Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: ezR2ba33wZBcw5G6oV9IlTn+yeyZvaz9G/FU0mdR1mI=
Subject key identifier: 95:FF:ED:4D:0C:58:55:BA:9B:9A:A4:EF:83:9F:12:DF:D2:B1:1B:04
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 019892C7D285CA10221B711AE334203480D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0EBC
Signing time: Sun 10 Aug 2025 07:00:25 +0000
Manifest this update: Sun 10 Aug 2025 07:00:25 +0000
Manifest next update: Mon 11 Aug 2025 07:00:25 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: S8NLwMfoeU/ajKvsx6Gm9hdhbJ0XZAAew5IhcvOAIEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c7:d2:85:ca:10:22:1b:71:1a:e3:34:20:34:80:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Aug 10 07:00:25 2025 GMT
Not After : Aug 11 07:00:25 2025 GMT
Subject: CN=95ffed4d0c5855ba9b9aa4ef839f12dfd2b11b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:f0:83:95:92:13:31:0b:2c:14:82:fa:87:
8e:bf:50:9a:f2:7d:62:48:92:2c:f5:70:8a:14:54:
33:3b:0b:08:84:0f:dc:c3:9d:a2:81:66:e5:97:0a:
70:83:8a:d4:cc:5c:e1:74:0c:7a:41:fd:13:74:ff:
91:e5:79:66:ba:cb:64:f8:31:9b:56:99:ed:a8:2d:
31:64:29:7d:27:ec:4a:f5:1f:f0:76:a1:02:3c:87:
58:c3:c2:45:3a:e6:47:22:df:25:1e:d1:d8:0f:06:
d2:59:c5:58:3e:3e:d6:0a:26:18:cb:b3:c4:d8:c2:
70:00:67:10:dc:34:72:ef:78:e3:d3:e3:70:66:05:
fb:ea:04:4d:eb:d6:da:c7:59:e9:d4:b3:73:3e:c1:
3e:19:5a:4f:49:a4:7c:d3:f0:15:f8:aa:e4:bb:03:
90:ad:96:b9:80:3c:7c:e9:b9:56:2c:40:46:4b:b1:
d8:87:41:b8:33:29:f1:e5:6b:1b:e7:c7:81:87:7e:
11:d7:ea:b5:d1:fb:c4:57:11:e9:1d:38:60:3d:b1:
e3:75:94:c5:f1:99:26:e4:53:f4:8e:50:32:97:e0:
99:ab:92:2f:4e:cc:63:a1:4c:04:f5:22:23:f1:74:
f6:b2:72:03:a9:e8:57:87:12:b1:79:39:16:15:e0:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FF:ED:4D:0C:58:55:BA:9B:9A:A4:EF:83:9F:12:DF:D2:B1:1B:04
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4c:6e:31:bb:5b:0c:d0:8a:9c:b8:1b:45:9c:d2:6e:fc:32:
5a:bf:fe:93:b0:0e:56:ed:fe:e4:dc:5a:16:cd:cd:39:a5:5b:
af:29:9a:84:db:fe:70:57:30:6c:89:a4:ac:54:88:31:83:95:
9e:e0:79:9e:5c:41:c1:59:d1:f1:b0:28:b6:51:58:74:b2:7c:
f2:95:8e:8d:91:0f:30:de:95:21:28:81:a0:ee:78:91:e5:7a:
fe:36:0a:f2:80:b2:d0:0c:0d:13:a5:74:98:a8:01:70:d9:63:
85:05:7d:03:d7:24:f5:f1:ca:08:27:b5:51:ed:aa:c5:8c:08:
ea:8c:20:b2:c5:83:57:6c:dd:e8:d7:f4:5c:03:f1:82:0d:20:
ed:9f:7f:44:d2:f6:9b:c3:1c:b5:ce:ca:94:3c:97:85:b0:5a:
d2:14:57:9c:57:89:3b:78:ce:59:a7:4e:e3:68:2c:ce:55:90:
fa:47:48:0f:e7:29:56:28:63:57:e0:1b:dd:bd:fd:2b:24:65:
a6:ee:32:d5:f3:16:ff:94:e9:c4:95:42:d2:2f:49:5c:bc:83:
fa:c6:e2:f3:d5:45:12:19:92:1d:a4:20:9a:06:60:74:72:ea:
bb:ed:92:46:96:64:92:26:ec:e2:1f:63:4e:79:04:45:9d:97:
ca:ed:aa:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSx9KFyhAiG3Ea4zQgNIDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OWQ3NTA3ZjlhZTFjOGIzZmRlNDU0MzNhZWU4ZmNmOTg1
YTIxZmEwHhcNMjUwODEwMDcwMDI1WhcNMjUwODExMDcwMDI1WjAzMTEwLwYDVQQD
Eyg5NWZmZWQ0ZDBjNTg1NWJhOWI5YWE0ZWY4MzlmMTJkZmQyYjExYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXPwg5WSEzELLBSC+oeOv1Ca8n1i
SJIs9XCKFFQzOwsIhA/cw52igWbllwpwg4rUzFzhdAx6Qf0TdP+R5Xlmustk+DGb
VpntqC0xZCl9J+xK9R/wdqECPIdYw8JFOuZHIt8lHtHYDwbSWcVYPj7WCiYYy7PE
2MJwAGcQ3DRy73jj0+NwZgX76gRN69bax1np1LNzPsE+GVpPSaR80/AV+KrkuwOQ
rZa5gDx86blWLEBGS7HYh0G4Mynx5Wsb58eBh34R1+q10fvEVxHpHThgPbHjdZTF
8Zkm5FP0jlAyl+CZq5IvTsxjoUwE9SIj8XT2snIDqehXhxKxeTkWFeC32wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJX/7U0MWFW6m5qk74OfEt/SsRsEMB8GA1UdIwQY
MBaAFGmddQf5rhyLP95FQzruj8+YWiH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjIt
MjI0MTY1ZWMxODBhLzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81NWM3MWItM2QwNi00MzZmLTgxMjItMjI0MTY1ZWMxODBh
LzEvYVoxMUJfbXVISXNfM2tWRE91NlB6NWhhSWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATExuMbtb
DNCKnLgbRZzSbvwyWr/+k7AOVu3+5NxaFs3NOaVbrymahNv+cFcwbImkrFSIMYOV
nuB5nlxBwVnR8bAotlFYdLJ88pWOjZEPMN6VISiBoO54keV6/jYK8oCy0AwNE6V0
mKgBcNljhQV9A9ck9fHKCCe1Ue2qxYwI6owgssWDV2zd6Nf0XAPxgg0g7Z9/RNL2
m8Mctc7KlDyXhbBa0hRXnFeJO3jOWadO42gszlWQ+kdID+cpVihjV+Ab3b39KyRl
pu4y1fMW/5TpxJVC0i9JXLyD+sbi89VFEhmSHaQgmgZgdHLqu+2SRpZkkibs4h9j
TnkERZ2Xyu2qMA==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:19 2025 by rpki-client