Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: 5OUASqcRlU5uP9PlSARdOss5J/GVsCXeInnFvG70hIs=
Subject key identifier: 85:7E:42:82:20:C4:5D:40:74:49:B4:99:A0:82:72:DA:44:24:D3:A6
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 0197850F3D5A5BF75350CDCAB658E86F59DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0E59
Signing time: Wed 18 Jun 2025 22:00:57 +0000
Manifest this update: Wed 18 Jun 2025 22:00:57 +0000
Manifest next update: Thu 19 Jun 2025 22:00:57 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: sua3GEF/x/Qm9nrXQAtuLfZMjBBkSmeg1egq6HYWcaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:0f:3d:5a:5b:f7:53:50:cd:ca:b6:58:e8:6f:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Jun 18 22:00:57 2025 GMT
Not After : Jun 19 22:00:57 2025 GMT
Subject: CN=857e428220c45d407449b499a08272da4424d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bd:41:75:f8:20:6d:43:47:53:e3:a7:78:c9:
28:bc:26:85:7e:d6:bb:47:97:d3:63:67:8d:d0:f8:
47:b1:81:8e:94:ec:bd:de:00:6e:4d:80:a9:e9:7e:
60:cf:ae:b5:db:e4:98:bb:97:be:f4:af:5c:4d:21:
af:3f:64:8a:f0:e8:82:02:05:4b:11:7b:25:e4:f5:
51:e1:8a:5c:eb:86:c2:19:d8:8b:f6:53:9d:25:76:
b8:66:4c:af:70:8f:56:dc:74:05:22:5b:35:8c:79:
a6:66:5b:00:22:b1:86:98:69:bf:18:5a:f1:a5:de:
41:c3:b0:11:a1:77:9c:e8:a8:39:67:7f:23:13:50:
7c:fc:6f:87:0f:c5:bf:33:01:60:9d:3e:0e:f0:b1:
4f:b0:5f:47:91:21:e7:ab:03:c7:e3:f1:aa:42:50:
d2:b7:26:3b:f3:90:87:13:3f:ce:1f:42:cb:40:02:
9d:ff:0f:ed:ec:af:22:1c:d5:38:a6:78:cc:7d:fe:
2b:a3:bb:8f:55:39:f3:b8:bd:a3:c9:39:c4:5d:0e:
82:9d:b3:54:55:7b:f1:48:b3:3d:ad:33:ff:79:39:
d8:4f:30:b0:8b:31:fa:e8:f5:71:7d:24:d2:03:75:
8d:6d:ae:59:85:ce:34:00:78:42:a3:73:2f:dc:d4:
5d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7E:42:82:20:C4:5D:40:74:49:B4:99:A0:82:72:DA:44:24:D3:A6
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:04:05:04:7b:b4:6e:40:15:41:be:e2:53:63:5b:2f:9f:98:
e2:a0:95:17:6a:5b:aa:db:65:fb:31:d7:47:de:63:7e:5d:6b:
bc:f1:7b:a1:80:f2:aa:73:06:13:db:c9:fb:10:ed:cb:59:fc:
4e:04:6d:98:35:50:de:9f:d7:5f:22:37:d5:a3:27:6c:90:af:
06:51:0e:16:75:2f:ca:cc:f7:a6:22:66:b6:6b:7a:61:a2:ff:
a7:17:ab:d4:d1:4e:52:0e:59:00:45:3b:8f:cd:d1:c9:13:5d:
c3:db:0f:29:05:1c:8c:f1:9d:5b:5b:af:2c:64:19:08:72:82:
06:5d:ca:19:ad:74:88:f1:9a:0c:5f:7a:01:32:69:98:65:33:
86:c2:92:c7:11:15:ab:d3:49:6e:b1:c4:94:ae:2b:96:ff:7f:
50:b5:38:bc:8f:4f:a4:df:01:84:cc:e4:0f:7c:da:e8:1b:3a:
44:43:cb:0e:4e:fe:fc:31:64:4a:6b:81:90:74:03:28:0a:21:
99:37:db:e5:fe:d6:e8:5b:87:0c:9b:24:27:a4:5f:07:3b:3b:
72:07:6f:58:83:5b:d5:8e:26:9f:4a:fd:1f:42:62:d0:e3:1a:
55:82:31:33:f8:51:3f:a7:be:50:ee:e1:2c:8d:e1:77:92:07:
64:54:9d:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeFDz1aW/dTUM3Ktljob1nfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzE3OGY3YTAwNWY5Mzc3OWY0NjhkMzRiYWRiY2NjMWI5
Y2VhNTAwHhcNMjUwNjE4MjIwMDU3WhcNMjUwNjE5MjIwMDU3WjAzMTEwLwYDVQQD
Eyg4NTdlNDI4MjIwYzQ1ZDQwNzQ0OWI0OTlhMDgyNzJkYTQ0MjRkM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L1BdfggbUNHU+OneMkovCaFfta7
R5fTY2eN0PhHsYGOlOy93gBuTYCp6X5gz6612+SYu5e+9K9cTSGvP2SK8OiCAgVL
EXsl5PVR4Ypc64bCGdiL9lOdJXa4ZkyvcI9W3HQFIls1jHmmZlsAIrGGmGm/GFrx
pd5Bw7ARoXec6Kg5Z38jE1B8/G+HD8W/MwFgnT4O8LFPsF9HkSHnqwPH4/GqQlDS
tyY785CHEz/OH0LLQAKd/w/t7K8iHNU4pnjMff4ro7uPVTnzuL2jyTnEXQ6CnbNU
VXvxSLM9rTP/eTnYTzCwizH66PVxfSTSA3WNba5Zhc40AHhCo3Mv3NRd6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIV+QoIgxF1AdEm0maCCctpEJNOmMB8GA1UdIwQY
MBaAFM9xePegBfk3efRo00utvMwbnOpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNTliZWEtMjkzMS00ZGUwLWJlNDIt
NWEzZDhmMGVjYmZkLzEvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yNTliZWEtMjkzMS00ZGUwLWJlNDItNWEzZDhmMGVjYmZk
LzEvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowQFBHu0
bkAVQb7iU2NbL5+Y4qCVF2pbqttl+zHXR95jfl1rvPF7oYDyqnMGE9vJ+xDty1n8
TgRtmDVQ3p/XXyI31aMnbJCvBlEOFnUvysz3piJmtmt6YaL/pxer1NFOUg5ZAEU7
j83RyRNdw9sPKQUcjPGdW1uvLGQZCHKCBl3KGa10iPGaDF96ATJpmGUzhsKSxxEV
q9NJbrHElK4rlv9/ULU4vI9PpN8BhMzkD3za6Bs6REPLDk7+/DFkSmuBkHQDKAoh
mTfb5f7W6FuHDJskJ6RfBzs7cgdvWINb1Y4mn0r9H0Ji0OMaVYIxM/hRP6e+UO7h
LI3hd5IHZFSdmA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:22:39 2025 by rpki-client