQTy6fqPPlsyp2AcISQkENwe8/tlyari2J4yqZlNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEx5PA/hS86ovdY8xg/mVhJqTUBiMB8GA1UdIwQY
MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt
NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4
LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdiiuXP0
W3HqMhmj07otfYB+NwxO8cBM+Ni4TTl7bKCE65dU3lqGllWcGnN97iPH6Fy2C5rC
xYAJoAKgO9aMbDagl53rIfjs/1NOLSA5mAn2xlDvY6Z4x0gdqElEjXH9XwYvo/ib
PIV51Ut5feLZRsLAibeHHlhvLdpythCGrLg0Uenf3eMN2sPS7UCDP/dYFIPhl+Vl
P3TFzCrKSn20Ss69k3AJ7YhAtOUf+nOfArTaGmRuXW9w9t3lXH6+MXccVTCbU3x/
EKaS8QV+ORB8qVydLQj+Ad80PJxYP2WjJYGXdv/cAAVpvDTSwmq5LIykfTB/50ia
ZzjMftq7bvHXdw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:29 2025 by rpki-client