Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json)
Hash identifier: CrShohycssYY58YjGMfI5NKbWVDk4IiME2uzdaYgw9s=
Subject key identifier: 5E:1D:66:E8:0D:A6:5C:24:C8:C5:42:F5:96:C4:3B:DF:5A:27:05:19
Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040
Certificate serial: 019A711348C32CA89886534CB9E006F40655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
Manifest number: 1002
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: ItLb6MTHGJ1OUrbIMBkdZfCcDc/2JKHOlQ9VhZmtk5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:48:c3:2c:a8:98:86:53:4c:b9:e0:06:f4:06:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=5e1d66e80da65c24c8c542f596c43bdf5a270519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:0c:4f:b1:28:1e:1c:0c:73:fd:c7:aa:66:
2b:c2:ec:89:f9:f7:5f:31:ed:e2:c8:a4:67:39:66:
a3:d1:8b:cf:17:9c:fe:02:e4:3a:ab:a7:df:dd:81:
c0:12:35:27:84:d3:0e:36:9d:e3:de:c5:4e:da:82:
53:6f:67:01:0d:4d:7b:65:e0:2e:c2:84:8f:ee:8e:
c7:e3:32:12:5b:65:93:16:0f:5d:3a:fe:b8:46:2f:
54:94:f3:bb:4e:8b:36:db:9a:e7:e5:c9:72:9a:6a:
01:5e:13:fe:b3:7e:bb:e4:cc:29:f2:6b:dc:0e:93:
01:e6:25:88:5c:d4:27:25:f5:05:d4:63:97:79:f4:
c7:15:47:98:13:21:78:c8:9d:ca:2c:97:ed:6a:81:
6e:e1:e1:43:d4:6d:bf:e6:3f:8f:06:85:9f:b4:2c:
4d:18:86:61:e9:47:a7:00:4d:7c:b2:00:60:f7:20:
29:f0:69:0b:4c:3a:9e:c6:39:5a:e7:1a:9f:e7:fa:
0c:f6:68:4a:fc:f8:d2:06:2e:93:e0:34:00:90:ac:
7c:69:bb:6e:4e:d0:6a:eb:fa:08:1c:4c:9d:d7:b4:
45:91:fa:90:b5:e6:b9:75:45:f7:4a:c6:e7:c5:ee:
9a:24:94:20:e2:8a:aa:79:30:b4:88:d5:07:4f:43:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1D:66:E8:0D:A6:5C:24:C8:C5:42:F5:96:C4:3B:DF:5A:27:05:19
X509v3 Authority Key Identifier:
keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a9:13:b5:75:b7:18:1a:2f:e1:ae:7b:d1:26:7e:76:ec:b5:
56:74:f6:57:dc:8c:c6:f8:b7:ce:ad:93:e9:78:66:6d:89:0b:
f9:b9:b3:19:81:00:6c:b7:bc:4b:94:88:19:a8:5e:fa:1e:d6:
75:1a:b6:7e:96:20:7c:b4:56:b8:9f:5a:fb:e5:2a:59:24:57:
33:12:2e:c7:55:f5:6d:ec:cc:c3:0c:6f:7e:08:a3:35:62:50:
11:18:9c:78:6b:0c:d7:3d:30:21:f7:cc:7b:07:a7:a1:78:bb:
a8:50:a0:13:44:fa:3b:eb:cc:f2:2e:b3:86:19:54:9f:ab:54:
67:37:1e:c6:f2:02:b2:2b:bd:e6:c2:f8:df:2c:65:65:6f:02:
d8:91:e3:b2:c5:a8:a1:68:3d:d1:8d:e3:84:e6:09:29:0a:79:
0a:cf:d1:d3:99:aa:ee:bb:49:d0:b8:34:50:9f:20:54:89:0b:
bb:ee:6b:c1:44:12:bf:87:9a:53:65:8a:03:cc:86:04:0f:fc:
f4:c2:3f:9a:24:84:ad:2d:e7:3b:67:d6:ab:c7:1b:e0:a6:3e:
6a:fa:87:0a:28:b5:25:8b:0a:4a:7c:4b:f9:f3:80:5c:74:0e:
e9:f3:44:d9:f4:de:0d:a7:32:fb:c9:f6:7d:87:d7:72:83:2e:
36:c1:55:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0jDLKiYhlNMueAG9AZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMjJlYzk5NDU0MmNhN2FjYWFkZDU4NzI3ZTQ2MDZhYjQ0
OTAwNDAwHhcNMjUxMTExMDQwMTIwWhcNMjUxMTEyMDQwMTIwWjAzMTEwLwYDVQQD
Eyg1ZTFkNjZlODBkYTY1YzI0YzhjNTQyZjU5NmM0M2JkZjVhMjcwNTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt0MT7EoHhwMc/3HqmYrwuyJ+fdf
Me3iyKRnOWaj0YvPF5z+AuQ6q6ff3YHAEjUnhNMONp3j3sVO2oJTb2cBDU17ZeAu
woSP7o7H4zISW2WTFg9dOv64Ri9UlPO7Tos225rn5clymmoBXhP+s3675Mwp8mvc
DpMB5iWIXNQnJfUF1GOXefTHFUeYEyF4yJ3KLJftaoFu4eFD1G2/5j+PBoWftCxN
GIZh6UenAE18sgBg9yAp8GkLTDqexjla5xqf5/oM9mhK/PjSBi6T4DQAkKx8abtu
TtBq6/oIHEyd17RFkfqQtea5dUX3Ssbnxe6aJJQg4oqqeTC0iNUHT0MtpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4dZugNplwkyMVC9ZbEO99aJwUZMB8GA1UdIwQY
MBaAFM4i7JlFQsp6yq3VhyfkYGq0SQBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMt
Yjc0YTA1NmRjYmUzLzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMtYjc0YTA1NmRjYmUz
LzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqkTtXW3
GBov4a570SZ+duy1VnT2V9yMxvi3zq2T6XhmbYkL+bmzGYEAbLe8S5SIGahe+h7W
dRq2fpYgfLRWuJ9a++UqWSRXMxIux1X1bezMwwxvfgijNWJQERiceGsM1z0wIffM
ewenoXi7qFCgE0T6O+vM8i6zhhlUn6tUZzcexvICsiu95sL43yxlZW8C2JHjssWo
oWg90Y3jhOYJKQp5Cs/R05mq7rtJ0Lg0UJ8gVIkLu+5rwUQSv4eaU2WKA8yGBA/8
9MI/miSErS3nO2fWq8cb4KY+avqHCii1JYsKSnxL+fOAXHQO6fNE2fTeDacy+8n2
fYfXcoMuNsFVjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:48 2025 by rpki-client