Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: 0fOmdC2zSK2emQk0GVr6cckaZakSG+mivhWdPsya1uk=
Subject key identifier: 9E:E1:50:C6:F8:CA:A4:7D:6A:91:77:31:1C:39:B6:E3:7E:A3:A9:34
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 019842BE530AA4F3CCEA1C388EC4E2A89DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 055F
Signing time: Fri 25 Jul 2025 18:00:26 +0000
Manifest this update: Fri 25 Jul 2025 18:00:26 +0000
Manifest next update: Sat 26 Jul 2025 18:00:26 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: 0RL5VJOwfaEGDZUPVsS3QydPHT4Dakbj/pZBSGCxwnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:be:53:0a:a4:f3:cc:ea:1c:38:8e:c4:e2:a8:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Jul 25 18:00:26 2025 GMT
Not After : Jul 26 18:00:26 2025 GMT
Subject: CN=9ee150c6f8caa47d6a9177311c39b6e37ea3a934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:2f:03:9a:fb:95:13:74:73:79:5e:e3:03:
77:1e:6d:60:74:a4:e9:30:10:c0:60:ef:5d:b4:06:
fd:be:cb:68:d3:69:19:24:78:f6:ea:12:f0:2f:5b:
da:10:29:ea:8a:1d:a0:98:b3:3c:9f:2e:98:68:5e:
92:f8:c1:ec:2e:52:fd:97:0b:0e:54:06:c7:2c:14:
85:22:c6:9d:f8:d1:53:a5:85:70:94:49:6d:02:10:
b0:b2:ae:ce:d6:bd:54:18:a3:a4:7d:fa:34:60:2e:
3b:16:cb:7d:fc:c0:b7:f3:57:c1:69:fc:c3:28:5c:
3a:9e:ce:62:02:cb:a2:ca:71:ab:04:73:2d:7b:38:
f4:0b:fe:3b:d7:80:e1:0c:ea:42:1a:c8:ba:9c:56:
31:ab:9d:9c:92:83:f2:f6:38:ce:67:12:7a:e1:4f:
74:99:c4:8f:7f:7b:2e:31:e0:ff:d9:bd:22:48:52:
21:f9:83:06:4a:cc:5b:0f:16:39:69:04:44:66:9f:
fb:f3:b5:99:ca:c6:c1:84:b9:8a:e5:89:e5:d9:ec:
aa:f2:b3:50:f8:bb:e0:f9:35:12:60:2c:61:b9:58:
3b:5b:98:9b:19:1e:5b:bb:16:20:17:5d:f5:ef:03:
92:55:11:3a:bd:2f:36:3e:ae:0a:51:21:13:9f:05:
a8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:50:C6:F8:CA:A4:7D:6A:91:77:31:1C:39:B6:E3:7E:A3:A9:34
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c3:b0:4b:cd:fd:27:70:13:29:ef:ce:72:61:0e:3b:14:d7:
52:d4:ed:bd:a4:6b:8c:51:30:b7:5c:cd:89:84:ac:24:c9:4f:
1f:c2:41:e0:19:b0:29:09:5e:d2:ff:87:07:47:75:52:42:36:
ea:a3:f3:f7:f3:02:91:56:db:e8:fc:df:32:ad:93:d2:3b:08:
32:85:de:00:cd:3d:7a:bc:fe:28:09:56:66:3a:f5:73:44:ed:
6c:a3:f6:c3:fd:a4:67:8b:17:18:33:cf:f9:7c:b9:bc:bb:7a:
32:fc:ff:82:58:1d:78:a2:dc:d2:63:bb:04:6c:0a:fa:ed:32:
6d:be:41:56:1c:f4:ae:f0:37:ec:c4:a5:f7:e5:84:e9:16:c8:
c3:44:b9:f1:36:0e:1c:58:74:df:1b:93:de:98:b9:8c:52:df:
b5:03:85:f7:68:06:37:f4:27:4a:7d:75:c3:77:9f:65:e4:71:
31:f6:ca:03:b7:5f:9a:e0:56:58:b9:10:63:94:35:1a:38:9a:
31:e1:31:a5:41:00:2d:ba:32:e9:aa:02:6f:18:f6:80:d8:44:
a2:2d:12:09:4f:c0:8c:4b:76:35:9b:ff:a7:55:e1:cc:73:48:
56:d4:18:44:0b:a2:3a:fc:f7:0e:b4:b5:8e:09:04:84:31:87:
66:42:e5:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhCvlMKpPPM6hw4jsTiqJ36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZWRhYTM2MDQ1MTQ2ZWJjNTg0ZTcxYjVjMWFmYTY4YTcz
OTk5OTgwHhcNMjUwNzI1MTgwMDI2WhcNMjUwNzI2MTgwMDI2WjAzMTEwLwYDVQQD
Eyg5ZWUxNTBjNmY4Y2FhNDdkNmE5MTc3MzExYzM5YjZlMzdlYTNhOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHovA5r7lRN0c3le4wN3Hm1gdKTp
MBDAYO9dtAb9vsto02kZJHj26hLwL1vaECnqih2gmLM8ny6YaF6S+MHsLlL9lwsO
VAbHLBSFIsad+NFTpYVwlEltAhCwsq7O1r1UGKOkffo0YC47Fst9/MC381fBafzD
KFw6ns5iAsuiynGrBHMtezj0C/4714DhDOpCGsi6nFYxq52ckoPy9jjOZxJ64U90
mcSPf3suMeD/2b0iSFIh+YMGSsxbDxY5aQREZp/787WZysbBhLmK5Ynl2eyq8rNQ
+Lvg+TUSYCxhuVg7W5ibGR5buxYgF1317wOSVRE6vS82Pq4KUSETnwWonQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7hUMb4yqR9apF3MRw5tuN+o6k0MB8GA1UdIwQY
MBaAFM7tqjYEUUbrxYTnG1wa+minOZmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2Mt
NDQzMWU0ZmNiMzgyLzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2MtNDQzMWU0ZmNiMzgy
LzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcOwS839
J3ATKe/OcmEOOxTXUtTtvaRrjFEwt1zNiYSsJMlPH8JB4BmwKQle0v+HB0d1UkI2
6qPz9/MCkVbb6PzfMq2T0jsIMoXeAM09erz+KAlWZjr1c0TtbKP2w/2kZ4sXGDPP
+Xy5vLt6Mvz/glgdeKLc0mO7BGwK+u0ybb5BVhz0rvA37MSl9+WE6RbIw0S58TYO
HFh03xuT3pi5jFLftQOF92gGN/QnSn11w3efZeRxMfbKA7dfmuBWWLkQY5Q1Gjia
MeExpUEALboy6aoCbxj2gNhEoi0SCU/AjEt2NZv/p1XhzHNIVtQYRAuiOvz3DrS1
jgkEhDGHZkLlfg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:33 2025 by rpki-client