Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: 5VH5pNTMiT5kwp85xJ3+gHGOZDMKENNJ1PsKstnB5SI=
Subject key identifier: 65:8E:DF:55:08:09:16:AF:FD:38:8D:2E:63:03:83:81:80:33:6D:3D
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 019846D24FC6DE4ABBBEB94A5A29D32172BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 0EE3
Signing time: Sat 26 Jul 2025 13:00:44 +0000
Manifest this update: Sat 26 Jul 2025 13:00:44 +0000
Manifest next update: Sun 27 Jul 2025 13:00:44 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: wDLMsUuxz1R+2mYBogi0PJNZcjWwXyxLYQluFojhi5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:4f:c6:de:4a:bb:be:b9:4a:5a:29:d3:21:72:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Jul 26 13:00:44 2025 GMT
Not After : Jul 27 13:00:44 2025 GMT
Subject: CN=658edf55080916affd388d2e6303838180336d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:27:a6:ab:73:8f:d8:48:2d:84:04:a1:d9:
b3:73:b9:9f:40:9c:0c:2f:9b:ac:3b:21:db:3f:1b:
d1:e4:9a:25:07:a8:07:fa:f3:19:45:1e:ce:be:8b:
3e:df:8d:ac:86:35:76:48:06:57:fe:48:f3:e0:22:
ba:4d:25:0d:f1:a6:66:f5:3b:d5:52:9f:21:b3:50:
ba:64:a2:21:ca:84:7e:b8:b5:13:4a:50:54:8e:42:
af:7a:30:95:53:5d:5b:3b:9b:27:ae:fa:85:a1:34:
25:76:f3:57:3a:8e:f5:28:fe:48:27:ff:5a:70:fd:
6c:3d:38:34:16:bc:1e:a6:57:82:d9:5d:fe:2f:08:
c7:46:32:c2:34:de:b7:1b:dd:56:c4:d3:d1:65:7b:
3e:01:7d:3d:8f:fb:3a:3d:06:16:b4:db:0d:17:7b:
f3:77:63:53:ac:61:06:9d:b6:60:31:bd:67:01:60:
e1:90:c6:8a:a5:c6:51:f9:a8:58:8a:c6:04:8a:ed:
6b:50:25:f1:d3:82:c3:14:73:99:22:5a:4f:79:a1:
88:b9:54:46:12:12:0a:5b:ef:a8:79:55:91:95:69:
7a:ba:9b:26:65:3e:d3:9e:c7:3c:fa:7a:e1:41:ef:
04:18:21:a6:c5:6f:a7:eb:15:cf:40:f5:21:8b:34:
b2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:DF:55:08:09:16:AF:FD:38:8D:2E:63:03:83:81:80:33:6D:3D
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:93:5a:d3:c0:7f:5d:3e:0d:1a:c9:13:84:b6:85:e7:5a:c8:
c8:5a:54:ae:e2:6a:00:cc:be:a3:ba:e2:2c:b9:83:da:12:7e:
32:5a:46:db:36:bb:3c:79:4c:51:c8:76:0c:6f:e2:ca:31:3a:
40:79:49:8c:b4:36:4a:05:30:a1:d0:ad:e2:49:2d:ca:8c:3b:
b7:de:98:58:a6:11:16:60:6b:ed:a2:ba:8b:9d:b5:49:f7:86:
ac:b8:71:93:b8:b2:7f:58:b4:8a:68:72:e7:6b:30:58:df:10:
f6:76:97:f8:df:4a:7f:ac:94:bf:22:17:36:91:6b:2a:d8:7c:
fa:b6:75:bc:08:60:52:31:50:76:54:f8:5d:7a:d1:b9:b1:b2:
03:71:c0:2e:b7:12:09:de:8e:55:c5:f7:97:63:e7:fe:0e:fa:
92:84:87:20:f2:c7:f2:4c:89:fe:dd:f2:dc:02:48:9c:53:16:
8c:ce:9d:d4:70:c2:10:31:25:de:cb:dc:0c:c1:92:3e:e1:86:
d8:e6:99:61:ad:96:9b:11:33:ef:a1:46:91:20:55:44:a3:78:
ee:12:6f:4d:b2:df:b1:65:cd:04:29:7a:e2:82:3a:67:83:c0:
90:92:c3:66:bd:5e:4c:86:4a:31:52:99:65:a6:84:d0:c7:ca:
e1:cc:1d:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhG0k/G3kq7vrlKWinTIXK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjJlYzk5NDU0MmNhN2FjYWFkZDU4NzI3ZTQ2MDZhYjQ0
OTAwNDAwHhcNMjUwNzI2MTMwMDQ0WhcNMjUwNzI3MTMwMDQ0WjAzMTEwLwYDVQQD
Eyg2NThlZGY1NTA4MDkxNmFmZmQzODhkMmU2MzAzODM4MTgwMzM2ZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNwnpqtzj9hILYQEodmzc7mfQJwM
L5usOyHbPxvR5JolB6gH+vMZRR7Ovos+342shjV2SAZX/kjz4CK6TSUN8aZm9TvV
Up8hs1C6ZKIhyoR+uLUTSlBUjkKvejCVU11bO5snrvqFoTQldvNXOo71KP5IJ/9a
cP1sPTg0FrwepleC2V3+LwjHRjLCNN63G91WxNPRZXs+AX09j/s6PQYWtNsNF3vz
d2NTrGEGnbZgMb1nAWDhkMaKpcZR+ahYisYEiu1rUCXx04LDFHOZIlpPeaGIuVRG
EhIKW++oeVWRlWl6upsmZT7Tnsc8+nrhQe8EGCGmxW+n6xXPQPUhizSypQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWO31UICRav/TiNLmMDg4GAM209MB8GA1UdIwQY
MBaAFM4i7JlFQsp6yq3VhyfkYGq0SQBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMt
Yjc0YTA1NmRjYmUzLzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMtYjc0YTA1NmRjYmUz
LzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZNa08B/
XT4NGskThLaF51rIyFpUruJqAMy+o7riLLmD2hJ+MlpG2za7PHlMUch2DG/iyjE6
QHlJjLQ2SgUwodCt4kktyow7t96YWKYRFmBr7aK6i521SfeGrLhxk7iyf1i0imhy
52swWN8Q9naX+N9Kf6yUvyIXNpFrKth8+rZ1vAhgUjFQdlT4XXrRubGyA3HALrcS
Cd6OVcX3l2Pn/g76koSHIPLH8kyJ/t3y3AJInFMWjM6d1HDCEDEl3svcDMGSPuGG
2OaZYa2WmxEz76FGkSBVRKN47hJvTbLfsWXNBCl64oI6Z4PAkJLDZr1eTIZKMVKZ
ZaaE0MfK4cwdKw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:27:42 2025 by rpki-client