Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
File: zrxhguhz_3oDHIiV79xXw2hx3XI.mft (raw, json)
Hash identifier: 5XOd+dEpdoneyiz4EOwieXbwM4sB6ZZLU2S/WN/jADA=
Subject key identifier: BF:92:FE:DD:D7:2F:05:ED:4A:56:39:1B:73:5C:4E:66:D0:50:EE:88
Authority key identifier: CE:BC:61:82:E8:73:FF:7A:03:1C:88:95:EF:DC:57:C3:68:71:DD:72
Certificate issuer: /CN=cebc6182e873ff7a031c8895efdc57c36871dd72
Certificate serial: 01989E5F07A65957008138C3D517F8C09290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
Manifest number: 01C1
Signing time: Tue 12 Aug 2025 13:01:24 +0000
Manifest this update: Tue 12 Aug 2025 13:01:24 +0000
Manifest next update: Wed 13 Aug 2025 13:01:24 +0000
Files and hashes: 1: zrxhguhz_3oDHIiV79xXw2hx3XI.crl (hash: aAoFp0asN+raGeBVdnCm4zRBNnhtA+iX62V+ckESL5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:07:a6:59:57:00:81:38:c3:d5:17:f8:c0:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebc6182e873ff7a031c8895efdc57c36871dd72
Validity
Not Before: Aug 12 13:01:24 2025 GMT
Not After : Aug 13 13:01:24 2025 GMT
Subject: CN=bf92feddd72f05ed4a56391b735c4e66d050ee88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:d9:43:6a:19:69:80:12:56:e9:4e:bb:8d:
ba:a8:da:44:9e:7f:35:37:a9:6b:74:bc:35:f5:28:
c7:cb:e7:de:b7:e2:a0:c9:d4:ca:06:dc:f0:28:9f:
12:da:b5:a2:45:d4:1a:81:5f:98:30:32:34:fb:74:
c3:eb:0d:46:09:13:c3:78:f4:56:49:76:25:35:66:
f9:61:74:0c:cf:25:6f:39:23:f1:70:f8:a1:ba:9d:
ae:ab:c4:88:1a:c2:15:71:bc:ab:c6:61:bc:4f:82:
58:b9:46:2d:ac:58:db:73:75:d7:d4:ad:66:71:b5:
26:50:0f:19:23:e2:fe:a1:d9:05:c8:63:bc:31:1b:
90:11:d9:28:38:f2:6b:c9:d4:c3:e7:97:d2:9e:2e:
f9:02:cc:4e:ac:8e:8c:db:6a:cd:4b:5a:5f:75:97:
68:65:80:5b:34:f9:7a:01:75:ff:00:aa:8d:db:53:
a8:2e:8b:2e:44:82:58:1b:07:f5:10:90:dd:7a:d3:
58:b4:7c:95:84:cd:d5:9f:f5:c5:24:9d:cd:ed:61:
ce:b9:6a:02:16:f0:6d:4d:d6:6b:d6:16:82:c8:ba:
e3:77:d4:4f:c5:fa:ec:e9:db:80:d8:0a:38:47:62:
9c:ae:9b:77:dc:d3:57:79:7f:0b:c1:60:bd:48:04:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:FE:DD:D7:2F:05:ED:4A:56:39:1B:73:5C:4E:66:D0:50:EE:88
X509v3 Authority Key Identifier:
keyid:CE:BC:61:82:E8:73:FF:7A:03:1C:88:95:EF:DC:57:C3:68:71:DD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrxhguhz_3oDHIiV79xXw2hx3XI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/407bad-aed8-45e1-b3ea-2b369158a8b3/1/zrxhguhz_3oDHIiV79xXw2hx3XI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:2a:bf:0e:cf:5c:d6:b3:06:27:42:b8:34:bc:7a:7c:f8:b3:
68:2c:3e:db:c9:de:9d:6c:ff:58:87:72:8c:3a:e1:c1:01:61:
1e:a4:8d:8a:cd:d9:63:40:6e:cb:47:92:bb:e2:ea:1e:a7:98:
2a:66:d5:b3:cc:86:ab:c0:de:58:26:44:7f:f4:69:0e:eb:36:
c4:e8:e9:98:71:21:b7:73:21:a1:6b:01:c5:f3:ba:29:c5:32:
d6:2c:b0:1f:17:d2:f8:03:dc:e3:26:8d:65:4d:b9:ee:a3:ee:
55:40:1d:bb:87:92:ff:ee:e4:a6:3a:cb:ee:84:dc:bc:24:30:
37:0d:3b:a0:57:b0:7b:2e:1d:93:13:b9:f8:77:b2:03:ff:69:
03:e6:fa:0c:93:bd:c1:e8:07:d2:bf:ed:20:9a:83:74:36:4e:
ba:07:8e:ab:15:0b:65:14:cd:73:e0:64:bb:22:7b:56:a3:b5:
6f:f0:80:35:3c:96:b3:14:42:8b:23:fa:6d:9e:62:5a:a9:95:
b3:c9:75:ec:70:c8:ab:b7:96:94:d1:51:95:18:5a:93:04:48:
b6:af:75:eb:6a:55:57:91:84:93:0d:70:55:d7:84:0d:33:f5:
91:e9:a0:81:8c:ac:fd:33:30:78:4f:89:ca:61:77:06:39:b4:
77:04:1a:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieXwemWVcAgTjD1Rf4wJKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmM2MTgyZTg3M2ZmN2EwMzFjODg5NWVmZGM1N2MzNjg3
MWRkNzIwHhcNMjUwODEyMTMwMTI0WhcNMjUwODEzMTMwMTI0WjAzMTEwLwYDVQQD
EyhiZjkyZmVkZGQ3MmYwNWVkNGE1NjM5MWI3MzVjNGU2NmQwNTBlZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/XZQ2oZaYASVulOu426qNpEnn81
N6lrdLw19SjHy+fet+KgydTKBtzwKJ8S2rWiRdQagV+YMDI0+3TD6w1GCRPDePRW
SXYlNWb5YXQMzyVvOSPxcPihup2uq8SIGsIVcbyrxmG8T4JYuUYtrFjbc3XX1K1m
cbUmUA8ZI+L+odkFyGO8MRuQEdkoOPJrydTD55fSni75AsxOrI6M22rNS1pfdZdo
ZYBbNPl6AXX/AKqN21OoLosuRIJYGwf1EJDdetNYtHyVhM3Vn/XFJJ3N7WHOuWoC
FvBtTdZr1haCyLrjd9RPxfrs6duA2Ao4R2Kcrpt33NNXeX8LwWC9SARrAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+S/t3XLwXtSlY5G3NcTmbQUO6IMB8GA1UdIwQY
MBaAFM68YYLoc/96AxyIle/cV8Nocd1yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJ4aGd1aHpfM29ESElpVjc5eFh3Mmh4M1hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS80MDdiYWQtYWVkOC00NWUxLWIzZWEt
MmIzNjkxNThhOGIzLzEvenJ4aGd1aHpfM29ESElpVjc5eFh3Mmh4M1hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS80MDdiYWQtYWVkOC00NWUxLWIzZWEtMmIzNjkxNThhOGIz
LzEvenJ4aGd1aHpfM29ESElpVjc5eFh3Mmh4M1hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiq/Ds9c
1rMGJ0K4NLx6fPizaCw+28nenWz/WIdyjDrhwQFhHqSNis3ZY0Buy0eSu+LqHqeY
KmbVs8yGq8DeWCZEf/RpDus2xOjpmHEht3MhoWsBxfO6KcUy1iywHxfS+APc4yaN
ZU257qPuVUAdu4eS/+7kpjrL7oTcvCQwNw07oFewey4dkxO5+HeyA/9pA+b6DJO9
wegH0r/tIJqDdDZOugeOqxULZRTNc+BkuyJ7VqO1b/CANTyWsxRCiyP6bZ5iWqmV
s8l17HDIq7eWlNFRlRhakwRItq9162pVV5GEkw1wVdeEDTP1kemggYys/TMweE+J
ymF3Bjm0dwQacg==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:47:57 2025 by rpki-client