Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
File: z9rC7BEEwkXZyrqOthY46drxADk.mft (raw, json)
Hash identifier: JXuG2TjWWg51h4ehQusxhjgxrVgqmJQC9LiTQfqdDMY=
Subject key identifier: F3:4B:82:99:98:9F:4F:4E:A1:56:96:24:C1:14:96:69:33:6C:CC:23
Authority key identifier: CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
Certificate issuer: /CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Certificate serial: 0197730959B3150B9A00A7797FEC6F0D4E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
Manifest number: 10CF
Signing time: Sun 15 Jun 2025 10:01:21 +0000
Manifest this update: Sun 15 Jun 2025 10:01:21 +0000
Manifest next update: Mon 16 Jun 2025 10:01:21 +0000
Files and hashes: 1: z9rC7BEEwkXZyrqOthY46drxADk.crl (hash: bl882++EA+oZ1/cyLOVFYHytjzOR3WkhuC0l4VyHuUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:09:59:b3:15:0b:9a:00:a7:79:7f:ec:6f:0d:4e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdac2ec1104c245d9caba8eb61638e9daf10039
Validity
Not Before: Jun 15 10:01:21 2025 GMT
Not After : Jun 16 10:01:21 2025 GMT
Subject: CN=f34b8299989f4f4ea1569624c1149669336ccc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:86:81:9a:a7:49:4a:68:de:56:ca:e7:e1:78:
44:e3:39:4d:d6:2b:64:83:81:1d:22:8c:25:2d:49:
cb:c0:63:57:f6:36:f6:93:09:8c:65:d0:2c:0a:49:
b8:65:27:39:3c:1d:15:cd:63:04:df:f4:a1:39:46:
35:b9:16:4a:5d:1b:f3:16:aa:7e:38:84:61:a2:84:
f2:01:98:35:db:73:0c:c4:52:69:c7:77:d7:52:9b:
12:cb:2a:1a:a1:5d:05:9c:fc:63:b9:66:5e:e2:f2:
b5:b5:32:d4:e3:a5:c3:0a:ec:ce:8c:a0:fa:8c:cc:
6f:0d:a9:ed:1a:54:38:b2:13:83:e5:4e:4a:12:b8:
00:ce:14:e7:39:ff:42:16:99:9f:ed:e5:89:be:ed:
91:fe:29:e8:a0:2c:8f:17:a3:cc:3c:60:77:b9:29:
15:9b:4b:89:d9:58:dd:40:88:2f:53:8e:47:80:ef:
85:a8:e9:c7:1d:10:34:31:37:64:d6:5c:25:ab:aa:
04:0d:d8:92:f4:4a:51:69:e6:46:1d:88:ca:54:83:
70:20:2c:92:65:b7:d0:72:82:f0:49:17:bd:d5:f1:
01:a2:fe:78:6a:72:97:7d:d8:a7:db:bb:09:01:92:
c6:db:90:53:3c:6d:f5:f7:6b:19:f2:b5:4c:3f:63:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:82:99:98:9F:4F:4E:A1:56:96:24:C1:14:96:69:33:6C:CC:23
X509v3 Authority Key Identifier:
keyid:CF:DA:C2:EC:11:04:C2:45:D9:CA:BA:8E:B6:16:38:E9:DA:F1:00:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9rC7BEEwkXZyrqOthY46drxADk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e6de68-a6e2-4ade-a096-56078c84dc17/1/z9rC7BEEwkXZyrqOthY46drxADk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d4:cd:bf:c5:75:48:9e:7f:79:c2:99:22:8f:fa:a8:72:30:
19:3e:41:0f:ab:f4:09:43:4f:2a:52:ac:d5:40:a5:09:e0:90:
5d:fe:04:58:28:58:97:d3:b5:fe:df:b3:80:d8:18:aa:a9:d2:
d5:ad:00:7d:8e:e3:2d:5f:69:4e:1f:ec:a8:b3:9e:96:f2:23:
8a:68:f8:2c:8f:1b:73:8a:a0:1a:81:d0:41:08:92:1b:c6:02:
21:d5:8d:5c:31:3e:ea:89:a3:22:93:d7:9c:06:50:5d:c9:fa:
2c:a8:a2:50:85:81:30:37:33:d4:93:b4:89:ba:20:44:fb:9f:
4d:79:c7:5a:88:54:97:3f:50:33:e3:7d:6e:3b:88:71:d1:6c:
98:12:74:c4:d9:b8:d2:85:54:c1:44:2b:43:97:fe:5e:f8:df:
e3:53:12:15:bb:c9:85:25:e9:4a:34:bc:e6:7a:02:f0:07:5b:
ea:04:a3:c3:ae:a9:8c:95:48:02:58:0b:0e:76:af:ff:79:15:
f7:4a:c2:96:2b:b9:0c:9a:e0:38:82:d3:1b:08:14:88:45:d7:
d6:fb:7a:2b:a6:16:3e:93:0a:57:64:4d:96:c4:ea:80:4d:71:
b2:d6:2f:d4:03:b2:06:d2:cf:e1:3c:46:f1:fd:7a:b1:8a:f9:
86:cd:09:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzCVmzFQuaAKd5f+xvDU5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZGFjMmVjMTEwNGMyNDVkOWNhYmE4ZWI2MTYzOGU5ZGFm
MTAwMzkwHhcNMjUwNjE1MTAwMTIxWhcNMjUwNjE2MTAwMTIxWjAzMTEwLwYDVQQD
EyhmMzRiODI5OTk4OWY0ZjRlYTE1Njk2MjRjMTE0OTY2OTMzNmNjYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YaBmqdJSmjeVsrn4XhE4zlN1itk
g4EdIowlLUnLwGNX9jb2kwmMZdAsCkm4ZSc5PB0VzWME3/ShOUY1uRZKXRvzFqp+
OIRhooTyAZg123MMxFJpx3fXUpsSyyoaoV0FnPxjuWZe4vK1tTLU46XDCuzOjKD6
jMxvDantGlQ4shOD5U5KErgAzhTnOf9CFpmf7eWJvu2R/inooCyPF6PMPGB3uSkV
m0uJ2VjdQIgvU45HgO+FqOnHHRA0MTdk1lwlq6oEDdiS9EpRaeZGHYjKVINwICyS
ZbfQcoLwSRe91fEBov54anKXfdin27sJAZLG25BTPG3192sZ8rVMP2O2MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNLgpmYn09OoVaWJMEUlmkzbMwjMB8GA1UdIwQY
MBaAFM/awuwRBMJF2cq6jrYWOOna8QA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlyQzdCRUV3a1haeXJxT3RoWTQ2ZHJ4QURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNmRlNjgtYTZlMi00YWRlLWEwOTYt
NTYwNzhjODRkYzE3LzEvejlyQzdCRUV3a1haeXJxT3RoWTQ2ZHJ4QURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNmRlNjgtYTZlMi00YWRlLWEwOTYtNTYwNzhjODRkYzE3
LzEvejlyQzdCRUV3a1haeXJxT3RoWTQ2ZHJ4QURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9TNv8V1
SJ5/ecKZIo/6qHIwGT5BD6v0CUNPKlKs1UClCeCQXf4EWChYl9O1/t+zgNgYqqnS
1a0AfY7jLV9pTh/sqLOelvIjimj4LI8bc4qgGoHQQQiSG8YCIdWNXDE+6omjIpPX
nAZQXcn6LKiiUIWBMDcz1JO0ibogRPufTXnHWohUlz9QM+N9bjuIcdFsmBJ0xNm4
0oVUwUQrQ5f+Xvjf41MSFbvJhSXpSjS85noC8Adb6gSjw66pjJVIAlgLDnav/3kV
90rCliu5DJrgOILTGwgUiEXX1vt6K6YWPpMKV2RNlsTqgE1xstYv1AOyBtLP4TxG
8f16sYr5hs0J6w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:03:00 2025 by rpki-client