Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
File: ZtYtu574eixrGodeUq8TKIRpclo.mft (raw, json)
Hash identifier: jXF5ZEa8NNVct2DJ3laPgksI8tieEYWChL7edqYZeBM=
Subject key identifier: 24:78:D1:B2:43:0B:79:56:77:06:A2:6A:22:09:14:40:30:C9:9C:7F
Authority key identifier: 66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
Certificate issuer: /CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Certificate serial: 019849D2D3D32CDDD95675258A39221BDFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
Manifest number: 15FC
Signing time: Sun 27 Jul 2025 03:00:10 +0000
Manifest this update: Sun 27 Jul 2025 03:00:10 +0000
Manifest next update: Mon 28 Jul 2025 03:00:10 +0000
Files and hashes: 1: ZtYtu574eixrGodeUq8TKIRpclo.crl (hash: /q/84266Yk+JY9Cr1Sb22LklGvHlHYfBAj/whDHGxTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:d3:d3:2c:dd:d9:56:75:25:8a:39:22:1b:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d62dbb9ef87a2c6b1a875e52af13288469725a
Validity
Not Before: Jul 27 03:00:10 2025 GMT
Not After : Jul 28 03:00:10 2025 GMT
Subject: CN=2478d1b2430b79567706a26a2209144030c99c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:96:a1:0d:ab:c3:64:fd:8a:75:28:5d:0e:
86:d6:f7:46:0a:2a:e6:7d:08:dc:ae:cf:46:3d:c8:
9a:fd:43:28:30:a1:68:a9:0b:80:b9:c6:32:a4:ab:
be:47:96:f4:c7:dc:2d:61:f7:9e:c1:fc:37:a5:39:
f0:a0:72:b3:e5:42:c6:7f:a9:35:d9:ac:2d:27:b7:
c0:9e:46:8a:71:cf:0c:bb:ea:01:ef:35:e6:dd:20:
42:c2:99:b2:79:99:ff:2b:2b:93:36:88:74:89:ea:
ba:94:be:f7:8d:00:3f:b9:e8:6d:ff:90:5b:4a:b8:
2f:7c:df:b5:d2:12:93:15:c8:ee:dd:65:b6:f7:7b:
0d:2f:0e:de:bc:9c:c1:ff:a4:b3:33:51:11:d3:65:
a2:bd:4f:c9:00:50:d3:fa:0c:f9:cf:86:d8:04:59:
b6:82:ca:56:fb:85:67:14:42:ba:b7:a4:53:0a:60:
52:42:6a:70:1e:e1:05:75:e7:ad:d4:fb:03:82:4d:
74:c1:f5:22:62:31:ed:ae:95:5a:84:20:b3:10:c3:
1a:2b:f7:c5:db:e9:d5:df:cd:31:1e:cd:04:c4:5f:
06:fc:d5:12:41:d9:62:de:2c:e0:ba:21:ae:f7:3d:
1e:53:de:de:4d:98:9e:cf:cd:53:b7:8e:30:e3:f8:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:D1:B2:43:0B:79:56:77:06:A2:6A:22:09:14:40:30:C9:9C:7F
X509v3 Authority Key Identifier:
keyid:66:D6:2D:BB:9E:F8:7A:2C:6B:1A:87:5E:52:AF:13:28:84:69:72:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtYtu574eixrGodeUq8TKIRpclo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/31477a-3a95-4552-b5cb-9f41cace50aa/1/ZtYtu574eixrGodeUq8TKIRpclo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d9:8b:d8:89:4e:d4:f9:5b:bb:13:5e:b5:ef:fd:cb:b7:d8:
4e:74:fb:33:38:95:f5:bd:b9:6f:ec:8f:1e:ee:60:02:fd:1f:
1b:57:a4:34:39:f4:95:2e:d1:fb:89:4d:05:7e:98:05:94:08:
5b:b7:ab:76:e3:8f:a1:e7:19:f7:d5:7e:21:ef:3c:e7:2c:d9:
f7:dd:fb:38:36:3a:95:6f:f3:c2:00:be:69:27:8c:85:50:26:
be:01:8e:86:a7:52:d0:2a:60:83:74:34:d8:82:cd:7c:c8:07:
63:6e:b9:c5:7d:28:ed:58:91:e7:63:bd:2b:55:00:0a:af:3f:
7b:87:bc:71:1e:da:79:35:a0:83:07:4c:9b:2c:ed:df:55:35:
d7:d3:28:ec:95:c5:ef:c1:0b:cd:6c:a0:90:a0:59:66:de:04:
d5:4a:ae:4e:83:68:bf:69:5e:89:08:99:87:25:cb:a6:1f:fc:
ec:2e:cb:58:0e:09:4d:3a:07:f8:f5:65:44:f9:62:6a:09:8e:
a4:d3:36:57:77:1b:3a:57:55:d7:be:de:ba:25:b3:66:a8:30:
3f:f7:bb:c1:32:37:ac:79:e6:37:97:9d:0d:9b:84:38:64:03:
3e:82:7a:fa:9b:18:22:6c:11:25:6c:ca:72:e7:86:40:f1:9a:
af:28:22:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0tPTLN3ZVnUlijkiG9++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDYyZGJiOWVmODdhMmM2YjFhODc1ZTUyYWYxMzI4ODQ2
OTcyNWEwHhcNMjUwNzI3MDMwMDEwWhcNMjUwNzI4MDMwMDEwWjAzMTEwLwYDVQQD
EygyNDc4ZDFiMjQzMGI3OTU2NzcwNmEyNmEyMjA5MTQ0MDMwYzk5YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8yWoQ2rw2T9inUoXQ6G1vdGCirm
fQjcrs9GPcia/UMoMKFoqQuAucYypKu+R5b0x9wtYfeewfw3pTnwoHKz5ULGf6k1
2awtJ7fAnkaKcc8Mu+oB7zXm3SBCwpmyeZn/KyuTNoh0ieq6lL73jQA/ueht/5Bb
SrgvfN+10hKTFcju3WW293sNLw7evJzB/6SzM1ER02WivU/JAFDT+gz5z4bYBFm2
gspW+4VnFEK6t6RTCmBSQmpwHuEFdeet1PsDgk10wfUiYjHtrpVahCCzEMMaK/fF
2+nV380xHs0ExF8G/NUSQdli3izguiGu9z0eU97eTZiez81Tt44w4/h6NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR40bJDC3lWdwaiaiIJFEAwyZx/MB8GA1UdIwQY
MBaAFGbWLbue+HosaxqHXlKvEyiEaXJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2It
OWY0MWNhY2U1MGFhLzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTQ3N2EtM2E5NS00NTUyLWI1Y2ItOWY0MWNhY2U1MGFh
LzEvWnRZdHU1NzRlaXhyR29kZVVxOFRLSVJwY2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitmL2IlO
1PlbuxNete/9y7fYTnT7MziV9b25b+yPHu5gAv0fG1ekNDn0lS7R+4lNBX6YBZQI
W7erduOPoecZ99V+Ie885yzZ9937ODY6lW/zwgC+aSeMhVAmvgGOhqdS0Cpgg3Q0
2ILNfMgHY265xX0o7ViR52O9K1UACq8/e4e8cR7aeTWggwdMmyzt31U119Mo7JXF
78ELzWygkKBZZt4E1UquToNov2leiQiZhyXLph/87C7LWA4JTToH+PVlRPliagmO
pNM2V3cbOldV177euiWzZqgwP/e7wTI3rHnmN5edDZuEOGQDPoJ6+psYImwRJWzK
cueGQPGarygiEg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:06:15 2025 by rpki-client