Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
File: cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft (raw, json)
Hash identifier: NFGtP0fTLgTr1DRoEKWitR3igiP5dPsiddgPN+Dr+o4=
Subject key identifier: 29:3C:89:89:26:9D:91:CD:6A:AF:F0:4C:87:E4:52:61:7F:FB:25:73
Authority key identifier: 71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
Certificate issuer: /CN=7192f3560c15b94d1ef497726845d786786bc762
Certificate serial: 019892C9836A43EA5495CC41138D36E20675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
Manifest number: 0D5B
Signing time: Sun 10 Aug 2025 07:02:16 +0000
Manifest this update: Sun 10 Aug 2025 07:02:16 +0000
Manifest next update: Mon 11 Aug 2025 07:02:16 +0000
Files and hashes: 1: cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl (hash: GPLD5wfgWE2EpSUCa9rZJ5ysJf8waW/xRJ3l70Q7R6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:83:6a:43:ea:54:95:cc:41:13:8d:36:e2:06:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f3560c15b94d1ef497726845d786786bc762
Validity
Not Before: Aug 10 07:02:16 2025 GMT
Not After : Aug 11 07:02:16 2025 GMT
Subject: CN=293c8989269d91cd6aaff04c87e452617ffb2573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:35:a3:17:19:2e:b4:21:82:46:ad:55:6b:
3c:20:24:fd:52:a9:1e:8b:d6:6e:eb:ce:5c:c8:73:
ab:ca:7b:57:c9:93:22:42:2a:46:87:e2:01:c4:64:
24:f8:14:1d:45:5f:7c:62:c7:a5:34:43:02:78:f0:
6a:26:04:46:e2:e2:ab:62:fd:85:5b:dd:04:74:12:
32:a7:e0:c6:2a:ea:c1:2b:5f:1d:1c:a6:e2:50:06:
46:a5:47:5a:49:71:4b:93:0a:9c:c6:85:aa:47:bf:
b9:52:b7:db:b9:58:c2:c8:d1:55:8f:1e:46:b2:3a:
c8:7c:f6:60:72:5e:75:b4:4c:5f:47:d9:ab:a2:82:
4a:5c:96:49:af:c3:83:c2:04:79:fb:81:33:75:5d:
51:e6:30:38:39:ac:4a:18:65:e6:8f:08:65:ee:7b:
6a:00:d5:be:3e:3b:63:0a:56:c5:d2:44:21:4e:2a:
0d:ca:2b:23:14:99:5e:60:54:01:cf:79:0e:1d:69:
de:9c:4a:d1:8c:e2:ec:27:bd:18:13:ce:36:cb:83:
c3:5b:d9:96:b2:73:9c:b2:a2:d0:46:19:51:94:bb:
af:66:2b:5b:7b:87:2e:a9:74:3d:b2:d9:3d:9d:a0:
06:20:52:ee:31:90:ae:ee:80:65:27:c4:49:57:04:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3C:89:89:26:9D:91:CD:6A:AF:F0:4C:87:E4:52:61:7F:FB:25:73
X509v3 Authority Key Identifier:
keyid:71:92:F3:56:0C:15:B9:4D:1E:F4:97:72:68:45:D7:86:78:6B:C7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLzVgwVuU0e9JdyaEXXhnhrx2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/69a034-b508-42e8-99e8-75ee24a3f96b/1/cZLzVgwVuU0e9JdyaEXXhnhrx2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:6a:a1:42:f6:d2:63:5b:8a:51:02:27:0b:17:20:88:da:
af:01:ba:15:92:40:57:ec:7f:24:92:d9:e4:5e:a0:0f:ce:ee:
f6:57:ec:e7:f9:37:cf:ed:11:ad:6d:05:59:08:ca:7a:34:b5:
f7:59:03:30:b5:04:4a:c3:fd:af:57:29:32:e8:90:f3:bf:d7:
5b:55:0e:fa:dd:9a:37:d6:2c:26:65:54:ed:05:54:73:0e:77:
6b:6c:e1:d8:23:37:7f:45:3f:52:f8:cb:ac:fc:6c:cc:03:54:
22:d2:0b:c1:cb:9a:28:89:58:bb:62:9e:5a:70:84:d8:63:44:
a7:4c:d5:16:42:cc:ab:fd:d7:63:28:dc:03:d9:cb:f8:9e:55:
d1:a6:73:50:3d:ad:a7:4a:5b:5b:f4:2b:62:95:46:f5:5a:94:
57:58:38:c2:21:b7:fb:db:62:19:a2:be:a6:f2:06:54:d6:6d:
dd:71:dd:db:8a:ab:f2:6e:da:c3:d4:c5:99:54:6e:f0:17:61:
e6:8e:0b:e3:8a:37:f4:13:52:23:1a:9f:15:07:08:fa:07:43:
02:2e:1a:9f:61:ea:a6:a9:ba:78:6f:3e:78:e1:97:34:e1:4f:
4d:44:92:4c:2f:6f:17:12:ee:6c:94:0a:bb:66:bb:c1:76:16:
78:6c:f9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyYNqQ+pUlcxBE4024gZ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxOTJmMzU2MGMxNWI5NGQxZWY0OTc3MjY4NDVkNzg2Nzg2
YmM3NjIwHhcNMjUwODEwMDcwMjE2WhcNMjUwODExMDcwMjE2WjAzMTEwLwYDVQQD
EygyOTNjODk4OTI2OWQ5MWNkNmFhZmYwNGM4N2U0NTI2MTdmZmIyNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr01oxcZLrQhgkatVWs8ICT9Uqke
i9Zu685cyHOryntXyZMiQipGh+IBxGQk+BQdRV98YselNEMCePBqJgRG4uKrYv2F
W90EdBIyp+DGKurBK18dHKbiUAZGpUdaSXFLkwqcxoWqR7+5UrfbuVjCyNFVjx5G
sjrIfPZgcl51tExfR9mrooJKXJZJr8ODwgR5+4EzdV1R5jA4OaxKGGXmjwhl7ntq
ANW+PjtjClbF0kQhTioNyisjFJleYFQBz3kOHWnenErRjOLsJ70YE842y4PDW9mW
snOcsqLQRhlRlLuvZitbe4cuqXQ9stk9naAGIFLuMZCu7oBlJ8RJVwQ7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk8iYkmnZHNaq/wTIfkUmF/+yVzMB8GA1UdIwQY
MBaAFHGS81YMFblNHvSXcmhF14Z4a8diMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgt
NzVlZTI0YTNmOTZiLzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82OWEwMzQtYjUwOC00MmU4LTk5ZTgtNzVlZTI0YTNmOTZi
LzEvY1pMelZnd1Z1VTBlOUpkeWFFWFhobmhyeDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAki5qoUL2
0mNbilECJwsXIIjarwG6FZJAV+x/JJLZ5F6gD87u9lfs5/k3z+0RrW0FWQjKejS1
91kDMLUESsP9r1cpMuiQ87/XW1UO+t2aN9YsJmVU7QVUcw53a2zh2CM3f0U/UvjL
rPxszANUItILwcuaKIlYu2KeWnCE2GNEp0zVFkLMq/3XYyjcA9nL+J5V0aZzUD2t
p0pbW/QrYpVG9VqUV1g4wiG3+9tiGaK+pvIGVNZt3XHd24qr8m7aw9TFmVRu8Bdh
5o4L44o39BNSIxqfFQcI+gdDAi4an2Hqpqm6eG8+eOGXNOFPTUSSTC9vFxLubJQK
u2a7wXYWeGz5Ow==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:47:59 2025 by rpki-client