Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json)
Hash identifier: GPk/03OY0AeYa4AS72c2TPujwAcdXp+FcZcpvYHDO4I=
Subject key identifier: D6:F2:54:89:39:7D:22:2F:29:42:05:5C:B0:F0:A3:40:C8:BC:E6:F3
Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Certificate serial: 019768BBEDA589C5B4B60FB5B0EB87173C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 10:00:35 +0000
Manifest this update: Fri 13 Jun 2025 10:00:35 +0000
Manifest next update: Sat 14 Jun 2025 10:00:35 +0000
Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: ufbxf4s57ZoQzsTdp7Srl00MC87U6d8RfsWHtxEErgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ed:a5:89:c5:b4:b6:0f:b5:b0:eb:87:17:3c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b
Validity
Not Before: Jun 13 10:00:35 2025 GMT
Not After : Jun 14 10:00:35 2025 GMT
Subject: CN=d6f25489397d222f2942055cb0f0a340c8bce6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:81:4d:e3:39:34:41:c5:ef:3f:02:56:a8:54:
62:7f:00:83:01:54:f6:65:40:bc:14:ec:a2:e0:6a:
60:57:85:0f:3d:72:89:2c:41:0a:a1:4a:1e:eb:8d:
be:8c:80:c7:75:ca:8a:38:f2:27:55:b7:30:26:df:
e6:58:41:29:39:5d:2e:9b:a6:b0:04:32:10:34:e6:
02:1d:ba:96:11:11:31:e7:3c:40:f2:45:11:e6:e7:
65:39:fe:7f:8f:57:fe:26:4f:5b:70:4e:72:61:f5:
47:55:44:d3:68:70:5e:60:2a:9c:62:ce:29:e5:36:
cd:2d:31:ab:55:31:2e:51:b2:0d:f3:2a:80:ac:ec:
e2:b3:df:d6:72:77:45:09:e7:12:fb:df:5b:c6:16:
4b:44:1b:39:1d:7f:37:03:fd:41:ff:e2:5d:28:92:
b1:e2:e4:55:f7:cf:59:25:bb:47:f0:89:b1:ea:01:
01:59:64:5f:f6:cc:41:ef:79:5f:3f:f6:c0:8e:cc:
bc:ac:8c:0a:d9:7f:60:59:ae:6d:e1:0d:ff:2c:af:
bf:3f:eb:a0:be:bc:20:5b:e8:61:8d:a8:7c:db:10:
e9:86:03:9d:93:aa:24:be:84:3d:ec:93:5f:7e:d5:
d0:38:44:f5:ef:42:f3:86:cf:e0:91:f2:46:b3:1b:
fc:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F2:54:89:39:7D:22:2F:29:42:05:5C:B0:F0:A3:40:C8:BC:E6:F3
X509v3 Authority Key Identifier:
keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:3f:ab:43:1f:3a:c8:dd:92:a6:48:c8:c1:d4:66:7b:39:
a4:a0:a5:84:b3:32:8c:b7:c9:be:41:74:81:5c:7e:d9:41:d4:
ab:6e:22:da:fa:fa:e7:59:f9:67:2d:99:41:b0:46:94:84:05:
3c:3b:7d:1f:a6:0a:b8:da:e5:c4:e8:4d:67:37:82:c3:8c:78:
85:31:5d:b7:31:84:a1:90:e3:98:d1:d3:4d:e5:51:91:68:e5:
84:2f:41:0c:ac:a8:a8:b2:6a:d6:bb:f8:a6:a5:9a:71:fb:e1:
b0:0b:fd:73:17:1b:4f:4d:ed:8f:7b:9c:f9:91:c7:f0:eb:cc:
b9:8c:d7:a7:54:75:d7:e7:46:aa:6e:21:f3:1e:59:28:3f:e9:
1d:bc:da:a3:d9:8e:0e:d5:44:19:aa:1c:47:44:da:f0:de:4f:
8c:ea:3a:05:48:8e:f7:66:73:7d:dc:c2:44:fd:d9:6c:e6:e2:
74:7f:73:b6:63:05:9a:50:bf:0d:a3:d2:a3:94:bb:f1:0f:da:
95:28:3e:6b:be:97:af:f4:b9:5f:98:d7:8f:10:51:83:0b:40:
39:84:75:e6:30:a2:24:87:5a:56:bd:79:55:26:e5:a0:4b:61:
3d:49:08:4c:10:b3:61:6d:2b:61:c3:65:e3:da:30:ea:4e:c8:
65:0f:8f:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou+2licW0tg+1sOuHFzyfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzUwN2E1YTFlNTUwMWE3YWQ2MzU1MzM1YWNkZmU2M2Rh
YmM5MGIwHhcNMjUwNjEzMTAwMDM1WhcNMjUwNjE0MTAwMDM1WjAzMTEwLwYDVQQD
EyhkNmYyNTQ4OTM5N2QyMjJmMjk0MjA1NWNiMGYwYTM0MGM4YmNlNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4FN4zk0QcXvPwJWqFRifwCDAVT2
ZUC8FOyi4GpgV4UPPXKJLEEKoUoe642+jIDHdcqKOPInVbcwJt/mWEEpOV0um6aw
BDIQNOYCHbqWEREx5zxA8kUR5udlOf5/j1f+Jk9bcE5yYfVHVUTTaHBeYCqcYs4p
5TbNLTGrVTEuUbIN8yqArOzis9/WcndFCecS+99bxhZLRBs5HX83A/1B/+JdKJKx
4uRV989ZJbtH8Imx6gEBWWRf9sxB73lfP/bAjsy8rIwK2X9gWa5t4Q3/LK+/P+ug
vrwgW+hhjah82xDphgOdk6okvoQ97JNfftXQOET170Lzhs/gkfJGsxv87wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbyVIk5fSIvKUIFXLDwo0DIvObzMB8GA1UdIwQY
MBaAFM7FB6Wh5VAaetY1UzWs3+Y9q8kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2Mt
ZDI0YWE1Nzk0ZDhiLzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2MtZDI0YWE1Nzk0ZDhi
LzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpQ/q0Mf
OsjdkqZIyMHUZns5pKClhLMyjLfJvkF0gVx+2UHUq24i2vr651n5Zy2ZQbBGlIQF
PDt9H6YKuNrlxOhNZzeCw4x4hTFdtzGEoZDjmNHTTeVRkWjlhC9BDKyoqLJq1rv4
pqWacfvhsAv9cxcbT03tj3uc+ZHH8OvMuYzXp1R11+dGqm4h8x5ZKD/pHbzao9mO
DtVEGaocR0Ta8N5PjOo6BUiO92ZzfdzCRP3ZbObidH9ztmMFmlC/DaPSo5S78Q/a
lSg+a76Xr/S5X5jXjxBRgwtAOYR15jCiJIdaVr15VSbloEthPUkITBCzYW0rYcNl
49ow6k7IZQ+PrQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:06 2025 by rpki-client